$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft File: vXVo3ESTcv4iwuyet3K31ugtKoA.mft (raw, json) Hash identifier: 2CPaVxe3/nXSVzDoRG+JuclzDbYlf0nK0kurGlHvnlk= Subject key identifier: B9:57:A7:BA:CC:E2:84:35:3F:8D:E2:AB:9E:19:CE:53:DE:B6:8F:B8 Authority key identifier: BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80 Certificate issuer: /CN=A91D6940/serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80 Certificate serial: 0824 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft Manifest number: 081A Signing time: Fri 30 May 2025 21:04:21 +0000 Manifest this update: Fri 30 May 2025 21:04:20 +0000 Manifest next update: Fri 06 Jun 2025 21:04:20 +0000 Files and hashes: 1: vXVo3ESTcv4iwuyet3K31ugtKoA.crl (hash: Al/8xCCa5Llx9yPDukzsztmC+RfBYzM8bc+jX78eNYs=) 2: 160ADCACE34A11EFA6960F0CC4F9AE02.roa (hash: SXpG+rP8KDZ7mlez3vzJppnJKS0AYTjR+XpM0wzK6oU=) 3: 153BEF1EE34A11EFA6960F0CC4F9AE02.roa (hash: kkpip1TEWWFNH1mROSk1fuufLAg/gIfzk1gjTV7g7jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2084 (0x824) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6940, serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80 Validity Not Before: May 30 21:04:20 2025 GMT Not After : Jun 6 21:04:20 2025 GMT Subject: CN=683a1d54-bb76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d2:84:50:f5:d1:4d:69:d1:99:fc:a3:b7:cc: 32:ce:04:fd:ca:3f:e9:96:5e:37:fc:ed:e9:42:6c: fa:26:53:a4:c2:57:ca:61:fe:36:e2:8d:dc:2e:40: c6:af:43:63:71:c5:2d:86:ea:cf:e0:d7:e7:0c:b4: 90:50:d2:3d:70:dd:c8:1b:63:d2:e0:ac:09:8c:1e: 20:32:f0:15:80:b8:ac:53:8c:dc:e0:30:9c:da:3d: 20:b8:45:12:15:b3:e6:19:c2:4d:f8:aa:b4:b7:b2: aa:f8:08:fa:60:c8:08:ee:cc:b6:73:07:8e:1c:dd: fc:27:fe:93:8b:0d:e3:e4:4a:ff:d2:2e:df:6e:2d: 74:a1:84:d9:02:a0:30:f5:2c:1a:cc:88:b4:cf:be: ca:dd:95:c7:6a:47:12:e2:bf:7f:94:56:71:62:b0: fa:07:e6:e0:c7:f2:da:8e:23:43:c0:fc:be:08:d5: 77:d5:18:90:38:11:c2:89:61:0e:1e:6e:87:c4:2d: 92:09:f9:19:a0:39:9f:6d:00:ef:bb:1e:b2:c4:e8: 30:42:a8:67:2d:1b:73:be:cd:4a:f2:f5:fd:18:bd: db:22:e1:20:dc:cb:ce:1d:63:77:e9:6a:8a:f7:fe: f7:19:d2:9f:47:4c:fb:75:5a:35:fe:a8:60:11:f5: 16:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:57:A7:BA:CC:E2:84:35:3F:8D:E2:AB:9E:19:CE:53:DE:B6:8F:B8 X509v3 Authority Key Identifier: keyid:BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:05:a4:ae:ce:24:da:f8:dd:80:1d:fc:1e:0a:46:f2:78:02: 