$ rpki-client -vvf rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft File: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft (raw, json) Hash identifier: 5EIYtTUPqy59gX+7HKUZVbfqGzmt4Jbk2spHOyhmhtw= Subject key identifier: 4D:BE:D9:78:37:71:1A:E6:38:27:B7:FC:9A:19:DB:64:DB:71:18:91 Authority key identifier: 55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 Certificate issuer: /CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft Manifest number: FD Signing time: Sat 31 May 2025 04:48:51 +0000 Manifest this update: Sat 31 May 2025 04:48:50 +0000 Manifest next update: Sat 07 Jun 2025 04:48:50 +0000 Files and hashes: 1: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl (hash: FxJ3VoBeNpcna3/LAom8prrpt7NXQ8j9c787nV9rOgw=) 2: FF1C0B44C0D411EEB8303680C4F9AE02.roa (hash: UVR5eOC5r72TP3k3BVK80L1LVMa+jcaIoA99zt0isl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912404E, serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Validity Not Before: May 31 04:48:50 2025 GMT Not After : Jun 7 04:48:50 2025 GMT Subject: CN=683a8a32-19b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a3:09:0f:a2:c5:d7:c5:bd:30:25:f8:56:4a: 3f:4c:ce:71:c5:bb:24:1d:f6:c3:0c:2a:39:8d:55: 0d:ad:4d:c3:37:f8:63:5a:e1:51:b4:10:96:31:2e: 57:59:6e:0a:c3:a2:f4:61:14:f6:bd:2a:da:23:3b: 26:db:ac:c2:14:4c:6f:e6:2d:f3:1f:5b:83:02:b2: 68:7c:5b:43:ca:b8:08:11:d5:cd:62:62:c7:67:3e: 6b:df:da:25:9d:d1:6d:62:e7:6a:47:0f:f0:6c:97: 71:49:46:0f:1a:f5:3a:ee:03:d9:72:51:35:6e:cd: e9:e8:9b:49:5f:a2:17:6b:00:00:21:f2:f6:1d:fb: 46:e4:10:80:1f:bb:6e:af:09:6c:9d:5d:6d:c3:2e: 4d:d6:53:cf:90:c6:f5:97:a2:eb:93:7e:81:08:21: e5:0d:06:bb:18:ac:73:48:c9:cd:a5:16:c0:be:e0: d2:20:69:a3:cc:4a:05:71:f1:1f:f1:0c:88:e0:73: cc:7d:b8:10:46:ab:84:fd:9b:b1:aa:9c:2e:de:b0: cc:3f:c1:b0:96:3b:7c:ba:c8:25:97:e0:5e:b9:d9: dd:8e:31:e8:b3:41:81:6b:95:43:55:6f:77:96:ef: 4a:0f:eb:e0:77:38:13:49:a2:0e:9d:54:45:b3:ff: 23:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BE:D9:78:37:71:1A:E6:38:27:B7:FC:9A:19:DB:64:DB:71:18:91 X509v3 Authority Key Identifier: keyid:55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:07:44:db:42:61:f8:dc:dd:66:c2:3c:1e:40:a6:22:68:d7: 92:9e:86:d5:72:f0:cf:59:e6:99:f0:61:04:33:44:9e:52:81: 92:4b:0b:4a:af:0d:f3:ba:88:4c:43:98:6c:4d:a8:22:fb:10: 2f:f4:67:2c:b8:c4:70:ac:98:69:6d:55:f3:17:a5:13:8f:2d: 64:15:f5:a4:45:de:a8:5a:ae:8d:8d:92:c1:c3:a6:9d:d9:86: 0a:2a:00:dc:25:db:97:be:34:31:57:33:23:36:46:af:24:a9: f8:fb:1f:4e:b9:66:e5:70:be:ca:55:b9:3b:c2:a1:f8:82:7f: a9:1f:3a:e6:96:14:a1:76:f9:e4:ef:7f:67:e4:97:f9:2e:c1: f0:6c:24:d6:ba:c1:00:d6:13:95:c5:17:55:5c:2b:d6:18:b1: 24:90:02:e3:12:d7:f5:c9:12:d8:62:00:02:41:9b:90:ab:3f: 22:62:03:c8:b7:8a:9c:cc:4d:72:91:ef:8d:df:74:01:20:03: 60:17:01:e1:a6:77:0b:59:02:0d:46:4c:51:be:18:0c:75:41: 60:b4:d4:ab:f3:8b:c7:5a:4a:46:c1:f2:de:30:71:54:d1:62: 93:d4:b3:e3:54:76:c7:e2:69:54:42:64:04:50:e3:f3:63:b5: 66:bc:3e:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQwNEUxMTAvBgNVBAUTKDU1MzkwRjNGNkIzQjMwRUQ0QTlDNkZCOUFEODI5N0I4 RUY5OTA2RTAwHhcNMjUwNTMxMDQ0ODUwWhcNMjUwNjA3MDQ0ODUwWjAYMRYwFAYD VQQDEw02ODNhOGEzMi0xOWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKMJD6LF18W9MCX4Vko/TM5xxbskHfbDDCo5jVUNrU3DN/hjWuFRtBCWMS5X WW4Kw6L0YRT2vSraIzsm26zCFExv5i3zH1uDArJofFtDyrgIEdXNYmLHZz5r39ol ndFtYudqRw/wbJdxSUYPGvU67gPZclE1bs3p6JtJX6IXawAAIfL2HftG5BCAH7tu rwlsnV1twy5N1lPPkMb1l6Lrk36BCCHlDQa7GKxzSMnNpRbAvuDSIGmjzEoFcfEf 8QyI4HPMfbgQRquE/Zuxqpwu3rDMP8Gwljt8usgll+BeudndjjHos0GBa5VDVW93 lu9KD+vgdzgTSaIOnVRFs/8jDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2+2Xg3 cRrmOCe3/JoZ22TbcRiRMB8GA1UdIwQYMBaAFFU5Dz9rOzDtSpxvua2Cl7jvmQbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDA0RS80OURGNjUzRUJG NDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01PMUtuRy01cllLWHVPLVpC dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUa1BQMnM3TU8xS25HLTVyWUtYdU8tWkJ1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDA0RS80OURGNjUzRUJGNDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01P MUtuRy01cllLWHVPLVpCdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChB0TbQmH43N1mwjweQKYiaNeSnobVcvDPWeaZ8GEEM0SeUoGSSwtK rw3zuohMQ5hsTagi+xAv9GcsuMRwrJhpbVXzF6UTjy1kFfWkRd6oWq6NjZLBw6ad 2YYKKgDcJduXvjQxVzMjNkavJKn4+x9OuWblcL7KVbk7wqH4gn+pHzrmlhShdvnk 739n5Jf5LsHwbCTWusEA1hOVxRdVXCvWGLEkkALjEtf1yRLYYgACQZuQqz8iYgPI t4qczE1yke+N33QBIANgFwHhpncLWQINRkxRvhgMdUFgtNSr84vHWkpGwfLeMHFU 0WKT1LPjVHbH4mlUQmQEUOPzY7VmvD59 -----END CERTIFICATE-----Generated at Sat May 31 17:36:05 2025 by rpki-client