$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft File: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft (raw, json) Hash identifier: Yz9BxmnU8RsTh9L71w0+fg3bHmZNR+exk5Jdv2XihpU= Subject key identifier: D8:D7:24:7B:5A:FE:3B:FF:B3:9D:3E:E6:63:8C:20:90:00:9C:31:BD Authority key identifier: 56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC Certificate issuer: /CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC Certificate serial: 0D8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft Manifest number: 0D7B Signing time: Fri 30 May 2025 18:08:30 +0000 Manifest this update: Fri 30 May 2025 18:08:29 +0000 Manifest next update: Fri 06 Jun 2025 18:08:29 +0000 Files and hashes: 1: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl (hash: W1+EbjTBaYjsAVBS96YEsnoKuEq1JpVU2YnRndMfFfc=) 2: 8DD1E6B6E6FE11EE90BD3C1FC4F9AE02.roa (hash: VdJNFDaYIS+GL9qtkVFNMbcche+I8od1o1L3BRBSv5A=) 3: 8EB36E60E6FE11EE90BD3C1FC4F9AE02.roa (hash: JtyRZnFwPCNWdefnQqVRxz9abXZRf2IOClL/TIIj6MY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3467 (0xd8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203DF, serialNumber=56790B8C9507D9D4F3900950D329E275747767AC Validity Not Before: May 30 18:08:29 2025 GMT Not After : Jun 6 18:08:29 2025 GMT Subject: CN=6839f41d-40c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b7:74:04:6f:4c:a7:7a:fc:a5:95:62:5a:26: b3:25:1b:a2:85:cc:17:ef:71:1c:47:8c:23:74:dd: c8:b4:65:a5:c5:93:27:a6:5c:b6:8a:22:b7:e5:76: 04:b2:fd:21:5a:ac:ea:ad:02:2e:4a:0f:b0:2c:56: 41:ae:2b:3e:07:82:42:3f:c3:08:6d:5c:84:85:85: 10:ce:15:66:67:f3:7f:2c:4d:03:e0:13:c8:9f:a7: 69:58:4c:17:17:cf:5e:6e:00:09:91:f0:68:62:1e: 49:f9:b0:d3:7f:11:7d:4b:b5:1e:2f:3d:cc:cf:c6: 9f:69:ea:8a:13:53:39:4a:e0:8d:27:60:d2:bd:9e: 4c:dc:b3:42:95:01:14:1c:42:18:11:54:b3:1e:ba: cc:2b:ff:84:b2:1d:9e:24:cd:b7:97:2e:ed:e7:2a: 9e:72:a7:94:c2:9b:1b:b5:85:d2:70:f3:7a:48:00: 81:37:44:93:3a:e4:5f:e5:ce:31:ea:fb:c2:4d:aa: f5:09:e2:6f:f7:21:9c:ab:ce:c0:3c:c3:47:a3:69: 8c:a1:5f:4d:5b:d7:70:8a:c3:00:73:d4:d7:f0:8c: 0e:0e:72:b4:6f:48:02:88:78:ea:c5:44:df:d5:cb: 28:71:46:75:a3:d1:0c:1c:aa:61:ae:c6:ad:d0:95: 9f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D7:24:7B:5A:FE:3B:FF:B3:9D:3E:E6:63:8C:20:90:00:9C:31:BD X509v3 Authority Key Identifier: keyid:56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d6:84:e3:d2:fe:37:8a:1c:d9:94:61:ae:4b:bf:26:bf:c7: b2:0d:47:94:04:b3:94:c6:bb:9e:2d:ef:5f:4a:7d:bf:fe:2d: f2:80:ce:bc:f9:db:bf:c1:bb:02:20:49:46:43:c1:a0:45:a4: 72:48:66:28:2e:53:f4:62:b9:8e:64:03:4e:9a:10:ff:4f:7e: cb:dd:a7:f5:21:5b:30:91:41:f6:49:37:52:8c:fa:7a:91:4e: ac:98:b3:1f:0e:48:a1:cf:f8:3d:b2:46:56:a2:64:08:af:9f: ad:13:b2:d5:d9:a4:70:a6:12:cf:5e:4b:b4:25:f1:d1:48:df: 0b:38:f4:8b:77:bc:5c:07:bb:06:e8:46:6d:65:76:2a:66:4e: 70:48:85:10:63:02:2e:86:28:c7:b4:67:ec:72:61:e8:93:77: 12:a2:1b:d3:6c:52:a8:87:67:d7:03:44:83:ee:34:df:46:ee: a3:f9:59:72:74:32:e6:56:84:6e:c0:76:1c:cd:21:6c:0d:fb: 3a:e6:38:ef:0e:23:e6:59:10:0d:a2:cd:62:31:e6:04:12:75: 73:4e:71:43:eb:1d:96:9f:d6:3e:5d:e5:a9:33:f6:96:b6:8a: b7:a1:a7:1d:ac:a1:1e:e9:13:08:6e:de:3e:b5:49:6c:4b:c1: 3b:61:d0:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzREYxMTAvBgNVBAUTKDU2NzkwQjhDOTUwN0Q5RDRGMzkwMDk1MEQzMjlFMjc1 NzQ3NzY3QUMwHhcNMjUwNTMwMTgwODI5WhcNMjUwNjA2MTgwODI5WjAYMRYwFAYD VQQDEw02ODM5ZjQxZC00MGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubd0BG9Mp3r8pZViWiazJRuihcwX73EcR4wjdN3ItGWlxZMnply2iiK35XYE sv0hWqzqrQIuSg+wLFZBris+B4JCP8MIbVyEhYUQzhVmZ/N/LE0D4BPIn6dpWEwX F89ebgAJkfBoYh5J+bDTfxF9S7UeLz3Mz8afaeqKE1M5SuCNJ2DSvZ5M3LNClQEU HEIYEVSzHrrMK/+Esh2eJM23ly7t5yqecqeUwpsbtYXScPN6SACBN0STOuRf5c4x 6vvCTar1CeJv9yGcq87APMNHo2mMoV9NW9dwisMAc9TX8IwODnK0b0gCiHjqxUTf 1csocUZ1o9EMHKphrsat0JWfAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjXJHta /jv/s50+5mOMIJAAnDG9MB8GA1UdIwQYMBaAFFZ5C4yVB9nU85AJUNMp4nV0d2es MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNERi85MjczOTdCNENB MzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJkVHprQWxRMHluaWRYUjNa NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Zua0xqSlVIMmRUemtBbFEweW5pZFhSM1o2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNERi85MjczOTdCNENBMzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJk VHprQWxRMHluaWRYUjNaNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN1oTj0v43ihzZlGGuS78mv8eyDUeUBLOUxrueLe9fSn2//i3ygM68 +du/wbsCIElGQ8GgRaRySGYoLlP0YrmOZANOmhD/T37L3af1IVswkUH2STdSjPp6 kU6smLMfDkihz/g9skZWomQIr5+tE7LV2aRwphLPXku0JfHRSN8LOPSLd7xcB7sG 6EZtZXYqZk5wSIUQYwIuhijHtGfscmHok3cSohvTbFKoh2fXA0SD7jTfRu6j+Vly dDLmVoRuwHYczSFsDfs65jjvDiPmWRANos1iMeYEEnVzTnFD6x2Wn9Y+XeWpM/aW toq3oacdrKEe6RMIbt4+tUlsS8E7YdAo -----END CERTIFICATE-----Generated at Sat May 31 17:00:24 2025 by rpki-client