7e:c6:a6:c1:7a:7f:9d:bc:bb:e1:34:62:61:a5:2b:0b:23:b8: 83:31:ed:59:ed:dd:5e:d2:49:cc:79:e3:0a:c8:8c:c3:01:31: 29:30:7d:5f:46:1b:52:0a:19:33:2d:7d:a9:e2:a2:81:f7:b3: 56:8f:87:86:5e:5d:bd:c9:56:e3:85:4c:f9:ea:c3:cb:47:32: c0:b9:ae:17:c9:73:7c:68:7a:f7:50:95:08:31:5b:6f:74:0c: a7:3f:08:82:c0:8e:31:e6:83:36:c8:b9:e5:b7:14:7d:16:68: 21:28:d3:41:54:14:1c:6c:82:65:67:41:12:ee:46:fb:42:a0: d2:4a:f4:ad:3c:8f:6b:47:39:c5:1a:01:44:53:6f:2e:7c:3e: a0:51:02:db:b0:4a:fa:ba:11:c1:30:79:12:ce:90:0f:c8:82: d0:1a:8e:bd:c6:3e:03:3a:93:91:89:bf:18:81:12:74:5d:09: 1b:03:01:41:35:e3:27:d0:ea:44:e3:b0:72:33:b4:f5:b4:92: af:71:bf:b4:c5:dd:f7:17:20:1a:76:84:e0:ff:3a:21:2b:f8: 2d:bc:33:b2:6f:96:bf:a3:b8:85:4d:20:bf:5e:d7:5e:a3:28: de:34:e7:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY5NDAxMTAvBgNVBAUTKEJENzU2OERDNDQ5MzcyRkUyMkMyRUM5RUI3NzJCN0Q2 RTgyRDJBODAwHhcNMjUwNTMwMjEwNDIwWhcNMjUwNjA2MjEwNDIwWjAYMRYwFAYD VQQDEw02ODNhMWQ1NC1iYjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dKEUPXRTWnRmfyjt8wyzgT9yj/pll43/O3pQmz6JlOkwlfKYf424o3cLkDG r0NjccUthurP4NfnDLSQUNI9cN3IG2PS4KwJjB4gMvAVgLisU4zc4DCc2j0guEUS FbPmGcJN+Kq0t7Kq+Aj6YMgI7sy2cweOHN38J/6Tiw3j5Er/0i7fbi10oYTZAqAw 9SwazIi0z77K3ZXHakcS4r9/lFZxYrD6B+bgx/LajiNDwPy+CNV31RiQOBHCiWEO Hm6HxC2SCfkZoDmfbQDvux6yxOgwQqhnLRtzvs1K8vX9GL3bIuEg3MvOHWN36WqK 9/73GdKfR0z7dVo1/qhgEfUWywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlXp7rM 4oQ1P43iq54ZzlPeto+4MB8GA1UdIwQYMBaAFL11aNxEk3L+IsLsnrdyt9boLSqA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjk0MC9FMEQwNkI4MkQ3 N0UxMUVBOEVFNjFCMzJDNEY5QUUwMi92WFZvM0VTVGN2NGl3dXlldDNLMzF1Z3RL b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZYVm8zRVNUY3Y0aXd1eWV0M0szMXVndEtvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njk0MC9FMEQwNkI4MkQ3N0UxMUVBOEVFNjFCMzJDNEY5QUUwMi92WFZvM0VTVGN2 NGl3dXlldDNLMzF1Z3RLb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbBaSuziTa+N2AHfweCkbyeAJ+xqbBen+dvLvhNGJhpSsLI7iDMe1Z 7d1e0knMeeMKyIzDATEpMH1fRhtSChkzLX2p4qKB97NWj4eGXl29yVbjhUz56sPL RzLAua4XyXN8aHr3UJUIMVtvdAynPwiCwI4x5oM2yLnltxR9FmghKNNBVBQcbIJl Z0ES7kb7QqDSSvStPI9rRznFGgFEU28ufD6gUQLbsEr6uhHBMHkSzpAPyILQGo69 xj4DOpORib8YgRJ0XQkbAwFBNeMn0OpE47ByM7T1tJKvcb+0xd33FyAadoTg/zoh K/gtvDOyb5a/o7iFTSC/XtdeoyjeNOcG -----END CERTIFICATE-----Generated at Sat May 31 17:44:04 2025 by rpki-client