$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft File: vvMhsD2CRd537IDdAzG_uo0IWdg.mft (raw, json) Hash identifier: vAjv6COBR6tVvTZ1cQzWYIzYp0aE0mUIw9gF6/EBDJk= Subject key identifier: F0:D4:E6:00:A2:63:4D:92:A5:F0:5A:43:BC:1D:12:BC:AA:AC:A5:8F Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 Certificate issuer: /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft Manifest number: 02CB Signing time: Sun 29 Jun 2025 01:56:12 +0000 Manifest this update: Sun 29 Jun 2025 01:56:11 +0000 Manifest next update: Sun 06 Jul 2025 01:56:11 +0000 Files and hashes: 1: vvMhsD2CRd537IDdAzG_uo0IWdg.crl (hash: ou5lMBfekjUONJEp986zHltbir+oucuS6djrxZq9SB4=) 2: 5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (hash: AaKJfFADfdiocRuahwwRayJxxniMqc1ubRpa5kB8ql4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 01:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE8AC, serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Validity Not Before: Jun 29 01:56:11 2025 GMT Not After : Jul 6 01:56:11 2025 GMT Subject: CN=68609d3b-45fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:14:b8:05:ba:18:21:94:61:9f:9c:46:6d:c9: 1b:e9:4f:28:4a:3f:96:d3:ee:b1:77:4d:6c:f7:45: 97:ba:4a:18:36:97:da:b8:61:e9:4e:bd:9a:33:7c: 2d:66:08:5b:c5:6d:dc:a5:85:f8:7f:38:b1:ea:ba: 42:28:cf:b5:15:ef:59:64:62:57:fb:31:38:a5:df: b8:ac:b3:c2:dc:46:0f:5e:5d:3e:84:de:9c:cb:16: ef:07:25:8e:c5:23:8e:3f:72:97:62:57:1a:7f:0c: c6:15:56:df:ca:79:9d:90:b2:6d:af:e9:2a:33:69: dc:64:2e:8b:20:80:70:9a:a0:60:83:25:43:f8:22: 7f:44:61:17:46:05:f2:f8:cb:01:93:15:a7:35:16: 1b:47:59:69:57:3b:68:fa:4f:20:08:8b:46:0c:53: d8:7e:c6:02:f8:45:09:d7:e4:d5:ce:c6:a6:79:34: 77:fb:4a:4e:31:c4:53:e8:fe:8a:2a:7b:e8:fe:63: 18:b4:64:8c:fe:96:08:14:1f:14:a1:90:0c:96:c5: da:a5:51:93:fd:f6:63:7a:2b:11:ff:15:8d:f8:ba: 38:05:28:ad:21:7a:9c:cf:c9:69:a0:d1:88:fc:1b: ef:f9:54:e0:7a:1c:b8:c1:e1:92:84:22:ea:b4:f7: a0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D4:E6:00:A2:63:4D:92:A5:F0:5A:43:BC:1D:12:BC:AA:AC:A5:8F X509v3 Authority Key Identifier: keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:1d:0a:3e:f3:47:e4:13:9f:77:fc:9c:87:3f:2e:c3:28:5a: 5c:ea:3c:5a:f7:37:3f:d1:2d:cb:a5:0d:0b:3f:d5:98:dc:e1: 6f:30:c8:d7:f4:cb:a3:ae:ad:be:f7:33:e2:65:6b:b1:6d:a6: 74:a0:93:70:38:54:a8:88:a8:84:de:78:6b:aa:fe:54:b9:06: c5:90:29:db:cd:ed:11:01:0d:7e:87:67:1a:79:9e:0a:bc:bd: bc:9f:6c:fe:fe:f2:90:23:56:f5:3a:69:ce:1a:21:3c:59:c7: 88:4c:91:0a:86:91:e8:da:79:69:66:bc:ca:30:83:c5:c1:46: b3:47:09:a0:7e:31:7d:52:e8:45:19:55:be:ef:04:b4:fb:cb: 02:4d:21:87:ed:5f:6b:c2:02:28:c1:b5:a5:df:99:a7:f2:4a: 98:14:34:25:e4:e7:7d:72:0d:f2:21:f8:fe:2b:e4:bb:d9:98: a2:cc:4a:9a:33:ec:4e:52:09:c2:b4:85:30:f3:81:c5:5c:1b: c4:d9:6f:5c:cf:1f:5a:43:a3:cd:f4:74:1b:86:da:3d:75:b8: a2:d3:cd:34:2b:6a:37:62:c2:ec:cf:98:5f:36:6c:a3:08:79: c9:9d:3b:cc:ce:a9:13:80:9f:35:31:64:85:7e:6d:95:36:a1: 52:74:f7:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU4QUMxMTAvBgNVBAUTKEJFRjMyMUIwM0Q4MjQ1REU3N0VDODBERDAzMzFCRkJB OEQwODU5RDgwHhcNMjUwNjI5MDE1NjExWhcNMjUwNzA2MDE1NjExWjAYMRYwFAYD VQQDEw02ODYwOWQzYi00NWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRS4BboYIZRhn5xGbckb6U8oSj+W0+6xd01s90WXukoYNpfauGHpTr2aM3wt ZghbxW3cpYX4fzix6rpCKM+1Fe9ZZGJX+zE4pd+4rLPC3EYPXl0+hN6cyxbvByWO xSOOP3KXYlcafwzGFVbfynmdkLJtr+kqM2ncZC6LIIBwmqBggyVD+CJ/RGEXRgXy +MsBkxWnNRYbR1lpVzto+k8gCItGDFPYfsYC+EUJ1+TVzsameTR3+0pOMcRT6P6K Knvo/mMYtGSM/pYIFB8UoZAMlsXapVGT/fZjeisR/xWN+Lo4BSitIXqcz8lpoNGI /Bvv+VTgehy4weGShCLqtPegUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDU5gCi Y02SpfBaQ7wdEryqrKWPMB8GA1UdIwQYMBaAFL7zIbA9gkXed+yA3QMxv7qNCFnY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRThBQy81MDM4RUM4QzdE RUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1JkNTM3SURkQXpHX3VvMElX ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z2TWhzRDJDUmQ1MzdJRGRBekdfdW8wSVdkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RThBQy81MDM4RUM4QzdERUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1Jk NTM3SURkQXpHX3VvMElXZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1HQo+80fkE593/JyHPy7DKFpc6jxa9zc/0S3LpQ0LP9WY3OFvMMjX 9Mujrq2+9zPiZWuxbaZ0oJNwOFSoiKiE3nhrqv5UuQbFkCnbze0RAQ1+h2caeZ4K vL28n2z+/vKQI1b1OmnOGiE8WceITJEKhpHo2nlpZrzKMIPFwUazRwmgfjF9UuhF GVW+7wS0+8sCTSGH7V9rwgIowbWl35mn8kqYFDQl5Od9cg3yIfj+K+S72ZiizEqa M+xOUgnCtIUw84HFXBvE2W9czx9aQ6PN9HQbhto9dbii0800K2o3YsLsz5hfNmyj CHnJnTvMzqkTgJ81MWSFfm2VNqFSdPc1 -----END CERTIFICATE-----Generated at Mon Jun 30 05:42:58 2025 by rpki-client