$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft File: vjdwS4x985dWFxlK8q3u2hzJvPY.mft (raw, json) Hash identifier: yUAVU94V3mm9Lwjs9RSZTyJhZhBs+5zkd9WoWdIUun0= Subject key identifier: 1B:C5:BB:F9:C6:1A:30:4F:BB:CF:4D:70:52:21:74:B4:84:8A:4C:CA Authority key identifier: BE:37:70:4B:8C:7D:F3:97:56:17:19:4A:F2:AD:EE:DA:1C:C9:BC:F6 Certificate issuer: /CN=A91D0432/serialNumber=BE37704B8C7DF3975617194AF2ADEEDA1CC9BCF6 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft Manifest number: 01D0 Signing time: Sat 31 May 2025 02:37:23 +0000 Manifest this update: Sat 31 May 2025 02:37:22 +0000 Manifest next update: Sat 07 Jun 2025 02:37:22 +0000 Files and hashes: 1: vjdwS4x985dWFxlK8q3u2hzJvPY.crl (hash: AlB9XAEgxpo0ghyM2gRUQRn4IKk8DYgJm5cG0lFg/e0=) 2: 539DF534D1FB11EDA0A31C2FC4F9AE02.roa (hash: ZwuvYUkBHuPjyaZwcok71ZoBlPTV1oL4tY+NTXiSqLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.crl rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0432, serialNumber=BE37704B8C7DF3975617194AF2ADEEDA1CC9BCF6 Validity Not Before: May 31 02:37:22 2025 GMT Not After : Jun 7 02:37:22 2025 GMT Subject: CN=683a6b63-52a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:91:8c:73:40:9d:0d:a1:f5:fc:a9:11:75:c5: 7f:de:39:98:0b:df:92:9b:44:5c:ac:07:98:fa:80: 33:0f:9f:aa:ef:cc:07:e5:cc:a5:2b:9c:4c:81:e2: e0:ac:ea:34:f8:ea:28:10:81:37:18:4b:b8:1f:59: 6a:ac:cc:4c:0a:3e:b6:bc:70:75:d9:d6:44:dd:18: c0:ca:af:87:af:5a:56:64:89:c9:3d:be:21:c1:e6: 35:d7:28:b6:46:ea:38:08:3a:3f:0f:6f:71:b6:dc: 2e:bf:1f:22:48:a2:9c:01:68:1c:e7:8e:72:e0:3a: 8f:c0:93:ac:2f:15:32:d1:5d:50:7a:41:6d:6d:7b: 05:56:2d:45:6d:e2:c5:72:55:ed:68:fc:cb:22:82: 47:60:aa:af:0c:c4:34:0b:b9:96:27:fc:c2:43:67: cf:11:e1:c0:19:15:b4:00:8d:64:d6:ce:4c:6b:32: 1b:79:d6:e3:96:27:ea:2c:71:bc:50:7d:1d:3b:c7: 15:3e:ac:30:82:52:c8:80:a1:08:0a:e8:3f:7e:7b: d5:67:58:6a:fe:33:fa:5f:15:90:d7:29:be:07:b5: fb:11:21:ed:d8:ac:4e:bd:f5:33:4d:43:fa:00:0c: d9:3d:58:29:e4:ed:14:f9:f4:15:bd:a3:d1:61:62: 45:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C5:BB:F9:C6:1A:30:4F:BB:CF:4D:70:52:21:74:B4:84:8A:4C:CA X509v3 Authority Key Identifier: keyid:BE:37:70:4B:8C:7D:F3:97:56:17:19:4A:F2:AD:EE:DA:1C:C9:BC:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:b0:8d:ea:db:f6:0e:ac:3e:2a:bc:3c:9d:6c:5a:f1:6e:70: