$ rpki-client -vvf rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft File: vUxEHwLHrdQvpiQugzHZP1nlGDo.mft (raw, json) Hash identifier: hVcn43uQq4widf8Zf65ceuwhvGNwvso2N8PYKBM53QU= Subject key identifier: ED:82:3F:51:37:CB:60:54:29:47:B1:CA:2F:90:6A:68:AE:FB:2C:47 Authority key identifier: BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A Certificate issuer: /CN=A91C67F9/serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft Manifest number: 01C6 Signing time: Sat 31 May 2025 02:44:24 +0000 Manifest this update: Sat 31 May 2025 02:44:24 +0000 Manifest next update: Sat 07 Jun 2025 02:44:24 +0000 Files and hashes: 1: vUxEHwLHrdQvpiQugzHZP1nlGDo.crl (hash: qTHV+ryXHaXZsnMqAd8Oo4P6C1kHhq+Ei1G9lliMCxo=) 2: 079523028DB211ED910C330CC4F9AE02.roa (hash: W9Hoie4kNxclHpEMWbcvds2qMQa9C1Hni+pmtAE5bWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C67F9, serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A Validity Not Before: May 31 02:44:24 2025 GMT Not After : Jun 7 02:44:24 2025 GMT Subject: CN=683a6d08-5b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c5:93:a1:ae:7e:7e:69:c9:ee:7e:32:31:83: 2f:6f:13:d2:48:5b:09:6e:c5:37:7a:2c:c6:bb:05: 5e:6f:ff:8a:e2:b8:e3:0a:fe:06:24:a9:63:6e:aa: 64:94:f6:1c:ba:b6:7e:0e:06:00:d2:af:61:27:99: 16:7e:0e:80:6a:5d:dc:e5:d9:67:f2:cc:4a:d3:c4: 10:88:4e:78:96:94:3a:d0:94:fc:85:22:8d:52:90: 94:dd:52:79:8f:1f:b2:39:1a:36:84:c7:70:14:1b: 84:67:17:df:9d:f4:34:be:eb:01:27:4a:5b:9f:8c: e5:9e:8d:03:b4:e1:5a:e1:a4:7f:73:dd:17:1c:8c: c0:24:9c:ec:c5:49:f7:47:17:f5:ca:3f:c6:9c:d4: 58:95:53:3a:f9:87:c4:b3:4c:54:e2:4f:a3:79:5f: 7a:f4:7b:27:0c:5f:5f:34:9e:c0:8b:db:3f:fe:6d: 92:aa:fb:a0:d3:f9:1f:11:24:24:5a:1d:5f:3c:52: e7:0e:f3:87:4e:9f:df:c1:1a:f6:bc:3d:49:67:51: 02:90:eb:5a:e4:e3:1b:c8:21:13:50:d8:3a:ae:42: 1c:4a:f7:b3:0e:c6:9a:c7:e9:db:ae:f6:f5:26:97: bb:f4:91:f2:a8:e8:9d:c2:ee:5b:0d:71:5f:31:5a: 5f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:82:3F:51:37:CB:60:54:29:47:B1:CA:2F:90:6A:68:AE:FB:2C:47 X509v3 Authority Key Identifier: keyid:BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:c0:53:5d:4e:7f:c2:c3:36:2f:44:d9:58:f0:b0:81:1a:d6: 04:4a:cb:b5:dc:65:8f:cc:b1:3b:53:f2:03:83:a5:39:ca:4a: f7:dc:b7:e8:84:68:09:35:a7:eb:28:0f:ed:a4:09:fa:df:dc: 4c:34:07:7f:5e:6c:a6:59:13:db:13:d3:55:d8:40:86:7f:d1: fe:26:b7:3a:3b:bb:21:aa:0c:c5:df:62:09:c0:f9:49:9a:a9: 41:64:8e:70:51:11:79:76:fc:98:9a:1a:74:06:0b:99:55:8b: 87:ee:4e:f2:13:58:8f:e8:8f:2b:df:cc:86:88:de:9a:5c:b6: cc:41:59:dc:64:de:90:de:f2:6e:97:69:08:3a:6a:8f:73:2c: 01:05:b7:17:bf:25:ab:7f:1d:0b:c2:27:af:38:fd:5b:07:77: 41:2e:4f:d3:b5:0f:c6:41:df:1e:a9:ae:76:cd:97:68:3b:43: 90:de:0a:e8:b6:00:50:70:a4:31:5c:4b:10:45:9f:e9:6d:0d: 62:10:9d:0a:85:64:90:40:24:58:f4:03:69:1c:85:00:74:22: 03:ee:28:40:c8:49:0c:b6:6d:ce:e0:b9:90:bc:13:f7:32:0a: ca:d4:e2:9d:8e:5b:b0:9c:83:8c:7f:91:98:e6:82:9c:53:7f: 64:21:be:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY3RjkxMTAvBgNVBAUTKEJENEM0NDFGMDJDN0FERDQyRkE2MjQyRTgzMzFEOTNG NTlFNTE4M0EwHhcNMjUwNTMxMDI0NDI0WhcNMjUwNjA3MDI0NDI0WjAYMRYwFAYD VQQDEw02ODNhNmQwOC01YjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3cWToa5+fmnJ7n4yMYMvbxPSSFsJbsU3eizGuwVeb/+K4rjjCv4GJKljbqpk lPYcurZ+DgYA0q9hJ5kWfg6Aal3c5dln8sxK08QQiE54lpQ60JT8hSKNUpCU3VJ5 jx+yORo2hMdwFBuEZxffnfQ0vusBJ0pbn4zlno0DtOFa4aR/c90XHIzAJJzsxUn3 Rxf1yj/GnNRYlVM6+YfEs0xU4k+jeV969HsnDF9fNJ7Ai9s//m2Sqvug0/kfESQk Wh1fPFLnDvOHTp/fwRr2vD1JZ1ECkOta5OMbyCETUNg6rkIcSvezDsaax+nbrvb1 Jpe79JHyqOidwu5bDXFfMVpf5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2CP1E3 y2BUKUexyi+Qamiu+yxHMB8GA1UdIwQYMBaAFL1MRB8Cx63UL6YkLoMx2T9Z5Rg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjdGOS9FQUUxMkU0NDhE QUQxMUVEQjJEQ0M0ODdDNEY5QUUwMi92VXhFSHdMSHJkUXZwaVF1Z3pIWlAxbmxH RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZVeEVId0xIcmRRdnBpUXVnekhaUDFubEdEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjdGOS9FQUUxMkU0NDhEQUQxMUVEQjJEQ0M0ODdDNEY5QUUwMi92VXhFSHdMSHJk UXZwaVF1Z3pIWlAxbmxHRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIwFNdTn/CwzYvRNlY8LCBGtYESsu13GWPzLE7U/IDg6U5ykr33Lfo hGgJNafrKA/tpAn639xMNAd/XmymWRPbE9NV2ECGf9H+Jrc6O7shqgzF32IJwPlJ mqlBZI5wURF5dvyYmhp0BguZVYuH7k7yE1iP6I8r38yGiN6aXLbMQVncZN6Q3vJu l2kIOmqPcywBBbcXvyWrfx0LwievOP1bB3dBLk/TtQ/GQd8eqa52zZdoO0OQ3gro tgBQcKQxXEsQRZ/pbQ1iEJ0KhWSQQCRY9ANpHIUAdCID7ihAyEkMtm3O4LmQvBP3 MgrK1OKdjluwnIOMf5GY5oKcU39kIb6J -----END CERTIFICATE-----Generated at Sat May 31 16:44:59 2025 by rpki-client