$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft File: VCuU2GJc9xGWT9E3QSldJ616kAQ.mft (raw, json) Hash identifier: UME7fT2ffrLY+k1yb0PGPTWFZEmNtSSISsXqi4O21cs= Subject key identifier: 79:A3:45:E6:62:92:DC:AB:CF:30:D9:8E:6A:7D:98:97:E2:0E:EF:54 Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 Certificate issuer: /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft Manifest number: 01CD Signing time: Sat 31 May 2025 03:51:07 +0000 Manifest this update: Sat 31 May 2025 03:51:06 +0000 Manifest next update: Sat 07 Jun 2025 03:51:06 +0000 Files and hashes: 1: VCuU2GJc9xGWT9E3QSldJ616kAQ.crl (hash: sF/SztnTrL+6ajWH9kSwqSy0NzQaK6bV9D+mQORdAqI=) 2: 3352C1BAECFC11EFA398671BC4F9AE02.roa (hash: Im9wfZuP6zDy1h0Hl9Jq0NXIaM8u/vuOASHLbchH8jE=) 3: 020607A2498711EFBB260663C4F9AE02.roa (hash: T6rwUDI540K7kNvAic9olkLe7ckJW9yi5Gt2J/Ejnw0=) 4: 05F505961AA311F0A475D464C4F9AE02.roa (hash: DJ6ceD+nzuCFrSpyZtlueLHrerXM29TFRnLIJO8v0Cs=) 5: D13FCAEAA62E11EFBC284C42C4F9AE02.roa (hash: U+eg0O88ONLYXPgk26s0IQpz+0WlVbCzu2Ev7c51XEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Validity Not Before: May 31 03:51:06 2025 GMT Not After : Jun 7 03:51:06 2025 GMT Subject: CN=683a7cab-205e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a8:b7:a6:55:7d:bb:41:95:ed:d8:11:d3:92: 65:b6:5f:9e:3b:31:a4:d6:ff:f0:ae:a5:c8:05:ca: 64:9c:85:5a:e0:31:a4:61:fb:9e:2a:9d:28:f7:a7: 56:d2:d5:5a:06:b7:c9:ef:35:69:9b:bb:ac:d5:f4: e2:b3:5c:a9:82:9f:cc:6c:77:79:b6:6b:9c:7a:42: d5:99:bf:6c:79:93:f3:3f:eb:41:f6:a7:d8:3b:59: 20:ad:70:b5:02:f7:ab:39:6e:03:82:05:cc:87:47: 02:51:45:03:36:c5:3e:af:77:67:8f:5b:45:4c:30: f9:6a:74:e5:cb:a9:c1:18:7f:fb:ae:53:d0:99:5a: 68:e0:e9:8a:eb:d3:e9:48:16:06:5a:0b:8e:9d:c9: c0:e7:31:79:c1:9d:0c:38:a5:8e:20:9f:e1:28:1c: fb:62:37:bc:0d:5f:a1:bc:ca:9d:fa:0e:af:8f:f9: 8e:b7:e8:5b:2d:cc:db:4c:e5:a9:1b:08:ee:31:7c: 5c:ad:91:c5:18:4c:50:2d:ee:09:0e:03:13:19:b1: 8b:2d:97:71:cc:71:07:0b:9b:37:45:26:fa:57:32: a9:aa:a8:6d:73:99:d9:10:80:97:90:fb:c9:e9:a2: a4:b2:8b:5e:7c:f3:ec:61:c1:13:8e:1e:da:91:65: f8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A3:45:E6:62:92:DC:AB:CF:30:D9:8E:6A:7D:98:97:E2:0E:EF:54 X509v3 Authority Key Identifier: keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:69:ce:61:c6:74:24:4c:f0:b0:34:3e:f0:61:10:1d:43:29: