$ rpki-client -vvf rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft File: vGOOV8p7khRPunE61ttk5tCtSZE.mft (raw, json) Hash identifier: JT0SUDNMesGA1TD98mRbOb/+9KZ56nNnfiY1CyjVOR0= Subject key identifier: 01:33:B9:7B:3E:FF:E9:82:8C:01:F3:76:A5:3A:57:21:92:20:45:E1 Authority key identifier: BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 Certificate issuer: /CN=A91D31B0/serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft Manifest number: 0298 Signing time: Sat 31 May 2025 01:43:08 +0000 Manifest this update: Sat 31 May 2025 01:43:07 +0000 Manifest next update: Sat 07 Jun 2025 01:43:07 +0000 Files and hashes: 1: vGOOV8p7khRPunE61ttk5tCtSZE.crl (hash: VWZVosczEtxtqAAithjw8IO/A1jw55kCeSHjsbb33MM=) 2: 7BB181E201BA11EDA4103D0DC4F9AE02.roa (hash: lORLBE7+FfhOwINAGtcBHyopu2FbSYXSTs4IIjqvS/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D31B0, serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Validity Not Before: May 31 01:43:07 2025 GMT Not After : Jun 7 01:43:07 2025 GMT Subject: CN=683a5eac-4a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c2:4c:35:24:c0:61:37:bc:06:9c:1f:22:ed: 9a:74:04:33:5e:1e:6c:89:75:7d:37:cb:d2:03:95: 66:5c:cd:3b:dc:87:76:ef:e3:47:6f:7a:59:af:8c: 49:be:4f:81:d0:c0:c4:b8:29:4f:93:86:29:1f:f7: d4:30:30:b6:ef:18:bc:09:29:4f:26:4a:8e:3e:7d: 5e:9e:f2:06:b4:28:ee:4e:a6:c4:12:2e:bd:a6:4e: 16:fd:a4:65:d7:3a:7a:75:22:c2:a9:74:2d:3b:ea: 67:73:77:a2:b3:68:05:29:6d:42:ae:d4:d7:64:5b: 07:0e:3e:13:61:d8:53:a3:21:0d:62:78:f5:b4:7c: 5c:81:63:19:50:0a:2b:ac:0c:3f:97:86:91:fd:41: 2e:e3:8d:37:58:98:93:7e:41:22:bd:07:43:6c:ea: 8a:fa:2b:b0:45:f2:18:cb:6a:77:29:b3:95:8f:8b: e0:0f:6e:b8:47:8d:09:b0:50:4c:d2:5a:d7:11:a0: 8a:38:c4:99:f5:52:d8:66:2f:43:ae:f0:9f:75:51: 1e:36:3c:0f:64:0f:03:84:31:44:7b:2b:8b:91:b1: 35:6b:ad:59:37:3e:14:61:2c:65:52:e0:f3:c8:87: 25:2a:3e:f6:d7:42:c3:b8:6e:a1:07:52:d5:f4:e3: fa:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:33:B9:7B:3E:FF:E9:82:8C:01:F3:76:A5:3A:57:21:92:20:45:E1 X509v3 Authority Key Identifier: keyid:BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:46:1e:68:15:d9:0e:a6:93:69:6a:b6:07:56:29:e5:bc:4f: 12:c1:25:c8:9c:30:b6:46:67:80:ae:7f:e4:d4:1f:61:2b:fa: 50:9b:7d:e2:3a:ef:57:cd:2b:7e:73:ad:34:c6:70:77:43:ff: 84:68:08:0e:86:5d:26:2e:90:b0:93:65:30:71:02:f6:33:fe: 0e:a2:4d:01:43:56:fc:73:71:75:d2:33:95:7c:c0:67:31:3e: 01:ea:e1:fd:91:6b:b6:22:1b:3e:9c:04:46:ce:74:41:fb:8e: d9:2a:d5:f7:3e:c4:61:15:81:cb:0b:85:5e:90:47:e8:51:6f: b6:a6:66:2f:03:5a:c9:7a:6b:02:26:06:0d:94:5b:a0:ab:83: 55:c5:a9:a6:33:04:d5:f1:61:e1:d4:2c:9c:16:76:73:98:1d: b4:7f:96:20:20:91:52:e0:56:03:90:69:6b:09:6a:7c:64:7c: 43:4f:b9:67:9f:f5:b0:7b:76:98:0b:54:17:a6:fb:40:7a:e0: a8:9c:cf:3a:d7:6e:6a:15:fe:08:cc:c4:99:75:0d:a8:f4:71: f5:24:00:08:e4:cc:0b:f1:a2:14:a4:97:07:2c:ce:34:0a:9d: 70:c1:09:ee:56:35:44:c3:65:99:59:f8:0d:30:6c:09:c6:ee: c3:b6:95:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxQjAxMTAvBgNVBAUTKEJDNjM4RTU3Q0E3QjkyMTQ0RkJBNzEzQUQ2REI2NEU2 RDBBRDQ5OTEwHhcNMjUwNTMxMDE0MzA3WhcNMjUwNjA3MDE0MzA3WjAYMRYwFAYD VQQDEw02ODNhNWVhYy00YTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA98JMNSTAYTe8BpwfIu2adAQzXh5siXV9N8vSA5VmXM073Id27+NHb3pZr4xJ vk+B0MDEuClPk4YpH/fUMDC27xi8CSlPJkqOPn1envIGtCjuTqbEEi69pk4W/aRl 1zp6dSLCqXQtO+pnc3eis2gFKW1CrtTXZFsHDj4TYdhToyENYnj1tHxcgWMZUAor rAw/l4aR/UEu4403WJiTfkEivQdDbOqK+iuwRfIYy2p3KbOVj4vgD264R40JsFBM 0lrXEaCKOMSZ9VLYZi9DrvCfdVEeNjwPZA8DhDFEeyuLkbE1a61ZNz4UYSxlUuDz yIclKj7210LDuG6hB1LV9OP62wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEzuXs+ /+mCjAHzdqU6VyGSIEXhMB8GA1UdIwQYMBaAFLxjjlfKe5IUT7pxOtbbZObQrUmR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzFCMC8xNUNGNUE4ODAx QjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2toUlB1bkU2MXR0azV0Q3RT WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZHT09WOHA3a2hSUHVuRTYxdHRrNXRDdFNaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzFCMC8xNUNGNUE4ODAxQjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2to UlB1bkU2MXR0azV0Q3RTWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVRh5oFdkOppNparYHVinlvE8SwSXInDC2RmeArn/k1B9hK/pQm33i Ou9XzSt+c600xnB3Q/+EaAgOhl0mLpCwk2UwcQL2M/4Ook0BQ1b8c3F10jOVfMBn MT4B6uH9kWu2Ihs+nARGznRB+47ZKtX3PsRhFYHLC4VekEfoUW+2pmYvA1rJemsC JgYNlFugq4NVxammMwTV8WHh1CycFnZzmB20f5YgIJFS4FYDkGlrCWp8ZHxDT7ln n/Wwe3aYC1QXpvtAeuConM86125qFf4IzMSZdQ2o9HH1JAAI5MwL8aIUpJcHLM40 Cp1wwQnuVjVEw2WZWfgNMGwJxu7DtpU9 -----END CERTIFICATE-----Generated at Sat May 31 16:43:03 2025 by rpki-client