$ rpki-client -vvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft File: vbWSaolrtlGg51QKOYzV7wcUFx8.mft (raw, json) Hash identifier: QDL6QyRFWjpqSc9hcR1nQpxozKcfrAY96x4yKOpx1mQ= Subject key identifier: 19:4F:85:13:0F:DF:E2:78:3D:CE:60:CB:9D:BA:79:BB:02:F1:E5:87 Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F Certificate issuer: /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Certificate serial: 0420 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft Manifest number: 041C Signing time: Sat 31 May 2025 00:35:43 +0000 Manifest this update: Sat 31 May 2025 00:35:43 +0000 Manifest next update: Sat 07 Jun 2025 00:35:43 +0000 Files and hashes: 1: vbWSaolrtlGg51QKOYzV7wcUFx8.crl (hash: 1S0IkEp8s+mGvVYy+UP3qML6wr6iv3qT+ZWzpPVxCRE=) 2: 66864FCE688011ECAA829E31C4F9AE02.roa (hash: w5bL3BxYC2VJUK/MoXPR18n/PN4tqZHifWiPk20fkzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1056 (0x420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A5CD, serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Validity Not Before: May 31 00:35:43 2025 GMT Not After : Jun 7 00:35:43 2025 GMT Subject: CN=683a4edf-9862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0b:e8:8e:67:18:1b:bf:74:db:9c:88:ff:d7: d7:fd:45:56:be:b9:c3:f1:01:22:4c:82:5e:80:6c: 67:ad:56:be:74:c9:8c:c0:2c:90:b6:3b:ae:3f:ce: 9a:fb:af:59:40:67:af:76:75:90:03:9a:f4:94:c0: 31:8a:5a:3c:f1:84:3b:40:ef:23:f6:9a:a5:88:c1: 2d:82:8a:eb:7f:d8:cd:c6:9b:c5:25:90:66:38:21: b0:f6:a1:12:61:2e:00:d0:48:a2:37:33:1e:b9:92: fe:fe:71:ca:0f:13:0e:d9:eb:60:cd:99:4e:47:b8: 76:c2:f3:eb:f0:82:4b:83:43:b2:6f:99:39:4d:4f: e2:b6:4c:a4:84:12:67:88:1c:45:7d:65:2d:f9:71: b6:f8:e3:e6:e7:e6:7d:9d:40:91:6d:5b:37:a9:9d: 09:58:bd:48:bb:0f:47:48:67:9f:0a:09:a3:fc:cd: d0:b3:0d:22:3f:1e:c6:8f:0b:62:db:06:8a:83:39: fb:4a:66:a4:46:ab:64:02:14:e8:35:64:cb:fa:ef: ed:30:17:44:fa:7b:82:de:7c:99:07:61:f9:1a:49: 2f:e5:06:76:1c:a1:dc:71:6f:90:33:03:23:cb:36: fd:6a:d9:9d:79:c2:af:31:2a:76:6a:0a:8a:c7:41: f8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4F:85:13:0F:DF:E2:78:3D:CE:60:CB:9D:BA:79:BB:02:F1:E5:87 X509v3 Authority Key Identifier: keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:5b:7e:d7:42:85:be:c6:bd:5a:56:f1:7c:68:16:fe:e5:46: f0:cf:25:37:65:05:b7:41:bf:87:4f:e9:6a:b4:37:ee:e6:55: 97:81:39:88:b4:d9:79:84:31:63:b1:fd:27:d7:e3:75:e6:78: 4e:6c:2a:99:58:6b:59:12:7c:48:79:ef:b5:4b:f7:28:2f:4e: f6:aa:f0:c0:29:45:9c:ae:ed:ef:2c:b1:81:45:e7:89:35:86: 7f:7e:46:71:2a:0d:df:ec:59:a4:0c:7f:4f:f9:48:02:c5:47: 21:c4:a5:f8:80:e0:94:cb:64:d0:8f:18:d1:92:bd:f8:57:88: 85:48:62:e6:83:fc:cc:f5:bc:44:69:89:5e:a2:bd:bb:b8:6f: f1:a0:e6:16:2c:56:bd:59:ca:41:e4:ca:3e:bc:fa:4c:b8:c8: 41:93:01:0d:90:d1:7e:31:f5:55:1d:f3:fb:ec:b2:f9:25:bc: 75:dd:20:52:33:f7:3b:8e:92:ff:c6:19:9d:92:07:f7:74:c5: b8:b4:61:3c:a9:51:0f:c7:76:13:ce:d2:7e:97:7f:d5:60:ac: ad:50:ae:94:cc:4c:b5:d6:17:f5:3a:45:1a:9e:cf:98:2e:bf: b9:79:1e:f9:0d:be:3e:2c:fe:ba:1d:d8:11:41:6e:e6:87:6d: a7:99:fb:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1Q0QxMTAvBgNVBAUTKEJEQjU5MjZBODk2QkI2NTFBMEU3NTQwQTM5OENENUVG MDcxNDE3MUYwHhcNMjUwNTMxMDAzNTQzWhcNMjUwNjA3MDAzNTQzWjAYMRYwFAYD VQQDEw02ODNhNGVkZi05ODYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswvojmcYG79025yI/9fX/UVWvrnD8QEiTIJegGxnrVa+dMmMwCyQtjuuP86a +69ZQGevdnWQA5r0lMAxilo88YQ7QO8j9pqliMEtgorrf9jNxpvFJZBmOCGw9qES YS4A0EiiNzMeuZL+/nHKDxMO2etgzZlOR7h2wvPr8IJLg0Oyb5k5TU/itkykhBJn iBxFfWUt+XG2+OPm5+Z9nUCRbVs3qZ0JWL1Iuw9HSGefCgmj/M3Qsw0iPx7Gjwti 2waKgzn7SmakRqtkAhToNWTL+u/tMBdE+nuC3nyZB2H5Gkkv5QZ2HKHccW+QMwMj yzb9atmdecKvMSp2agqKx0H48wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlPhRMP 3+J4Pc5gy526ebsC8eWHMB8GA1UdIwQYMBaAFL21kmqJa7ZRoOdUCjmM1e8HFBcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTVDRC8yOTQzNkZDRTY4 N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRsR2c1MVFLT1l6Vjd3Y1VG eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZiV1Nhb2xydGxHZzUxUUtPWXpWN3djVUZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTVDRC8yOTQzNkZDRTY4N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRs R2c1MVFLT1l6Vjd3Y1VGeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCW37XQoW+xr1aVvF8aBb+5UbwzyU3ZQW3Qb+HT+lqtDfu5lWXgTmI tNl5hDFjsf0n1+N15nhObCqZWGtZEnxIee+1S/coL072qvDAKUWcru3vLLGBReeJ NYZ/fkZxKg3f7FmkDH9P+UgCxUchxKX4gOCUy2TQjxjRkr34V4iFSGLmg/zM9bxE aYleor27uG/xoOYWLFa9WcpB5Mo+vPpMuMhBkwENkNF+MfVVHfP77LL5Jbx13SBS M/c7jpL/xhmdkgf3dMW4tGE8qVEPx3YTztJ+l3/VYKytUK6UzEy11hf1OkUans+Y Lr+5eR75Db4+LP66HdgRQW7mh22nmfuQ -----END CERTIFICATE-----Generated at Sat May 31 16:35:52 2025 by rpki-client