$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft File: vAWTxH2s9senekHgfeuaBhYxpIQ.mft (raw, json) Hash identifier: 9OZBRqU2NcJOUbRMB3s4W/MY9NYx80SP7rI+RzZLx/M= Subject key identifier: FD:B6:9E:95:E3:1B:39:A1:CB:63:9C:A3:FF:2A:9E:38:63:5A:07:1B Authority key identifier: BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84 Certificate issuer: /CN=A91D0B40/serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft Manifest number: AC Signing time: Sat 31 May 2025 05:40:01 +0000 Manifest this update: Sat 31 May 2025 05:40:01 +0000 Manifest next update: Sat 07 Jun 2025 05:40:01 +0000 Files and hashes: 1: vAWTxH2s9senekHgfeuaBhYxpIQ.crl (hash: sfyb3FaQMmGgoBWCn/4Y38HAru1oXQOey/bJK34ZHgM=) 2: 0D5C00AC38E311EF99F62432C4F9AE02.roa (hash: xQMEY6P6f4jmqeDgv/TImb1ka64GtPCQvQqQLQx2M8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40, serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484 Validity Not Before: May 31 05:40:01 2025 GMT Not After : Jun 7 05:40:01 2025 GMT Subject: CN=683a9631-3610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:38:68:0a:d5:75:e0:bc:1b:6a:2c:71:d6:89: 0e:e3:55:11:44:89:ba:20:7f:e4:e5:93:1d:15:54: 0a:28:64:21:fa:0f:52:47:1c:90:6c:56:05:36:32: a9:0a:99:db:7b:2f:c0:3e:76:94:0a:b5:c8:ba:d7: b2:bd:05:a1:8f:f3:b3:ef:bb:c1:b7:dc:fb:a7:90: c4:71:4d:bb:f0:00:6d:f4:ce:6c:ad:a1:e4:88:87: 91:b6:7d:d1:fa:25:eb:fe:63:42:ed:e7:58:73:7d: 14:61:0f:49:a8:66:df:cc:06:61:1b:67:8d:3c:7f: 12:42:30:be:6f:35:b5:07:ed:3d:ce:b4:98:e6:75: 37:28:6c:c4:2d:33:e2:9d:04:ca:8e:9b:64:f4:46: c3:5a:e5:21:33:66:03:c1:85:27:56:6c:37:50:c2: a7:87:53:6f:37:da:9d:df:62:5c:ca:57:6e:a8:41: 76:50:23:f8:f0:54:a9:98:be:89:ea:9f:0c:e5:8a: 5d:b6:db:0f:5e:29:68:05:2e:1e:e1:3b:00:9f:fe: bc:4f:25:a5:5d:48:d6:27:d5:93:b4:9d:61:7e:16: 16:b5:9f:4f:77:a0:88:9a:43:aa:00:d1:95:9a:6c: 77:0d:f0:68:fd:2e:b5:61:33:48:62:55:f4:21:8b: ac:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B6:9E:95:E3:1B:39:A1:CB:63:9C:A3:FF:2A:9E:38:63:5A:07:1B X509v3 Authority Key Identifier: keyid:BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:79:73:f1:e1:5b:53:a0:ff:e7:41:8c:cf:7b:d5:9d:5a:a4: e0:24:e5:2f:a4:89:ae:76:6a:1e:ab:e2:8e:5a:08:36:cb:4a: e3:d7:c9:d3:e5:b8:d4:22:f8:e5:10:6c:1f:d7:ca:08:4c:91: 92:e5:ae:3d:a3:be:2d:9b:12:20:1f:9c:a0:d5:5b:dc:73:23: b1:63:64:6a:c4:9f:ec:56:67:f5:bc:e8:0e:a2:68:4c:b7:69: 20:a0:1a:2d:e8:5f:b5:0b:1f:79:f7:24:bb:57:a8:32:48:81: 9b:2c:a7:87:39:8e:9e:60:3f:e8:86:9f:58:6f:be:c6:c0:95: 4b:27:a5:af:d3:cb:77:86:aa:00:23:11:df:4b:31:7f:f1:85: 82:db:3f:b6:18:61:8c:03:d1:40:8b:aa:14:66:4c:b6:92:0f: aa:77:aa:d7:10:7a:6b:cb:ef:33:74:0c:a1:f8:79:0a:c4:b9: e9:9c:b6:be:e0:d4:e8:7e:5b:34:b4:5a:92:6b:c5:f8:f5:35: 2c:b1:d9:b2:c1:23:d1:7b:57:46:1b:71:08:e8:03:1a:0b:bb: 33:44:25:9d:61:29:3d:1e:ec:7b:77:6a:6f:41:c2:f4:8f:d3: fd:4c:31:f7:ec:35:c2:94:1a:bf:ca:9e:6d:a0:ec:9f:0d:b0: 17:c3:5f:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNDAxMTAvBgNVBAUTKEJDMDU5M0M0N0RBQ0Y2QzdBNzdBNDFFMDdERUI5QTA2 MTYzMUE0ODQwHhcNMjUwNTMxMDU0MDAxWhcNMjUwNjA3MDU0MDAxWjAYMRYwFAYD VQQDEw02ODNhOTYzMS0zNjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDhoCtV14Lwbaixx1okO41URRIm6IH/k5ZMdFVQKKGQh+g9SRxyQbFYFNjKp Cpnbey/APnaUCrXIuteyvQWhj/Oz77vBt9z7p5DEcU278ABt9M5sraHkiIeRtn3R +iXr/mNC7edYc30UYQ9JqGbfzAZhG2eNPH8SQjC+bzW1B+09zrSY5nU3KGzELTPi nQTKjptk9EbDWuUhM2YDwYUnVmw3UMKnh1NvN9qd32JcylduqEF2UCP48FSpmL6J 6p8M5YpdttsPXiloBS4e4TsAn/68TyWlXUjWJ9WTtJ1hfhYWtZ9Pd6CImkOqANGV mmx3DfBo/S61YTNIYlX0IYusQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP22npXj Gzmhy2Oco/8qnjhjWgcbMB8GA1UdIwQYMBaAFLwFk8R9rPbHp3pB4H3rmgYWMaSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8yODQwQzhBNjM4 RTAxMUVGOTRCODREN0ZDNEY5QUUwMi92QVdUeEgyczlzZW5la0hnZmV1YUJoWXhw SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZBV1R4SDJzOXNlbmVrSGdmZXVhQmhZeHBJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI0MC8yODQwQzhBNjM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi92QVdUeEgyczlz ZW5la0hnZmV1YUJoWXhwSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9eXPx4VtToP/nQYzPe9WdWqTgJOUvpImudmoeq+KOWgg2y0rj18nT 5bjUIvjlEGwf18oITJGS5a49o74tmxIgH5yg1VvccyOxY2RqxJ/sVmf1vOgOomhM t2kgoBot6F+1Cx959yS7V6gySIGbLKeHOY6eYD/ohp9Yb77GwJVLJ6Wv08t3hqoA IxHfSzF/8YWC2z+2GGGMA9FAi6oUZky2kg+qd6rXEHpry+8zdAyh+HkKxLnpnLa+ 4NTofls0tFqSa8X49TUssdmywSPRe1dGG3EI6AMaC7szRCWdYSk9Hux7d2pvQcL0 j9P9TDH37DXClBq/yp5toOyfDbAXw18R -----END CERTIFICATE-----Generated at Sat May 31 16:50:35 2025 by rpki-client