$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft File: Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft (raw, json) Hash identifier: aKIxUmJFs5tDV9Dng8EpTY0rOOfpbVnC//wppTUCrYo= Subject key identifier: 8A:73:91:CA:94:9C:2B:41:53:89:6D:53:59:8A:69:38:B5:8A:D3:B4 Authority key identifier: 56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71 Certificate issuer: /CN=A91203DC/serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071 Certificate serial: 2182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft Manifest number: 2177 Signing time: Fri 30 May 2025 16:05:22 +0000 Manifest this update: Fri 30 May 2025 16:05:22 +0000 Manifest next update: Fri 06 Jun 2025 16:05:22 +0000 Files and hashes: 1: Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl (hash: WWv9bep+sDuE5lM6PtIEt/sY7xDePpxjByihsSTJY54=) 2: 1D9DC82A652311EBA8CF3C4CC4F9AE02.roa (hash: lzXH47zwQqzR7U0IwcpEbq0QXTqtq0eXFrMFUkvM89M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8578 (0x2182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203DC, serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071 Validity Not Before: May 30 16:05:22 2025 GMT Not After : Jun 6 16:05:22 2025 GMT Subject: CN=6839d742-d2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9c:a2:38:1e:66:dc:0a:fd:67:90:75:6f:93: 7e:51:fb:d4:af:90:77:f1:18:a4:9f:80:c1:44:ca: 07:39:12:4a:63:83:e7:f7:a5:04:69:cd:b8:da:ce: 05:64:b8:ea:d3:8a:29:0e:f0:60:8d:b1:2f:7b:13: 03:60:38:b2:0d:fb:b5:ea:2d:e0:2a:de:03:2e:be: ea:1f:2c:d5:cf:10:1f:f9:53:f3:41:21:94:59:ef: 6a:44:b1:d3:a3:69:45:ed:de:7d:cb:aa:a9:f3:9c: 2c:5f:e6:bf:40:f6:cc:cc:a8:2d:52:68:ce:45:8f: 65:cd:d7:03:61:72:2e:09:61:09:e0:bc:f5:ce:96: 4a:fb:1a:3e:fb:5f:6b:df:67:ec:c1:a1:fe:a6:cb: d0:a5:20:1a:ca:ca:b5:e6:79:56:86:51:87:db:f5: d9:f6:28:e9:49:f5:29:ac:0b:df:03:5b:df:1b:45: d7:49:ee:6e:30:b6:de:f9:bb:70:6f:70:09:63:5b: fe:39:d2:b6:a6:d8:75:28:57:c0:fd:49:ca:31:43: f8:62:7b:47:59:20:f0:05:a9:96:af:f4:20:1c:ba: cc:67:71:6d:c0:cd:b5:5a:7a:9b:6e:8c:bb:72:2e: c1:af:2f:50:c2:30:f1:e8:1b:ee:1f:b9:28:89:ad: a7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:73:91:CA:94:9C:2B:41:53:89:6D:53:59:8A:69:38:B5:8A:D3:B4 X509v3 Authority Key Identifier: keyid:56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:32:74:0e:81:28:aa:79:c6:33:70:e7:93:6b:51:0b:95:83: 2e:8f:46:f0:6e:cd:5f:f0:ea:3f:11:b3:78:d5:f6:60:86:3d: 89:ff:aa:ef:5d:3b:6c:0f:4b:ad:de:16:d6:39:05:56:c9:89: 2b:b8:c4:d4:e4:c0:de:20:0a:03:03:9c:13:73:5c:10:c1:34: 81:78:86:b0:a2:44:fe:b7:7f:c9:ba:cd:d3:71:59:af:10:ee: e6:0f:a9:84:28:77:aa:60:58:8e:e6:fc:42:f7:9f:19:8c:37: f6:af:7b:2d:10:0e:3e:35:0d:4c:7b:3c:cb:fa:80:8e:b8:59: ac:23:18:d5:02:e7:ef:43:2a:e9:ae:1f:3a:15:d4:ea:39:5b: 70:d2:d1:46:0f:7f:2c:12:f5:e9:82:41:f7:92:c1:17:a5:fa: 68:6b:b5:9d:d5:0c:80:7d:2e:e6:c8:23:e8:82:21:33:25:1e: 60:86:c2:61:9f:ce:70:c5:57:3b:40:d0:86:f0:8d:1a:b5:57: de:44:fc:c4:0a:35:a2:50:00:51:f5:e2:0e:64:05:20:78:4e: cf:2e:90:91:20:26:ae:fa:12:a7:65:d9:4c:65:99:e2:73:7e: 85:b8:e7:78:b4:c4:1a:4d:92:44:6b:68:41:7d:1d:ef:71:d0: 73:5c:5d:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzREMxMTAvBgNVBAUTKDU2NDZFMDdBMEY2MDI1RjFFMjYwRjFDNDk5NkY5QTY4 MUIyOTIwNzEwHhcNMjUwNTMwMTYwNTIyWhcNMjUwNjA2MTYwNTIyWjAYMRYwFAYD VQQDEw02ODM5ZDc0Mi1kMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15yiOB5m3Ar9Z5B1b5N+UfvUr5B38Rikn4DBRMoHORJKY4Pn96UEac242s4F ZLjq04opDvBgjbEvexMDYDiyDfu16i3gKt4DLr7qHyzVzxAf+VPzQSGUWe9qRLHT o2lF7d59y6qp85wsX+a/QPbMzKgtUmjORY9lzdcDYXIuCWEJ4Lz1zpZK+xo++19r 32fswaH+psvQpSAaysq15nlWhlGH2/XZ9ijpSfUprAvfA1vfG0XXSe5uMLbe+btw b3AJY1v+OdK2pth1KFfA/UnKMUP4YntHWSDwBamWr/QgHLrMZ3FtwM21Wnqbboy7 ci7Bry9QwjDx6BvuH7koia2n0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpzkcqU nCtBU4ltU1mKaTi1itO0MB8GA1UdIwQYMBaAFFZG4HoPYCXx4mDxxJlvmmgbKSBx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNEQy9GQUQzRDZGQ0RD NDkxMUU1QTA2MjVGODJDNEY5QUUwMi9Wa2JnZWc5Z0pmSGlZUEhFbVctYWFCc3BJ SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZrYmdlZzlnSmZIaVlQSEVtVy1hYUJzcElIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNEQy9GQUQzRDZGQ0RDNDkxMUU1QTA2MjVGODJDNEY5QUUwMi9Wa2JnZWc5Z0pm SGlZUEhFbVctYWFCc3BJSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAMnQOgSiqecYzcOeTa1ELlYMuj0bwbs1f8Oo/EbN41fZghj2J/6rv XTtsD0ut3hbWOQVWyYkruMTU5MDeIAoDA5wTc1wQwTSBeIawokT+t3/Jus3TcVmv EO7mD6mEKHeqYFiO5vxC958ZjDf2r3stEA4+NQ1MezzL+oCOuFmsIxjVAufvQyrp rh86FdTqOVtw0tFGD38sEvXpgkH3ksEXpfpoa7Wd1QyAfS7myCPogiEzJR5ghsJh n85wxVc7QNCG8I0atVfeRPzECjWiUABR9eIOZAUgeE7PLpCRICau+hKnZdlMZZni c36FuOd4tMQaTZJEa2hBfR3vcdBzXF1K -----END CERTIFICATE-----Generated at Sat May 31 16:38:58 2025 by rpki-client