$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft File: Vyfu6NouLMefq6Da0ZyISCvRWdw.mft (raw, json) Hash identifier: snjYofC5c51jc06EuwvU/8XQwSLdIwmZoeoWqyiNmL8= Subject key identifier: E1:0D:FC:64:2D:A0:C7:90:8D:80:89:46:6F:EF:03:F7:7B:B6:65:8A Authority key identifier: 57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC Certificate issuer: /CN=A9125C3D/serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC Certificate serial: 0389 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft Manifest number: 0384 Signing time: Sat 31 May 2025 01:04:58 +0000 Manifest this update: Sat 31 May 2025 01:04:58 +0000 Manifest next update: Sat 07 Jun 2025 01:04:58 +0000 Files and hashes: 1: Vyfu6NouLMefq6Da0ZyISCvRWdw.crl (hash: 1RzSEnWZgLBz5YHXz3QV2mAv7iHbZ/rQFzTW+WrQWz4=) 2: D66E75F0A5CF11EC94CFB734C4F9AE02.roa (hash: l/s5xmTdNpZpeVMlmGz5C4jtr1q5+jW3USj6jM51K9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 905 (0x389) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C3D, serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC Validity Not Before: May 31 01:04:58 2025 GMT Not After : Jun 7 01:04:58 2025 GMT Subject: CN=683a55ba-7354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bc:24:5c:f4:62:f1:24:a5:8e:aa:82:8f:ad: e1:d4:76:63:95:f2:84:9a:53:2e:f2:ca:e4:75:aa: d7:fe:5b:3a:2d:51:a5:c5:88:72:af:95:41:a6:48: 27:37:c7:42:72:ac:7c:43:da:18:a2:6c:50:da:74: 44:9c:fd:1e:43:48:52:6a:ec:79:83:8d:ed:5b:97: 4f:aa:86:63:71:15:e4:69:a5:85:a8:3a:46:3f:2d: 20:37:05:3b:78:7d:5f:08:83:c9:6b:b4:a4:a6:37: 48:52:fb:2e:83:b4:67:31:95:d5:b0:98:d6:6d:03: 45:64:f7:86:b4:43:0d:3c:f5:ad:13:cb:0d:38:d7: 9f:bf:bc:89:40:fb:03:0c:83:28:98:cb:e7:9c:5d: f0:5c:34:1a:ff:13:3b:aa:37:cf:19:a8:70:0c:de: c2:26:6a:34:8b:09:ea:01:54:2d:18:fa:31:99:95: 59:4c:16:f7:21:db:14:c5:c3:53:c3:5d:6a:cd:02: c2:4d:38:13:f0:20:5b:cf:f8:7e:69:92:88:78:90: 57:de:7c:12:28:d6:f3:84:e8:5c:41:38:02:2c:c3: f0:5b:76:01:42:e2:42:e3:2b:09:72:f5:06:42:e7: 65:7c:3e:f2:a1:ca:91:3c:87:a6:2c:1a:bb:c9:5a: 07:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0D:FC:64:2D:A0:C7:90:8D:80:89:46:6F:EF:03:F7:7B:B6:65:8A X509v3 Authority Key Identifier: keyid:57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:4d:72:c5:77:9d:65:44:46:3c:2d:d6:1f:38:b4:f0:3b:5a: d1:26:d9:08:a7:28:a5:11:9d:65:d0:d2:3a:a1:08:06:d0:bd: f4:79:e9:36:81:cc:df:14:fa:50:84:07:c8:d6:d3:9b:52:ec: e1:a2:f9:ec:0f:cf:1e:06:6b:92:ee:74:dd:72:a0:a8:09:bc: cf:ee:5e:9e:74:ec:2b:e6:e1:ed:32:7f:df:f6:c4:d4:c1:ca: ab:1a:a4:e9:7f:06:2f:f9:38:90:05:df:ee:b2:32:bd:d6:a6: 05:13:c5:ea:11:40:21:c8:97:1f:cd:12:da:ba:06:df:27:85: 25:55:db:00:13:77:65:e6:9d:20:53:1c:7f:ce:ed:1d:bd:05: 75:33:72:e2:73:2a:c0:a5:e6:e6:5c:ef:a7:32:7f:58:c3:71: 46:98:04:d2:6b:4f:7c:38:6d:91:f9:d6:fe:15:5e:27:cf:ad: 27:b7:ef:5c:c1:54:93:39:80:38:4d:4f:31:33:c1:d7:7d:73: 5b:83:a0:fa:a8:13:ab:8c:e7:c6:3f:1a:d4:47:f7:94:df:ca: 66:d1:3a:98:c1:38:29:20:16:33:d3:b9:00:b6:ce:55:34:0a: a2:a8:44:2d:22:98:47:0b:f5:b9:cf:56:a9:48:73:61:8a:a5: 57:98:09:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDM0QxMTAvBgNVBAUTKDU3MjdFRUU4REEyRTJDQzc5RkFCQTBEQUQxOUM4ODQ4 MkJEMTU5REMwHhcNMjUwNTMxMDEwNDU4WhcNMjUwNjA3MDEwNDU4WjAYMRYwFAYD VQQDEw02ODNhNTViYS03MzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrwkXPRi8SSljqqCj63h1HZjlfKEmlMu8srkdarX/ls6LVGlxYhyr5VBpkgn N8dCcqx8Q9oYomxQ2nREnP0eQ0hSaux5g43tW5dPqoZjcRXkaaWFqDpGPy0gNwU7 eH1fCIPJa7SkpjdIUvsug7RnMZXVsJjWbQNFZPeGtEMNPPWtE8sNONefv7yJQPsD DIMomMvnnF3wXDQa/xM7qjfPGahwDN7CJmo0iwnqAVQtGPoxmZVZTBb3IdsUxcNT w11qzQLCTTgT8CBbz/h+aZKIeJBX3nwSKNbzhOhcQTgCLMPwW3YBQuJC4ysJcvUG QudlfD7yocqRPIemLBq7yVoHAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEN/GQt oMeQjYCJRm/vA/d7tmWKMB8GA1UdIwQYMBaAFFcn7ujaLizHn6ug2tGciEgr0Vnc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMzRC9GODAyOUE0NkE1 Q0MxMUVDQjc1RUM1MkRDNEY5QUUwMi9WeWZ1Nk5vdUxNZWZxNkRhMFp5SVNDdlJX ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z5ZnU2Tm91TE1lZnE2RGEwWnlJU0N2Uldkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMzRC9GODAyOUE0NkE1Q0MxMUVDQjc1RUM1MkRDNEY5QUUwMi9WeWZ1Nk5vdUxN ZWZxNkRhMFp5SVNDdlJXZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCTXLFd51lREY8LdYfOLTwO1rRJtkIpyilEZ1l0NI6oQgG0L30eek2 gczfFPpQhAfI1tObUuzhovnsD88eBmuS7nTdcqCoCbzP7l6edOwr5uHtMn/f9sTU wcqrGqTpfwYv+TiQBd/usjK91qYFE8XqEUAhyJcfzRLaugbfJ4UlVdsAE3dl5p0g Uxx/zu0dvQV1M3LicyrApebmXO+nMn9Yw3FGmATSa098OG2R+db+FV4nz60nt+9c wVSTOYA4TU8xM8HXfXNbg6D6qBOrjOfGPxrUR/eU38pm0TqYwTgpIBYz07kAts5V NAqiqEQtIphHC/W5z1apSHNhiqVXmAma -----END CERTIFICATE-----Generated at Sat May 31 16:28:38 2025 by rpki-client