$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft File: vvMhsD2CRd537IDdAzG_uo0IWdg.mft (raw, json) Hash identifier: fxDK/dhc7u6L7ZlBGH+2Mo6AmXmrkOGZ68dBr0eWxSY= Subject key identifier: D4:E0:9B:06:E7:CF:38:BC:7E:38:BB:61:15:35:DA:94:FC:18:31:1A Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 Certificate issuer: /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft Manifest number: 02DF Signing time: Sat 19 Jul 2025 02:51:00 +0000 Manifest this update: Sat 19 Jul 2025 02:51:00 +0000 Manifest next update: Sat 26 Jul 2025 02:51:00 +0000 Files and hashes: 1: vvMhsD2CRd537IDdAzG_uo0IWdg.crl (hash: ZYd4t0OPcccypRZ1cPxcVWKImdWLkH5iycOXp88SH1Q=) 2: 5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (hash: AaKJfFADfdiocRuahwwRayJxxniMqc1ubRpa5kB8ql4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE8AC, serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Validity Not Before: Jul 19 02:51:00 2025 GMT Not After : Jul 26 02:51:00 2025 GMT Subject: CN=687b0814-6df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:df:7f:ef:33:f1:8b:d2:35:fb:26:b9:77:81: 37:a5:66:b5:92:32:ae:cc:0f:aa:b6:27:e2:cb:05: 09:f7:98:6c:de:6d:e1:d7:c2:7f:06:7e:cb:ff:e0: 8e:a6:00:d9:0a:bf:2e:cc:0a:97:3d:0a:a5:8e:47: c0:59:9b:8f:d8:a2:1c:b9:7f:81:1f:f6:b8:32:87: 72:aa:30:00:23:6b:0d:31:3d:d1:52:64:42:3a:b8: d8:46:69:d3:fc:1e:6d:49:2d:b3:b4:30:7c:97:cb: ae:b6:5c:03:d9:ac:38:93:f8:8d:d5:03:33:4c:6d: b0:11:62:c7:26:79:bc:14:45:0f:c1:cd:77:7c:09: 2c:70:b4:b1:14:3b:9c:19:87:b2:3c:38:e5:da:84: bd:46:10:07:a7:d4:ee:26:2a:b6:c5:04:34:60:e9: 60:11:f3:7f:e1:d7:09:f8:76:eb:a0:d5:b6:a2:8b: 25:ed:1a:c5:eb:9f:45:b3:40:31:0a:f7:61:ae:c2: 90:51:2c:ae:2a:d6:7c:f4:d7:47:de:31:ce:80:11: 32:b8:0b:22:d6:c9:b5:99:7d:3b:53:d7:01:c8:3f: 80:74:1c:9a:3c:4c:c4:28:03:81:28:86:1c:02:6a: 8d:35:6d:92:b3:c0:6b:f5:92:df:a8:da:05:4d:2b: aa:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E0:9B:06:E7:CF:38:BC:7E:38:BB:61:15:35:DA:94:FC:18:31:1A X509v3 Authority Key Identifier: keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:03:68:ea:9d:7e:ff:4d:e9:0d:af:7b:df:7d:34:ac:91:a5: 36:9c:a8:d2:07:d2:7b:97:06:c1:b2:04:e2:66:12:77:39:bf: 19:72:93:bb:48:82:72:8b:46:20:46:c4:30:fb:f9:51:ef:06: 15:87:9f:dc:48:f0:5b:fb:9b:af:74:f7:6b:20:d5:35:0d:b9: d2:13:86:0d:52:92:91:7b:db:70:e0:85:ee:93:e2:c4:72:40: 98:6e:e0:28:2f:cc:58:34:52:45:49:b3:8d:6d:a3:32:a3:2d: b3:de:e7:71:9f:36:d6:b1:5d:c3:f4:a4:31:fb:43:b2:f7:c6: 91:85:32:f0:d0:75:b1:c7:19:b9:22:c1:e3:7c:27:f3:56:4b: fe:21:92:32:16:c9:f6:ef:b0:77:ca:3d:91:2b:10:f1:47:11: 70:f6:8f:f5:b2:45:4d:86:64:cd:ec:e8:6e:d0:a5:08:6a:ea: e2:26:48:84:71:9b:b0:f3:38:ba:e9:dd:35:7b:65:37:9f:31: f4:92:7d:75:51:30:ca:b7:f3:97:3e:a0:c2:ff:6d:9c:7d:94: 45:cb:85:03:9f:9d:7b:99:80:49:20:b9:8f:08:6d:20:4a:2d: 1a:81:46:a6:75:0e:e0:ce:8f:a9:4c:2d:57:fc:66:62:14:92: 2b:3c:2e:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU4QUMxMTAvBgNVBAUTKEJFRjMyMUIwM0Q4MjQ1REU3N0VDODBERDAzMzFCRkJB OEQwODU5RDgwHhcNMjUwNzE5MDI1MTAwWhcNMjUwNzI2MDI1MTAwWjAYMRYwFAYD VQQDEw02ODdiMDgxNC02ZGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxN9/7zPxi9I1+ya5d4E3pWa1kjKuzA+qtifiywUJ95hs3m3h18J/Bn7L/+CO pgDZCr8uzAqXPQqljkfAWZuP2KIcuX+BH/a4ModyqjAAI2sNMT3RUmRCOrjYRmnT /B5tSS2ztDB8l8uutlwD2aw4k/iN1QMzTG2wEWLHJnm8FEUPwc13fAkscLSxFDuc GYeyPDjl2oS9RhAHp9TuJiq2xQQ0YOlgEfN/4dcJ+HbroNW2oosl7RrF659Fs0Ax CvdhrsKQUSyuKtZ89NdH3jHOgBEyuAsi1sm1mX07U9cByD+AdByaPEzEKAOBKIYc AmqNNW2Ss8Br9ZLfqNoFTSuqKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTgmwbn zzi8fji7YRU12pT8GDEaMB8GA1UdIwQYMBaAFL7zIbA9gkXed+yA3QMxv7qNCFnY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRThBQy81MDM4RUM4QzdE RUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1JkNTM3SURkQXpHX3VvMElX ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z2TWhzRDJDUmQ1MzdJRGRBekdfdW8wSVdkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RThBQy81MDM4RUM4QzdERUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1Jk NTM3SURkQXpHX3VvMElXZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxA2jqnX7/TekNr3vffTSskaU2nKjSB9J7lwbBsgTiZhJ3Ob8ZcpO7 SIJyi0YgRsQw+/lR7wYVh5/cSPBb+5uvdPdrINU1DbnSE4YNUpKRe9tw4IXuk+LE ckCYbuAoL8xYNFJFSbONbaMyoy2z3udxnzbWsV3D9KQx+0Oy98aRhTLw0HWxxxm5 IsHjfCfzVkv+IZIyFsn277B3yj2RKxDxRxFw9o/1skVNhmTN7Ohu0KUIauriJkiE cZuw8zi66d01e2U3nzH0kn11UTDKt/OXPqDC/22cfZRFy4UDn517mYBJILmPCG0g Si0agUamdQ7gzo+pTC1X/GZiFJIrPC7k -----END CERTIFICATE-----Generated at Sun Jul 20 13:28:22 2025 by rpki-client