$ rpki-client -vvf rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft File: VsaTBbXrpUJVXYx4xWGremzRqiw.mft (raw, json) Hash identifier: HRj3ZaB7DuI0+30MKINjS/5U0pYfiM8FxrJ392jU6QQ= Subject key identifier: CF:19:1E:46:31:C1:30:CD:A7:B3:7B:A8:05:54:65:44:F8:A2:D4:A7 Authority key identifier: 56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C Certificate issuer: /CN=A911EEF8/serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft Manifest number: 59 Signing time: Sat 31 May 2025 06:47:24 +0000 Manifest this update: Sat 31 May 2025 06:47:23 +0000 Manifest next update: Sat 07 Jun 2025 06:47:23 +0000 Files and hashes: 1: VsaTBbXrpUJVXYx4xWGremzRqiw.crl (hash: xAo7EpQORYT+xn7XAvYI6+z7b5QM8e2VB5fmsP8D9Y4=) 2: 0EC0EC1CC71F11EF85C66E2FC4F9AE02.roa (hash: 46zNjtnLZ5ywrRRPOzjWlNv+erVogDzKd0OwWv6xC4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EEF8, serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C Validity Not Before: May 31 06:47:23 2025 GMT Not After : Jun 7 06:47:23 2025 GMT Subject: CN=683aa5fc-f84b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d4:1c:a1:b9:ca:30:87:50:0c:ba:2b:b5:a0: 44:a0:cc:74:34:e5:c8:0a:7f:67:cc:36:55:af:7d: 85:bc:08:d4:8f:2f:e0:53:23:26:4b:ab:0e:6c:d1: 78:ff:2f:a7:e2:9e:fc:40:c1:a7:c4:37:05:ed:76: 95:e2:13:a0:d3:b1:7a:4e:a2:e1:2f:0a:8e:c0:33: 77:a2:27:e6:82:36:ff:4e:be:45:39:65:9f:db:48: c0:5d:0e:a2:ca:1b:cd:77:af:14:5e:65:c9:6b:0e: f0:7e:97:8f:59:a2:18:7b:9a:25:c7:0c:ae:32:08: ba:4e:6c:e2:83:65:90:51:b0:07:3b:0d:7e:b6:26: b6:a5:12:1e:1c:d3:3d:50:ec:0c:ac:bd:98:c6:04: 6d:22:be:50:c9:fe:01:33:ef:d9:a6:2c:eb:79:99: e4:b0:bb:47:b3:6f:c7:f7:cd:ee:9b:2e:7d:4f:51: 97:6d:c5:09:c9:e2:5b:03:52:52:17:99:31:51:0b: 5f:94:ec:4f:99:40:4b:44:3d:ac:2e:d4:2e:8f:d8: 00:f5:8b:21:a5:7c:08:96:b4:53:51:ea:c3:20:57: c2:f1:ec:98:18:35:a6:d0:f7:ff:d7:2e:81:d4:ea: c5:b5:3e:4e:fd:5f:46:7f:70:2e:50:39:92:69:a5: f1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:19:1E:46:31:C1:30:CD:A7:B3:7B:A8:05:54:65:44:F8:A2:D4:A7 X509v3 Authority Key Identifier: keyid:56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:74:ab:48:ee:22:ed:4a:05:ea:13:8e:e9:73:34:84:ba:0c: 00:ae:d2:16:d1:6d:11:67:6a:4f:39:92:a9:b8:0b:f8:b2:cd: b1:ed:c3:94:ad:01:5f:74:31:3a:a9:dc:1d:8a:40:1e:dd:8e: