$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft File: Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft (raw, json) Hash identifier: CYkfB/5yytKft9dfyZitgcbAw9mt6VCovRwb7/IoBeU= Subject key identifier: 4C:A0:C2:55:3A:76:11:FF:53:92:00:62:6D:7D:7E:D8:34:73:AD:C8 Authority key identifier: 56:2F:B3:02:A8:76:78:3A:08:41:58:03:8B:D4:9E:F7:05:1A:60:3C Certificate issuer: /CN=A91EEB51/serialNumber=562FB302A876783A084158038BD49EF7051A603C Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft Manifest number: D8 Signing time: Thu 15 May 2025 04:56:26 +0000 Manifest this update: Thu 15 May 2025 04:56:25 +0000 Manifest next update: Thu 22 May 2025 04:56:25 +0000 Files and hashes: 1: Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl (hash: zG4uT/QgDy7LAf/GYGbK2SwDT2bcWRSW3q/cAfN4zuk=) 2: 748B00F4EA8A11EE9295672AC4F9AE02.roa (hash: ygDdUhDKlEYCgdYnkaYBpEgiP+SGTZxYs8Pi7efBQ5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEB51, serialNumber=562FB302A876783A084158038BD49EF7051A603C Validity Not Before: May 15 04:56:25 2025 GMT Not After : May 22 04:56:25 2025 GMT Subject: CN=682573f9-f470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d7:08:a2:c6:c4:94:60:47:bd:94:76:74:1a: f9:a9:63:e7:17:c8:c3:5e:06:c9:bb:79:f7:97:20: c5:f6:fc:bf:8c:fb:df:a1:27:d2:7c:27:9b:b4:60: 85:3f:ef:98:08:3e:58:f0:0a:c9:2d:a3:1a:8a:82: af:ac:a9:f7:39:3b:86:d7:0e:64:21:a0:e0:08:5e: 34:98:73:f2:17:ac:9a:0e:2b:2c:21:a1:ec:9b:1f: 51:94:38:c1:b0:c9:30:bf:d1:af:c8:d1:4e:38:d3: b0:33:e8:01:b9:86:d5:a8:e2:2b:18:f6:5e:15:37: 18:60:63:1e:c1:3e:d9:25:1b:17:87:89:86:c8:30: d3:cf:b0:83:11:e1:80:d4:7e:fa:30:3f:26:1a:04: 22:64:f4:bf:ad:5e:56:f1:fc:ff:d7:0d:91:60:bd: 16:6a:50:75:03:26:ee:31:62:b1:4c:eb:d0:5f:0d: ed:b6:a3:e6:ac:ad:16:ae:d2:ac:6f:69:b3:8f:27: f5:31:05:e1:85:e2:18:d6:d9:3d:cf:ae:7a:61:d8: 2a:82:47:c1:31:79:40:37:73:b9:0f:c4:ad:ba:12: 85:f7:cc:48:54:d5:5e:58:b3:43:1f:1a:53:c9:28: c5:81:3a:8c:b9:34:f0:44:28:13:e2:a8:e5:97:48: 48:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A0:C2:55:3A:76:11:FF:53:92:00:62:6D:7D:7E:D8:34:73:AD:C8 X509v3 Authority Key Identifier: keyid:56:2F:B3:02:A8:76:78:3A:08:41:58:03:8B:D4:9E:F7:05:1A:60:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:9b:22:fc:fd:a5:6f:ea:00:f0:2f:d8:0b:41:66:7f:d1:af: