$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft File: vkiLTmCsanOmVu_bxfpnoajegSo.mft (raw, json) Hash identifier: 7bFEe4K08poyc0TrZkdRpzDuEgRTlPMvAfAYP/6a3+A= Subject key identifier: 32:A1:D2:21:C8:0E:2E:4D:F9:57:3D:00:22:7E:0D:6F:88:8E:68:73 Authority key identifier: BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A Certificate issuer: /CN=A91ADE0A/serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A Certificate serial: 2289 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft Manifest number: 224B Signing time: Fri 30 May 2025 16:03:35 +0000 Manifest this update: Fri 30 May 2025 16:03:34 +0000 Manifest next update: Fri 06 Jun 2025 16:03:34 +0000 Files and hashes: 1: vkiLTmCsanOmVu_bxfpnoajegSo.crl (hash: KDndHANf+xfnfFT0IppNyyLCwiMAqvGI/z5b2eqjngY=) 2: 4AB8D38E178811EF95C8DF41C4F9AE02.roa (hash: bRjvCEzkjDm3JJYu7t1zkHD97hp8O/fwotkC6wIv1RQ=) 3: 815465903EB511E9881B6529C4F9AE02.roa (hash: gW74XIULKnrcRgyXZDwxsWWvrLPKxQLUY/wa7dOD1h8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8841 (0x2289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADE0A, serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A Validity Not Before: May 30 16:03:34 2025 GMT Not After : Jun 6 16:03:34 2025 GMT Subject: CN=6839d6d7-d2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:75:84:90:3f:75:7f:cc:ba:c0:27:23:a2:7c: 94:20:02:c3:93:b4:a2:37:d7:0d:75:2f:86:b3:ca: f0:52:20:cf:98:0b:2a:cf:8c:14:ec:c8:fb:8b:53: 49:dc:42:66:03:1b:e4:be:cb:ae:73:7a:9d:57:ab: 56:c8:15:b1:a7:81:ef:a6:3d:00:e7:f6:8a:2a:5d: 67:fe:a5:1b:21:32:50:36:e1:cf:ad:0b:88:ff:f4: 44:f8:78:a2:88:cf:c5:38:0c:ec:7a:2f:75:a7:5e: 66:b3:75:f9:e4:f4:c1:af:ef:6f:b6:5c:0d:51:7d: 14:bb:83:97:22:64:b1:a3:f7:11:a3:aa:4c:a9:e3: a9:40:ec:80:d9:d2:db:62:83:15:24:9d:a9:7c:b9: 3e:5f:2e:9a:23:41:a3:ce:ea:1b:d3:50:a9:e3:4b: 9d:68:a7:71:e4:46:69:ab:bd:69:f2:6c:78:52:a6: e9:87:f0:42:93:da:05:12:29:00:db:04:2b:f9:56: 2c:a6:0a:72:f5:2b:98:0e:84:5d:ea:50:aa:84:ea: 2a:82:01:da:31:0d:8d:3d:dd:d2:0d:a2:2d:53:1b: 0c:c1:88:ef:dd:9b:69:0e:54:b0:d8:99:55:e1:bb: cd:ea:25:ef:bb:91:39:c8:1e:34:7c:e5:41:21:03: fa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A1:D2:21:C8:0E:2E:4D:F9:57:3D:00:22:7E:0D:6F:88:8E:68:73 X509v3 Authority Key Identifier: keyid:BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:43:ca:5c:95:23:f0:10:85:14:6d:79:a1:ff:17:da:3b:ba: 