$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft File: vKs-dvhO1DdC8qCBJCcI55nOG18.mft (raw, json) Hash identifier: IaxDzaqBuzrfqzNB4JnZFzN1YwkwirdqwAzBkdirPbk= Subject key identifier: 9C:92:F3:03:A2:6B:21:86:B5:AE:84:D6:07:BE:05:5C:E8:0C:61:79 Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F Certificate issuer: /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft Manifest number: DF Signing time: Sat 31 May 2025 05:17:57 +0000 Manifest this update: Sat 31 May 2025 05:17:57 +0000 Manifest next update: Sat 07 Jun 2025 05:17:57 +0000 Files and hashes: 1: vKs-dvhO1DdC8qCBJCcI55nOG18.crl (hash: tpciTINd3+Yq2tEHGyW0VwDJE7l5Aqdy23G1kHOEstU=) 2: A2EBCE92083011EF82AFFD44C4F9AE02.roa (hash: lXTjS6CJ65+GSXDHPnNs6WKGp+QMD+laNZ7PWnUDq4w=) 3: 222F2952038511EFAF036327C4F9AE02.roa (hash: 0POds3yRjM0RD6yJRDt5kjZrzEVN1RcsA2tdedecI4c=) 4: A0AD48EA083011EF82AFFD44C4F9AE02.roa (hash: E2oXK+nP7XuyH0hDSL1uq1DEWcq+1W48Rez3w3+1ppw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:17:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC532, serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F Validity Not Before: May 31 05:17:57 2025 GMT Not After : Jun 7 05:17:57 2025 GMT Subject: CN=683a9105-232f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f3:b6:f1:b3:51:34:16:5e:1f:b9:68:1d:b4: 46:6d:1c:c4:d5:74:80:09:b7:97:91:a2:9c:08:75: df:3c:b2:7a:c6:1c:e6:40:97:4e:08:ee:ab:34:28: 19:9b:8b:68:6d:7b:cb:6b:74:67:03:c2:6f:af:45: d0:b6:15:1f:36:a6:52:05:53:58:b4:69:e5:19:ab: 9d:9b:bd:c6:73:fe:a5:df:c8:3c:8a:b7:1b:ba:0e: 5f:bb:b7:9c:f2:5c:41:c9:1e:f4:41:75:b3:06:ab: b1:2b:7d:d9:28:6b:3a:21:de:5f:94:27:5c:b7:b6: 19:e2:f6:5d:dc:95:57:68:72:6b:9f:29:67:5d:c3: c2:ae:e4:78:9a:f8:fc:6b:96:61:92:a5:99:ff:69: 37:dc:4e:9d:b4:8c:74:17:8a:2b:8f:c7:51:d2:80: d0:61:b3:14:3a:07:21:e9:29:05:43:a6:07:48:e7: 4f:b5:3a:30:df:72:45:b0:27:02:03:d7:f5:41:4e: 16:cf:d5:3e:cc:1b:19:92:77:51:10:21:42:e8:65: 44:c1:5c:2b:8c:6a:3e:85:c7:4e:8b:4f:74:0c:c0: 57:fa:7e:69:84:9a:72:ca:53:ca:ce:c9:22:92:2e: 8e:f7:f9:d0:5d:1a:0f:e5:bb:3b:fe:a7:0f:b8:5b: 19:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:92:F3:03:A2:6B:21:86:B5:AE:84:D6:07:BE:05:5C:E8:0C:61:79 X509v3 Authority Key Identifier: keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:29:ad:a9:53:b4:43:17:29:d1:19:3c:f6:61:fb:0e:9a:59: 