$ rpki-client -vvf rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft File: VB4KZv5g86rAJQLO8eSOYnpi90E.mft (raw, json) Hash identifier: 7jq1y3ZPRW6t9wzv/DPzhL12tnvkWLSn1S4uH4Uf0qo= Subject key identifier: B3:20:1C:30:8C:54:0F:35:EB:BE:29:11:9D:A4:FC:DB:A6:81:12:AB Authority key identifier: 54:1E:0A:66:FE:60:F3:AA:C0:25:02:CE:F1:E4:8E:62:7A:62:F7:41 Certificate issuer: /CN=A91288D9/serialNumber=541E0A66FE60F3AAC02502CEF1E48E627A62F741 Certificate serial: 0B0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft Manifest number: 0B04 Signing time: Fri 30 May 2025 19:29:50 +0000 Manifest this update: Fri 30 May 2025 19:29:50 +0000 Manifest next update: Fri 06 Jun 2025 19:29:50 +0000 Files and hashes: 1: VB4KZv5g86rAJQLO8eSOYnpi90E.crl (hash: JKEMNBaSahh5ahguNYaTSXTElLl0u4+PRX+VUlfFRL0=) 2: E0FCE614425811EAADEA3B45C4F9AE02.roa (hash: uo0CqqDq1LW4OE16oHJh3v7l3D+UDenz/raY8uxIHFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.crl rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2827 (0xb0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91288D9, serialNumber=541E0A66FE60F3AAC02502CEF1E48E627A62F741 Validity Not Before: May 30 19:29:50 2025 GMT Not After : Jun 6 19:29:50 2025 GMT Subject: CN=683a072e-dcff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b4:f6:90:46:ac:d0:f6:48:1b:1b:09:5e:41: 95:8f:c3:d7:59:69:e8:09:d8:26:fd:80:90:c9:54: 6e:10:c5:7c:3a:5b:18:d2:4b:fc:93:8f:9b:f0:37: 31:c5:93:91:94:6d:c8:cc:9c:4a:76:2a:83:1f:65: a7:c3:0c:79:a0:99:43:60:aa:c9:02:0a:2b:1b:ac: bf:e4:1e:f7:ca:4c:41:dc:ec:9b:b8:07:c9:92:32: 4d:ac:7a:ca:e9:cb:41:cf:17:e0:33:59:7b:a7:df: 2c:80:91:20:f0:70:65:c8:62:ae:6b:ec:52:24:e4: 42:74:a7:d0:75:50:95:56:d6:e7:a0:fb:06:41:a8: 7c:98:b8:52:60:99:15:9f:44:c4:c4:14:47:03:99: 1d:a8:b8:f4:d5:3d:61:da:99:59:77:93:0a:52:90: 37:a7:ba:5a:4a:c6:e0:41:3f:38:ec:90:b2:c9:fd: 66:2a:b5:f3:4d:0f:1e:80:16:85:ea:31:ba:1e:7f: 29:a0:c5:5d:84:e3:2a:53:48:a6:b7:42:47:4c:b2: 95:83:8b:02:2e:dc:08:1c:88:2d:9a:8c:19:5e:f5: b7:7b:46:5d:bc:ab:b0:b7:5a:6e:ce:4e:56:a9:6b: e4:b8:c5:38:95:3e:02:a1:27:0b:07:14:06:57:92: a7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:20:1C:30:8C:54:0F:35:EB:BE:29:11:9D:A4:FC:DB:A6:81:12:AB X509v3 Authority Key Identifier: keyid:54:1E:0A:66:FE:60:F3:AA:C0:25:02:CE:F1:E4:8E:62:7A:62:F7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:cb:a4:b3:4e:71:99:06:59:40:92:69:2a:8f:99:31:cc:2b: