$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft File: VVmDGtzt7KX6kvxOtdLt5i43qM0.mft (raw, json) Hash identifier: D71+um94t9qGMDe17YJ4c2jWhK7DpmTMYFP9YEww84A= Subject key identifier: A7:96:EA:C8:1E:20:BE:AD:85:DD:C1:01:82:61:DF:A2:AD:4D:73:09 Authority key identifier: 55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD Certificate issuer: /CN=A91AB2EB/serialNumber=5559831ADCEDECA5FA92FC4EB5D2EDE62E37A8CD Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft Manifest number: FC Signing time: Sat 31 May 2025 04:48:58 +0000 Manifest this update: Sat 31 May 2025 04:48:57 +0000 Manifest next update: Sat 07 Jun 2025 04:48:57 +0000 Files and hashes: 1: VVmDGtzt7KX6kvxOtdLt5i43qM0.crl (hash: dmxSwzoWUopw5X19+bBeup7Szr67wwKv5mL+6h4haU8=) 2: B96DD308BF4311EE844DDD58C4F9AE02.roa (hash: Qyo+y73YZI83wemHD69A6cWahcYB7AOwFIX0fbO5DQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.crl rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB2EB, serialNumber=5559831ADCEDECA5FA92FC4EB5D2EDE62E37A8CD Validity Not Before: May 31 04:48:57 2025 GMT Not After : Jun 7 04:48:57 2025 GMT Subject: CN=683a8a3a-3444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ca:9c:ee:e6:cc:45:46:ba:0c:81:62:6a:6e: c4:e5:8f:6f:f4:35:a2:56:0e:0c:56:9a:13:fd:c3: 50:43:c0:35:3a:96:ee:8e:00:78:f1:14:67:f4:dc: e8:5c:11:d6:8d:16:0d:77:90:1b:13:43:23:21:fb: f3:97:c5:5a:f5:63:d7:d7:3c:ca:9b:dc:cd:1e:b5: 9f:18:a7:cb:cc:fc:76:21:88:c5:19:e2:20:f4:61: 28:64:1b:2a:85:48:a2:29:75:d3:c4:c9:16:e5:1f: ee:40:d0:80:cd:1d:d9:9e:48:08:ab:66:97:9e:5e: 21:8e:95:34:c9:15:36:24:ac:bf:14:fa:d2:fc:67: 4c:0b:60:28:83:49:2f:a3:84:80:4d:c5:88:a7:da: 18:e4:72:ce:3d:dc:70:2a:a1:54:11:2c:fa:dd:78: 70:89:55:64:72:1f:b1:ad:1a:75:99:8d:e8:7f:62: e8:9e:2c:ed:62:a6:b0:59:f0:44:ed:87:47:e6:9f: 43:84:3f:cb:12:34:4e:d3:63:25:f4:02:7d:ac:96: 65:67:6f:79:81:67:6a:8a:c5:cd:f1:bb:5c:fc:b1: e2:8a:87:f7:54:9e:cf:b7:10:44:5d:91:95:f1:0b: 9a:a8:29:dd:44:69:cc:1b:b1:fa:82:65:77:84:46: 31:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:96:EA:C8:1E:20:BE:AD:85:DD:C1:01:82:61:DF:A2:AD:4D:73:09 X509v3 Authority Key Identifier: keyid:55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:17:b5:cc:0c:a1:10:5f:82:60:19:f7:18:ba:6c:db:4a:7c: 1a:5c:dd:ee:9c:05:54:9a:e1:f0:dc:d2:ef:06:87:ea:86:b3: