$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft File: RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft (raw, json) Hash identifier: 5aOs7qjyr45ehr/LCLOYZY/B+DtzfjMpxvIGoS+n1zE= Subject key identifier: D0:CD:5F:24:24:A6:86:C5:08:2D:E7:F8:37:70:6D:98:DF:8F:2C:25 Authority key identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D Certificate issuer: /CN=A91FF1CC/serialNumber=446FAF923BEBAF96357287FE250991C75491454D Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft Manifest number: 2F Signing time: Tue 13 May 2025 06:55:56 +0000 Manifest this update: Tue 13 May 2025 06:55:55 +0000 Manifest next update: Tue 20 May 2025 06:55:55 +0000 Files and hashes: 1: RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl (hash: sdi6BWmOsufJqNymsA6XVYx8emfvHMiWxBMZAlC57p0=) 2: CC37DC24024311F0B8CC3D64C4F9AE02.roa (hash: p8FHrwqthntaiCGXD1qfLj6KRbEBkZSs0aBfuIq0c5c=) 3: B7E221E4024311F0BD990F64C4F9AE02.roa (hash: d1zImNClufU6mQa0qsoJOx/6gPAzww6pSPXhwifVLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=446FAF923BEBAF96357287FE250991C75491454D Validity Not Before: May 13 06:55:55 2025 GMT Not After : May 20 06:55:55 2025 GMT Subject: CN=6822ecfb-3d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b2:7e:ac:c8:46:68:2f:65:30:79:0a:cd:98: 04:85:7a:f1:b8:0a:b5:fd:c3:5b:91:3a:49:a1:a7: 90:77:e8:82:91:92:c3:a5:f6:8f:70:2e:c5:ab:ce: 0c:9c:1d:a5:a6:d7:fd:73:c2:6e:2c:b5:ff:67:b1: 73:89:00:58:9c:1a:e8:0f:dc:27:6e:d5:c9:b2:3a: 62:a3:dd:39:c8:82:12:6b:a7:2c:92:cc:23:30:d7: 66:6b:d4:6b:95:b7:24:16:13:fe:de:d7:4c:2c:e0: 67:67:cc:35:20:d4:eb:bd:19:ff:db:db:39:a4:e2: 87:f0:8f:d6:ef:3b:ec:95:ed:bd:9d:0d:59:1f:6c: d8:b7:4f:a6:02:b2:32:5b:bf:de:2f:33:9c:ad:36: 84:cd:4b:8f:68:93:65:dd:e0:57:f8:95:b5:f7:50: 0b:59:5a:f0:bd:76:7a:51:23:9d:4b:82:96:61:f2: b1:14:4d:69:82:23:03:d8:63:db:02:49:7a:6b:76: cd:6d:52:1d:2b:91:07:be:e9:92:9c:9d:a8:8a:42: c6:33:f4:38:aa:11:95:9c:5a:98:41:36:2b:93:e2: 03:5a:38:5d:32:d4:99:85:a6:92:bb:76:7a:71:cc: 45:3c:0f:d9:4e:66:9b:c3:b8:4f:67:99:c3:31:c6: 5e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CD:5F:24:24:A6:86:C5:08:2D:E7:F8:37:70:6D:98:DF:8F:2C:25 X509v3 Authority Key Identifier: keyid:44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:fa:9d:fd:0d:f5:31:b4:bb:07:d2:9b:80:23:5c:d4:f8:2a: 