17:af:37:a7:01:da:0b:c7:ed:68:39:c6:6c:09:2c:a6:38:1b: f1:43:fd:dd:2e:4d:6c:44:ae:40:c6:e2:a1:a5:3b:47:21:bc: 5f:6a:e9:4a:08:d1:59:68:28:f0:92:63:47:0e:39:3b:f8:75: ab:0e:40:f9:dd:71:00:67:0d:86:73:cf:d9:8a:9b:c0:1e:c8: 5b:c7:39:ab:a4:58:68:2e:94:82:a0:2a:e0:97:e2:23:a6:d1: b4:fd:a3:52:52:70:63:7f:e5:fb:2e:b0:95:d2:c9:5d:03:6a: 8e:ec:29:89:d0:83:76:b7:94:78:ae:24:c5:33:c3:14:a4:51: b9:87:1a:a3:fe:d6:60:ed:81:51:29:a6:65:4e:5c:75:77:f8: 24:39:a3:57:85:ca:57:e8:9f:ab:9f:4a:c4:66:8a:4e:71:9b: e2:6d:8f:aa:8a:04:a8:d3:fc:ee:e1:66:f5:37:87:57:e2:2c: 3a:38:5b:b6:b6:b7:d5:51:b5:e4:b2:98:15:95:25:31:79:8a: d7:97:70:fe:66:d2:dc:81:c1:cb:ac:23:84:be:7f:68:9e:63: 7f:e9:f9:4c:da:27:29:e3:43:1b:04:ac:66:0f:93:c9:ff:c5: dc:1e:f4:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM1MzIxMTAvBgNVBAUTKEJDQUIzRTc2Rjg0RUQ0Mzc0MkYyQTA4MTI0MjcwOEU3 OTlDRTFCNUYwHhcNMjUwNTMxMDUxNzU3WhcNMjUwNjA3MDUxNzU3WjAYMRYwFAYD VQQDEw02ODNhOTEwNS0yMzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvO28bNRNBZeH7loHbRGbRzE1XSACbeXkaKcCHXfPLJ6xhzmQJdOCO6rNCgZ m4tobXvLa3RnA8Jvr0XQthUfNqZSBVNYtGnlGaudm73Gc/6l38g8ircbug5fu7ec 8lxByR70QXWzBquxK33ZKGs6Id5flCdct7YZ4vZd3JVXaHJrnylnXcPCruR4mvj8 a5ZhkqWZ/2k33E6dtIx0F4orj8dR0oDQYbMUOgch6SkFQ6YHSOdPtTow33JFsCcC A9f1QU4Wz9U+zBsZkndRECFC6GVEwVwrjGo+hcdOi090DMBX+n5phJpyylPKzski ki6O9/nQXRoP5bs7/qcPuFsZnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyS8wOi ayGGta6E1ge+BVzoDGF5MB8GA1UdIwQYMBaAFLyrPnb4TtQ3QvKggSQnCOeZzhtf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzUzMi9EQUEwRDBCNDAz N0UxMUVGODUyMEU3NThDNEY5QUUwMi92S3MtZHZoTzFEZEM4cUNCSkNjSTU1bk9H MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLcy1kdmhPMURkQzhxQ0JKQ2NJNTVuT0cxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzUzMi9EQUEwRDBCNDAzN0UxMUVGODUyMEU3NThDNEY5QUUwMi92S3MtZHZoTzFE ZEM4cUNCSkNjSTU1bk9HMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRKa2pU7RDFynRGTz2YfsOmlkXrzenAdoLx+1oOcZsCSymOBvxQ/3d Lk1sRK5AxuKhpTtHIbxfaulKCNFZaCjwkmNHDjk7+HWrDkD53XEAZw2Gc8/ZipvA HshbxzmrpFhoLpSCoCrgl+IjptG0/aNSUnBjf+X7LrCV0sldA2qO7CmJ0IN2t5R4 riTFM8MUpFG5hxqj/tZg7YFRKaZlTlx1d/gkOaNXhcpX6J+rn0rEZopOcZvibY+q igSo0/zu4Wb1N4dX4iw6OFu2trfVUbXkspgVlSUxeYrXl3D+ZtLcgcHLrCOEvn9o nmN/6flM2icp40MbBKxmD5PJ/8XcHvSq -----END CERTIFICATE-----Generated at Sat May 31 17:22:03 2025 by rpki-client