$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft File: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft (raw, json) Hash identifier: hxmw1A3yuor4BUQZnN4Rst37QPt7GW9JDED1tohsm0w= Subject key identifier: 58:B2:8F:04:1E:26:37:2F:92:57:C6:4F:34:91:1D:73:32:DC:6D:1B Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34 Certificate issuer: /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134 Certificate serial: 0540 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft Manifest number: 0536 Signing time: Wed 14 May 2025 23:31:38 +0000 Manifest this update: Wed 14 May 2025 23:31:38 +0000 Manifest next update: Wed 21 May 2025 23:31:38 +0000 Files and hashes: 1: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl (hash: FSueyJh/Dku9CWSYHpXg5c46dlDkErcyVYUnunM3mHk=) 2: 7FBF284EF5B211EB8419A23AC4F9AE02.roa (hash: F1yI/TsRKRhHW6oPEGF67PMGcvjA0TRHWq4d5ykeYdI=) 3: 0EF4DA3A38D011EC936A8C4FC4F9AE02.roa (hash: oeOjTuSdHmJNxJZBHkzGR+nKwmbuVyglKsBg5lLfOOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1344 (0x540) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7C21, serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134 Validity Not Before: May 14 23:31:38 2025 GMT Not After : May 21 23:31:38 2025 GMT Subject: CN=682527da-b6c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c0:07:5e:0f:7f:2d:fc:1a:a9:ff:c1:9b:f3: 1a:e9:77:c2:ac:b3:14:db:56:af:fe:60:ef:66:e6: 36:bf:8c:af:c4:0d:e4:d1:65:ef:03:5b:68:64:7a: b8:d7:32:13:fe:96:a6:9e:3a:1e:9b:7a:af:2a:8c: 7a:cb:09:71:61:35:f5:3a:51:cf:b1:9b:b5:de:72: 67:06:95:d9:7a:cb:18:e8:61:ed:97:a2:61:bb:b5: 1e:55:3a:ca:aa:cf:6d:f5:9b:5b:03:da:7d:26:70: cd:97:79:fc:23:bf:80:ba:f9:27:26:5c:3a:e9:f6: 09:78:9d:b3:ee:3b:52:48:53:da:07:a0:9b:d7:bb: 30:9b:d6:86:44:f5:28:5f:90:92:20:27:22:5a:3a: 0f:9d:ed:7f:11:58:f2:8b:fb:39:a9:5e:7c:6e:b8: bb:60:9e:28:27:6b:41:f4:7d:df:85:08:66:57:9d: ee:41:93:db:e1:9f:a2:3a:5f:4a:fe:d8:1d:ef:bc: cf:c5:6b:cc:af:47:a8:79:f1:02:2d:1a:9c:68:56: a4:f6:f6:29:d3:68:ed:83:ba:8c:74:62:37:4e:a8: f7:e1:7d:a2:d6:2a:24:36:bc:15:27:db:d5:f5:c3: ba:26:a0:2a:0b:52:87:0b:c9:f9:36:87:a6:01:9d: 11:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B2:8F:04:1E:26:37:2F:92:57:C6:4F:34:91:1D:73:32:DC:6D:1B X509v3 Authority Key Identifier: keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:ad:ac:67:8f:f9:1b:83:80:f3:18:35:2f:ce:ce:7f:1a:55: 43:ce:24:46:5d:c2:63:a6:bf:56:f7:4b:52:1e:d9:89:4c:b8: aa:33:91:13:c9:91:a7:95:43:ae:88:17:38:37:36:9a:f6:95: 6c:9c:e4:1f:d9:48:83:82:62:f7:32:77:a3:0b:dc:86:f7:26: 16:92:e8:b0:d2:20:31:34:54:02:ff:22:f7:3e:44:09:0c:81: 03:d5:f7:8b:78:7a:ec:f6:6a:38:01:b2:0d:15:30:8f:10:8e: 6d:b8:30:ce:7f:d1:2b:8e:65:40:77:91:01:59:aa:77:0e:b6: 9c:ca:a5:fb:72:60:67:03:ab:2c:5f:8d:fa:72:75:fa:ea:e4: 8a:2e:17:c6:8d:02:ff:cb:a0:af:e7:a7:51:4a:25:af:fb:61: 25:bf:9b:76:bc:e6:38:3c:ba:f0:a6:a5:49:3c:4a:29:bc:a0: 37:58:c8:ca:ae:5b:22:2a:ed:08:84:8a:d9:d8:ef:1c:3b:3c: c8:2a:0d:12:2e:14:d6:cc:e3:6c:dd:8f:e6:f1:43:6e:de:a6: 3e:da:83:e3:32:cc:b9:07:86:de:62:a2:d0:f3:2a:52:1b:84: 57:6a:ec:56:5e:a7:16:c9:17:82:10:58:e4:86:a9:24:e4:d4: df:6a:f2:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdDMjExMTAvBgNVBAUTKEJDMkRBMzVDQjU2NTEzQTk0QTY4QjU5MUREMkM3NkM1 MUQ4MTExMzQwHhcNMjUwNTE0MjMzMTM4WhcNMjUwNTIxMjMzMTM4WjAYMRYwFAYD VQQDEw02ODI1MjdkYS1iNmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcAHXg9/Lfwaqf/Bm/Ma6XfCrLMU21av/mDvZuY2v4yvxA3k0WXvA1toZHq4 1zIT/pamnjoem3qvKox6ywlxYTX1OlHPsZu13nJnBpXZessY6GHtl6Jhu7UeVTrK qs9t9ZtbA9p9JnDNl3n8I7+AuvknJlw66fYJeJ2z7jtSSFPaB6Cb17swm9aGRPUo X5CSICciWjoPne1/EVjyi/s5qV58bri7YJ4oJ2tB9H3fhQhmV53uQZPb4Z+iOl9K /tgd77zPxWvMr0eoefECLRqcaFak9vYp02jtg7qMdGI3Tqj34X2i1iokNrwVJ9vV 9cO6JqAqC1KHC8n5NoemAZ0ReQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiyjwQe JjcvklfGTzSRHXMy3G0bMB8GA1UdIwQYMBaAFLwto1y1ZROpSmi1kd0sdsUdgRE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0MyMS8zQkNEMDA3NEY1 QUUxMUVCOEUzRUZCMzNDNEY5QUUwMi92QzJqWExWbEU2bEthTFdSM1N4MnhSMkJF VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZDMmpYTFZsRTZsS2FMV1IzU3gyeFIyQkVUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0MyMS8zQkNEMDA3NEY1QUUxMUVCOEUzRUZCMzNDNEY5QUUwMi92QzJqWExWbEU2 bEthTFdSM1N4MnhSMkJFVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFraxnj/kbg4DzGDUvzs5/GlVDziRGXcJjpr9W90tSHtmJTLiqM5ET yZGnlUOuiBc4Nzaa9pVsnOQf2UiDgmL3MnejC9yG9yYWkuiw0iAxNFQC/yL3PkQJ DIED1feLeHrs9mo4AbINFTCPEI5tuDDOf9ErjmVAd5EBWap3DracyqX7cmBnA6ss X436cnX66uSKLhfGjQL/y6Cv56dRSiWv+2Elv5t2vOY4PLrwpqVJPEopvKA3WMjK rlsiKu0IhIrZ2O8cOzzIKg0SLhTWzONs3Y/m8UNu3qY+2oPjMsy5B4beYqLQ8ypS G4RXauxWXqcWyReCEFjkhqkk5NTfavJB -----END CERTIFICATE-----Generated at Fri May 16 19:11:29 2025 by rpki-client