$ rpki-client -vvf rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft File: VvkoxypXKMF6mCUQm7u3IQMTu8o.mft (raw, json) Hash identifier: azL4OdDCDIVfGvhZdc5eqR42Cq4fSmHe7c0Jzb/8RMM= Subject key identifier: 21:EA:D6:2B:31:5C:B0:CF:C0:20:1A:21:3E:DD:18:58:0B:70:76:92 Authority key identifier: 56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA Certificate issuer: /CN=A91229A5/serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft Manifest number: 0137 Signing time: Sat 31 May 2025 04:18:07 +0000 Manifest this update: Sat 31 May 2025 04:18:06 +0000 Manifest next update: Sat 07 Jun 2025 04:18:06 +0000 Files and hashes: 1: VvkoxypXKMF6mCUQm7u3IQMTu8o.crl (hash: KFiPPX31QAd7W2KxtYuth4SQVR47pboKlMRLpGbNf/k=) 2: 22C2DBA66E7511EFA80C0F12C4F9AE02.roa (hash: tr6zyJGh7+1q2ybxGoLN0xTOQqNRAsC2+oBUs/Woa0Y=) 3: EE44E774314411EF956C0046C4F9AE02.roa (hash: RuueBAzkzHj3V8fqwlyaa9eFSpNJ4wgOoJ0+Jq+BXus=) 4: 0BB29428314511EF9B1F4B46C4F9AE02.roa (hash: zTFd6R54T3NlCmkGgnrlEJM5la1RNIWxE66Q49nYSZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91229A5, serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA Validity Not Before: May 31 04:18:06 2025 GMT Not After : Jun 7 04:18:06 2025 GMT Subject: CN=683a82fe-ac23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e9:e2:0c:62:4e:69:86:df:1c:2a:56:cd:01: 50:9d:f6:71:66:15:54:21:41:62:f4:d6:ce:4c:c9: b0:bf:e7:fc:7a:d0:a7:c5:da:42:77:94:a7:6a:d1: 16:58:c4:68:e9:17:e9:a9:21:5d:57:c6:b6:5e:38: 1a:d7:4e:d1:da:9e:27:da:b1:e7:a4:b7:84:63:c1: 83:66:4f:4e:d4:66:65:00:c9:ab:91:f8:b0:ae:8a: 71:7d:8a:3c:d5:3a:d3:3c:79:15:0b:ce:0d:46:80: c5:8c:d3:bd:c4:41:70:90:34:e8:45:2f:5b:05:22: 3f:fd:e1:67:e6:a9:a1:07:42:c8:f7:f2:6f:d3:f5: 26:bb:52:99:c8:4d:cf:f7:41:29:cd:76:5b:96:3b: 28:ea:f2:e9:6b:dc:3f:27:21:5f:19:fa:2f:5c:ed: e4:8b:de:08:16:1b:0f:c0:15:a8:5d:85:bb:3c:2c: c7:f7:6c:9f:ba:85:22:a8:b7:c1:16:43:8e:f4:bb: 4e:54:1f:0a:28:0e:a4:0e:48:91:1c:aa:85:af:6d: 48:96:65:f4:66:57:9b:b4:a2:aa:ae:36:da:bf:5c: 94:94:0f:94:c2:33:99:38:2e:6f:d3:95:1a:f1:3d: 6f:28:af:7a:e0:99:2f:a4:6c:a7:c2:00:7b:0f:9b: 09:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EA:D6:2B:31:5C:B0:CF:C0:20:1A:21:3E:DD:18:58:0B:70:76:92 X509v3 Authority Key Identifier: keyid:56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:cf:b8:6b:0d:80:b6:6e:1c:47:23:d6:ca:53:23:6d:83:81: 