$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft File: vDqLsM3Qi243IbLB0hqBcUw7IUI.mft (raw, json) Hash identifier: XHOcaXoRcnk9virQAq8vWVAzqf3LShpPSS8+u2rck2I= Subject key identifier: 51:9C:CC:17:24:A6:62:D6:C7:E5:E5:D1:C5:89:52:C9:32:E0:3A:FF Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 Certificate issuer: /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Certificate serial: 0377 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft Manifest number: 035C Signing time: Sat 31 May 2025 01:14:29 +0000 Manifest this update: Sat 31 May 2025 01:14:28 +0000 Manifest next update: Sat 07 Jun 2025 01:14:28 +0000 Files and hashes: 1: vDqLsM3Qi243IbLB0hqBcUw7IUI.crl (hash: SGyjZLk4iydlSxPyeJVqWR6pGUMuhj+Z0P/IK1i2tHk=) 2: 83CA50563C2311F0AEBA313AC4F9AE02.roa (hash: 8dEWz6BA19noWs2zWuUBCRCZchx4qTK4G3VWLV+hIMw=) 3: B7E47C68C02511EC93BB8865C4F9AE02.roa (hash: 8/pe/NkCfmi8GQHtZeDvbdeiM83VXVuijM5zx0eXnx8=) 4: 2998A0E0F99011EF89B2363DC4F9AE02.roa (hash: KstFse9DL+Lpk2UJhsRfTukB1/IV52HFgYreP0UKdGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 887 (0x377) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Validity Not Before: May 31 01:14:28 2025 GMT Not After : Jun 7 01:14:28 2025 GMT Subject: CN=683a57f4-a480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2c:30:e8:4d:ac:67:d8:25:2e:82:5b:c1:dd: e9:ef:8d:1f:4c:f2:94:40:5d:ad:14:d7:3c:13:f3: ce:1b:50:df:1d:63:26:e4:33:1e:26:f8:eb:e4:e3: 5c:4b:25:79:72:fb:99:d7:a8:60:39:4d:d2:43:0d: c5:21:9b:de:0b:b8:48:af:d2:2c:56:a7:2b:56:88: 9e:eb:c7:a1:dd:2f:b8:1d:1d:67:a4:b9:8d:b4:80: b4:61:2c:de:f0:8f:fe:53:85:62:93:61:95:98:64: f6:b1:cf:91:eb:f8:1f:a6:c2:79:d3:80:b0:a0:a5: fe:a3:45:2c:47:13:ab:a6:e8:70:ad:65:44:d3:34: b2:0f:07:f3:68:90:fd:01:e8:0e:27:84:cf:2e:82: 8c:12:53:fd:a3:b1:b4:2e:7a:69:0f:42:0a:ae:99: ed:9a:02:ba:96:62:45:09:78:bf:3d:89:04:20:30: fb:23:f9:67:6f:e8:da:be:91:16:68:85:28:ed:fe: 83:d0:56:ac:c4:f7:56:7a:1a:54:26:b4:c5:d2:b8: 9d:57:28:b6:f6:77:39:1c:4b:0c:aa:9b:ac:1f:9d: 93:6d:20:19:e9:da:f8:15:2e:51:69:f3:16:f1:fd: 09:b0:9b:d3:60:46:a6:f4:8f:0b:08:de:df:19:83: 60:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9C:CC:17:24:A6:62:D6:C7:E5:E5:D1:C5:89:52:C9:32:E0:3A:FF X509v3 Authority Key Identifier: keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:53:f5:f5:de:d8:7c:63:de:37:64:6b:8a:56:82:86:03:17: da:4f:80:04:88:ab:ab:6e:5a:5f:dd:56:bd:1c:df:bc:da:96: 7e:91:95:6d:0e:56:81:6e:7c:43:c2:14:b8:6d:19:b1:2f:a3: a5:4b:eb:45:f9:34:74:f4:aa:49:02:6b:fa:50:b0:4a:3a:15: 95:dd:80:e2:80:73:85:44:d5:63:47:c0:5e:3f:e2:37:20:51: 84:e6:5e:65:83:2b:36:6a:78:6d:98:fa:67:e4:94:38:03:8b: a9:df:a9:5a:2c:b5:b5:79:00:75:59:e1:07:28:e3:9d:1e:cf: 1d:57:e8:86:5e:6d:fa:7f:aa:d4:b8:7a:10:81:23:1c:e2:d3: 13:a8:e8:cb:b7:27:0b:19:7e:2a:9f:96:7e:59:77:d6:d2:c5: 20:aa:76:72:3b:0f:f7:4f:5a:87:da:bc:28:9d:e4:bc:f0:15: 40:a1:e5:93:5f:66:6b:aa:9b:75:b1:cb:f1:a1:75:9f:0f:cf: 8f:f2:99:67:d8:58:07:4c:3c:97:81:b5:f0:9d:26:87:b8:ca: 55:57:2e:02:7f:d7:67:6a:18:bf:b8:ed:70:2e:e0:59:13:4f: 34:e3:76:29:33:b5:5e:eb:59:42:1a:af:89:0d:f1:01:6f:f8: ee:33:97:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3MzExMTAvBgNVBAUTKEJDM0E4QkIwQ0REMDhCNkUzNzIxQjJDMUQyMUE4MTcx NEMzQjIxNDIwHhcNMjUwNTMxMDExNDI4WhcNMjUwNjA3MDExNDI4WjAYMRYwFAYD VQQDEw02ODNhNTdmNC1hNDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqiww6E2sZ9glLoJbwd3p740fTPKUQF2tFNc8E/POG1DfHWMm5DMeJvjr5ONc SyV5cvuZ16hgOU3SQw3FIZveC7hIr9IsVqcrVoie68eh3S+4HR1npLmNtIC0YSze 8I/+U4Vik2GVmGT2sc+R6/gfpsJ504CwoKX+o0UsRxOrpuhwrWVE0zSyDwfzaJD9 AegOJ4TPLoKMElP9o7G0LnppD0IKrpntmgK6lmJFCXi/PYkEIDD7I/lnb+javpEW aIUo7f6D0FasxPdWehpUJrTF0ridVyi29nc5HEsMqpusH52TbSAZ6dr4FS5RafMW 8f0JsJvTYEam9I8LCN7fGYNgXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGczBck pmLWx+Xl0cWJUsky4Dr/MB8GA1UdIwQYMBaAFLw6i7DN0ItuNyGywdIagXFMOyFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzczMS81NUIyMjNFQUMw MjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWkyNDNJYkxCMGhxQmNVdzdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZEcUxzTTNRaTI0M0liTEIwaHFCY1V3N0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzczMS81NUIyMjNFQUMwMjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWky NDNJYkxCMGhxQmNVdzdJVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAU/X13th8Y943ZGuKVoKGAxfaT4AEiKurblpf3Va9HN+82pZ+kZVt DlaBbnxDwhS4bRmxL6OlS+tF+TR09KpJAmv6ULBKOhWV3YDigHOFRNVjR8BeP+I3 IFGE5l5lgys2anhtmPpn5JQ4A4up36laLLW1eQB1WeEHKOOdHs8dV+iGXm36f6rU uHoQgSMc4tMTqOjLtycLGX4qn5Z+WXfW0sUgqnZyOw/3T1qH2rwoneS88BVAoeWT X2Zrqpt1scvxoXWfD8+P8pln2FgHTDyXgbXwnSaHuMpVVy4Cf9dnahi/uO1wLuBZ E08043YpM7Ve61lCGq+JDfEBb/juM5f6 -----END CERTIFICATE-----Generated at Sat May 31 16:43:06 2025 by rpki-client