dd:ad:05:4f:ef:68:fd:8f:76:27:ae:a1:b7:ee:d0:bb:8b:8f: dc:03:2f:5f:f0:3c:1e:4e:da:b7:9e:42:b7:a1:fc:56:6d:6e: 0c:d1:c0:cc:5f:5d:62:59:2c:c9:2b:3e:f1:65:1a:aa:a9:2a: 16:5c:38:32:3a:bc:a8:4d:ba:97:d6:7f:4a:e2:2b:de:72:d5: 42:15:c2:51:b9:a2:64:10:80:4c:9a:1e:12:97:fb:be:5e:48: d7:e5:8b:64:ac:05:b6:83:83:85:57:62:73:b1:af:f1:3b:4c: fa:6e:65:6e:f7:52:7a:f4:88:20:e9:f5:76:e2:b2:52:89:68: 46:5b:44:c6:86:ae:6a:39:a2:8c:05:1b:e6:39:0c:21:56:3c: ce:02:3d:24:d8:2c:97:b1:ef:7d:d6:fc:13:24:b9:d6:c9:52: 8c:99:a5:aa:2e:56:bb:70:0d:d4:c0:61:d7:2b:45:46:88:53: d1:58:88:29:d1:8e:06:06:85:cc:d5:15:9c:d0:89:99:33:0d: 1c:0b:17:4e:22:e2:09:c4:b2:39:2e:72:20:a3:92:3b:f3:34: 4a:a1:4d:1c:63:93:8d:4c:99:66:16:90:c5:dc:28:c2:dc:d1: a3:b2:24:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4RDkxMTAvBgNVBAUTKDU0MUUwQTY2RkU2MEYzQUFDMDI1MDJDRUYxRTQ4RTYy N0E2MkY3NDEwHhcNMjUwNTMwMTkyOTUwWhcNMjUwNjA2MTkyOTUwWjAYMRYwFAYD VQQDEw02ODNhMDcyZS1kY2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bT2kEas0PZIGxsJXkGVj8PXWWnoCdgm/YCQyVRuEMV8OlsY0kv8k4+b8Dcx xZORlG3IzJxKdiqDH2Wnwwx5oJlDYKrJAgorG6y/5B73ykxB3OybuAfJkjJNrHrK 6ctBzxfgM1l7p98sgJEg8HBlyGKua+xSJORCdKfQdVCVVtbnoPsGQah8mLhSYJkV n0TExBRHA5kdqLj01T1h2plZd5MKUpA3p7paSsbgQT847JCyyf1mKrXzTQ8egBaF 6jG6Hn8poMVdhOMqU0imt0JHTLKVg4sCLtwIHIgtmowZXvW3e0ZdvKuwt1puzk5W qWvkuMU4lT4CoScLBxQGV5KnUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMgHDCM VA81674pEZ2k/NumgRKrMB8GA1UdIwQYMBaAFFQeCmb+YPOqwCUCzvHkjmJ6YvdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODhEOS9CQTU5NTM1RTQy NTcxMUVBOEY4MzhBNDNDNEY5QUUwMi9WQjRLWnY1Zzg2ckFKUUxPOGVTT1lucGk5 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZCNEtadjVnODZyQUpRTE84ZVNPWW5waTkwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODhEOS9CQTU5NTM1RTQyNTcxMUVBOEY4MzhBNDNDNEY5QUUwMi9WQjRLWnY1Zzg2 ckFKUUxPOGVTT1lucGk5MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCty6SzTnGZBllAkmkqj5kxzCvdrQVP72j9j3YnrqG37tC7i4/cAy9f 8DweTtq3nkK3ofxWbW4M0cDMX11iWSzJKz7xZRqqqSoWXDgyOryoTbqX1n9K4ive ctVCFcJRuaJkEIBMmh4Sl/u+XkjX5YtkrAW2g4OFV2Jzsa/xO0z6bmVu91J69Igg 6fV24rJSiWhGW0TGhq5qOaKMBRvmOQwhVjzOAj0k2CyXse991vwTJLnWyVKMmaWq Lla7cA3UwGHXK0VGiFPRWIgp0Y4GBoXM1RWc0ImZMw0cCxdOIuIJxLI5LnIgo5I7 8zRKoU0cY5ONTJlmFpDF3CjC3NGjsiSp -----END CERTIFICATE-----Generated at Sat May 31 17:06:30 2025 by rpki-client