aa:97:19:61:49:15:e2:32:cb:31:64:0a:12:34:49:28:e7:08: f8:70:a8:d5:48:77:95:f0:be:01:be:0b:dc:be:aa:f0:5b:c5: df:92:18:30:78:d2:37:a2:85:4f:86:7f:b6:bd:30:89:b4:43: f0:4e:91:53:a7:3a:ea:b5:71:dc:e7:1d:3b:b1:4e:03:58:ac: 5d:65:8a:b9:10:1b:51:b1:d1:86:f1:76:5a:f1:0e:b8:32:f6: 28:a4:25:c9:65:d1:0e:df:4f:b6:59:73:bd:e3:1d:e9:5f:99: f5:11:c0:ee:11:c7:56:b2:98:8e:aa:c3:7a:49:81:d9:a4:a0: a9:f6:bc:30:31:05:39:93:45:ca:0d:c6:47:c5:4d:e7:d1:a0: 93:fd:6b:84:69:f3:1d:a8:4f:8a:c2:b3:a5:1a:72:18:bf:8b: 80:c9:32:63:26:c5:44:4a:e0:45:1f:46:5c:74:19:9b:db:4f: 6c:22:61:6b:55:2e:64:9c:6e:89:61:ee:c6:81:9d:a9:5f:29: 9e:12:1a:db:21:a8:ad:11:cf:0e:c8:66:d7:eb:67:02:3d:98: 25:fa:8b:f3:bb:6c:f8:78:24:45:20:fa:9d:16:6f:92:65:3c: 60:fd:ac:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVCNTExMTAvBgNVBAUTKDU2MkZCMzAyQTg3Njc4M0EwODQxNTgwMzhCRDQ5RUY3 MDUxQTYwM0MwHhcNMjUwNTE1MDQ1NjI1WhcNMjUwNTIyMDQ1NjI1WjAYMRYwFAYD VQQDEw02ODI1NzNmOS1mNDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttcIosbElGBHvZR2dBr5qWPnF8jDXgbJu3n3lyDF9vy/jPvfoSfSfCebtGCF P++YCD5Y8ArJLaMaioKvrKn3OTuG1w5kIaDgCF40mHPyF6yaDissIaHsmx9RlDjB sMkwv9GvyNFOONOwM+gBuYbVqOIrGPZeFTcYYGMewT7ZJRsXh4mGyDDTz7CDEeGA 1H76MD8mGgQiZPS/rV5W8fz/1w2RYL0WalB1AybuMWKxTOvQXw3ttqPmrK0WrtKs b2mzjyf1MQXhheIY1tk9z656YdgqgkfBMXlAN3O5D8StuhKF98xIVNVeWLNDHxpT ySjFgTqMuTTwRCgT4qjll0hIGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEygwlU6 dhH/U5IAYm19ftg0c63IMB8GA1UdIwQYMBaAFFYvswKodng6CEFYA4vUnvcFGmA8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUI1MS8zN0E1MzRCOEVB ODMxMUVFOTE4MDFBNzZDNEY5QUUwMi9WaS16QXFoMmVEb0lRVmdEaTlTZTl3VWFZ RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZpLXpBcWgyZURvSVFWZ0RpOVNlOXdVYVlEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUI1MS8zN0E1MzRCOEVBODMxMUVFOTE4MDFBNzZDNEY5QUUwMi9WaS16QXFoMmVE b0lRVmdEaTlTZTl3VWFZRHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVmyL8/aVv6gDwL9gLQWZ/0a+qlxlhSRXiMssxZAoSNEko5wj4cKjV SHeV8L4BvgvcvqrwW8XfkhgweNI3ooVPhn+2vTCJtEPwTpFTpzrqtXHc5x07sU4D WKxdZYq5EBtRsdGG8XZa8Q64MvYopCXJZdEO30+2WXO94x3pX5n1EcDuEcdWspiO qsN6SYHZpKCp9rwwMQU5k0XKDcZHxU3n0aCT/WuEafMdqE+KwrOlGnIYv4uAyTJj JsVESuBFH0ZcdBmb209sImFrVS5knG6JYe7GgZ2pXymeEhrbIaitEc8OyGbX62cC PZgl+ovzu2z4eCRFIPqdFm+SZTxg/awS -----END CERTIFICATE-----Generated at Fri May 16 08:21:40 2025 by rpki-client