$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft File: VmpvNEQKySle2KAC1QSfV0zxbIg.mft (raw, json) Hash identifier: v2mKkUXaTg8YxsalOmv+Zlt1bWZKZNxMrSxyUjr1WIw= Subject key identifier: 2F:B5:C0:C0:D6:44:F2:E5:05:15:C5:FF:91:FF:84:CB:7B:EF:02:B2 Authority key identifier: 56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88 Certificate issuer: /CN=A91FA64C/serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88 Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft Manifest number: 0178 Signing time: Mon 05 May 2025 02:46:42 +0000 Manifest this update: Mon 05 May 2025 02:46:42 +0000 Manifest next update: Mon 12 May 2025 02:46:42 +0000 Files and hashes: 1: VmpvNEQKySle2KAC1QSfV0zxbIg.crl (hash: dHRa/xA6Oo3AftCLsHF9A3IhQOJePjiTsfDaOKA/Q7Q=) 2: FFCE072E2B8111EE9BDEC079C4F9AE02.roa (hash: rtZPUDV9v5M5UjLf6mnKGmlSZjqBzQjmkl2wyx5PPSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 02:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA64C, serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88 Validity Not Before: May 5 02:46:42 2025 GMT Not After : May 12 02:46:42 2025 GMT Subject: CN=68182692-5afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:69:3e:34:b7:7f:8c:97:74:d2:9b:d2:a9:56: e3:f7:60:56:01:34:0f:62:8e:4b:3a:23:63:f1:d8: 99:06:cc:8c:2f:ae:8f:7f:cf:bb:da:b1:69:4a:eb: 1e:f6:41:31:0b:a9:be:06:cf:07:7b:23:25:45:0d: 08:75:26:3d:78:9b:1e:e6:ac:fe:d7:5e:6a:8d:0f: 6a:fe:c4:b8:a6:8d:ec:15:d8:e5:26:e1:92:9d:9c: 07:c1:3c:42:9a:74:a0:43:91:34:65:b5:2e:66:de: 30:3e:39:0a:0f:df:ec:ef:d0:f9:5b:e5:85:79:13: 1d:e2:10:09:72:b5:1b:ac:81:54:50:34:15:f5:79: 22:15:ac:00:4b:bc:69:36:43:96:bd:3d:ed:e2:9a: 9e:fc:91:d0:fd:99:0d:be:10:0a:f0:7d:48:33:84: b1:50:ba:d3:91:47:f8:21:e1:3d:ed:89:99:b0:5c: 72:0e:12:ed:d4:d2:29:23:b2:b9:41:5e:76:1b:60: d7:31:7e:d4:10:28:b4:a8:51:62:4a:64:9b:8f:ad: d1:83:b4:d8:cc:73:7e:c9:53:b9:32:98:fd:94:5d: d1:91:5b:8e:48:6d:fb:af:a1:82:ad:38:f0:86:db: d8:08:f9:a1:bc:fe:b2:11:62:e1:d9:91:40:40:6a: 74:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B5:C0:C0:D6:44:F2:E5:05:15:C5:FF:91:FF:84:CB:7B:EF:02:B2 X509v3 Authority Key Identifier: keyid:56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fb:ba:16:14:82:b8:62:eb:72:30:95:e4:5c:65:33:72:a7: d2:63:32:7b:70:a4:66:23:15:a9:9b:1d:cb:81:27:40:8f:47: 92:aa:f5:30:2a:88:af:0a:6a:92:58:b6:38:0c:f8:d2:0b:31: 7b:d6:5c:3c:49:04:54:df:d2:ea:86:18:05:32:30:1e:bf:fe: eb:3a:5d:08:0d:f8:0c:b7:de:64:21:fc:5e:cb:c9:4e:11:60: 8e:59:cd:20:b0:34:72:e7:da:3c:c8:94:67:a1:7f:4b:b3:41: c7:45:1d:ac:08:5b:cc:b7:91:4c:4c:58:4d:bb:2b:4c:8f:b3: 6b:e6:c6:9c:24:00:f5:ce:1d:50:52:de:2f:8d:df:c2:40:59: 10:a7:51:1c:61:04:d8:00:9e:20:b6:6c:0d:5b:35:23:7b:ae: 28:eb:a5:4e:07:95:00:d5:54:8a:0c:19:47:96:f2:11:9a:ee: 5d:1c:e9:28:09:64:a0:af:60:eb:39:3e:a3:df:27:27:13:ef: b1:57:77:b9:6c:43:0b:ba:cf:3d:a7:87:e6:97:98:39:29:30: a8:79:d8:2b:3d:02:1b:0e:f8:7c:fc:94:34:ab:e2:98:59:b0: d1:8c:68:c6:86:f6:ab:79:55:cc:f7:48:32:85:f6:e5:1c:b5: 96:c6:93:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2NEMxMTAvBgNVBAUTKDU2NkE2RjM0NDQwQUM5Mjk1RUQ4QTAwMkQ1MDQ5RjU3 NENGMTZDODgwHhcNMjUwNTA1MDI0NjQyWhcNMjUwNTEyMDI0NjQyWjAYMRYwFAYD VQQDEw02ODE4MjY5Mi01YWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWk+NLd/jJd00pvSqVbj92BWATQPYo5LOiNj8diZBsyML66Pf8+72rFpSuse 9kExC6m+Bs8HeyMlRQ0IdSY9eJse5qz+115qjQ9q/sS4po3sFdjlJuGSnZwHwTxC mnSgQ5E0ZbUuZt4wPjkKD9/s79D5W+WFeRMd4hAJcrUbrIFUUDQV9XkiFawAS7xp NkOWvT3t4pqe/JHQ/ZkNvhAK8H1IM4SxULrTkUf4IeE97YmZsFxyDhLt1NIpI7K5 QV52G2DXMX7UECi0qFFiSmSbj63Rg7TYzHN+yVO5Mpj9lF3RkVuOSG37r6GCrTjw htvYCPmhvP6yEWLh2ZFAQGp0ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+1wMDW RPLlBRXF/5H/hMt77wKyMB8GA1UdIwQYMBaAFFZqbzRECskpXtigAtUEn1dM8WyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY0Qy9FMUE1NDYyNkY3 OTgxMUVEOTY3NzcxMjRDNEY5QUUwMi9WbXB2TkVRS3lTbGUyS0FDMVFTZlYwenhi SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZtcHZORVFLeVNsZTJLQUMxUVNmVjB6eGJJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY0Qy9FMUE1NDYyNkY3OTgxMUVEOTY3NzcxMjRDNEY5QUUwMi9WbXB2TkVRS3lT bGUyS0FDMVFTZlYwenhiSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL+7oWFIK4YutyMJXkXGUzcqfSYzJ7cKRmIxWpmx3LgSdAj0eSqvUw KoivCmqSWLY4DPjSCzF71lw8SQRU39LqhhgFMjAev/7rOl0IDfgMt95kIfxey8lO EWCOWc0gsDRy59o8yJRnoX9Ls0HHRR2sCFvMt5FMTFhNuytMj7Nr5sacJAD1zh1Q Ut4vjd/CQFkQp1EcYQTYAJ4gtmwNWzUje64o66VOB5UA1VSKDBlHlvIRmu5dHOko CWSgr2DrOT6j3ycnE++xV3e5bEMLus89p4fml5g5KTCoedgrPQIbDvh8/JQ0q+KY WbDRjGjGhvareVXM90gyhfblHLWWxpPI -----END CERTIFICATE-----Generated at Mon May 5 04:17:07 2025 by rpki-client