$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft File: VNOpVcw0GoQYFajN6hkK6lEC384.mft (raw, json) Hash identifier: b010MvTZRiO4X9vKb4ud408vvg2h/A3/xFaRca5LCtI= Subject key identifier: 65:E4:EC:5E:F3:9C:D6:1E:14:23:44:34:31:9B:D5:1E:DB:2B:91:F3 Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE Certificate issuer: /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Certificate serial: 0C42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft Manifest number: 0C3C Signing time: Fri 30 May 2025 18:39:44 +0000 Manifest this update: Fri 30 May 2025 18:39:43 +0000 Manifest next update: Fri 06 Jun 2025 18:39:43 +0000 Files and hashes: 1: VNOpVcw0GoQYFajN6hkK6lEC384.crl (hash: V/jAJadGESpP+nYRmiy9NDJmDo7QUOBPGlHfuHWKI94=) 2: 86B7FE9005FF11EAB499A845C4F9AE02.roa (hash: zdVWhh1fLYpRD960eUnMlAOzWPZg7F1+V76js4O1Hfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3138 (0xc42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FAC, serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Validity Not Before: May 30 18:39:43 2025 GMT Not After : Jun 6 18:39:43 2025 GMT Subject: CN=6839fb6f-e4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d1:1f:5e:3a:96:35:c5:29:84:70:4f:e6:c7: 42:30:b3:47:86:a0:d2:3e:99:c6:00:c7:32:ed:8b: a6:bb:94:92:fd:8d:b2:b7:c1:01:09:b3:6e:ce:17: 5a:c2:6b:a4:85:a4:fb:72:39:cb:e9:d3:e4:3b:d3: 2c:36:9e:02:36:f7:b4:31:06:fa:60:08:53:e9:75: ce:7a:ab:07:3a:e1:cf:43:46:30:35:57:5a:50:51: ed:f4:a3:17:f3:2d:f9:7d:70:95:97:cc:ae:4e:72: a3:e8:59:a9:38:2d:b3:7c:f5:d5:49:02:a5:78:f1: a2:45:11:1a:09:96:33:30:77:37:b7:59:a9:f3:a7: 2f:84:05:48:fb:95:cd:b4:7a:9f:45:88:b9:cd:97: 23:3c:3a:6d:74:d8:3d:50:fd:07:de:7c:74:d7:c2: e9:30:54:80:99:cf:e0:fa:52:ac:eb:40:8d:e0:49: 25:aa:78:2b:a5:df:70:e7:07:13:3c:4e:b8:bd:b6: ff:c1:69:e7:63:f0:61:bb:9d:6a:40:e4:ae:79:68: 8d:35:30:03:8b:d5:aa:75:93:a7:6e:22:f4:38:cf: 32:f9:2c:7c:38:17:48:6b:1a:a1:7b:59:bb:bd:a6: 7b:06:9c:0b:f4:00:4c:e6:22:91:9a:b3:bc:8e:ae: 39:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E4:EC:5E:F3:9C:D6:1E:14:23:44:34:31:9B:D5:1E:DB:2B:91:F3 X509v3 Authority Key Identifier: keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:f3:0d:c8:7f:55:6e:6c:3c:70:71:96:cf:3a:c2:08:5e:a4: 7f:ab:26:cd:20:67:5a:79:27:a1:e5:e8:9f:f2:4c:af:56:3e: 6a:4f:f8:bd:d3:e4:55:93:c9:a9:8a:bc:9f:29:61:35:77:22: 7e:bb:31:7f:fd:3a:ab:f1:ee:bb:0c:85:5d:84:7b:27:65:56: 3b:ed:47:a8:e1:f1:b9:d5:7c:af:f4:13:26:98:fd:4b:9d:2b: 49:15:5b:42:3e:94:6d:d5:68:4f:d5:33:fa:9f:48:e7:af:dd: e7:a9:1c:30:1e:83:08:8b:e5:cd:b1:a8:1e:f1:1d:12:61:49: cc:08:25:a6:79:c5:4c:23:cc:fe:6e:95:4c:26:07:4d:f2:20: ed:68:5c:51:9a:0f:27:de:0e:13:a9:5f:9e:10:71:3a:4d:dd: 24:9a:c2:0f:08:00:ad:d9:9d:b1:08:f0:64:e5:7b:44:11:b8: ed:12:61:28:db:7f:cf:72:a9:5d:6a:36:fa:44:18:35:c4:6e: 92:cc:ee:ed:c2:72:bb:41:60:0c:9d:61:6e:9f:4d:8b:20:ec: 74:07:53:46:c2:03:79:c4:b9:a1:13:4c:52:7e:3b:da:3c:95: 3c:a0:cd:f4:7e:54:31:03:6a:03:7a:b4:d4:06:dd:26:b1:44: b8:e4:87:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQUMxMTAvBgNVBAUTKDU0RDNBOTU1Q0MzNDFBODQxODE1QThDREVBMTkwQUVB NTEwMkRGQ0UwHhcNMjUwNTMwMTgzOTQzWhcNMjUwNjA2MTgzOTQzWjAYMRYwFAYD VQQDEw02ODM5ZmI2Zi1lNGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NEfXjqWNcUphHBP5sdCMLNHhqDSPpnGAMcy7Yumu5SS/Y2yt8EBCbNuzhda wmukhaT7cjnL6dPkO9MsNp4CNve0MQb6YAhT6XXOeqsHOuHPQ0YwNVdaUFHt9KMX 8y35fXCVl8yuTnKj6FmpOC2zfPXVSQKlePGiRREaCZYzMHc3t1mp86cvhAVI+5XN tHqfRYi5zZcjPDptdNg9UP0H3nx018LpMFSAmc/g+lKs60CN4Eklqngrpd9w5wcT PE64vbb/wWnnY/Bhu51qQOSueWiNNTADi9WqdZOnbiL0OM8y+Sx8OBdIaxqhe1m7 vaZ7BpwL9ABM5iKRmrO8jq45NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXk7F7z nNYeFCNENDGb1R7bK5HzMB8GA1UdIwQYMBaAFFTTqVXMNBqEGBWozeoZCupRAt/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBQy82ODE5QkY0MjA1 RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdvUVlGYWpONmhrSzZsRUMz ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZOT3BWY3cwR29RWUZhak42aGtLNmxFQzM4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZBQy82ODE5QkY0MjA1RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdv UVlGYWpONmhrSzZsRUMzODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR8w3If1VubDxwcZbPOsIIXqR/qybNIGdaeSeh5eif8kyvVj5qT/i9 0+RVk8mpiryfKWE1dyJ+uzF//Tqr8e67DIVdhHsnZVY77Ueo4fG51Xyv9BMmmP1L nStJFVtCPpRt1WhP1TP6n0jnr93nqRwwHoMIi+XNsage8R0SYUnMCCWmecVMI8z+ bpVMJgdN8iDtaFxRmg8n3g4TqV+eEHE6Td0kmsIPCACt2Z2xCPBk5XtEEbjtEmEo 23/Pcqldajb6RBg1xG6SzO7twnK7QWAMnWFun02LIOx0B1NGwgN5xLmhE0xSfjva PJU8oM30flQxA2oDerTUBt0msUS45IfQ -----END CERTIFICATE-----Generated at Sat May 31 15:29:58 2025 by rpki-client