$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft File: vK5XMu8hlzK0msgoTbGBTpLIaxE.mft (raw, json) Hash identifier: ICiyA8L7w7sDUXxlkndC9MGufx2/DKeWIiwk5ipp9tw= Subject key identifier: 81:FB:5E:79:32:1B:72:E7:CE:9A:97:1C:8C:B5:96:2E:B9:BE:EE:86 Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 Certificate issuer: /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Certificate serial: 088B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft Manifest number: 087D Signing time: Mon 02 Jun 2025 20:48:26 +0000 Manifest this update: Mon 02 Jun 2025 20:48:25 +0000 Manifest next update: Mon 09 Jun 2025 20:48:25 +0000 Files and hashes: 1: vK5XMu8hlzK0msgoTbGBTpLIaxE.crl (hash: AqBJf/NZbnj29Yeaq1YQSOTGqovmyU04KYLjXhdAnNw=) 2: 2015E6B2C66F11EAA0B1B019C4F9AE02.roa (hash: h3J4Tvd13De8oeu9y10qw5WhotHnj9E107WlmlhLTLE=) 3: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (hash: WRLRqvOq3SfDppm3IqDFX7iVTIlxw9qpmPcVf6+EH5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2187 (0x88b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Validity Not Before: Jun 2 20:48:25 2025 GMT Not After : Jun 9 20:48:25 2025 GMT Subject: CN=683e0e1a-8d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:57:9c:c6:e2:b9:38:4c:11:f0:52:d8:17:fc: 31:69:8d:cc:25:23:db:58:0b:0a:ff:69:4b:d3:21: 67:3f:fa:a8:af:58:f9:dd:42:53:44:85:9b:a0:1e: e4:8b:1b:b8:be:1f:c8:17:57:c6:f2:df:12:d6:4c: e4:4b:e4:df:5c:bb:77:d8:7d:49:cf:51:fa:be:79: ca:56:3a:86:9f:a2:e8:7f:4b:a5:d4:fa:13:c7:9d: 9b:ba:d6:f5:fa:5e:9d:16:d1:29:68:83:94:8d:de: fb:f0:99:99:82:82:16:10:fa:31:1d:82:5a:2c:fb: e7:d3:84:49:91:4e:20:83:c3:67:ca:2c:43:98:0a: 8c:41:24:b7:17:ce:5e:25:d7:93:a6:6c:81:5c:d3: b5:27:a1:06:57:f9:76:13:9e:06:49:cd:e2:64:2d: fa:a9:3c:30:23:27:5b:42:24:28:bb:1c:1b:fb:1b: 72:61:d3:5e:f1:73:68:c7:29:9a:ee:2c:08:3b:72: e7:6e:2a:f2:2f:5c:4f:0f:ff:db:16:cf:6f:13:f2: 79:4f:48:db:b9:1a:6a:69:51:2e:f6:37:ae:ce:0c: 81:61:9c:49:8f:7d:28:54:5a:93:d1:60:a9:10:1e: 72:a9:6a:3a:a8:8c:d4:18:e3:f0:2a:c9:09:6c:b1: 4c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FB:5E:79:32:1B:72:E7:CE:9A:97:1C:8C:B5:96:2E:B9:BE:EE:86 X509v3 Authority Key Identifier: keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:4b:d6:a4:25:76:2d:79:8f:83:de:a5:d5:43:de:e2:f0:2b: 08:20:e7:f9:fe:8a:90:6a:2c:38:af:8c:2d:fc:8c:23:6a:af: 98:15:f7:0a:a2:05:56:99:e3:20:e0:12:96:f1:f2:23:b4:f7: 46:df:1e:aa:f8:ff:de:e0:50:ed:7c:b2:64:0a:3a:d5:6b:8a: 9f:c8:58:0c:71:ca:48:83:aa:fb:6b:f5:48:f6:ea:22:aa:16: 49:02:ba:9c:a1:89:6c:6a:e0:88:ff:f5:39:c6:08:13:11:3b: 35:23:25:58:ba:f5:50:6b:42:6f:34:0d:45:32:e2:49:83:f2: 20:4d:3f:5b:da:8c:ee:e1:5a:fe:3b:ee:cc:bc:04:09:c4:07: a5:6c:25:e4:a0:58:36:25:9d:b4:7a:0b:d7:f3:b3:c9:e0:1c: f2:dd:11:1e:62:58:7a:5e:be:9d:ad:e7:35:f7:9f:d4:27:8d: 7e:93:ae:0f:0a:80:7b:11:fc:fd:b4:94:2d:89:cb:6a:1b:3d: 39:b6:72:bd:b2:bd:1e:89:e0:cf:ff:1b:2b:2c:06:1f:57:cb: ab:79:95:f3:3a:16:70:b0:fa:59:4b:d7:88:17:77:58:61:1f: b1:a4:30:67:b0:cf:af:bd:0c:73:d9:c4:86:17:20:4e:e5:a3: d8:41:cb:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1M0IxMTAvBgNVBAUTKEJDQUU1NzMyRUYyMTk3MzJCNDlBQzgyODREQjE4MTRF OTJDODZCMTEwHhcNMjUwNjAyMjA0ODI1WhcNMjUwNjA5MjA0ODI1WjAYMRYwFAYD VQQDEw02ODNlMGUxYS04ZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVecxuK5OEwR8FLYF/wxaY3MJSPbWAsK/2lL0yFnP/qor1j53UJTRIWboB7k ixu4vh/IF1fG8t8S1kzkS+TfXLt32H1Jz1H6vnnKVjqGn6Lof0ul1PoTx52butb1 +l6dFtEpaIOUjd778JmZgoIWEPoxHYJaLPvn04RJkU4gg8NnyixDmAqMQSS3F85e JdeTpmyBXNO1J6EGV/l2E54GSc3iZC36qTwwIydbQiQouxwb+xtyYdNe8XNoxyma 7iwIO3LnbiryL1xPD//bFs9vE/J5T0jbuRpqaVEu9jeuzgyBYZxJj30oVFqT0WCp EB5yqWo6qIzUGOPwKskJbLFMIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIH7Xnky G3LnzpqXHIy1li65vu6GMB8GA1UdIwQYMBaAFLyuVzLvIZcytJrIKE2xgU6SyGsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjUzQi8yOTM4M0NERUMy MEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6SzBtc2dvVGJHQlRwTElh eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLNVhNdThobHpLMG1zZ29UYkdCVHBMSWF4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjUzQi8yOTM4M0NERUMyMEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6 SzBtc2dvVGJHQlRwTElheEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0S9akJXYteY+D3qXVQ97i8CsIIOf5/oqQaiw4r4wt/Iwjaq+YFfcK ogVWmeMg4BKW8fIjtPdG3x6q+P/e4FDtfLJkCjrVa4qfyFgMccpIg6r7a/VI9uoi qhZJArqcoYlsauCI//U5xggTETs1IyVYuvVQa0JvNA1FMuJJg/IgTT9b2ozu4Vr+ O+7MvAQJxAelbCXkoFg2JZ20egvX87PJ4Bzy3REeYlh6Xr6drec195/UJ41+k64P CoB7Efz9tJQtictqGz05tnK9sr0eieDP/xsrLAYfV8ureZXzOhZwsPpZS9eIF3dY YR+xpDBnsM+vvQxz2cSGFyBO5aPYQcs2 -----END CERTIFICATE-----Generated at Wed Jun 4 11:58:56 2025 by rpki-client