$ rpki-client -vvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft File: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft (raw, json) Hash identifier: 1Vt0x2RfeCGUHQD5HyadmgTifbCHi7SjfKBL02LINRo= Subject key identifier: 9D:8F:B5:05:14:4F:96:2C:B2:2F:5B:BE:CD:55:84:72:81:39:0E:81 Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 Certificate issuer: /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft Manifest number: 33 Signing time: Thu 05 Jun 2025 07:03:11 +0000 Manifest this update: Thu 05 Jun 2025 07:03:11 +0000 Manifest next update: Thu 12 Jun 2025 07:03:11 +0000 Files and hashes: 1: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl (hash: 5zHJFzdwczFWqDzaE3GblBhJBmOk3FCjGtZvPLpbULY=) 2: 3FCB43D2FB2911EF8A116D76C4F9AE02.roa (hash: CFjfwtbnARFkiBTSkHxcw566lVz+R0FjE0lSqqgVvOk=) 3: 563F3D581F3C11F09F3C7F40C4F9AE02.roa (hash: YKwfhn84elYu/Y8KsthWeHLfxYMDii6IqoqFACcb2JY=) 4: 362EF79CFB2911EF8C103876C4F9AE02.roa (hash: Ar+onOWOPH7xuawAkKNR4USGgISAZHmjzcJHYy39Fms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 07:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99 Validity Not Before: Jun 5 07:03:11 2025 GMT Not After : Jun 12 07:03:11 2025 GMT Subject: CN=6841412f-740d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:58:72:5c:d2:dc:e5:a2:44:5d:aa:c7:4a:df: 6c:9a:52:a6:f3:27:ed:ba:4f:88:c2:b4:a9:69:2e: 51:f3:13:d9:f1:f3:d9:de:48:02:91:3c:c3:b3:5f: 91:10:69:7b:77:a4:a7:6f:b8:74:de:32:7b:5e:e8: 2e:ea:72:d9:eb:2e:3a:50:77:a8:f0:11:b3:fb:7b: 3e:85:03:4b:d1:a3:51:55:80:1a:df:5f:6f:ba:d2: a6:96:09:a1:ca:bd:50:00:d1:b0:19:00:59:6c:61: 50:0f:8e:9d:0d:7e:77:d8:11:e2:d6:7a:56:59:e8: b1:b5:49:fd:37:49:2e:c5:bd:bf:0b:e4:1a:c8:97: 9e:5f:58:85:95:2c:11:68:94:9b:8b:b8:bd:f5:f5: e6:d9:ec:c0:73:28:72:11:c8:6e:22:19:cb:e5:43: 73:5f:0e:a1:c2:ea:b5:64:ec:dd:74:eb:eb:d0:a3: 2e:73:f8:06:5f:1f:5e:18:3e:b1:58:30:ba:e6:2b: 64:7c:05:b9:ae:18:93:e7:6a:03:d5:27:9e:6b:73: b4:43:d4:98:93:11:63:30:3f:f4:ee:f8:d4:d9:c1: 39:af:44:54:97:dd:5d:9f:35:cc:a5:80:bf:ec:49: bf:2d:04:e9:5e:86:d2:75:51:64:bf:cd:59:72:d3: 85:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8F:B5:05:14:4F:96:2C:B2:2F:5B:BE:CD:55:84:72:81:39:0E:81 X509v3 Authority Key Identifier: keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:8f:c7:14:d4:8e:8a:ed:bd:f6:0e:e7:d9:3b:31:ac:1f:ff: 