$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft File: V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft (raw, json) Hash identifier: NTWAJUAKl8a9jZoxJdYaCNUcqRSpql/a7GnEOBhJXAY= Subject key identifier: ED:5C:9D:B7:86:21:DD:E3:AB:B9:50:FB:85:ED:B2:DF:11:23:66:D9 Authority key identifier: 57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33 Certificate issuer: /CN=A91B7A3F/serialNumber=576C5447C09B597107B770C101C89327F105BD33 Certificate serial: 03B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft Manifest number: 03B3 Signing time: Sat 31 May 2025 00:53:29 +0000 Manifest this update: Sat 31 May 2025 00:53:29 +0000 Manifest next update: Sat 07 Jun 2025 00:53:29 +0000 Files and hashes: 1: V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl (hash: ru2a/qzq0qGGAC5BnLhi37eGlJrjV4GgRNxzKgpTAdM=) 2: 821CAFEE923811EC955B7A3AC4F9AE02.roa (hash: 9KQWUlz6QNm+2IJYVtG7dsHf8uD3C5dcvLfvCk8SVA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 953 (0x3b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7A3F, serialNumber=576C5447C09B597107B770C101C89327F105BD33 Validity Not Before: May 31 00:53:29 2025 GMT Not After : Jun 7 00:53:29 2025 GMT Subject: CN=683a5309-298c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ba:f2:ca:ba:80:3e:9d:b7:ed:fc:69:ba:46: 5a:a3:b6:4a:e6:86:9e:82:de:50:e3:c6:21:85:2a: c5:f8:c4:88:4d:cf:d8:07:2d:02:1f:a2:b9:82:5f: 39:26:7a:4f:90:1c:b0:4d:50:16:89:3c:77:f1:f1: af:5b:e9:41:dc:4a:4e:b6:5f:9f:c6:18:f5:9c:a5: 36:83:67:68:e1:e1:a5:2b:3c:36:6b:03:b4:2f:2b: 10:22:13:1a:ae:b8:67:cb:72:65:f6:a4:c1:6b:bc: 91:d1:07:f5:53:9b:06:aa:69:72:fd:2b:1a:b2:91: 68:72:e8:78:88:cd:a1:ad:56:f4:b9:c2:48:54:74: fb:dc:61:16:8b:d6:e1:4f:be:4a:a6:5f:37:81:d7: af:9f:19:20:e3:fa:21:68:fa:2f:58:2c:97:ef:8a: 56:91:45:b1:4d:c7:2e:c6:f1:c6:42:5a:34:d4:68: b1:8d:d2:35:a6:86:db:02:09:c5:fb:23:79:a5:d0: 74:85:78:1e:a4:e7:de:e6:e8:a5:37:a7:83:29:ed: 31:e4:72:4d:6f:aa:83:57:a8:ec:14:c8:30:b2:35: a6:2e:65:b1:a8:67:ed:7a:1c:ee:7b:5c:72:61:7d: 58:22:1c:b6:fe:f1:b3:89:8f:a1:1d:14:93:43:e9: 1d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5C:9D:B7:86:21:DD:E3:AB:B9:50:FB:85:ED:B2:DF:11:23:66:D9 X509v3 Authority Key Identifier: keyid:57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:58:0f:0d:1b:b2:06:56:ea:f6:7d:01:42:26:04:d1:ad:2d: 06:cb:d6:00:3f:43:47:0b:bb:c3:19:a2:26:3e:26:5a:1d:7b: fb:95:72:10:f8:7a:86:ea:76:c1:43:ff:ce:b3:c7:d8:05:5e: 15:56:e3:6f:b8:65:ec:8a:c5:34:61:a8:09:7e:da:b1:ae:74: bc:d3:cb:37:ea:cc:1a:ff:ca:23:34:70:49:56:8a:a8:f3:2c: 47:20:a5:34:c5:af:cb:c5:34:ee:f2:73:ab:d0:7a:a7:f0:23: ff:f4:7b:f8:d6:0e:1b:4d:9d:cc:f5:4a:d6:45:e5:29:56:9e: c7:26:1c:04:aa:27:aa:38:88:96:3a:62:b3:6c:4f:e4:c8:b0: 81:65:c6:2d:67:c8:81:1e:f6:03:6b:56:dd:be:20:62:dc:c1: d0:26:26:32:c0:68:69:ea:8a:eb:ad:8e:7b:1f:03:2b:bc:8d: 5f:72:83:98:d7:55:c4:c8:17:f1:34:7c:3b:77:f6:4c:5e:2f: 69:ae:d1:f3:14:37:f2:21:a2:75:d2:d3:be:18:4e:c5:f6:df: fb:bc:2d:98:bc:37:60:6f:2a:a8:6e:d0:ed:f5:d2:6c:6a:86: d2:7f:50:63:12:d2:cb:97:0b:ce:2f:3d:a7:15:73:f0:ac:22: c0:3b:5b:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdBM0YxMTAvBgNVBAUTKDU3NkM1NDQ3QzA5QjU5NzEwN0I3NzBDMTAxQzg5MzI3 RjEwNUJEMzMwHhcNMjUwNTMxMDA1MzI5WhcNMjUwNjA3MDA1MzI5WjAYMRYwFAYD VQQDEw02ODNhNTMwOS0yOThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybryyrqAPp237fxpukZao7ZK5oaegt5Q48YhhSrF+MSITc/YBy0CH6K5gl85 JnpPkBywTVAWiTx38fGvW+lB3EpOtl+fxhj1nKU2g2do4eGlKzw2awO0LysQIhMa rrhny3Jl9qTBa7yR0Qf1U5sGqmly/SsaspFocuh4iM2hrVb0ucJIVHT73GEWi9bh T75Kpl83gdevnxkg4/ohaPovWCyX74pWkUWxTccuxvHGQlo01GixjdI1pobbAgnF +yN5pdB0hXgepOfe5uilN6eDKe0x5HJNb6qDV6jsFMgwsjWmLmWxqGftehzue1xy YX1YIhy2/vGziY+hHRSTQ+kd7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1cnbeG Id3jq7lQ+4Xtst8RI2bZMB8GA1UdIwQYMBaAFFdsVEfAm1lxB7dwwQHIkyfxBb0z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0EzRi82NEMzMzk0ODky MzUxMUVDOTYwNDc1MTFDNEY5QUUwMi9WMnhVUjhDYldYRUh0M0RCQWNpVEpfRUZ2 VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1YyeFVSOENiV1hFSHQzREJBY2lUSl9FRnZUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0EzRi82NEMzMzk0ODkyMzUxMUVDOTYwNDc1MTFDNEY5QUUwMi9WMnhVUjhDYldY RUh0M0RCQWNpVEpfRUZ2VE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjWA8NG7IGVur2fQFCJgTRrS0Gy9YAP0NHC7vDGaImPiZaHXv7lXIQ +HqG6nbBQ//Os8fYBV4VVuNvuGXsisU0YagJftqxrnS808s36swa/8ojNHBJVoqo 8yxHIKU0xa/LxTTu8nOr0Hqn8CP/9Hv41g4bTZ3M9UrWReUpVp7HJhwEqieqOIiW OmKzbE/kyLCBZcYtZ8iBHvYDa1bdviBi3MHQJiYywGhp6orrrY57HwMrvI1fcoOY 11XEyBfxNHw7d/ZMXi9prtHzFDfyIaJ10tO+GE7F9t/7vC2YvDdgbyqobtDt9dJs aobSf1BjEtLLlwvOLz2nFXPwrCLAO1tV -----END CERTIFICATE-----Generated at Sat May 31 16:45:47 2025 by rpki-client