$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft File: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft (raw, json) Hash identifier: FEEttSk2cRK42uZzBUYJagogjNe9ox56oulHNsAAmUk= Subject key identifier: C7:62:B6:2E:ED:69:24:29:93:0B:30:E2:17:D0:97:F2:DC:28:1A:71 Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7 Certificate issuer: /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7 Certificate serial: 25DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft Manifest number: 25CD Signing time: Sat 31 May 2025 15:41:39 +0000 Manifest this update: Sat 31 May 2025 15:41:38 +0000 Manifest next update: Sat 07 Jun 2025 15:41:38 +0000 Files and hashes: 1: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl (hash: eyruQw/H4qp1E7XbBEl/Z/p/1nk7M/4WD3jqkhA6+EY=) 2: E2E360EEF3EE11ECBAE10054C4F9AE02.roa (hash: MwkxKey8SdTfX3rA2ndaHPVnUsJ97475p+Dzwmyl9SQ=) 3: E21E1C6CF3EE11ECBAE10054C4F9AE02.roa (hash: UiQJQcjiTKGUKZaMNBKg71L13IK59w5XS6QCL7nnWSE=) 4: E14BDC8EF3EE11ECBAE10054C4F9AE02.roa (hash: gP1rmRhgK5le3CICuUOYmVhhDItIyOhZ8RIHh+3gkE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9695 (0x25df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5B46, serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7 Validity Not Before: May 31 15:41:38 2025 GMT Not After : Jun 7 15:41:38 2025 GMT Subject: CN=683b2333-b32f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5d:8e:7c:d4:a1:26:12:9e:cf:70:ed:2f:05: 54:91:01:05:3f:1c:49:dd:af:31:aa:33:35:54:20: 07:38:b0:ea:4a:42:55:aa:dd:d0:da:27:99:a0:1a: 56:d5:3a:12:8f:c5:af:c5:39:10:c8:d6:12:88:7d: 2b:3c:4f:d7:c5:ae:9d:7f:be:a5:68:32:1c:23:a1: 09:62:f6:89:d4:24:e2:f8:c1:f1:93:96:33:63:5b: 11:39:07:fd:1d:08:40:55:6a:00:9f:dc:81:3f:aa: 05:68:73:e8:c2:af:e9:e7:61:8e:57:52:89:90:ad: 3e:00:83:ac:0c:0e:2f:19:55:b5:30:a8:ee:8b:06: 7e:06:b7:3b:75:29:31:42:32:fc:c8:cb:f5:27:63: ea:91:68:c6:19:f4:0d:95:53:c2:4d:c2:54:19:b5: 38:f7:e3:a5:88:5b:b2:a4:52:77:fe:1f:67:27:9a: ff:b1:b4:81:c1:0a:8c:00:29:11:2e:b6:3a:21:88: 26:03:db:b9:0f:5f:4a:6f:42:60:1c:53:ef:bc:ec: 81:6c:35:5d:ef:bb:0c:12:2b:81:0d:a7:aa:ef:2b: 0d:7c:cf:ae:ee:d2:ff:e6:31:de:16:02:c0:72:a6: f7:a5:a4:bf:12:cf:e5:d9:8c:26:51:79:cc:2c:9b: 38:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:62:B6:2E:ED:69:24:29:93:0B:30:E2:17:D0:97:F2:DC:28:1A:71 X509v3 Authority Key Identifier: keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:02:1f:6a:ba:d0:06:02:d0:24:75:8f:41:85:3f:0f:3c:7e: 33:4d:a1:82:1e:65:9c:15:4a:65:88:1b:74:2e:09:55:15:d4: 0d:19:cb:70:e9:cb:7c:48:f9:d5:8a:39:a7:69:ce:89:b4:c2: f6:91:c5:37:46:1a:91:ef:fa:9a:99:89:54:71:01:f8:6a:1f: 66:69:02:2b:8a:a6:35:ee:df:7e:30:2c:1b:77:54:1f:a9:0e: 32:eb:e2:26:ce:65:ae:80:47:32:b6:2d:9f:85:7f:07:ad:2c: 0a:49:bd:88:3e:1f:12:9d:3f:98:74:ed:48:35:68:5c:39:97: dc:41:92:50:3b:cb:26:65:91:79:cc:61:fb:dc:96:4a:36:90: e4:33:b8:78:2e:13:f7:4f:e3:25:9b:69:2b:26:e7:d1:c1:03: 86:81:23:35:e5:95:f5:ca:ac:c8:5a:79:33:a0:59:06:b8:50: a7:38:2f:a6:11:7d:e4:45:0c:ed:3a:6c:74:50:28:53:94:61: 37:ee:5d:87:07:5d:0e:f3:6c:9f:b4:1c:a6:b4:4c:6f:3f:e3: 47:31:b5:d0:2c:84:97:eb:be:ad:8f:7b:5e:17:41:61:c8:97: f4:62:2d:41:e3:e4:9d:d3:1f:65:9d:ba:a4:16:b8:be:7f:0b: 9c:71:82:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVCNDYxMTAvBgNVBAUTKDU2Q0QzMkQxM0Y4Q0FFMUU5MkY5Qzk3RjM5NUYxQTIz QUJCOUM2RjcwHhcNMjUwNTMxMTU0MTM4WhcNMjUwNjA3MTU0MTM4WjAYMRYwFAYD VQQDEw02ODNiMjMzMy1iMzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAol2OfNShJhKez3DtLwVUkQEFPxxJ3a8xqjM1VCAHOLDqSkJVqt3Q2ieZoBpW 1ToSj8WvxTkQyNYSiH0rPE/Xxa6df76laDIcI6EJYvaJ1CTi+MHxk5YzY1sROQf9 HQhAVWoAn9yBP6oFaHPowq/p52GOV1KJkK0+AIOsDA4vGVW1MKjuiwZ+Brc7dSkx QjL8yMv1J2PqkWjGGfQNlVPCTcJUGbU49+OliFuypFJ3/h9nJ5r/sbSBwQqMACkR LrY6IYgmA9u5D19Kb0JgHFPvvOyBbDVd77sMEiuBDaeq7ysNfM+u7tL/5jHeFgLA cqb3paS/Es/l2YwmUXnMLJs4KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMditi7t aSQpkwsw4hfQl/LcKBpxMB8GA1UdIwQYMBaAFFbNMtE/jK4ekvnJfzlfGiOrucb3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUI0Ni9CQTBCODQzMDAy ODgxMUU1QUUxRTQ3NjFDNEY5QUUwMi9WczB5MFQtTXJoNlMtY2xfT1Y4YUk2dTV4 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZzMHkwVC1Ncmg2Uy1jbF9PVjhhSTZ1NXh2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUI0Ni9CQTBCODQzMDAyODgxMUU1QUUxRTQ3NjFDNEY5QUUwMi9WczB5MFQtTXJo NlMtY2xfT1Y4YUk2dTV4dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/Ah9qutAGAtAkdY9BhT8PPH4zTaGCHmWcFUpliBt0LglVFdQNGctw 6ct8SPnVijmnac6JtML2kcU3RhqR7/qamYlUcQH4ah9maQIriqY17t9+MCwbd1Qf qQ4y6+ImzmWugEcyti2fhX8HrSwKSb2IPh8SnT+YdO1INWhcOZfcQZJQO8smZZF5 zGH73JZKNpDkM7h4LhP3T+Mlm2krJufRwQOGgSM15ZX1yqzIWnkzoFkGuFCnOC+m EX3kRQztOmx0UChTlGE37l2HB10O82yftBymtExvP+NHMbXQLISX676tj3teF0Fh yJf0Yi1B4+Sd0x9lnbqkFri+fwuccYIV -----END CERTIFICATE-----Generated at Sat May 31 17:47:24 2025 by rpki-client