$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft File: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft (raw, json) Hash identifier: um8R2ZVs+YbLnbW2NO5pDkSsKcJnkMSK12lwUG2Kbog= Subject key identifier: 67:5E:90:00:BF:74:13:7E:03:1E:9E:BA:C6:48:24:07:52:8C:96:47 Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7 Certificate issuer: /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7 Certificate serial: 25C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft Manifest number: 25B0 Signing time: Fri 04 Apr 2025 15:46:44 +0000 Manifest this update: Fri 04 Apr 2025 15:46:44 +0000 Manifest next update: Fri 11 Apr 2025 15:46:44 +0000 Files and hashes: 1: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl (hash: /v8ZxmMuRfbjI94D2XdrDFaQje/io5lNfSNNy3vy2M0=) 2: E2E360EEF3EE11ECBAE10054C4F9AE02.roa (hash: MwkxKey8SdTfX3rA2ndaHPVnUsJ97475p+Dzwmyl9SQ=) 3: E21E1C6CF3EE11ECBAE10054C4F9AE02.roa (hash: UiQJQcjiTKGUKZaMNBKg71L13IK59w5XS6QCL7nnWSE=) 4: E14BDC8EF3EE11ECBAE10054C4F9AE02.roa (hash: gP1rmRhgK5le3CICuUOYmVhhDItIyOhZ8RIHh+3gkE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9666 (0x25c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5B46 Validity Not Before: Apr 4 15:46:44 2025 GMT Not After : Apr 11 15:46:44 2025 GMT Subject: CN=67effee4-33dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:36:16:e2:9b:af:7a:e9:18:aa:07:e4:cf:1e: b3:c7:7b:90:9a:48:a3:cc:1d:68:d5:d1:b6:fe:e4: 73:cd:40:db:58:67:3e:9a:37:4a:ea:79:40:f5:6d: 2d:39:58:71:db:99:e7:01:db:8f:8f:fb:12:cc:65: 01:58:46:e0:de:68:9b:c8:07:07:b2:a6:55:d7:23: 42:eb:0b:dc:2d:40:59:01:51:6c:e2:74:dc:92:f6: 68:88:a0:ed:57:92:c8:ac:8d:fe:f8:18:c5:ee:03: fb:6f:0c:3d:29:88:0b:f4:03:7a:2a:fd:60:ec:0d: db:71:22:2c:45:3e:1b:a7:ad:ce:46:5d:76:77:46: 54:7d:f5:5d:25:6d:42:d9:99:37:9a:54:26:49:de: 70:96:da:f8:b0:4c:3b:b4:41:9d:25:cf:81:e8:1e: c1:90:94:d1:d5:dd:9d:e9:04:f9:c2:fc:11:c9:9c: 7f:29:49:98:28:d2:ed:ce:fe:2c:b9:e5:3b:e3:c2: 68:3b:3d:17:34:f0:a2:b3:76:7f:cc:32:07:3c:52: e6:c8:68:4d:5a:a4:92:03:e0:74:67:7d:3f:c1:30: b1:a5:c4:66:c7:9e:dd:b9:21:40:4f:05:b2:d5:a2: b5:fc:22:2b:59:34:00:ad:aa:ab:9d:7a:08:90:07: a6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5E:90:00:BF:74:13:7E:03:1E:9E:BA:C6:48:24:07:52:8C:96:47 X509v3 Authority Key Identifier: keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:e4:7a:7b:6b:d3:bb:b8:2c:a7:87:0d:f1:3f:41:e0:08:65: 