7b:6e:65:71:96:14:47:40:c5:17:b7:4a:9e:a5:79:5c:89:95: 2a:7c:0c:c8:7e:af:af:ab:8b:35:76:f0:ae:a6:ad:b0:82:f7: d6:93:e6:36:c2:12:fc:78:47:bf:c5:e2:ef:ad:74:6d:73:ff: c7:3a:9e:84:92:43:8a:6a:2a:d2:26:0a:68:25:ae:91:70:86: 1c:63:e5:70:8e:c0:b4:99:db:3a:af:df:ba:f4:47:ad:ea:dd: e5:58:36:c9:0f:c9:cd:e7:f4:92:3e:39:ad:66:f1:b5:b8:a7: 5c:b0:ee:9e:d1:73:1c:4f:cb:af:c2:da:60:40:37:dc:2a:3d: bb:de:67:32:25:ed:d3:48:90:76:86:77:fe:f9:55:57:01:e2: 23:b4:68:06:56:64:98:65:18:20:37:75:99:39:aa:db:4d:e3: be:f4:a2:b7:35:4c:aa:27:a5:78:40:89:f5:ce:a9:af:25:bf: 89:ff:c1:a6:75:7a:eb:b4:3f:65:fd:08:bb:a8:c1:45:67:fb: f0:fe:b9:2a:cf:80:e2:a0:bf:fa:c5:93:c4:70:6b:f5:64:97: de:61:9d:21:25:36:6e:2c:d3:57:e8:ed:07:ef:fa:07:3e:e6: fc:94:74:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5QTUxMTAvBgNVBAUTKDU2RjkyOEM3MkE1NzI4QzE3QTk4MjUxMDlCQkJCNzIx MDMxM0JCQ0EwHhcNMjUwNTMxMDQxODA2WhcNMjUwNjA3MDQxODA2WjAYMRYwFAYD VQQDEw02ODNhODJmZS1hYzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuniDGJOaYbfHCpWzQFQnfZxZhVUIUFi9NbOTMmwv+f8etCnxdpCd5SnatEW WMRo6RfpqSFdV8a2Xjga107R2p4n2rHnpLeEY8GDZk9O1GZlAMmrkfiwropxfYo8 1TrTPHkVC84NRoDFjNO9xEFwkDToRS9bBSI//eFn5qmhB0LI9/Jv0/Umu1KZyE3P 90EpzXZbljso6vLpa9w/JyFfGfovXO3ki94IFhsPwBWoXYW7PCzH92yfuoUiqLfB FkOO9LtOVB8KKA6kDkiRHKqFr21IlmX0ZlebtKKqrjbav1yUlA+UwjOZOC5v05Ua 8T1vKK964JkvpGynwgB7D5sJPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHq1isx XLDPwCAaIT7dGFgLcHaSMB8GA1UdIwQYMBaAFFb5KMcqVyjBepglEJu7tyEDE7vK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjlBNS9FMjlFNzM2MDdB MTMxMUVFQUJBMTUwNjlDNEY5QUUwMi9WdmtveHlwWEtNRjZtQ1VRbTd1M0lRTVR1 OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z2a294eXBYS01GNm1DVVFtN3UzSVFNVHU4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjlBNS9FMjlFNzM2MDdBMTMxMUVFQUJBMTUwNjlDNEY5QUUwMi9WdmtveHlwWEtN RjZtQ1VRbTd1M0lRTVR1OG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACz7hrDYC2bhxHI9bKUyNtg4F7bmVxlhRHQMUXt0qepXlciZUqfAzI fq+vq4s1dvCupq2wgvfWk+Y2whL8eEe/xeLvrXRtc//HOp6EkkOKairSJgpoJa6R cIYcY+VwjsC0mds6r9+69Eet6t3lWDbJD8nN5/SSPjmtZvG1uKdcsO6e0XMcT8uv wtpgQDfcKj273mcyJe3TSJB2hnf++VVXAeIjtGgGVmSYZRggN3WZOarbTeO+9KK3 NUyqJ6V4QIn1zqmvJb+J/8GmdXrrtD9l/Qi7qMFFZ/vw/rkqz4DioL/6xZPEcGv1 ZJfeYZ0hJTZuLNNX6O0H7/oHPub8lHTz -----END CERTIFICATE-----Generated at Sat May 31 17:34:17 2025 by rpki-client