$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft File: vxobyMAsIDYtD9n5K8AGoolejIA.mft (raw, json) Hash identifier: qjrxlgkKNOYg95cf7Tbf7KEQVoiy7IvsjBYDJSk52rE= Subject key identifier: 29:1E:D0:45:2C:52:C1:75:25:D4:1E:8F:A7:57:E0:91:39:71:82:0A Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80 Certificate issuer: /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80 Certificate serial: 079D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft Manifest number: 0798 Signing time: Fri 30 May 2025 21:32:14 +0000 Manifest this update: Fri 30 May 2025 21:32:13 +0000 Manifest next update: Fri 06 Jun 2025 21:32:13 +0000 Files and hashes: 1: vxobyMAsIDYtD9n5K8AGoolejIA.crl (hash: PJ/UDBbTcxRQjCWAeg+ekLeu9JKVy9rtmjkrBebYCyQ=) 2: ABD5003E079C11EBA7C04832C4F9AE02.roa (hash: 1LIqaLcLd8sIbPgwe6w2+ZfDiBIad4OGJXBnSw3QIfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1949 (0x79d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A423B, serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80 Validity Not Before: May 30 21:32:13 2025 GMT Not After : Jun 6 21:32:13 2025 GMT Subject: CN=683a23de-eaa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:c5:66:23:26:4c:43:07:85:97:20:0a:4e:01: e4:22:17:33:af:42:c8:fe:d2:9e:c2:bb:0b:83:4d: 00:a0:e7:7b:9f:3d:e9:5c:ee:e4:9e:e0:8a:72:d7: 14:81:fd:28:13:c0:a8:e7:2a:d6:b6:90:44:73:9d: be:be:b2:68:4a:23:91:c6:cd:52:45:a6:7d:f7:34: d3:2e:31:41:e1:77:d4:f5:f2:35:df:2d:da:7d:33: dc:5c:a5:88:89:67:41:5f:ba:32:6a:c5:95:eb:3c: 25:b9:95:62:53:98:26:b2:14:3d:44:18:be:10:dc: 79:41:6e:25:30:51:94:e5:8f:64:02:00:15:ac:93: 02:3a:4c:f6:68:b6:eb:f7:3a:8c:3a:43:2a:14:6b: ff:71:b2:60:12:1b:99:00:cb:a6:e6:6b:39:32:89: 66:20:83:f5:5c:26:72:e6:62:66:ab:d1:bf:90:4d: 4c:e8:fb:bc:66:60:36:7c:eb:c2:d7:75:e3:dd:88: 2b:45:40:00:da:08:3d:6b:1c:57:c3:80:7d:f1:8d: 1a:28:84:d2:cb:d6:3b:c6:80:34:bb:71:c1:42:60: 42:94:fd:8b:47:e4:b2:69:13:fb:b9:d1:4e:61:35: 75:cd:06:c6:ab:da:33:c8:9e:4b:1e:b3:19:38:a1: 71:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1E:D0:45:2C:52:C1:75:25:D4:1E:8F:A7:57:E0:91:39:71:82:0A X509v3 Authority Key Identifier: keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:ef:f0:f7:96:93:63:3b:bf:14:b7:dd:ec:e5:e6:1a:03:c0: 0b:d4:db:e1:16:69:5a:3c:87:0c:9f:d9:4c:01:87:36:df:16: 1f:26:cb:c8:f3:9b:20:9b:59:6e:09:47:0a:8c:cb:c1:0a:b2: 20:87:42:0e:0c:d4:91:fe:f7:0d:fc:62:42:91:49:0a:0c:96: 02:96:4d:7c:73:dc:6e:fe:5d:f5:de:aa:9c:d8:37:c7:84:83: 45:15:4a:f6:5f:7d:46:19:0a:08:a7:af:4e:2b:95:01:19:f0: 0c:96:d2:83:9b:a2:56:0a:e2:34:5b:16:39:4e:99:e1:47:30: d3:f8:04:78:82:94:7a:93:1c:0c:73:98:56:9a:76:71:52:3a: 74:7b:af:6a:eb:a8:9b:87:bf:f0:ca:f4:1a:02:44:86:f7:e3: 71:74:08:ab:8b:d8:22:10:50:a8:1d:b3:47:19:7f:58:56:e4: 63:a3:17:aa:8b:05:d3:99:49:1e:9b:66:ef:cf:aa:c4:82:93: e0:b7:66:ca:c6:2a:e5:85:6c:dc:bd:25:81:e6:82:4d:a3:07: 0b:f1:1a:2c:17:ce:b6:12:78:36:b3:39:96:6b:c3:b6:b9:d8: b4:c9:e8:87:3b:78:45:e8:a2:bd:03:df:08:a0:7b:22:20:83: 81:73:df:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyM0IxMTAvBgNVBAUTKEJGMUExQkM4QzAyQzIwMzYyRDBGRDlGOTJCQzAwNkEy ODk1RThDODAwHhcNMjUwNTMwMjEzMjEzWhcNMjUwNjA2MjEzMjEzWjAYMRYwFAYD VQQDEw02ODNhMjNkZS1lYWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+sVmIyZMQweFlyAKTgHkIhczr0LI/tKewrsLg00AoOd7nz3pXO7knuCKctcU gf0oE8Co5yrWtpBEc52+vrJoSiORxs1SRaZ99zTTLjFB4XfU9fI13y3afTPcXKWI iWdBX7oyasWV6zwluZViU5gmshQ9RBi+ENx5QW4lMFGU5Y9kAgAVrJMCOkz2aLbr 9zqMOkMqFGv/cbJgEhuZAMum5ms5MolmIIP1XCZy5mJmq9G/kE1M6Pu8ZmA2fOvC 13Xj3YgrRUAA2gg9axxXw4B98Y0aKITSy9Y7xoA0u3HBQmBClP2LR+SyaRP7udFO YTV1zQbGq9ozyJ5LHrMZOKFxgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCke0EUs UsF1JdQej6dX4JE5cYIKMB8GA1UdIwQYMBaAFL8aG8jALCA2LQ/Z+SvABqKJXoyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDIzQi9BRjc1NkI5NDA3 OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lEWXREOW41SzhBR29vbGVq SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z4b2J5TUFzSURZdEQ5bjVLOEFHb29sZWpJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDIzQi9BRjc1NkI5NDA3OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lE WXREOW41SzhBR29vbGVqSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm7/D3lpNjO78Ut93s5eYaA8AL1NvhFmlaPIcMn9lMAYc23xYfJsvI 85sgm1luCUcKjMvBCrIgh0IODNSR/vcN/GJCkUkKDJYClk18c9xu/l313qqc2DfH hINFFUr2X31GGQoIp69OK5UBGfAMltKDm6JWCuI0WxY5TpnhRzDT+AR4gpR6kxwM c5hWmnZxUjp0e69q66ibh7/wyvQaAkSG9+NxdAiri9giEFCoHbNHGX9YVuRjoxeq iwXTmUkem2bvz6rEgpPgt2bKxirlhWzcvSWB5oJNowcL8RosF862Eng2szmWa8O2 udi0yeiHO3hF6KK9A98IoHsiIIOBc99e -----END CERTIFICATE-----Generated at Sat May 31 16:49:11 2025 by rpki-client