73:06:1d:5d:d4:f4:7e:94:fd:5b:7b:67:5f:a6:bc:76:a4:80: 3b:1c:96:23:d9:23:29:16:2b:0d:0c:7c:b1:76:33:31:c1:5c: c6:7e:5a:99:b6:53:50:a4:f6:33:78:9d:21:97:16:07:9b:e8: 4b:57:1f:2f:09:d6:3d:4f:eb:3f:ce:97:08:99:08:80:75:aa: 4a:b4:2c:fa:39:f1:14:e8:1f:7d:ad:ce:e1:f7:4a:27:78:58: 48:60:18:57:03:c1:78:61:1f:a9:80:3a:4b:81:50:a9:14:98: 23:f1:28:5a:0c:fc:12:1b:1a:90:ca:ee:c6:81:35:16:a0:39: 97:c4:ef:75:23:6d:a3:b9:19:80:35:8d:70:df:50:60:f3:0c: 78:15:c2:6b:73:b5:19:af:8d:96:54:7d:83:c8:ab:8c:10:cb: ff:17:eb:18:b9:d1:a8:9c:7f:97:ec:40:8a:66:2c:5b:12:5b: 0b:2b:97:5f:33:bd:cd:12:b1:72:3d:f7:7a:e6:af:9d:b4:4d: fd:f7:f0:37:a6:9d:8e:2f:90:55:b6:3d:85:11:07:c7:6e:fe: 5d:42:cc:5c:bc:71:34:62:2b:26:15:6c:f5:14:b9:a2:5f:0e: 9b:e5:8e:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVCNDYxMTAvBgNVBAUTKDU2Q0QzMkQxM0Y4Q0FFMUU5MkY5Qzk3RjM5NUYxQTIz QUJCOUM2RjcwHhcNMjUwNDA0MTU0NjQ0WhcNMjUwNDExMTU0NjQ0WjAYMRYwFAYD VQQDEw02N2VmZmVlNC0zM2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DYW4puveukYqgfkzx6zx3uQmkijzB1o1dG2/uRzzUDbWGc+mjdK6nlA9W0t OVhx25nnAduPj/sSzGUBWEbg3mibyAcHsqZV1yNC6wvcLUBZAVFs4nTckvZoiKDt V5LIrI3++BjF7gP7bww9KYgL9AN6Kv1g7A3bcSIsRT4bp63ORl12d0ZUffVdJW1C 2Zk3mlQmSd5wltr4sEw7tEGdJc+B6B7BkJTR1d2d6QT5wvwRyZx/KUmYKNLtzv4s ueU748JoOz0XNPCis3Z/zDIHPFLmyGhNWqSSA+B0Z30/wTCxpcRmx57duSFATwWy 1aK1/CIrWTQAraqrnXoIkAemXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdekAC/ dBN+Ax6eusZIJAdSjJZHMB8GA1UdIwQYMBaAFFbNMtE/jK4ekvnJfzlfGiOrucb3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUI0Ni9CQTBCODQzMDAy ODgxMUU1QUUxRTQ3NjFDNEY5QUUwMi9WczB5MFQtTXJoNlMtY2xfT1Y4YUk2dTV4 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZzMHkwVC1Ncmg2Uy1jbF9PVjhhSTZ1NXh2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUI0Ni9CQTBCODQzMDAyODgxMUU1QUUxRTQ3NjFDNEY5QUUwMi9WczB5MFQtTXJo NlMtY2xfT1Y4YUk2dTV4dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx5Hp7a9O7uCynhw3xP0HgCGVzBh1d1PR+lP1be2dfprx2pIA7HJYj 2SMpFisNDHyxdjMxwVzGflqZtlNQpPYzeJ0hlxYHm+hLVx8vCdY9T+s/zpcImQiA dapKtCz6OfEU6B99rc7h90oneFhIYBhXA8F4YR+pgDpLgVCpFJgj8ShaDPwSGxqQ yu7GgTUWoDmXxO91I22juRmANY1w31Bg8wx4FcJrc7UZr42WVH2DyKuMEMv/F+sY udGonH+X7ECKZixbElsLK5dfM73NErFyPfd65q+dtE399/A3pp2OL5BVtj2FEQfH bv5dQsxcvHE0YismFWz1FLmiXw6b5Y6L -----END CERTIFICATE-----Generated at Fri Apr 4 18:31:25 2025 by rpki-client