d7:3c:b8:75:40:68:ba:73:5d:35:57:8b:c3:78:cf:54:54:17: 3e:30:6b:1c:bf:7a:ed:48:dd:0a:f2:2c:68:39:67:12:ce:2a: 78:31:09:69:f8:47:c0:86:47:4b:2e:0d:07:9b:6a:70:26:af: 04:cc:bd:13:9e:90:9a:3c:fc:a5:0d:b5:7f:66:6e:ed:64:96: b5:5d:95:4c:cf:3d:41:45:2e:02:19:4e:ed:0e:d8:78:4f:4c: 61:24:7a:9e:61:36:b5:7e:93:15:cf:92:23:09:ba:bd:24:a9: bc:6c:55:6b:47:49:fa:f5:f3:67:7c:95:df:83:82:6b:2d:14: ae:57:78:44:e5:d6:cc:b5:f7:57:c5:5c:06:db:e4:1b:a6:09: 72:3c:41:b3:75:71:1f:0d:c7:0e:90:d1:d0:e0:90:2c:e4:5f: e7:dc:b2:f0:f5:b1:88:b7:23:fc:25:d6:43:b5:a2:fa:32:f9: 42:8b:5d:25:0b:46:c6:b5:61:f1:9c:c5:07:65:d1:65:a8:e9: da:f3:c6:49:fe:ec:54:e4:ef:55:2f:a5:a7:38:9c:44:97:54: 58:1d:ea:e1:24:69:63:14:dc:2d:16:13:f0:32:5d:56:93:9a: 60:0e:5d:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA0MzIxMTAvBgNVBAUTKEJFMzc3MDRCOEM3REYzOTc1NjE3MTk0QUYyQURFRURB MUNDOUJDRjYwHhcNMjUwNTMxMDIzNzIyWhcNMjUwNjA3MDIzNzIyWjAYMRYwFAYD VQQDEw02ODNhNmI2My01MmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpGMc0CdDaH1/KkRdcV/3jmYC9+Sm0RcrAeY+oAzD5+q78wH5cylK5xMgeLg rOo0+OooEIE3GEu4H1lqrMxMCj62vHB12dZE3RjAyq+Hr1pWZInJPb4hweY11yi2 Ruo4CDo/D29xttwuvx8iSKKcAWgc545y4DqPwJOsLxUy0V1QekFtbXsFVi1FbeLF clXtaPzLIoJHYKqvDMQ0C7mWJ/zCQ2fPEeHAGRW0AI1k1s5MazIbedbjlifqLHG8 UH0dO8cVPqwwglLIgKEICug/fnvVZ1hq/jP6XxWQ1ym+B7X7ESHt2KxOvfUzTUP6 AAzZPVgp5O0U+fQVvaPRYWJF0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvFu/nG GjBPu89NcFIhdLSEikzKMB8GA1UdIwQYMBaAFL43cEuMffOXVhcZSvKt7tocybz2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDQzMi9FM0NBMThFQzdC ODcxMUVEQjU5RTNCODBDNEY5QUUwMi92amR3UzR4OTg1ZFdGeGxLOHEzdTJoekp2 UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqZHdTNHg5ODVkV0Z4bEs4cTN1Mmh6SnZQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDQzMi9FM0NBMThFQzdCODcxMUVEQjU5RTNCODBDNEY5QUUwMi92amR3UzR4OTg1 ZFdGeGxLOHEzdTJoekp2UFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8sI3q2/YOrD4qvDydbFrxbnDXPLh1QGi6c101V4vDeM9UVBc+MGsc v3rtSN0K8ixoOWcSzip4MQlp+EfAhkdLLg0Hm2pwJq8EzL0TnpCaPPylDbV/Zm7t ZJa1XZVMzz1BRS4CGU7tDth4T0xhJHqeYTa1fpMVz5IjCbq9JKm8bFVrR0n69fNn fJXfg4JrLRSuV3hE5dbMtfdXxVwG2+QbpglyPEGzdXEfDccOkNHQ4JAs5F/n3LLw 9bGItyP8JdZDtaL6MvlCi10lC0bGtWHxnMUHZdFlqOna88ZJ/uxU5O9VL6WnOJxE l1RYHerhJGljFNwtFhPwMl1Wk5pgDl3W -----END CERTIFICATE-----Generated at Sat May 31 17:46:30 2025 by rpki-client