$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft File: vSMtmLoKMv17e4shg0wFGXb4ZGw.mft (raw, json) Hash identifier: i/v0zqj+TE91FhLeqXm2c9WS/js9dd6YTuvDb6XP8To= Subject key identifier: F4:D8:C2:1F:BA:BA:E7:6F:C4:F8:16:8C:1E:F5:F0:1B:A1:4D:8E:97 Authority key identifier: BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C Certificate issuer: /CN=A91C4D37/serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C Certificate serial: 05AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft Manifest number: 05AA Signing time: Wed 16 Apr 2025 22:49:45 +0000 Manifest this update: Wed 16 Apr 2025 22:49:45 +0000 Manifest next update: Wed 23 Apr 2025 22:49:45 +0000 Files and hashes: 1: vSMtmLoKMv17e4shg0wFGXb4ZGw.crl (hash: zzMiLAwTHLLW9BT8Z3v8P4W9dW+1BGv4TGiVf5f/3TU=) 2: 008B17CEC2B611EB80F1B27EC4F9AE02.roa (hash: OtQrF2ELmU+GbG6fbMpToUTy3D5OXRRs3Yb8jPpEVe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 22:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1455 (0x5af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4D37, serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C Validity Not Before: Apr 16 22:49:45 2025 GMT Not After : Apr 23 22:49:45 2025 GMT Subject: CN=68003409-607e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a6:c7:54:58:94:45:0d:1f:1a:bb:e4:d2:7a: 95:a3:e4:39:f2:84:87:65:3f:1c:e6:cb:85:5d:f4: 06:bf:51:f1:8e:4f:74:3d:1d:98:5b:fc:22:34:36: 31:1c:c1:f9:1f:19:f7:db:7e:d1:5e:ef:4d:fe:09: eb:36:cb:f3:18:54:33:28:f1:71:55:d2:4e:17:d8: f8:c6:75:f5:e2:57:42:01:f7:cf:cf:77:1e:3f:b0: 1c:78:d9:de:04:8e:a8:9a:59:33:dc:82:34:b8:20: 02:28:8e:fe:d9:40:05:f9:18:97:66:46:2c:34:77: 04:51:1e:97:0d:c4:15:0f:23:2c:c2:d7:5d:09:09: 28:bf:6c:dd:98:dd:cf:1c:0e:73:8c:4c:d5:52:9b: c4:ba:0e:4d:3b:22:4a:96:27:14:33:87:87:d0:62: 54:2f:42:c5:3f:ac:18:ae:36:f4:29:4e:3a:72:5a: 53:ac:21:bb:12:e1:23:61:0e:4d:41:6b:0e:fe:10: 5c:9a:88:86:7c:6f:7c:3f:0f:37:53:3c:ee:0e:81: e3:80:d5:43:38:a2:2d:76:da:4d:98:3a:6f:d7:51: ce:3e:88:2c:0a:37:b9:05:fc:34:50:7a:8d:f4:d3: dd:ee:bf:1f:29:17:c8:0f:71:5d:e7:98:cd:6b:d9: ac:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D8:C2:1F:BA:BA:E7:6F:C4:F8:16:8C:1E:F5:F0:1B:A1:4D:8E:97 X509v3 Authority Key Identifier: keyid:BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:87:44:bd:00:0b:c4:45:d0:39:8f:64:a3:d4:e0:35:70:09: 77:64:5b:e0:45:b7:8d:db:84:3e:03:76:03:af:45:8f:de:99: d3:65:29:6c:e9:0f:e8:93:db:0a:45:0d:30:ec:c3:43:5a:91: ae:6e:b2:4d:b7:c7:52:35:58:3e:05:32:89:23:a1:38:36:23: d5:aa:51:7e:6c:ff:14:43:3c:50:c4:9d:2b:17:cf:bc:71:99: f1:12:13:2e:6c:ef:45:18:c8:29:27:c3:2a:65:0f:d1:ba:8e: 53:60:a6:7d:2a:8c:99:58:cc:f6:39:2b:7c:8e:68:3e:a1:97: 71:9a:1a:5c:3f:a6:50:26:1e:f8:53:77:47:30:4d:35:f6:08: 6f:53:aa:6b:b2:38:37:f0:02:e5:91:fb:7f:be:4e:88:4f:0c: a9:d3:ad:99:80:8f:fc:21:00:bb:e9:27:5b:3a:39:76:0b:b3: 72:22:59:3e:c7:70:48:dc:5f:9a:4f:a1:82:83:0d:3e:73:09: a0:2b:00:9b:27:2f:57:5a:54:11:40:7f:5d:34:7c:fd:f1:ef: a2:c0:a9:85:d4:d0:9c:d1:4b:b6:3b:e4:6a:cf:c6:36:7a:e9: ec:97:5f:96:bf:16:08:c4:2e:e8:d4:c5:bb:e2:e0:e5:ef:7e: a3:74:cb:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzREMzcxMTAvBgNVBAUTKEJEMjMyRDk4QkEwQTMyRkQ3QjdCOEIyMTgzNEMwNTE5 NzZGODY0NkMwHhcNMjUwNDE2MjI0OTQ1WhcNMjUwNDIzMjI0OTQ1WjAYMRYwFAYD VQQDEw02ODAwMzQwOS02MDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoKbHVFiURQ0fGrvk0nqVo+Q58oSHZT8c5suFXfQGv1Hxjk90PR2YW/wiNDYx HMH5Hxn3237RXu9N/gnrNsvzGFQzKPFxVdJOF9j4xnX14ldCAffPz3ceP7AceNne BI6omlkz3II0uCACKI7+2UAF+RiXZkYsNHcEUR6XDcQVDyMswtddCQkov2zdmN3P HA5zjEzVUpvEug5NOyJKlicUM4eH0GJUL0LFP6wYrjb0KU46clpTrCG7EuEjYQ5N QWsO/hBcmoiGfG98Pw83UzzuDoHjgNVDOKItdtpNmDpv11HOPogsCje5Bfw0UHqN 9NPd7r8fKRfID3Fd55jNa9mslQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTYwh+6 uudvxPgWjB718BuhTY6XMB8GA1UdIwQYMBaAFL0jLZi6CjL9e3uLIYNMBRl2+GRs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEQzNy84QUUwRjRFQ0My QjIxMUVCQjdFN0FENjZDNEY5QUUwMi92U010bUxvS012MTdlNHNoZzB3RkdYYjRa R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZTTXRtTG9LTXYxN2U0c2hnMHdGR1hiNFpHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEQzNy84QUUwRjRFQ0MyQjIxMUVCQjdFN0FENjZDNEY5QUUwMi92U010bUxvS012 MTdlNHNoZzB3RkdYYjRaR3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8h0S9AAvERdA5j2Sj1OA1cAl3ZFvgRbeN24Q+A3YDr0WP3pnTZSls 6Q/ok9sKRQ0w7MNDWpGubrJNt8dSNVg+BTKJI6E4NiPVqlF+bP8UQzxQxJ0rF8+8 cZnxEhMubO9FGMgpJ8MqZQ/Ruo5TYKZ9KoyZWMz2OSt8jmg+oZdxmhpcP6ZQJh74 U3dHME019ghvU6prsjg38ALlkft/vk6ITwyp062ZgI/8IQC76SdbOjl2C7NyIlk+ x3BI3F+aT6GCgw0+cwmgKwCbJy9XWlQRQH9dNHz98e+iwKmF1NCc0Uu2O+Rqz8Y2 eunsl1+WvxYIxC7o1MW74uDl736jdMvB -----END CERTIFICATE-----Generated at Fri Apr 18 06:13:22 2025 by rpki-client