$ rpki-client -vvf rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft File: vIlHKy_1NJ5Maoqwmc745o3XuZU.mft (raw, json) Hash identifier: HQBx3nY48C+Puva2b28KoXsAjt+WfQRZJVZPNA/Lj+A= Subject key identifier: 17:70:16:D8:69:09:20:77:1D:BE:C7:79:FC:6B:C5:FD:C3:A2:28:B8 Authority key identifier: BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 Certificate issuer: /CN=A91495CF/serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Certificate serial: 07E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft Manifest number: 07E0 Signing time: Fri 30 May 2025 21:14:15 +0000 Manifest this update: Fri 30 May 2025 21:14:14 +0000 Manifest next update: Fri 06 Jun 2025 21:14:14 +0000 Files and hashes: 1: vIlHKy_1NJ5Maoqwmc745o3XuZU.crl (hash: jYrQ83kr7a1Y/nwjGT4sgizN7tJSbKYyyCKXwcaOAKo=) 2: 27DCF5D6EBAC11EAA7A0FB1FC4F9AE02.roa (hash: 4fzem4ahEMq6xHsoRwyaVn0YkdRGg0st3UIcj7ppJ2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2021 (0x7e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91495CF, serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Validity Not Before: May 30 21:14:14 2025 GMT Not After : Jun 6 21:14:14 2025 GMT Subject: CN=683a1fa7-4192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:99:61:cb:b3:4a:6c:34:d2:c1:68:fb:cb:77: e4:19:17:28:2f:6b:d4:f0:82:aa:56:f6:89:37:e3: bd:d0:a4:8f:0d:b2:e5:8e:d3:d9:a1:d3:83:39:a1: 26:f9:71:f9:9b:6a:42:95:de:1c:db:72:6a:b9:a2: 02:dd:3d:62:9f:88:af:02:20:be:ed:5f:42:48:fa: e3:d5:b0:35:69:07:ab:58:e8:f4:b1:0a:10:a2:46: cf:93:b7:63:12:0c:13:95:66:c7:d5:64:4f:e1:dc: 05:ab:a7:56:4f:16:ee:56:02:cc:af:91:99:91:3c: f2:d0:9b:13:af:3e:04:3f:ad:d6:2c:2b:22:21:6f: cc:df:ee:47:27:3e:fc:b1:5a:33:e5:c9:89:69:a4: 19:2d:55:b2:06:02:88:1d:4d:78:3c:0a:fa:e6:26: 4e:6d:26:da:5c:12:b3:bc:99:a6:91:53:6f:1b:60: a1:1a:0e:4c:34:a0:bc:fb:9a:5b:55:50:a2:3c:c5: 49:4b:43:fc:de:fc:bd:90:43:7b:d3:39:ae:a3:e0: 0d:18:af:64:6e:ed:80:56:54:27:33:53:11:5b:07: ae:e6:37:aa:df:41:0b:21:bc:0f:95:cd:71:0e:2e: c7:8c:b1:ee:ea:54:61:40:10:1a:c8:66:6b:4d:df: 98:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:70:16:D8:69:09:20:77:1D:BE:C7:79:FC:6B:C5:FD:C3:A2:28:B8 X509v3 Authority Key Identifier: keyid:BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:a4:f3:cb:68:b9:64:ce:a1:19:66:63:42:f0:99:d1:08:52: 26:80:2b:b5:72:e0:f7:7a:74:3a:f5:db:6e:f4:ee:2f:95:cc: 90:95:92:88:1a:9c:c5:c5:db:8b:02:f3:31:69:e4:55:48:7c: 7b:63:6a:20:83:f1:97:d8:8c:f5:53:a9:d9:86:e2:37:f5:37: 5d:59:75:09:3e:3b:aa:7f:e5:72:d2:94:dd:70:ad:98:93:09: 85:5f:fd:d9:57:42:a4:25:e6:8c:f3:fc:ed:83:32:33:6c:66: a6:85:31:8d:ad:a8:df:83:c4:b5:32:98:6d:cf:dd:3d:d4:a4: 6e:d3:a3:9b:d0:dc:29:61:2b:43:e3:31:b4:d1:da:0f:ea:ad: 06:63:e4:fa:08:73:30:4c:4b:2a:75:73:48:cb:a5:50:42:ad: be:6e:87:f9:d3:7d:d6:c1:5e:aa:e9:8a:97:82:12:ce:3e:8d: 68:c1:67:9a:e1:fb:c3:df:56:7f:e3:70:57:a1:da:e5:d7:1a: 4d:a8:d3:dc:69:32:cf:78:83:a2:06:f7:90:30:a1:5d:dc:be: 8f:a2:d0:95:ca:d1:ef:14:34:cf:22:c6:16:90:b4:81:da:eb: c1:c2:5d:b0:b6:78:9a:11:b0:e6:85:40:18:de:b1:02:83:80: 4b:87:a6:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk1Q0YxMTAvBgNVBAUTKEJDODk0NzJCMkZGNTM0OUU0QzZBOEFCMDk5Q0VGOEU2 OEREN0I5OTUwHhcNMjUwNTMwMjExNDE0WhcNMjUwNjA2MjExNDE0WjAYMRYwFAYD VQQDEw02ODNhMWZhNy00MTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlZlhy7NKbDTSwWj7y3fkGRcoL2vU8IKqVvaJN+O90KSPDbLljtPZodODOaEm +XH5m2pCld4c23JquaIC3T1in4ivAiC+7V9CSPrj1bA1aQerWOj0sQoQokbPk7dj EgwTlWbH1WRP4dwFq6dWTxbuVgLMr5GZkTzy0JsTrz4EP63WLCsiIW/M3+5HJz78 sVoz5cmJaaQZLVWyBgKIHU14PAr65iZObSbaXBKzvJmmkVNvG2ChGg5MNKC8+5pb VVCiPMVJS0P83vy9kEN70zmuo+ANGK9kbu2AVlQnM1MRWweu5jeq30ELIbwPlc1x Di7HjLHu6lRhQBAayGZrTd+Y8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdwFthp CSB3Hb7Hefxrxf3Doii4MB8GA1UdIwQYMBaAFLyJRysv9TSeTGqKsJnO+OaN17mV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTVDRi8yQTUxMDY5Q0VC QUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5KNU1hb3F3bWM3NDVvM1h1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJbEhLeV8xTko1TWFvcXdtYzc0NW8zWHVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTVDRi8yQTUxMDY5Q0VCQUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5K NU1hb3F3bWM3NDVvM1h1WlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4pPPLaLlkzqEZZmNC8JnRCFImgCu1cuD3enQ69dtu9O4vlcyQlZKI GpzFxduLAvMxaeRVSHx7Y2ogg/GX2Iz1U6nZhuI39TddWXUJPjuqf+Vy0pTdcK2Y kwmFX/3ZV0KkJeaM8/ztgzIzbGamhTGNrajfg8S1Mphtz9091KRu06Ob0NwpYStD 4zG00doP6q0GY+T6CHMwTEsqdXNIy6VQQq2+bof5033WwV6q6YqXghLOPo1owWea 4fvD31Z/43BXodrl1xpNqNPcaTLPeIOiBveQMKFd3L6PotCVytHvFDTPIsYWkLSB 2uvBwl2wtniaEbDmhUAY3rECg4BLh6Zk -----END CERTIFICATE-----Generated at Sat May 31 16:57:53 2025 by rpki-client