e4:59:e4:cc:92:bc:9a:cf:11:a6:9e:0f:c8:3d:30:5f:13:91: cd:62:cf:ca:74:3e:3d:26:20:bd:6a:5c:21:97:f6:c5:c9:d3: 5d:c2:c9:d2:ad:98:dc:f5:b6:1b:08:f8:23:9d:d0:ac:ba:ee: b5:ff:8b:fc:1a:db:7b:c5:82:a6:91:6b:5d:30:c7:5a:fc:ad: 3b:88:99:53:48:4e:94:0c:95:26:e1:4a:0f:0f:2f:e4:d5:48: 1d:9c:0a:e4:4d:2c:a4:84:92:12:8b:e6:d8:7f:ff:0e:9e:cd: c0:3a:06:ba:d4:29:66:9a:13:c2:a9:68:4f:7f:01:6b:1a:c4: e8:da:49:9d:4a:7d:fb:2f:97:75:3a:68:25:87:eb:a0:1b:20: 04:f3:6c:3a:4b:47:0a:c8:52:fb:53:1e:1d:cf:36:4c:c9:b6: 66:c5:f5:d3:25:15:bf:69:f2:fa:f6:c0:a5:d0:3b:bb:b4:cb: 55:2f:82:d0:ca:07:72:b2:97:ea:63:91:ad:e3:f6:37:d2:d0: c9:8e:e5:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RUVGODExMC8GA1UEBRMoNTZDNjkzMDVCNUVCQTU0MjU1NUQ4Qzc4QzU2MUFCN0E2 Q0QxQUEyQzAeFw0yNTA1MzEwNjQ3MjNaFw0yNTA2MDcwNjQ3MjNaMBgxFjAUBgNV BAMTDTY4M2FhNWZjLWY4NGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ1Byhucowh1AMuiu1oESgzHQ05cgKf2fMNlWvfYW8CNSPL+BTIyZLqw5s0Xj/ L6finvxAwafENwXtdpXiE6DTsXpOouEvCo7AM3eiJ+aCNv9OvkU5ZZ/bSMBdDqLK G813rxReZclrDvB+l49Zohh7miXHDK4yCLpObOKDZZBRsAc7DX62JralEh4c0z1Q 7AysvZjGBG0ivlDJ/gEz79mmLOt5meSwu0ezb8f3ze6bLn1PUZdtxQnJ4lsDUlIX mTFRC1+U7E+ZQEtEPawu1C6P2AD1iyGlfAiWtFNR6sMgV8Lx7JgYNabQ9//XLoHU 6sW1Pk79X0Z/cC5QOZJppfEdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzxkeRjHB MM2ns3uoBVRlRPii1KcwHwYDVR0jBBgwFoAUVsaTBbXrpUJVXYx4xWGremzRqiww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFRUY4Lzk3OTlFNkQwQkJD NDExRUZCOTg1QkUzRkM0RjlBRTAyL1ZzYVRCYlhycFVKVlhZeDR4V0dyZW16UnFp dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVnNhVEJiWHJwVUpWWFl4NHhXR3JlbXpScWl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF RUY4Lzk3OTlFNkQwQkJDNDExRUZCOTg1QkUzRkM0RjlBRTAyL1ZzYVRCYlhycFVK VlhZeDR4V0dyZW16UnFpdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEB0q0juIu1KBeoTjulzNIS6DACu0hbRbRFnak85kqm4C/iyzbHtw5St AV90MTqp3B2KQB7djuRZ5MySvJrPEaaeD8g9MF8Tkc1iz8p0Pj0mIL1qXCGX9sXJ 013CydKtmNz1thsI+COd0Ky67rX/i/wa23vFgqaRa10wx1r8rTuImVNITpQMlSbh Sg8PL+TVSB2cCuRNLKSEkhKL5th//w6ezcA6BrrUKWaaE8KpaE9/AWsaxOjaSZ1K ffsvl3U6aCWH66AbIATzbDpLRwrIUvtTHh3PNkzJtmbF9dMlFb9p8vr2wKXQO7u0 y1UvgtDKB3Kyl+pjka3j9jfS0MmO5Xs= -----END CERTIFICATE-----Generated at Sat May 31 17:28:59 2025 by rpki-client