ad:e1:e8:c7:ed:6d:10:40:04:a7:a4:5b:07:78:31:59:45:fa: 2b:fa:d4:d6:87:3d:fb:46:fe:76:73:b2:24:d5:93:21:a0:9e: 5f:1d:91:19:da:df:d9:6a:fc:ef:1f:ee:40:21:16:82:c3:31: b4:49:da:b9:ec:0e:9b:21:49:f0:ee:9c:2c:97:91:d5:58:2f: 04:6b:1a:96:be:ef:29:e7:c0:8f:4e:54:6f:d1:d3:41:54:80: fe:5c:8f:15:f7:b5:a7:f9:6d:75:50:42:9f:45:a5:d6:14:4c: 52:16:b9:6f:6c:48:8f:6a:bf:79:8f:0d:28:ae:4f:9d:01:80: 41:f2:a5:0d:25:47:ff:62:0a:59:a9:2b:ed:aa:de:0c:48:3b: 0a:9a:f8:26:c5:81:33:4f:86:06:99:86:f2:c8:46:af:b7:3f: 38:5c:29:70:e3:ed:fb:7a:d9:e9:f0:16:e5:0f:b5:cc:94:ce: c2:79:f6:7a:2b:07:23:f3:c4:ca:4e:41:d3:62:72:3a:98:53: 7b:86:5c:c3:0a:69:8a:3a:54:62:82:c8:6e:ff:b2:c8:c9:06: d0:7d:7b:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyRUIxMTAvBgNVBAUTKDU1NTk4MzFBRENFREVDQTVGQTkyRkM0RUI1RDJFREU2 MkUzN0E4Q0QwHhcNMjUwNTMxMDQ0ODU3WhcNMjUwNjA3MDQ0ODU3WjAYMRYwFAYD VQQDEw02ODNhOGEzYS0zNDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysqc7ubMRUa6DIFiam7E5Y9v9DWiVg4MVpoT/cNQQ8A1OpbujgB48RRn9Nzo XBHWjRYNd5AbE0MjIfvzl8Va9WPX1zzKm9zNHrWfGKfLzPx2IYjFGeIg9GEoZBsq hUiiKXXTxMkW5R/uQNCAzR3ZnkgIq2aXnl4hjpU0yRU2JKy/FPrS/GdMC2Aog0kv o4SATcWIp9oY5HLOPdxwKqFUESz63XhwiVVkch+xrRp1mY3of2LoniztYqawWfBE 7YdH5p9DhD/LEjRO02Ml9AJ9rJZlZ295gWdqisXN8btc/LHiiof3VJ7PtxBEXZGV 8QuaqCndRGnMG7H6gmV3hEYxLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeW6sge IL6thd3BAYJh36KtTXMJMB8GA1UdIwQYMBaAFFVZgxrc7eyl+pL8TrXS7eYuN6jN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjJFQi80MzBCNUE3OEJG NDMxMUVFOEZEMzA3NThDNEY5QUUwMi9WVm1ER3R6dDdLWDZrdnhPdGRMdDVpNDNx TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZWbURHdHp0N0tYNmt2eE90ZEx0NWk0M3FNMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjJFQi80MzBCNUE3OEJGNDMxMUVFOEZEMzA3NThDNEY5QUUwMi9WVm1ER3R6dDdL WDZrdnhPdGRMdDVpNDNxTTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCF7XMDKEQX4JgGfcYumzbSnwaXN3unAVUmuHw3NLvBofqhrOt4ejH 7W0QQASnpFsHeDFZRfor+tTWhz37Rv52c7Ik1ZMhoJ5fHZEZ2t/ZavzvH+5AIRaC wzG0Sdq57A6bIUnw7pwsl5HVWC8EaxqWvu8p58CPTlRv0dNBVID+XI8V97Wn+W11 UEKfRaXWFExSFrlvbEiPar95jw0ork+dAYBB8qUNJUf/YgpZqSvtqt4MSDsKmvgm xYEzT4YGmYbyyEavtz84XClw4+37etnp8BblD7XMlM7CefZ6Kwcj88TKTkHTYnI6 mFN7hlzDCmmKOlRigshu/7LIyQbQfXv1 -----END CERTIFICATE-----Generated at Sat May 31 16:38:57 2025 by rpki-client