$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft File: T_VN6rrUlFWSUQEqpawiKVDLJh4.mft (raw, json) Hash identifier: ddhu5Nioop92+mXw2+FFGbdQ4d2ZM50gwEple6q+Ts8= Subject key identifier: EC:00:73:B3:C7:88:D4:CA:51:9E:45:8F:73:81:D7:9C:1B:A7:11:58 Authority key identifier: 4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E Certificate issuer: /CN=A91B38F5/serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft Manifest number: 28 Signing time: Sat 31 May 2025 07:20:57 +0000 Manifest this update: Sat 31 May 2025 07:20:56 +0000 Manifest next update: Sat 07 Jun 2025 07:20:56 +0000 Files and hashes: 1: T_VN6rrUlFWSUQEqpawiKVDLJh4.crl (hash: PiMS1wbB1eE9HngNVtJTYj/lVtrsGL/bTwn5gj0SesA=) 2: B66603C6025C11F0BDF41912C4F9AE02.roa (hash: H2+Ddkh87XoYI/8vzCTZnxyRNxL5o9son0tiMIrsX2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B38F5, serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E Validity Not Before: May 31 07:20:56 2025 GMT Not After : Jun 7 07:20:56 2025 GMT Subject: CN=683aadd8-603b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9a:f5:c7:01:2a:32:2c:2f:ec:4e:43:d1:ea: d1:b9:92:48:1d:2a:d6:f1:74:55:bd:eb:04:5b:5b: d2:20:4a:4a:c7:57:e3:3e:95:a2:3d:14:3b:e1:3b: eb:9e:eb:31:e8:5e:31:cd:ce:04:97:99:2e:c3:ea: 31:ac:44:c2:f7:6e:ab:3a:20:67:5f:59:48:73:0a: b7:26:81:4f:93:0c:78:90:7b:aa:b0:3c:6d:0a:e3: 1a:51:24:b2:97:d2:10:e4:13:dc:da:d3:b3:46:92: 88:11:65:55:94:e3:65:17:30:4b:e3:26:e9:f7:3d: cf:c3:03:08:2e:03:4b:d7:8d:71:84:b7:55:8e:eb: 26:a4:38:fe:6d:26:98:f7:48:c2:23:00:ef:78:d3: 93:44:af:3e:26:a4:7c:db:b2:3d:39:16:f0:14:aa: 71:57:4c:8a:58:5a:3c:05:9c:19:cb:1a:60:41:c6: bb:74:f6:fb:a3:a0:08:3c:cc:1a:d3:c4:8e:90:f6: e3:bc:5b:de:35:12:25:de:dd:63:5b:42:96:03:2c: e2:d4:36:e9:53:08:5c:41:f9:40:a4:10:84:52:c7: d5:c8:3d:1a:54:4f:f3:96:9c:4e:18:79:95:4b:c9: eb:7b:38:62:21:2d:5b:20:3e:18:2a:a5:fe:66:66: f4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:00:73:B3:C7:88:D4:CA:51:9E:45:8F:73:81:D7:9C:1B:A7:11:58 X509v3 Authority Key Identifier: keyid:4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:24:65:1d:3f:1d:fa:8e:64:29:36:54:94:12:ec:e1:9f:af: 90:fd:b6:16:d3:80:12:95:f6:b6:e1:db:c1:6e:8f:24:4c:23: 15:df:91:44:70:15:12:9f:ad:3f:4b:8b:50:a1:19:4b:b8:5b: ea:20:77:d1:de:1e:5f:82:85:bb:3a:77:69:95:16:15:ea:a5: 45:89:78:d7:ad:ad:e8:77:82:97:cd:20:51:8a:b1:b3:3c:12: a9:55:a1:8d:65:cb:33:8b:ee:7c:e5:42:55:1c:69:de:77:ba: 06:aa:f9:e1:95:31:93:ab:79:ed:48:f4:37:97:ec:d6:6d:a4: e0:93:45:a9:3b:f7:d4:67:98:9f:04:a5:d7:86:f7:59:fd:30: 64:ab:5e:32:6d:d4:23:37:69:45:fc:f3:f5:55:9d:fe:e3:9c: 6c:4c:51:16:46:19:6c:51:66:f9:f6:fc:3d:df:13:5e:8d:4c: 3c:ea:c1:46:9c:bc:2f:79:83:17:af:a5:18:e5:cb:fe:6d:02: 4b:51:c5:bc:a1:e9:eb:09:00:79:e8:4c:46:91:b9:3a:4f:ae: 3d:23:80:b9:de:40:09:00:e9:3c:df:8f:14:21:5b:c2:90:ed: cd:03:75:a9:ad:51:ed:90:fc:54:ec:06:6b:cb:59:46:e8:15: 43:2f:86:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzhGNTExMC8GA1UEBRMoNEZGNTRERUFCQUQ0OTQ1NTkyNTEwMTJBQTVBQzIyMjk1 MENCMjYxRTAeFw0yNTA1MzEwNzIwNTZaFw0yNTA2MDcwNzIwNTZaMBgxFjAUBgNV BAMTDTY4M2FhZGQ4LTYwM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9mvXHASoyLC/sTkPR6tG5kkgdKtbxdFW96wRbW9IgSkrHV+M+laI9FDvhO+ue 6zHoXjHNzgSXmS7D6jGsRML3bqs6IGdfWUhzCrcmgU+TDHiQe6qwPG0K4xpRJLKX 0hDkE9za07NGkogRZVWU42UXMEvjJun3Pc/DAwguA0vXjXGEt1WO6yakOP5tJpj3 SMIjAO9405NErz4mpHzbsj05FvAUqnFXTIpYWjwFnBnLGmBBxrt09vujoAg8zBrT xI6Q9uO8W941EiXe3WNbQpYDLOLUNulTCFxB+UCkEIRSx9XIPRpUT/OWnE4YeZVL yet7OGIhLVsgPhgqpf5mZvQhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7ABzs8eI 1MpRnkWPc4HXnBunEVgwHwYDVR0jBBgwFoAUT/VN6rrUlFWSUQEqpawiKVDLJh4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzOEY1L0YwMjYzRkYwMDI1 QjExRjA5QUNGRDkxMEM0RjlBRTAyL1RfVk42cnJVbEZXU1VRRXFwYXdpS1ZETEpo NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVF9WTjZyclVsRldTVVFFcXBhd2lLVkRMSmg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz OEY1L0YwMjYzRkYwMDI1QjExRjA5QUNGRDkxMEM0RjlBRTAyL1RfVk42cnJVbEZX U1VRRXFwYXdpS1ZETEpoNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJAkZR0/HfqOZCk2VJQS7OGfr5D9thbTgBKV9rbh28FujyRMIxXfkURw FRKfrT9Li1ChGUu4W+ogd9HeHl+Chbs6d2mVFhXqpUWJeNetreh3gpfNIFGKsbM8 EqlVoY1lyzOL7nzlQlUcad53ugaq+eGVMZOree1I9DeX7NZtpOCTRak799RnmJ8E pdeG91n9MGSrXjJt1CM3aUX88/VVnf7jnGxMURZGGWxRZvn2/D3fE16NTDzqwUac vC95gxevpRjly/5tAktRxbyh6esJAHnoTEaRuTpPrj0jgLneQAkA6TzfjxQhW8KQ 7c0DdamtUe2Q/FTsBmvLWUboFUMvhvo= -----END CERTIFICATE-----Generated at Sat May 31 16:34:56 2025 by rpki-client