$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json) Hash identifier: 5FX5C+9Pz4BJ5cqQjc1mbhlD/ALwulx/GO1qcjI/muc= Subject key identifier: EB:32:04:71:BD:39:3C:D2:49:B6:E6:40:FF:18:7C:C4:4F:B7:D8:FA Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 34D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft Manifest number: 34B0 Signing time: Sat 31 May 2025 14:37:08 +0000 Manifest this update: Sat 31 May 2025 14:37:08 +0000 Manifest next update: Sat 07 Jun 2025 14:37:08 +0000 Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: aQZbbTsDU/GVaRqxZnMcUQQADR+MXTCjBTCunGegmaA=) 2: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: B6iIcDp1e+xSTCgDaU39YslsY3oYKHC1G8nj3LY3fyg=) 3: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: 3yE7jzzRRf/nsUpYCxz901DViCqtx9fcvzcGq8i3VT0=) 4: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: iBQaFzR8EsNKfOhQyR2WaqwTnXNt65iEA7xvcPEERlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: May 31 14:37:08 2025 GMT Not After : Jun 7 14:37:08 2025 GMT Subject: CN=683b1414-7121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:11:c0:cb:bf:2f:a3:48:4c:d1:ad:bd:59:b6: a7:da:ad:b7:eb:38:5f:df:3a:38:21:d9:4d:e9:58: 26:a0:b9:50:75:ba:06:03:14:3e:86:c2:19:bb:cf: 8d:87:75:5d:f2:aa:06:7b:48:f6:2a:4d:0e:1f:85: 8c:65:a6:08:b8:63:9f:42:5f:46:ca:84:77:22:3e: 9b:78:18:d9:e6:c5:83:f1:74:cf:a4:af:82:a7:4b: f0:e0:92:c5:9f:f8:3a:4b:58:b8:8c:9b:23:e2:17: 81:ee:b8:da:30:3f:30:b3:92:6d:0e:b1:cb:6f:1b: 23:7c:ca:00:cc:e7:7d:9f:ec:cd:05:d0:de:e3:37: b8:81:05:ac:60:c7:9a:a9:2d:4a:25:b0:b7:e1:e3: 4d:dd:f6:c2:b2:ee:c4:f1:a3:13:fb:63:b6:24:9e: eb:65:f6:93:03:d6:5a:dd:18:6d:6f:58:09:02:21: 0f:26:ec:07:de:0e:9c:e0:74:58:4c:ca:9d:58:1f: c9:92:0e:20:e4:9e:02:83:eb:45:53:cd:94:6f:79: e4:da:a1:16:53:8c:c5:e3:e0:44:8b:e8:f5:1a:61: ce:9f:d3:c7:c8:99:54:c6:c8:bd:99:d9:12:ef:ab: 11:92:b0:c3:d7:83:e7:3a:86:84:3e:40:83:b1:61: ab:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:32:04:71:BD:39:3C:D2:49:B6:E6:40:FF:18:7C:C4:4F:B7:D8:FA X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ed:91:a9:9a:a9:b0:af:ae:8a:a2:9c:b9:e4:11:07:45:ba: a1:19:a1:9e:e8:b9:7c:83:07:f3:da:01:07:2b:77:5d:50:79: de:7d:e0:7e:e6:c1:22:2b:23:99:d7:f8:61:4a:aa:77:01:77: 6c:b3:57:b2:4b:0c:1b:33:3a:d6:f9:b2:cd:e6:57:2b:12:7f: d6:96:1b:9d:a0:9f:ec:b2:1f:c8:6e:35:65:09:a4:52:54:5c: d7:6d:15:55:1e:af:77:70:6f:f2:5a:5a:14:2f:b5:cc:76:e1: 62:52:0d:b1:de:15:05:64:f7:15:fd:a0:49:29:e0:82:82:5e: e2:28:60:c5:63:c3:e3:d5:2f:f7:8c:af:70:68:18:2e:8c:55: d8:e8:f9:05:49:fd:2e:f3:a1:b1:28:27:91:b7:c5:47:a3:8d: f5:72:75:64:66:72:c4:0c:94:92:46:23:57:f4:45:14:82:f6: d9:b0:88:b2:85:53:4f:60:2a:be:7a:e2:8c:e1:aa:6b:51:ef: 71:d7:64:8e:44:67:64:9f:41:67:3f:3b:b3:6b:51:4a:e7:b7: 09:9e:4d:95:cb:e7:0a:60:43:e7:b9:80:7b:d9:a8:18:e6:44: 1d:f9:2c:4a:c6:f3:c8:33:8c:fd:d3:b8:4f:b9:d3:a9:70:50: ee:3f:13:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjUwNTMxMTQzNzA4WhcNMjUwNjA3MTQzNzA4WjAYMRYwFAYD VQQDEw02ODNiMTQxNC03MTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxHAy78vo0hM0a29Wban2q236zhf3zo4IdlN6VgmoLlQdboGAxQ+hsIZu8+N h3Vd8qoGe0j2Kk0OH4WMZaYIuGOfQl9GyoR3Ij6beBjZ5sWD8XTPpK+Cp0vw4JLF n/g6S1i4jJsj4heB7rjaMD8ws5JtDrHLbxsjfMoAzOd9n+zNBdDe4ze4gQWsYMea qS1KJbC34eNN3fbCsu7E8aMT+2O2JJ7rZfaTA9Za3Rhtb1gJAiEPJuwH3g6c4HRY TMqdWB/Jkg4g5J4Cg+tFU82Ub3nk2qEWU4zF4+BEi+j1GmHOn9PHyJlUxsi9mdkS 76sRkrDD14PnOoaEPkCDsWGrkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsyBHG9 OTzSSbbmQP8YfMRPt9j6MB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ4Ri84QzgxQTg1NjFEOEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdj WlVZeTZMNkE2Ny1mLTFaUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn7ZGpmqmwr66Kopy55BEHRbqhGaGe6Ll8gwfz2gEHK3ddUHnefeB+ 5sEiKyOZ1/hhSqp3AXdss1eySwwbMzrW+bLN5lcrEn/WlhudoJ/ssh/IbjVlCaRS VFzXbRVVHq93cG/yWloUL7XMduFiUg2x3hUFZPcV/aBJKeCCgl7iKGDFY8Pj1S/3 jK9waBgujFXY6PkFSf0u86GxKCeRt8VHo431cnVkZnLEDJSSRiNX9EUUgvbZsIiy hVNPYCq+euKM4aprUe9x12SORGdkn0FnPzuza1FK57cJnk2Vy+cKYEPnuYB72agY 5kQd+SxKxvPIM4z907hPudOpcFDuPxPm -----END CERTIFICATE-----Generated at Sat May 31 16:42:08 2025 by rpki-client