$ rpki-client -vvf rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft File: vBtEbpc35JZMB6uMttwYBtbr_5s.mft (raw, json) Hash identifier: T5fZtwFH56EJ51+i+l5j8jHGh0vdXOH3pI0Io8/65UM= Subject key identifier: 38:1E:84:B3:CF:54:F2:CB:94:08:9F:35:5E:0D:94:CB:C7:04:AB:E0 Authority key identifier: BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B Certificate issuer: /CN=A91C73A7/serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B Certificate serial: 0695 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft Manifest number: 0690 Signing time: Fri 30 May 2025 22:26:27 +0000 Manifest this update: Fri 30 May 2025 22:26:26 +0000 Manifest next update: Fri 06 Jun 2025 22:26:26 +0000 Files and hashes: 1: vBtEbpc35JZMB6uMttwYBtbr_5s.crl (hash: JfJb3aXmuQmjlU4tBk7uPhhz5S//yb5WfwyNp0vdkq0=) 2: 6BD6CD146F7F11EBB1A2C853C4F9AE02.roa (hash: I+eEa2BCG1ocgDoHBOIM7GqSJBtmqFy6z+9Rb7P5WKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1685 (0x695) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C73A7, serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B Validity Not Before: May 30 22:26:26 2025 GMT Not After : Jun 6 22:26:26 2025 GMT Subject: CN=683a3093-1838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d8:69:d3:25:a3:70:b3:49:d5:6c:93:06:7a: f5:40:22:f2:1a:00:2f:74:68:70:c8:43:c4:ad:33: 3b:48:b6:05:48:91:13:e5:85:c6:de:0d:77:3e:7a: a2:31:7c:1c:9e:3b:03:1a:ab:58:58:82:91:fc:d9: c6:af:4b:2d:8a:76:ea:b7:d2:35:56:50:18:92:90: ea:f0:8e:a7:19:3b:89:ae:3f:e9:50:90:f0:e2:3f: 78:0f:cb:b2:9f:a4:eb:25:f0:2e:8e:bf:4f:d6:75: bd:88:83:50:b5:7a:10:f1:5f:2e:65:61:e5:5e:bd: 18:fe:1e:aa:61:fe:fd:cf:26:9e:bc:d2:f9:d4:9b: 84:c7:5f:e2:1f:b3:44:1c:8b:c7:a6:f5:f7:28:f9: 8c:24:cf:91:7e:00:c9:10:f5:2b:c0:13:5d:30:45: 36:eb:f2:a2:f1:f0:01:cd:3f:b5:0a:aa:05:8b:a8: cd:ba:b3:b0:21:cf:2d:d0:43:f7:0a:a5:f0:34:12: cb:21:57:3d:0d:67:b6:99:79:73:20:bc:ff:04:f1: 98:ac:34:e8:e4:d8:c5:ef:89:03:69:bc:e8:2e:67: 5d:98:8c:2b:87:c7:f0:5b:ab:18:ba:12:69:c3:7f: 9b:c6:ab:4a:88:5f:aa:7c:0f:24:4a:1b:a2:a7:5e: 4c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:1E:84:B3:CF:54:F2:CB:94:08:9F:35:5E:0D:94:CB:C7:04:AB:E0 X509v3 Authority Key Identifier: keyid:BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:fd:0b:b5:67:9d:84:c4:b2:ad:ab:c3:2a:ab:18:76:47:f3: 55:87:6e:fe:db:21:85:64:f0:2c:d9:46:57:d6:fb:c8:3c:81: 8a:bf:b3:3c:c5:a9:f7:3c:fa:98:2c:77:45:50:82:69:d1:d5: f0:cb:8d:bc:0a:1a:8a:09:1d:31:94:b6:52:e9:26:d1:11:de: d0:7a:bd:30:2e:83:5c:a6:d3:b9:a5:01:5d:6b:96:cb:b4:86: 38:aa:07:3e:db:7e:d6:c0:7c:ac:9f:2e:b4:84:57:62:cd:f2: 9c:a0:c2:54:c9:b8:c0:44:cd:a6:4d:33:0d:8a:94:ae:2b:0b: 09:11:bc:8a:8e:9c:f8:b4:80:90:06:77:5e:b9:47:a4:50:dd: 61:85:29:12:8a:56:3f:28:bd:ed:8e:19:e1:54:f8:4c:b2:1a: f4:ee:b8:5e:32:59:5b:69:b8:01:32:94:7e:48:5e:61:3b:a5: 71:60:43:1f:bf:23:b7:6d:ee:23:44:73:62:05:6f:7f:bd:1b: 87:49:f2:67:cb:f3:67:10:cf:52:02:1b:fd:1b:03:37:b4:7e: 5c:96:f4:37:c2:36:5f:5e:e0:70:57:5f:60:d6:1a:82:53:2c: dd:c5:9a:28:0f:dd:32:e9:c8:72:90:59:df:db:05:e4:39:7d: cc:cb:c1:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczQTcxMTAvBgNVBAUTKEJDMUI0NDZFOTczN0U0OTY0QzA3QUI4Q0I2REMxODA2 RDZFQkZGOUIwHhcNMjUwNTMwMjIyNjI2WhcNMjUwNjA2MjIyNjI2WjAYMRYwFAYD VQQDEw02ODNhMzA5My0xODM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNhp0yWjcLNJ1WyTBnr1QCLyGgAvdGhwyEPErTM7SLYFSJET5YXG3g13Pnqi MXwcnjsDGqtYWIKR/NnGr0stinbqt9I1VlAYkpDq8I6nGTuJrj/pUJDw4j94D8uy n6TrJfAujr9P1nW9iINQtXoQ8V8uZWHlXr0Y/h6qYf79zyaevNL51JuEx1/iH7NE HIvHpvX3KPmMJM+RfgDJEPUrwBNdMEU26/Ki8fABzT+1CqoFi6jNurOwIc8t0EP3 CqXwNBLLIVc9DWe2mXlzILz/BPGYrDTo5NjF74kDabzoLmddmIwrh8fwW6sYuhJp w3+bxqtKiF+qfA8kShuip15MGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgehLPP VPLLlAifNV4NlMvHBKvgMB8GA1UdIwQYMBaAFLwbRG6XN+SWTAerjLbcGAbW6/+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzNBNy8yRDJDQjM0MDZG N0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVKWk1CNnVNdHR3WUJ0YnJf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZCdEVicGMzNUpaTUI2dU10dHdZQnRicl81cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzNBNy8yRDJDQjM0MDZGN0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVK Wk1CNnVNdHR3WUJ0YnJfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy/Qu1Z52ExLKtq8Mqqxh2R/NVh27+2yGFZPAs2UZX1vvIPIGKv7M8 xan3PPqYLHdFUIJp0dXwy428ChqKCR0xlLZS6SbREd7Qer0wLoNcptO5pQFda5bL tIY4qgc+237WwHysny60hFdizfKcoMJUybjARM2mTTMNipSuKwsJEbyKjpz4tICQ BndeuUekUN1hhSkSilY/KL3tjhnhVPhMshr07rheMllbabgBMpR+SF5hO6VxYEMf vyO3be4jRHNiBW9/vRuHSfJny/NnEM9SAhv9GwM3tH5clvQ3wjZfXuBwV19g1hqC UyzdxZooD90y6chykFnf2wXkOX3My8Hh -----END CERTIFICATE-----Generated at Sat May 31 17:26:20 2025 by rpki-client