$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft File: vtASVxhUXB5QgDHT_1-26Chqf9g.mft (raw, json) Hash identifier: e11xGH5ZE+Cl5sEn6pOj5QLmbuXMFH9CzsEFwknQVMU= Subject key identifier: 76:95:3D:95:3B:17:27:AF:61:85:D8:70:2D:6E:2F:5A:D9:2D:7A:19 Authority key identifier: BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8 Certificate issuer: /CN=A91E72DE/serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8 Certificate serial: 0206 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft Manifest number: 0203 Signing time: Sat 31 May 2025 02:12:57 +0000 Manifest this update: Sat 31 May 2025 02:12:56 +0000 Manifest next update: Sat 07 Jun 2025 02:12:56 +0000 Files and hashes: 1: vtASVxhUXB5QgDHT_1-26Chqf9g.crl (hash: QAz3sxss/JCZvp9mdl9tasIdYhZkd6Y1qQKPOeojnSc=) 2: DBA023303B6F11ED903B484FC4F9AE02.roa (hash: wuoqyYVDiG/sRQZo+9RPf+TSJtEdkwDtdHHUSy4QKA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 518 (0x206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E72DE, serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8 Validity Not Before: May 31 02:12:56 2025 GMT Not After : Jun 7 02:12:56 2025 GMT Subject: CN=683a65a8-529d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:99:db:16:bc:dc:94:6a:75:e9:36:ae:89: fd:ce:ca:55:12:ad:8b:89:c5:fa:5b:43:ac:f9:4a: b5:c4:c9:01:48:71:55:3c:08:a4:be:c2:81:44:e6: cc:ef:a5:48:36:a4:bf:85:aa:be:88:61:09:b6:d5: 53:0a:bc:f8:a9:20:21:19:ed:dd:6c:44:b7:ee:85: 35:09:50:e6:ff:c2:9f:3d:74:ab:b8:40:6c:93:90: 5a:e9:5a:f3:96:1b:74:dd:25:7e:67:da:64:3c:0d: 8a:aa:b9:2b:b9:67:e6:46:94:fc:2d:bc:10:55:08: ab:69:b8:df:30:9c:be:b3:0c:8c:8e:47:6e:bb:ab: ab:4a:0b:9b:1f:8c:e1:53:f4:54:9e:22:ef:92:67: ad:f8:61:27:e6:6e:40:96:41:df:dd:37:b6:66:03: 81:02:59:fb:94:cb:e2:0f:1c:5c:c5:ac:1f:17:ed: 89:7e:40:4e:40:fb:95:f3:f4:00:7b:d9:28:c5:21: 99:97:78:6a:09:86:00:4d:12:da:d8:f1:1c:57:b8: 57:a9:43:66:8c:8a:a0:5b:00:1f:56:7d:31:57:ef: 97:46:88:89:8e:cd:ae:d0:15:72:fc:c7:d7:11:7c: 3f:6f:02:42:4f:a5:e3:61:2d:12:35:cb:c3:7f:9b: 7b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:95:3D:95:3B:17:27:AF:61:85:D8:70:2D:6E:2F:5A:D9:2D:7A:19 X509v3 Authority Key Identifier: keyid:BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:b4:f4:1b:4f:2b:11:37:f9:a0:2f:b5:55:65:ad:54:12:75: 91:91:ab:c4:d7:9d:66:a2:c4:9c:c7:1d:4b:84:5e:4b:4e:2a: 75:43:52:13:64:8a:90:76:2f:9d:25:30:8d:ca:1f:d9:2f:76: 8e:22:89:4a:01:4b:a8:d6:60:7e:77:61:34:b0:17:a3:5b:a8: 6d:1b:a5:f7:b3:2f:6d:b6:7a:b6:59:ce:a3:ff:b9:82:01:4d: a1:70:9e:fe:c3:75:60:54:bf:9b:36:5f:30:78:77:e6:a3:60: b2:59:41:a6:19:a7:14:b0:0f:55:2e:bb:ba:ab:82:94:de:31: 4c:4f:bc:34:7b:be:a3:64:c3:eb:6c:8f:a1:21:43:e4:35:b8: 23:22:a7:98:2f:76:8f:52:f7:a5:76:e5:79:42:7f:bd:7a:40: f9:13:b0:7b:a6:81:52:af:d2:27:29:03:78:a8:df:c7:3b:c7: 7d:e1:0d:71:eb:26:48:d1:30:3a:cd:7c:e8:af:39:c1:e1:db: 35:2c:74:fc:fa:a5:f2:00:69:39:1e:c8:87:b2:48:80:48:e6: de:54:1c:ea:b9:04:4b:99:7a:8d:55:42:bb:50:54:f4:51:45: 14:0f:74:43:40:aa:99:e3:08:7e:57:02:a6:85:7e:1e:ee:09: 4b:97:71:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyREUxMTAvBgNVBAUTKEJFRDAxMjU3MTg1NDVDMUU1MDgwMzFEM0ZGNUZCNkU4 Mjg2QTdGRDgwHhcNMjUwNTMxMDIxMjU2WhcNMjUwNjA3MDIxMjU2WjAYMRYwFAYD VQQDEw02ODNhNjVhOC01MjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgiZ2xa83JRqdek2ron9zspVEq2LicX6W0Os+Uq1xMkBSHFVPAikvsKBRObM 76VINqS/haq+iGEJttVTCrz4qSAhGe3dbES37oU1CVDm/8KfPXSruEBsk5Ba6Vrz lht03SV+Z9pkPA2KqrkruWfmRpT8LbwQVQirabjfMJy+swyMjkduu6urSgubH4zh U/RUniLvkmet+GEn5m5AlkHf3Te2ZgOBAln7lMviDxxcxawfF+2JfkBOQPuV8/QA e9koxSGZl3hqCYYATRLa2PEcV7hXqUNmjIqgWwAfVn0xV++XRoiJjs2u0BVy/MfX EXw/bwJCT6XjYS0SNcvDf5t7KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHaVPZU7 FyevYYXYcC1uL1rZLXoZMB8GA1UdIwQYMBaAFL7QElcYVFweUIAx0/9ftugoan/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJERS84REU0RTRDMDNC NkQxMUVEQjJCM0IzNEVDNEY5QUUwMi92dEFTVnhoVVhCNVFnREhUXzEtMjZDaHFm OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z0QVNWeGhVWEI1UWdESFRfMS0yNkNocWY5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzJERS84REU0RTRDMDNCNkQxMUVEQjJCM0IzNEVDNEY5QUUwMi92dEFTVnhoVVhC NVFnREhUXzEtMjZDaHFmOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABtPQbTysRN/mgL7VVZa1UEnWRkavE151mosScxx1LhF5LTip1Q1IT ZIqQdi+dJTCNyh/ZL3aOIolKAUuo1mB+d2E0sBejW6htG6X3sy9ttnq2Wc6j/7mC AU2hcJ7+w3VgVL+bNl8weHfmo2CyWUGmGacUsA9VLru6q4KU3jFMT7w0e76jZMPr bI+hIUPkNbgjIqeYL3aPUvelduV5Qn+9ekD5E7B7poFSr9InKQN4qN/HO8d94Q1x 6yZI0TA6zXzorznB4ds1LHT8+qXyAGk5HsiHskiASObeVBzquQRLmXqNVUK7UFT0 UUUUD3RDQKqZ4wh+VwKmhX4e7glLl3G4 -----END CERTIFICATE-----Generated at Sat May 31 17:00:20 2025 by rpki-client