10:fc:61:07:3b:ef:2e:c6:3e:5c:c2:ba:07:b2:88:a2:7a:2e: 76:ac:0e:03:50:14:06:cb:50:84:4e:23:70:b9:92:de:f9:c5: 75:98:65:55:59:18:dd:22:e9:54:59:89:dc:70:cb:5a:3e:b8: 76:b4:5f:92:9c:85:81:ea:9f:a4:65:a3:76:30:a2:27:c0:98: 4d:a4:fa:96:37:dd:fe:17:13:09:98:9b:81:a8:eb:c8:35:a8: 57:5f:30:d2:7f:80:37:e2:a7:d1:b1:66:4f:3d:c5:9d:3b:22: fb:2e:25:89:f4:a8:06:67:d0:a8:7e:ec:7f:31:7f:0b:0e:7b: 4f:94:0b:e7:78:09:e9:ed:30:fc:04:62:73:41:a8:00:97:d5: fb:55:92:c3:f6:17:b7:cd:52:09:fd:08:ce:74:c9:66:b5:3a: 2d:91:92:da:a3:7d:ff:88:f2:fb:63:d7:16:9f:59:59:3f:4e: b3:b7:7d:14:a3:19:99:43:fe:dc:1f:b9:28:72:c5:51:a7:a1: d4:11:c4:6b:2c:4e:84:d3:1e:69:2c:81:6c:e6:16:76:f0:48: 6f:b2:ca:e6:f9:a4:aa:9c:ae:64:66:ae:e1:b7:4c:24:6a:e5: 72:0e:d2:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURFMEExMTAvBgNVBAUTKEJFNDg4QjRFNjBBQzZBNzNBNjU2RUZEQkM1RkE2N0Ex QThERTgxMkEwHhcNMjUwNTMwMTYwMzM0WhcNMjUwNjA2MTYwMzM0WjAYMRYwFAYD VQQDEw02ODM5ZDZkNy1kMmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnWEkD91f8y6wCcjonyUIALDk7SiN9cNdS+Gs8rwUiDPmAsqz4wU7Mj7i1NJ 3EJmAxvkvsuuc3qdV6tWyBWxp4Hvpj0A5/aKKl1n/qUbITJQNuHPrQuI//RE+Hii iM/FOAzsei91p15ms3X55PTBr+9vtlwNUX0Uu4OXImSxo/cRo6pMqeOpQOyA2dLb YoMVJJ2pfLk+Xy6aI0Gjzuob01Cp40udaKdx5EZpq71p8mx4Uqbph/BCk9oFEikA 2wQr+VYspgpy9SuYDoRd6lCqhOoqggHaMQ2NPd3SDaItUxsMwYjv3ZtpDlSw2JlV 4bvN6iXvu5E5yB40fOVBIQP6twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKh0iHI Di5N+Vc9ACJ+DW+IjmhzMB8GA1UdIwQYMBaAFL5Ii05grGpzplbv28X6Z6Go3oEq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS8zMEQ4MDEyNkMx MTMxMUU1QjAxQTcyNjlDNEY5QUUwMi92a2lMVG1Dc2FuT21WdV9ieGZwbm9hamVn U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZraUxUbUNzYW5PbVZ1X2J4ZnBub2FqZWdTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REUwQS8zMEQ4MDEyNkMxMTMxMUU1QjAxQTcyNjlDNEY5QUUwMi92a2lMVG1Dc2Fu T21WdV9ieGZwbm9hamVnU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+Q8pclSPwEIUUbXmh/xfaO7oQ/GEHO+8uxj5cwroHsoiiei52rA4D UBQGy1CETiNwuZLe+cV1mGVVWRjdIulUWYnccMtaPrh2tF+SnIWB6p+kZaN2MKIn wJhNpPqWN93+FxMJmJuBqOvINahXXzDSf4A34qfRsWZPPcWdOyL7LiWJ9KgGZ9Co fux/MX8LDntPlAvneAnp7TD8BGJzQagAl9X7VZLD9he3zVIJ/QjOdMlmtTotkZLa o33/iPL7Y9cWn1lZP06zt30UoxmZQ/7cH7kocsVRp6HUEcRrLE6E0x5pLIFs5hZ2 8Ehvssrm+aSqnK5kZq7ht0wkauVyDtJn -----END CERTIFICATE-----Generated at Sat May 31 17:10:20 2025 by rpki-client