$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft File: VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft (raw, json) Hash identifier: dUBqOOee30wOkECH1Qj9zDkAQ1SxbolL3xUVb0Rd8Mw= Subject key identifier: F8:CF:F3:80:0F:93:43:1A:32:A4:15:37:11:96:C1:F1:27:AC:CF:8C Authority key identifier: 56:B6:5B:80:9F:5D:AB:3A:5A:B1:57:CA:05:79:FD:8E:16:ED:CF:B3 Certificate issuer: /CN=A91DB782/serialNumber=56B65B809F5DAB3A5AB157CA0579FD8E16EDCFB3 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft Manifest number: 0114 Signing time: Sat 31 May 2025 04:31:29 +0000 Manifest this update: Sat 31 May 2025 04:31:29 +0000 Manifest next update: Sat 07 Jun 2025 04:31:29 +0000 Files and hashes: 1: VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl (hash: VOvgb+SThIT5M2TXIxuJUKTswnafJ+OM7u8OqtSSQeU=) 2: F4DE3470979B11EE901E210BC4F9AE02.roa (hash: fiC0aTLSwEHcelKVanda2XAXfzpX0FepeWYGM7C3Vk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB782, serialNumber=56B65B809F5DAB3A5AB157CA0579FD8E16EDCFB3 Validity Not Before: May 31 04:31:29 2025 GMT Not After : Jun 7 04:31:29 2025 GMT Subject: CN=683a8621-5cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:13:98:8b:31:46:90:d7:2f:1d:a0:39:5a:68: 83:82:50:a6:17:2d:b6:c5:7a:e7:0d:00:09:18:82: 5e:37:09:34:83:4f:a7:d5:ce:e4:2a:68:1d:96:06: 3a:41:cc:5c:57:11:03:88:01:85:b8:6c:5d:20:9f: 87:95:3b:a9:d7:83:be:5d:4c:a1:b5:03:b6:ee:54: 5e:90:04:57:70:24:4d:0e:e1:26:eb:d1:c4:a3:07: 9d:69:0b:1a:72:f9:07:82:1b:5f:5d:aa:ae:90:b2: 6c:5e:82:2d:5c:46:d9:8f:12:67:94:0a:5c:1a:f5: 0d:88:28:92:83:27:4c:2d:0f:f5:f9:08:2e:61:70: 4d:5d:e0:28:94:8f:d2:7f:f0:84:8c:40:97:1a:7c: 27:81:b3:80:6c:12:90:cf:30:e8:52:61:10:51:78: 1c:0a:27:0b:79:5a:34:19:14:8a:7a:d1:ea:cd:e6: a8:bf:9a:2e:47:71:2d:29:6d:5d:a9:2a:00:b5:ab: 08:06:2e:c0:29:08:63:61:26:fd:6e:5f:3f:f1:1f: ec:5e:71:64:3e:db:52:4c:08:67:3c:c2:5e:cf:be: 70:7d:99:d3:da:3e:73:b0:7e:85:34:9f:d5:bd:e8: f1:f9:60:2c:6a:a8:a5:f6:5f:e4:24:33:c6:ae:79: af:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CF:F3:80:0F:93:43:1A:32:A4:15:37:11:96:C1:F1:27:AC:CF:8C X509v3 Authority Key Identifier: keyid:56:B6:5B:80:9F:5D:AB:3A:5A:B1:57:CA:05:79:FD:8E:16:ED:CF:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:48:ed:f6:85:05:d6:0e:d1:49:4c:f5:16:34:15:c3:78:c1: 