a4:bb:21:41:b1:35:88:08:cf:5b:42:44:1a:32:16:44:5d:d3: f7:7f:98:2f:18:04:39:ee:cf:31:f4:a8:78:64:13:8a:8e:cd: 0a:ac:38:95:52:3c:35:4e:06:18:6f:ae:cf:79:00:ed:0a:e6: 4b:3a:87:c7:71:25:99:77:ca:37:fd:df:b5:de:35:48:e6:ce: a4:b5:03:1d:2e:58:d1:c9:e7:5b:19:96:f2:f0:44:4e:05:c0: bb:f7:6c:08:76:1a:c5:1d:8b:50:df:28:d6:6f:94:22:bb:bc: 01:45:ca:12:ed:51:82:0b:c6:e7:c2:b6:4f:77:7c:70:5a:df: ac:9e:de:fe:14:a9:bb:1c:02:4d:44:2e:e0:c5:40:6b:e8:18: f3:88:c9:6e:77:9d:95:d6:f1:8d:3c:38:28:dc:57:84:75:ed: f3:ef:21:eb:bc:f9:a0:52:8a:44:34:da:4a:2c:57:76:36:79: 52:f3:63:aa:41:5d:59:f3:72:71:cb:61:ef:50:b2:aa:ab:23: 75:c3:9f:61:f6:71:25:22:90:6e:b9:03:84:8e:03:e6:ce:0a: 09:03:cd:3a:8d:d9:06:cd:ee:bd:18:42:eb:46:5c:9e:0f:4e: eb:a2:c1:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDU0MkI5NEQ4NjI1Q0Y3MTE5NjRGRDEzNzQxMjk1RDI3 QUQ3QTkwMDQwHhcNMjUwNTMxMDM1MTA2WhcNMjUwNjA3MDM1MTA2WjAYMRYwFAYD VQQDEw02ODNhN2NhYi0yMDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKi3plV9u0GV7dgR05Jltl+eOzGk1v/wrqXIBcpknIVa4DGkYfueKp0o96dW 0tVaBrfJ7zVpm7us1fTis1ypgp/MbHd5tmucekLVmb9seZPzP+tB9qfYO1kgrXC1 AverOW4DggXMh0cCUUUDNsU+r3dnj1tFTDD5anTly6nBGH/7rlPQmVpo4OmK69Pp SBYGWguOncnA5zF5wZ0MOKWOIJ/hKBz7Yje8DV+hvMqd+g6vj/mOt+hbLczbTOWp GwjuMXxcrZHFGExQLe4JDgMTGbGLLZdxzHEHC5s3RSb6VzKpqqhtc5nZEICXkPvJ 6aKksotefPPsYcETjh7akWX4swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmjReZi ktyrzzDZjmp9mJfiDu9UMB8GA1UdIwQYMBaAFFQrlNhiXPcRlk/RN0EpXSetepAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC8xNjFENEMwQUU0 Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4R1dUOUUzUVNsZEo2MTZr QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDdVUyR0pjOXhHV1Q5RTNRU2xkSjYxNmtBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC8xNjFENEMwQUU0Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4 R1dUOUUzUVNsZEo2MTZrQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHac5hxnQkTPCwND7wYRAdQymkuyFBsTWICM9bQkQaMhZEXdP3f5gv GAQ57s8x9Kh4ZBOKjs0KrDiVUjw1TgYYb67PeQDtCuZLOofHcSWZd8o3/d+13jVI 5s6ktQMdLljRyedbGZby8EROBcC792wIdhrFHYtQ3yjWb5Qiu7wBRcoS7VGCC8bn wrZPd3xwWt+snt7+FKm7HAJNRC7gxUBr6BjziMlud52V1vGNPDgo3FeEde3z7yHr vPmgUopENNpKLFd2NnlS82OqQV1Z83Jxy2HvULKqqyN1w59h9nElIpBuuQOEjgPm zgoJA806jdkGze69GELrRlyeD07rosHa -----END CERTIFICATE-----Generated at Sat May 31 17:08:59 2025 by rpki-client