72:d7:e5:a8:b2:88:36:d7:f4:75:47:bd:15:fe:a5:c1:3f:84: a6:fa:b3:6f:ca:bb:03:06:7c:59:da:ea:45:69:13:74:df:93: 2d:2b:5e:12:14:41:a1:b4:31:eb:5d:8b:02:25:62:74:ab:52: 4b:06:10:bb:13:1a:fe:e7:9b:7b:37:1c:07:bc:57:f9:f4:3a: 06:e5:74:2f:e2:34:0f:04:56:75:21:09:f2:e0:dc:78:49:8c: 17:89:11:da:15:b0:fb:b5:9d:3e:83:bf:ba:82:87:67:1e:56: 01:50:49:82:28:2e:89:b7:5d:ef:3f:af:a7:36:87:e0:75:eb: 68:d0:af:0e:50:47:e4:1e:c7:8f:e8:f9:19:fd:e3:11:54:26: be:c6:01:b7:d8:83:02:2d:c1:2f:9e:6c:95:66:01:0e:a3:dd: 42:26:5d:50:02:84:3f:c6:da:b1:fb:02:7b:9c:fc:ca:7a:97: e2:e6:53:59:1c:d6:03:d9:70:09:92:07:32:a3:ea:38:0a:63: 9a:20:b2:4f:9f:43:3a:b0:56:82:b8:9e:cf:c4:85:8c:15:84: 4a:3a:cd:d7:57:15:27:d2:8c:22:25:37:da:ca:bb:9b:a7:db: ca:60:63:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RjAyNjExMC8GA1UEBRMoQkQ3OUFDNzY0MEM5NTVDNDM1QzhDRjU1QzI5MUYxMjJC NzBFMkY5OTAeFw0yNTA2MDUwNzAzMTFaFw0yNTA2MTIwNzAzMTFaMBgxFjAUBgNV BAMTDTY4NDE0MTJmLTc0MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSWHJc0tzlokRdqsdK32yaUqbzJ+26T4jCtKlpLlHzE9nx89neSAKRPMOzX5EQ aXt3pKdvuHTeMnte6C7qctnrLjpQd6jwEbP7ez6FA0vRo1FVgBrfX2+60qaWCaHK vVAA0bAZAFlsYVAPjp0NfnfYEeLWelZZ6LG1Sf03SS7Fvb8L5BrIl55fWIWVLBFo lJuLuL319ebZ7MBzKHIRyG4iGcvlQ3NfDqHC6rVk7N106+vQoy5z+AZfH14YPrFY MLrmK2R8BbmuGJPnagPVJ55rc7RD1JiTEWMwP/Tu+NTZwTmvRFSX3V2fNcylgL/s Sb8tBOlehtJ1UWS/zVly04VPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnY+1BRRP liyyL1u+zVWEcoE5DoEwHwYDVR0jBBgwFoAUvXmsdkDJVcQ1yM9VwpHxIrcOL5kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGMDI2LzNCQUFBQzQ0RkIy ODExRUY5NTlGQzc3NEM0RjlBRTAyL3ZYbXNka0RKVmNRMXlNOVZ3cEh4SXJjT0w1 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdlhtc2RrREpWY1ExeU05VndwSHhJcmNPTDVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG MDI2LzNCQUFBQzQ0RkIyODExRUY5NTlGQzc3NEM0RjlBRTAyL3ZYbXNka0RKVmNR MXlNOVZ3cEh4SXJjT0w1ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHqPxxTUjortvfYO59k7Mawf/3LX5aiyiDbX9HVHvRX+pcE/hKb6s2/K uwMGfFna6kVpE3Tfky0rXhIUQaG0MetdiwIlYnSrUksGELsTGv7nm3s3HAe8V/n0 OgbldC/iNA8EVnUhCfLg3HhJjBeJEdoVsPu1nT6Dv7qCh2ceVgFQSYIoLom3Xe8/ r6c2h+B162jQrw5QR+Qex4/o+Rn94xFUJr7GAbfYgwItwS+ebJVmAQ6j3UImXVAC hD/G2rH7Anuc/Mp6l+LmU1kc1gPZcAmSBzKj6jgKY5ogsk+fQzqwVoK4ns/EhYwV hEo6zddXFSfSjCIlN9rKu5un28pgY3w= -----END CERTIFICATE-----Generated at Thu Jun 5 19:56:47 2025 by rpki-client