$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft File: vZ1mh32GbnyQQVa-CMtDcargAb0.mft (raw, json) Hash identifier: NBWkYUIVGa/unrAGnO7vqY0KcqlK1i5wXjEK+rAieZU= Subject key identifier: F7:40:7F:69:D8:08:D2:9A:57:B2:0B:2D:2D:42:FA:E6:66:86:61:1B Authority key identifier: BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD Certificate issuer: /CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft Manifest number: 0154 Signing time: Sat 31 May 2025 04:02:54 +0000 Manifest this update: Sat 31 May 2025 04:02:53 +0000 Manifest next update: Sat 07 Jun 2025 04:02:53 +0000 Files and hashes: 1: vZ1mh32GbnyQQVa-CMtDcargAb0.crl (hash: AObymIDNvaev1Elv5IY1H/jY9szZvHqa+BjdkQc/c5Q=) 2: AC9A49A6B79811EF9C8DF330C4F9AE02.roa (hash: x42cPOY42/ihAcwEOhbusv08pDLFkf2E5Qjxerl5aIk=) 3: 975A513293B011EF9203EA6BC4F9AE02.roa (hash: LAC2JzlZ9Cqk3BSRvYxm4bLahu0/0Fv8k3EO+q7V5PY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5E8B, serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Validity Not Before: May 31 04:02:53 2025 GMT Not After : Jun 7 04:02:53 2025 GMT Subject: CN=683a7f6d-2e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:33:ea:f4:d3:00:d2:11:9d:b9:9d:71:b6:ae: de:9d:5e:a5:90:4c:3c:08:4f:1c:c2:18:52:31:7e: 22:d4:63:f6:d9:95:19:79:3c:ed:d5:14:04:a6:94: 35:db:cb:d3:e4:f2:9f:b1:c5:eb:3c:f6:bf:f2:3c: ba:5e:87:1e:cc:9e:ff:e2:e8:64:83:3d:d6:89:99: b1:25:19:7a:62:77:9c:34:ac:d4:2e:6e:73:c9:7b: 5d:39:7f:0a:73:65:30:8d:43:69:f5:56:f7:80:21: ce:0a:29:36:e8:2e:1f:3c:ff:bf:7f:08:43:a7:3b: e1:2e:33:11:ef:48:c3:0e:1c:b5:b0:8c:cc:f7:71: 1a:08:7d:66:c6:c6:c9:8a:cd:49:cd:7f:3f:b1:10: ba:1a:13:30:1b:12:b9:5c:7f:1c:69:49:10:4b:a2: 5e:43:ab:73:c5:de:eb:68:93:6d:cc:e9:aa:b8:33: 75:b4:3e:0e:fd:86:b6:a9:0e:99:a5:49:4f:6f:4b: 6d:2a:0d:4e:ea:64:e7:80:a8:a9:1d:b1:f4:02:2c: 39:cb:9c:e8:ed:52:77:4a:aa:bb:27:80:2e:e8:f5: 6f:ed:41:83:ed:6b:57:0e:a9:c2:7f:50:84:c5:77: 46:4f:c4:81:13:47:13:c0:d8:c7:56:7b:31:9b:d7: 36:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:40:7F:69:D8:08:D2:9A:57:B2:0B:2D:2D:42:FA:E6:66:86:61:1B X509v3 Authority Key Identifier: keyid:BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:86:1c:bc:35:53:08:fc:59:47:a9:2f:f2:ee:2b:09:18:08: 38:56:27:00:7b:dd:3d:59:0a:a9:2d:83:00:c6:90:06:55:42: e4:fa:94:47:78:28:08:ed:03:89:00:77:0c:46:01:be:14:b3: 51:f6:4e:6d:c6:f1:b4:0e:c0:fa:e8:03:28:0f:1a:ac:9f:76: 7f:dc:30:ec:13:9c:5b:11:dc:89:6f:e5:a8:13:74:5f:46:c9: 73:f6:12:70:5c:55:6c:8b:2e:97:48:2b:b8:46:9a:5c:83:1f: 27:52:8d:99:3c:10:3c:bc:10:32:f8:fc:b2:11:e6:7c:7a:aa: 38:7b:3c:56:00:69:45:15:9d:42:e9:ba:65:6a:3e:66:45:cd: cc:c7:58:c8:1a:66:3c:25:1d:4d:11:e9:f7:c7:7e:ab:c8:af: c0:50:72:12:15:df:13:d5:dc:59:e9:3f:01:ae:cb:4b:20:a1: d9:49:7b:b6:7a:b7:2b:73:24:c9:dd:90:80:87:5c:8f:9d:20: 79:65:fc:24:8e:d9:67:08:50:e0:33:fc:e3:81:01:e9:ea:96: e7:b3:8c:c0:9c:1c:ad:25:da:94:4c:42:f7:a6:1f:a1:ff:ef: 34:eb:77:8d:9e:4d:cd:c2:23:c5:ea:66:b5:6b:38:91:5c:56: 7b:6c:72:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVFOEIxMTAvBgNVBAUTKEJEOUQ2Njg3N0Q4NjZFN0M5MDQxNTZCRTA4Q0I0Mzcx QUFFMDAxQkQwHhcNMjUwNTMxMDQwMjUzWhcNMjUwNjA3MDQwMjUzWjAYMRYwFAYD VQQDEw02ODNhN2Y2ZC0yZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozPq9NMA0hGduZ1xtq7enV6lkEw8CE8cwhhSMX4i1GP22ZUZeTzt1RQEppQ1 28vT5PKfscXrPPa/8jy6XocezJ7/4uhkgz3WiZmxJRl6YnecNKzULm5zyXtdOX8K c2UwjUNp9Vb3gCHOCik26C4fPP+/fwhDpzvhLjMR70jDDhy1sIzM93EaCH1mxsbJ is1JzX8/sRC6GhMwGxK5XH8caUkQS6JeQ6tzxd7raJNtzOmquDN1tD4O/Ya2qQ6Z pUlPb0ttKg1O6mTngKipHbH0Aiw5y5zo7VJ3Sqq7J4Au6PVv7UGD7WtXDqnCf1CE xXdGT8SBE0cTwNjHVnsxm9c2cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdAf2nY CNKaV7ILLS1C+uZmhmEbMB8GA1UdIwQYMBaAFL2dZod9hm58kEFWvgjLQ3Gq4AG9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUU4Qi9ERUMzQkQ3QzVB RDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2JueVFRVmEtQ010RGNhcmdB YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZaMW1oMzJHYm55UVFWYS1DTXREY2FyZ0FiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUU4Qi9ERUMzQkQ3QzVBRDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2Ju eVFRVmEtQ010RGNhcmdBYjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYhhy8NVMI/FlHqS/y7isJGAg4VicAe909WQqpLYMAxpAGVULk+pRH eCgI7QOJAHcMRgG+FLNR9k5txvG0DsD66AMoDxqsn3Z/3DDsE5xbEdyJb+WoE3Rf Rslz9hJwXFVsiy6XSCu4Rppcgx8nUo2ZPBA8vBAy+PyyEeZ8eqo4ezxWAGlFFZ1C 6bplaj5mRc3Mx1jIGmY8JR1NEen3x36ryK/AUHISFd8T1dxZ6T8BrstLIKHZSXu2 ercrcyTJ3ZCAh1yPnSB5ZfwkjtlnCFDgM/zjgQHp6pbns4zAnBytJdqUTEL3ph+h /+8063eNnk3NwiPF6ma1aziRXFZ7bHI0 -----END CERTIFICATE-----Generated at Sat May 31 16:50:42 2025 by rpki-client