$ rpki-client -vvf rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft File: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft (raw, json) Hash identifier: wYGU2V9KiIcThugp7ikFGY/j2L2jlKOFjZb4YVblUcw= Subject key identifier: 21:81:35:73:8B:EF:70:0C:AF:71:6C:02:5E:63:F7:E6:A3:A4:DD:E0 Authority key identifier: 56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE Certificate issuer: /CN=A91433B3/serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft Manifest number: 01A5 Signing time: Sat 31 May 2025 02:57:08 +0000 Manifest this update: Sat 31 May 2025 02:57:08 +0000 Manifest next update: Sat 07 Jun 2025 02:57:08 +0000 Files and hashes: 1: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl (hash: 5ZNv+g18Ly6xxEyG+PwPLZevgS93W9vvWcue9xSbgt4=) 2: AB6C302EB5F311EDA0148B2DC4F9AE02.roa (hash: 4FOvuF+lrbDRETyeVF9s3HBZnjQN5y+IfUmzH88TfmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91433B3, serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE Validity Not Before: May 31 02:57:08 2025 GMT Not After : Jun 7 02:57:08 2025 GMT Subject: CN=683a7004-ab2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2c:cf:77:2e:96:9b:97:69:a5:d3:42:65:be: 51:95:83:9e:2c:16:2d:72:4e:92:69:c6:49:e1:fa: a3:19:ba:ae:87:ba:e8:64:a9:2e:29:81:42:51:58: d5:fb:46:a4:e5:e7:f2:2d:da:3c:3f:91:3f:af:c8: dd:26:0d:80:e6:55:02:25:67:0e:c7:c8:7f:8f:ef: 2e:04:61:f8:42:f8:27:20:67:2b:89:d7:76:da:c4: d7:9c:de:bf:45:13:db:7f:54:47:f4:cc:06:69:56: e0:b2:67:9c:d7:21:59:96:12:a5:4e:4c:3e:4f:e6: 6c:6c:9e:8c:24:31:26:71:67:f8:26:f6:96:97:18: db:1a:14:b8:e2:c0:59:41:4e:28:f6:a0:6e:5b:56: 8c:86:54:47:ad:e2:dd:7a:10:cb:b0:b8:8b:cf:da: a3:26:70:3c:21:fe:cb:02:94:3f:36:ee:d2:60:33: 81:2e:7c:0b:13:fc:98:97:1b:6a:89:60:43:3a:ec: bf:9e:8f:78:f6:c4:7b:11:c8:f0:49:0f:2b:61:83: 91:76:83:25:23:da:a8:41:72:14:37:5d:ca:38:da: fa:6f:18:0a:c3:a2:57:eb:ab:18:a2:7b:2c:f1:d3: 8b:a2:d0:79:15:9b:f6:6c:29:e7:2a:30:dd:0d:41: 3c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:81:35:73:8B:EF:70:0C:AF:71:6C:02:5E:63:F7:E6:A3:A4:DD:E0 X509v3 Authority Key Identifier: keyid:56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:75:35:5a:19:91:31:dd:a2:92:99:79:af:02:cc:de:17:44: 90:22:32:d8:69:24:59:f9:6d:96:79:38:03:70:53:20:55:dd: 79:b4:18:5e:02:30:ae:97:88:3b:df:fe:ea:d7:c7:89:6d:ec: fe:9a:39:cd:1f:07:a8:53:9c:0c:c7:8c:dd:8b:2a:97:67:b4: cf:91:d0:15:ec:6a:ae:e8:72:4c:9e:04:1c:52:ef:c0:66:51: 49:52:3a:e2:96:43:71:ea:4b:7e:1d:6b:36:b0:eb:ee:d1:47: eb:1c:6b:f6:6d:af:ef:06:b3:41:73:c2:55:96:c5:61:9a:67: df:4c:20:ed:59:e3:07:16:f9:5a:12:23:22:a5:e1:76:4f:c8: 27:5b:11:e5:f1:a5:8e:83:ce:83:be:10:99:7e:d7:28:9b:57: 0f:d6:d3:d8:c7:d2:73:f1:74:8e:32:6b:c8:6a:df:49:3f:e3: 3e:9f:81:34:d2:8f:7a:bd:45:8e:b5:7c:36:20:f1:e3:f8:ec: 37:db:aa:84:03:d0:5d:25:6c:13:0c:6e:d4:90:71:c4:1b:9c: f0:f7:c3:24:17:c6:6e:ae:c4:47:a1:65:cc:90:96:10:cd:6b: b0:7a:cf:59:ae:8a:45:90:55:25:44:de:c6:24:da:fe:45:fc: 1b:ce:41:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzQjMxMTAvBgNVBAUTKDU2QkI2RjMxMzdEOEREOUVCOTdFMzgzQkM3RjQ2MUQ5 MEY4NURERkUwHhcNMjUwNTMxMDI1NzA4WhcNMjUwNjA3MDI1NzA4WjAYMRYwFAYD VQQDEw02ODNhNzAwNC1hYjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1izPdy6Wm5dppdNCZb5RlYOeLBYtck6SacZJ4fqjGbquh7roZKkuKYFCUVjV +0ak5efyLdo8P5E/r8jdJg2A5lUCJWcOx8h/j+8uBGH4QvgnIGcridd22sTXnN6/ RRPbf1RH9MwGaVbgsmec1yFZlhKlTkw+T+ZsbJ6MJDEmcWf4JvaWlxjbGhS44sBZ QU4o9qBuW1aMhlRHreLdehDLsLiLz9qjJnA8If7LApQ/Nu7SYDOBLnwLE/yYlxtq iWBDOuy/no949sR7EcjwSQ8rYYORdoMlI9qoQXIUN13KONr6bxgKw6JX66sYonss 8dOLotB5FZv2bCnnKjDdDUE8YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGBNXOL 73AMr3FsAl5j9+ajpN3gMB8GA1UdIwQYMBaAFFa7bzE32N2euX44O8f0YdkPhd3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzNCMy9CREZFMThDQ0I1 RjAxMUVEQTdEMEVGN0NDNEY5QUUwMi9WcnR2TVRmWTNaNjVmamc3eF9SaDJRLUYz ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZydHZNVGZZM1o2NWZqZzd4X1JoMlEtRjNmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzNCMy9CREZFMThDQ0I1RjAxMUVEQTdEMEVGN0NDNEY5QUUwMi9WcnR2TVRmWTNa NjVmamc3eF9SaDJRLUYzZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtdTVaGZEx3aKSmXmvAszeF0SQIjLYaSRZ+W2WeTgDcFMgVd15tBhe AjCul4g73/7q18eJbez+mjnNHweoU5wMx4zdiyqXZ7TPkdAV7Gqu6HJMngQcUu/A ZlFJUjrilkNx6kt+HWs2sOvu0UfrHGv2ba/vBrNBc8JVlsVhmmffTCDtWeMHFvla EiMipeF2T8gnWxHl8aWOg86DvhCZftcom1cP1tPYx9Jz8XSOMmvIat9JP+M+n4E0 0o96vUWOtXw2IPHj+Ow326qEA9BdJWwTDG7UkHHEG5zw98MkF8ZursRHoWXMkJYQ zWuwes9ZropFkFUlRN7GJNr+RfwbzkEH -----END CERTIFICATE-----Generated at Sat May 31 16:38:57 2025 by rpki-client