28:88:f2:a1:81:72:73:e2:ed:54:83:a1:8d:00:df:70:16:de: 23:5f:20:13:8c:3e:42:a5:b0:46:de:13:d5:4e:54:a8:0f:48: 38:58:d3:b2:10:14:38:dc:1e:2e:88:4b:78:38:eb:0c:93:6b: 6d:90:31:cb:f4:d0:6b:fb:0c:bb:a0:a8:29:6b:e5:5d:aa:43: ce:93:cf:9e:d8:af:e8:a0:2a:2d:cd:31:63:28:be:83:c2:ac: b6:20:ff:f8:60:d7:d8:6f:c6:c4:0f:6c:4c:91:4c:69:d9:7b: 4f:d7:e1:51:ff:0c:7b:02:70:dc:4f:48:4d:e7:10:3a:e7:8b: 70:94:75:10:31:a5:96:93:6c:ff:1b:9d:8c:37:1d:b0:eb:0b: d7:94:ac:a7:ab:8e:58:f9:d3:17:a3:e6:85:65:e1:59:2a:c4: cb:b2:6f:88:d8:8e:03:df:ed:24:44:18:e6:46:5b:82:bc:5b: 22:64:8e:15:78:4b:9c:62:81:7b:37:0a:0b:ab:40:59:b4:17: 33:08:b3:f7:64:84:84:f0:fb:4c:75:c5:ec:76:b0:78:7d:9e: 3f:08:2e:b7:2d:18:cd:12:b0:fe:e4:2f:57:23:a0:29:47:21: 9b:d4:30:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjFDQzExMC8GA1UEBRMoNDQ2RkFGOTIzQkVCQUY5NjM1NzI4N0ZFMjUwOTkxQzc1 NDkxNDU0RDAeFw0yNTA1MTMwNjU1NTVaFw0yNTA1MjAwNjU1NTVaMBgxFjAUBgNV BAMTDTY4MjJlY2ZiLTNkMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAsn6syEZoL2UweQrNmASFevG4CrX9w1uROkmhp5B36IKRksOl9o9wLsWrzgyc HaWm1/1zwm4stf9nsXOJAFicGugP3Cdu1cmyOmKj3TnIghJrpyySzCMw12Zr1GuV tyQWE/7e10ws4GdnzDUg1Ou9Gf/b2zmk4ofwj9bvO+yV7b2dDVkfbNi3T6YCsjJb v94vM5ytNoTNS49ok2Xd4Ff4lbX3UAtZWvC9dnpRI51LgpZh8rEUTWmCIwPYY9sC SXprds1tUh0rkQe+6ZKcnaiKQsYz9DiqEZWcWphBNiuT4gNaOF0y1JmFppK7dnpx zEU8D9lOZpvDuE9nmcMxxl5JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0M1fJCSm hsUILef4N3BtmN+PLCUwHwYDVR0jBBgwFoAURG+vkjvrr5Y1cof+JQmRx1SRRU0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMUNDLzNBRkMzM0UyRUY2 MzExRUZCRjY0QUI2QUM0RjlBRTAyL1JHLXZranZycjVZMWNvZi1KUW1SeDFTUlJV MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkctdmtqdnJyNVkxY29mLUpRbVJ4MVNSUlUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG MUNDLzNBRkMzM0UyRUY2MzExRUZCRjY0QUI2QUM0RjlBRTAyL1JHLXZranZycjVZ MWNvZi1KUW1SeDFTUlJVMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABz6nf0N9TG0uwfSm4AjXNT4KiiI8qGBcnPi7VSDoY0A33AW3iNfIBOM PkKlsEbeE9VOVKgPSDhY07IQFDjcHi6IS3g46wyTa22QMcv00Gv7DLugqClr5V2q Q86Tz57Yr+igKi3NMWMovoPCrLYg//hg19hvxsQPbEyRTGnZe0/X4VH/DHsCcNxP SE3nEDrni3CUdRAxpZaTbP8bnYw3HbDrC9eUrKerjlj50xej5oVl4VkqxMuyb4jY jgPf7SREGOZGW4K8WyJkjhV4S5xigXs3CgurQFm0FzMIs/dkhITw+0x1xex2sHh9 nj8ILrctGM0SsP7kL1cjoClHIZvUMHc= -----END CERTIFICATE-----Generated at Wed May 14 14:08:01 2025 by rpki-client