35:e0:22:02:b6:c0:be:00:3e:96:c1:96:71:af:8d:74:ca:4a: e1:68:bf:c4:f8:41:7b:e8:13:31:45:81:75:3a:a4:2c:de:33: de:3d:64:47:89:45:cf:3a:0a:2d:7f:9c:79:2c:c3:99:be:6d: 44:82:30:f2:a9:60:96:51:82:04:1f:6c:75:60:3d:ce:37:d7: 1e:ba:50:af:cb:3a:fc:dc:5b:56:f0:7a:37:cf:58:80:ef:e4: 3e:4c:30:e7:21:a1:5c:f6:bf:af:d5:b6:39:49:58:31:63:69: f0:25:f3:5f:2e:56:91:7e:11:37:50:30:3f:d3:d2:01:92:ed: ec:13:76:05:f1:2c:13:52:8f:93:20:dc:e2:5f:a0:12:9b:ac: e9:91:35:f2:e7:81:d7:52:b6:11:07:6b:7f:47:33:67:5e:e4: 43:1a:89:30:9d:3f:e1:38:b9:09:ff:ba:64:08:0d:d7:98:61: 2e:57:03:8f:e8:d2:7c:c9:2c:24:0b:3c:16:e4:bf:44:2a:2c: 27:a8:3f:72:45:b8:d2:86:4b:13:f1:99:d7:ca:7b:cf:11:ef: f5:48:8c:95:b1:73:dc:8d:49:d4:8f:c5:0f:e0:97:d6:72:45: 88:6b:ce:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3ODIxMTAvBgNVBAUTKDU2QjY1QjgwOUY1REFCM0E1QUIxNTdDQTA1NzlGRDhF MTZFRENGQjMwHhcNMjUwNTMxMDQzMTI5WhcNMjUwNjA3MDQzMTI5WjAYMRYwFAYD VQQDEw02ODNhODYyMS01Y2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhOYizFGkNcvHaA5WmiDglCmFy22xXrnDQAJGIJeNwk0g0+n1c7kKmgdlgY6 QcxcVxEDiAGFuGxdIJ+HlTup14O+XUyhtQO27lRekARXcCRNDuEm69HEowedaQsa cvkHghtfXaqukLJsXoItXEbZjxJnlApcGvUNiCiSgydMLQ/1+QguYXBNXeAolI/S f/CEjECXGnwngbOAbBKQzzDoUmEQUXgcCicLeVo0GRSKetHqzeaov5ouR3EtKW1d qSoAtasIBi7AKQhjYSb9bl8/8R/sXnFkPttSTAhnPMJez75wfZnT2j5zsH6FNJ/V vejx+WAsaqil9l/kJDPGrnmvcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjP84AP k0MaMqQVNxGWwfEnrM+MMB8GA1UdIwQYMBaAFFa2W4CfXas6WrFXygV5/Y4W7c+z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjc4Mi85RkVEQ0Y1Qzk3 OUIxMUVFOTg5RTYwMEFDNEY5QUUwMi9WclpiZ0o5ZHF6cGFzVmZLQlhuOWpoYnR6 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZyWmJnSjlkcXpwYXNWZktCWG45amhidHo3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qjc4Mi85RkVEQ0Y1Qzk3OUIxMUVFOTg5RTYwMEFDNEY5QUUwMi9WclpiZ0o5ZHF6 cGFzVmZLQlhuOWpoYnR6N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgSO32hQXWDtFJTPUWNBXDeME14CICtsC+AD6WwZZxr410ykrhaL/E +EF76BMxRYF1OqQs3jPePWRHiUXPOgotf5x5LMOZvm1EgjDyqWCWUYIEH2x1YD3O N9ceulCvyzr83FtW8Ho3z1iA7+Q+TDDnIaFc9r+v1bY5SVgxY2nwJfNfLlaRfhE3 UDA/09IBku3sE3YF8SwTUo+TINziX6ASm6zpkTXy54HXUrYRB2t/RzNnXuRDGokw nT/hOLkJ/7pkCA3XmGEuVwOP6NJ8ySwkCzwW5L9EKiwnqD9yRbjShksT8ZnXynvP Ee/1SIyVsXPcjUnUj8UP4JfWckWIa86x -----END CERTIFICATE-----Generated at Sat May 31 17:02:18 2025 by rpki-client