$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft File: VlIPoddulfCBm23dSWe0VQRphp0.mft (raw, json) Hash identifier: 0vvKRTfZI71Dn4MWO4U9T2n45LuOTGaRUBbaFB11ZoQ= Subject key identifier: DC:4A:B4:FD:E8:0B:8F:83:25:2D:BD:BB:BE:F7:1F:1D:CC:81:47:7E Authority key identifier: 56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D Certificate issuer: /CN=A91A91CB/serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft Manifest number: 38 Signing time: Sun 01 Jun 2025 07:17:02 +0000 Manifest this update: Sun 01 Jun 2025 07:17:01 +0000 Manifest next update: Sun 08 Jun 2025 07:17:01 +0000 Files and hashes: 1: VlIPoddulfCBm23dSWe0VQRphp0.crl (hash: Pq1BWMcLwf06OaNDRlV1rCPLasxtV7csxdnwHUk2Tos=) 2: EE8CD88EEA5A11EF922B276DC4F9AE02.roa (hash: NgoL1gjr88ZdEn/6hgZXntqKOlCBVmw0eMD59yFjWlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91CB, serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D Validity Not Before: Jun 1 07:17:01 2025 GMT Not After : Jun 8 07:17:01 2025 GMT Subject: CN=683bfe6d-4b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:16:d5:f5:4a:18:31:59:31:68:a5:63:64:33: 56:7e:dd:f1:fb:49:9a:dc:12:08:e2:0f:f4:0c:18: 53:88:35:04:d9:7c:c5:f9:54:a4:77:d9:d6:53:f5: 18:96:ed:75:ab:5a:89:6f:3c:de:48:28:ec:df:99: 34:22:a3:f8:5c:a1:2d:2b:e7:a4:ba:3c:38:df:46: 00:a8:f6:69:cb:fe:89:e5:95:2b:4d:35:e9:13:61: 41:82:c2:ea:d3:bb:6f:0d:9e:75:64:ab:55:ec:96: 85:e3:7f:72:61:60:db:d6:2a:a0:62:32:20:45:92: 8c:f0:19:a6:27:9e:d6:4f:0b:4e:5d:02:61:3f:b4: 53:06:bb:cb:fa:67:15:3a:f9:27:22:7c:77:3d:0d: 50:06:b6:48:86:1f:21:ea:b9:89:66:b0:15:9f:64: 03:61:87:47:86:2e:1b:1c:8a:52:05:37:e2:b5:6f: 8e:30:49:4e:af:18:56:88:db:2b:02:56:bb:97:73: 67:8f:5d:b3:77:3e:5c:76:e0:72:ff:63:74:33:2f: 81:0f:12:34:df:a1:8c:53:78:61:90:87:9b:f8:17: 10:3c:bd:f0:8d:0c:66:7d:53:e1:7c:a0:b3:25:e5: 1d:94:0f:f9:b5:d8:57:de:8c:b3:c2:f5:6b:49:fe: 74:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4A:B4:FD:E8:0B:8F:83:25:2D:BD:BB:BE:F7:1F:1D:CC:81:47:7E X509v3 Authority Key Identifier: keyid:56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:ec:4b:80:d3:de:93:be:a0:22:ab:da:9a:47:c1:a2:53:9e: 13:9c:7f:c4:da:0b:49:6e:42:1e:8e:1b:c9:d3:d3:1b:ba:a8: 14:ea:65:18:3a:59:06:39:0e:78:5e:55:31:32:60:87:88:f4: c8:66:95:d2:9e:71:6f:2c:1a:b5:49:c1:b5:da:db:5f:dd:82: b0:93:2c:57:59:c8:13:e4:1c:42:f9:82:42:f4:ed:9e:27:cc: cf:e1:81:ea:60:36:aa:66:24:88:e7:17:8e:d3:01:b8:c4:19: c6:c2:b9:5b:64:df:11:24:ca:42:29:53:aa:90:f4:e9:c1:55: 92:81:85:aa:d6:cc:55:d3:86:bb:b5:75:70:d5:4d:60:a5:46: 45:f4:bb:b1:b9:cb:6e:37:dc:38:62:37:f0:18:8b:8d:89:8d: d5:95:a9:54:1f:18:6a:3c:b1:80:c3:92:32:6b:62:72:9a:6c: 05:b0:bc:62:7e:1c:c5:50:e7:b6:0c:52:fe:f3:3e:6f:f9:9b: e6:64:14:e8:e5:09:c6:32:fb:45:7e:b8:ac:d3:d2:c7:9c:44: 14:55:d0:c9:71:77:fb:c6:18:46:96:b9:36:67:f2:cb:f0:8d: 1f:7c:6b:80:cc:c7:ab:c4:91:59:b2:83:6d:4e:75:ce:23:25: 32:f7:52:24 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTFDQjExMC8GA1UEBRMoNTY1MjBGQTFENzZFOTVGMDgxOUI2RERENDk2N0I0NTUw NDY5ODY5RDAeFw0yNTA2MDEwNzE3MDFaFw0yNTA2MDgwNzE3MDFaMBgxFjAUBgNV BAMTDTY4M2JmZTZkLTRiNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoFtX1ShgxWTFopWNkM1Z+3fH7SZrcEgjiD/QMGFOINQTZfMX5VKR32dZT9RiW 7XWrWolvPN5IKOzfmTQio/hcoS0r56S6PDjfRgCo9mnL/onllStNNekTYUGCwurT u28NnnVkq1XsloXjf3JhYNvWKqBiMiBFkozwGaYnntZPC05dAmE/tFMGu8v6ZxU6 +ScifHc9DVAGtkiGHyHquYlmsBWfZANhh0eGLhscilIFN+K1b44wSU6vGFaI2ysC VruXc2ePXbN3Plx24HL/Y3QzL4EPEjTfoYxTeGGQh5v4FxA8vfCNDGZ9U+F8oLMl 5R2UD/m12FfejLPC9WtJ/nTfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3Eq0/egL j4MlLb27vvcfHcyBR34wHwYDVR0jBBgwFoAUVlIPoddulfCBm23dSWe0VQRphp0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5MUNCLzVCNkZBMzYwRUE1 QTExRUZCODRBRTQ2OEM0RjlBRTAyL1ZsSVBvZGR1bGZDQm0yM2RTV2UwVlFScGhw MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVmxJUG9kZHVsZkNCbTIzZFNXZTBWUVJwaHAwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 MUNCLzVCNkZBMzYwRUE1QTExRUZCODRBRTQ2OEM0RjlBRTAyL1ZsSVBvZGR1bGZD Qm0yM2RTV2UwVlFScGhwMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANPsS4DT3pO+oCKr2ppHwaJTnhOcf8TaC0luQh6OG8nT0xu6qBTqZRg6 WQY5DnheVTEyYIeI9MhmldKecW8sGrVJwbXa21/dgrCTLFdZyBPkHEL5gkL07Z4n zM/hgepgNqpmJIjnF47TAbjEGcbCuVtk3xEkykIpU6qQ9OnBVZKBharWzFXThru1 dXDVTWClRkX0u7G5y2433DhiN/AYi42JjdWVqVQfGGo8sYDDkjJrYnKabAWwvGJ+ HMVQ57YMUv7zPm/5m+ZkFOjlCcYy+0V+uKzT0secRBRV0Mlxd/vGGEaWuTZn8svw jR98a4DMx6vEkVmyg21Odc4jJTL3UiQ= -----END CERTIFICATE-----Generated at Mon Jun 2 18:44:55 2025 by rpki-client