$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft File: vvMhsD2CRd537IDdAzG_uo0IWdg.mft (raw, json) Hash identifier: VJU4mhk/eJdJG3LjE5cHQ30zydcrwGNAvKChJmcijy4= Subject key identifier: 7D:CB:94:36:AC:DF:7F:E3:35:4D:51:E7:A7:61:9C:03:DE:E9:83:05 Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 Certificate issuer: /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft Manifest number: 0295 Signing time: Mon 05 May 2025 02:03:02 +0000 Manifest this update: Mon 05 May 2025 02:03:01 +0000 Manifest next update: Mon 12 May 2025 02:03:01 +0000 Files and hashes: 1: vvMhsD2CRd537IDdAzG_uo0IWdg.crl (hash: 3zHJ4Y1LK0c1ftmopZM7G8f1RGLb8Joq4uZDt6iw4t0=) 2: 5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (hash: AaKJfFADfdiocRuahwwRayJxxniMqc1ubRpa5kB8ql4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 02:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE8AC, serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Validity Not Before: May 5 02:03:01 2025 GMT Not After : May 12 02:03:01 2025 GMT Subject: CN=68181c55-896d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cb:a7:f1:e9:cf:3d:dc:c7:54:91:20:89:0e: f3:14:92:d9:0c:d2:71:f6:1c:fa:b0:d4:b8:4b:e6: 44:29:0b:7f:97:45:33:0e:27:9c:33:2c:18:12:cc: cb:50:48:83:05:2b:03:cd:1c:9c:45:83:d1:72:93: 72:ff:b8:65:24:e1:5e:23:06:89:3f:13:da:fd:f8: 86:5e:a1:7e:66:17:a6:bc:22:bc:e2:d9:94:b6:91: 0a:57:11:bf:17:13:7d:7a:64:66:da:35:33:79:63: 1e:79:aa:a4:a8:47:9f:a4:0d:b4:2a:3e:40:33:d2: f7:1a:06:5f:4f:9c:52:7a:79:4b:98:a5:22:47:26: e0:e2:87:c7:c0:5c:ae:1a:a1:f4:fc:74:8f:3f:69: 99:9e:2e:6e:80:97:a7:0c:8d:01:4c:d7:24:f7:d0: 5f:4d:88:78:82:88:ce:ab:80:c8:27:6f:eb:eb:ad: 96:0f:c5:8b:2c:ed:a0:ab:b1:52:fc:f3:ed:77:9c: d4:7c:3a:b1:86:62:54:2f:c9:d2:65:77:d4:ea:bd: d4:e0:1d:7f:62:ee:d9:2a:5c:91:a1:fa:68:8e:28: 62:ec:2a:a8:33:10:78:97:6a:d1:8e:86:d6:e3:18: a1:f0:15:fb:2d:06:00:f2:3e:74:fb:da:3d:96:99: b0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CB:94:36:AC:DF:7F:E3:35:4D:51:E7:A7:61:9C:03:DE:E9:83:05 X509v3 Authority Key Identifier: keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:27:80:47:62:8c:54:4a:42:93:4e:0e:aa:5b:b5:89:49:16: 34:31:09:93:e0:53:57:39:8c:27:e0:b4:a1:5e:84:f8:cc:7d: b0:0a:24:2c:d6:e4:4e:f7:bb:6c:b9:d4:81:30:ea:85:cb:f6: da:10:2f:40:59:6a:e9:e5:8b:8d:d9:85:72:f5:87:08:fc:22: b4:ad:e2:9e:03:ee:87:1a:9f:ee:97:62:85:33:9e:e1:9a:14: 8e:d9:fb:c4:37:1c:4c:d0:92:1b:14:42:12:8f:a3:78:bf:23: 25:0d:4a:c6:48:44:37:c4:ce:c5:83:99:a8:a5:a3:4a:99:57: 59:f8:30:ce:e4:6b:e2:2b:a9:77:6f:2c:aa:df:10:23:d5:f9: b8:ac:d7:4e:1b:4f:5e:eb:a3:da:b7:ee:3e:4b:fa:49:77:69: 60:69:1f:61:aa:14:95:9c:e0:0a:96:e5:be:fc:cc:9b:51:29: ee:98:62:e7:d2:cd:7f:61:44:a8:c6:83:03:dc:de:60:eb:23: ec:35:b3:b2:8a:ba:03:12:58:bf:db:08:06:c8:38:3c:7b:ee: d8:35:4b:a3:61:dd:ba:97:3d:f0:33:8a:2f:7e:71:61:26:25: 8b:43:26:03:56:c0:ce:ec:3e:40:e0:10:67:31:5b:45:5f:76: 45:08:d3:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU4QUMxMTAvBgNVBAUTKEJFRjMyMUIwM0Q4MjQ1REU3N0VDODBERDAzMzFCRkJB OEQwODU5RDgwHhcNMjUwNTA1MDIwMzAxWhcNMjUwNTEyMDIwMzAxWjAYMRYwFAYD VQQDEw02ODE4MWM1NS04OTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMun8enPPdzHVJEgiQ7zFJLZDNJx9hz6sNS4S+ZEKQt/l0UzDiecMywYEszL UEiDBSsDzRycRYPRcpNy/7hlJOFeIwaJPxPa/fiGXqF+ZhemvCK84tmUtpEKVxG/ FxN9emRm2jUzeWMeeaqkqEefpA20Kj5AM9L3GgZfT5xSenlLmKUiRybg4ofHwFyu GqH0/HSPP2mZni5ugJenDI0BTNck99BfTYh4gojOq4DIJ2/r662WD8WLLO2gq7FS /PPtd5zUfDqxhmJUL8nSZXfU6r3U4B1/Yu7ZKlyRofpojihi7CqoMxB4l2rRjobW 4xih8BX7LQYA8j50+9o9lpmwfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3LlDas 33/jNU1R56dhnAPe6YMFMB8GA1UdIwQYMBaAFL7zIbA9gkXed+yA3QMxv7qNCFnY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRThBQy81MDM4RUM4QzdE RUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1JkNTM3SURkQXpHX3VvMElX ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z2TWhzRDJDUmQ1MzdJRGRBekdfdW8wSVdkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RThBQy81MDM4RUM4QzdERUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1Jk NTM3SURkQXpHX3VvMElXZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgJ4BHYoxUSkKTTg6qW7WJSRY0MQmT4FNXOYwn4LShXoT4zH2wCiQs 1uRO97tsudSBMOqFy/baEC9AWWrp5YuN2YVy9YcI/CK0reKeA+6HGp/ul2KFM57h mhSO2fvENxxM0JIbFEISj6N4vyMlDUrGSEQ3xM7Fg5mopaNKmVdZ+DDO5GviK6l3 byyq3xAj1fm4rNdOG09e66Pat+4+S/pJd2lgaR9hqhSVnOAKluW+/MybUSnumGLn 0s1/YUSoxoMD3N5g6yPsNbOyiroDEli/2wgGyDg8e+7YNUujYd26lz3wM4ovfnFh JiWLQyYDVsDO7D5A4BBnMVtFX3ZFCNPg -----END CERTIFICATE-----Generated at Mon May 5 12:15:42 2025 by rpki-client