$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft File: vm13JvnXOebsmvk0fs7LQhevej8.mft (raw, json) Hash identifier: LzBwQlO9mL6Pp2sMVNdu0VqCSjeP+0XLvE1hT1R5+Xw= Subject key identifier: 2B:72:F4:67:F2:44:E9:97:5C:4C:AD:19:4B:67:D9:AF:82:34:A2:76 Authority key identifier: BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F Certificate issuer: /CN=A91ED35E/serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft Manifest number: 0108 Signing time: Sat 31 May 2025 04:38:08 +0000 Manifest this update: Sat 31 May 2025 04:38:08 +0000 Manifest next update: Sat 07 Jun 2025 04:38:08 +0000 Files and hashes: 1: vm13JvnXOebsmvk0fs7LQhevej8.crl (hash: EtaCdUuz75tnoZwmaA2dfd3BFz687VW7bbRp6ri3okc=) 2: 3AE10060B0F111EE9727201AC4F9AE02.roa (hash: KyJCsFenYj6fuJ23jzQVPwAa2Ss88E8BW4syF1uzypU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED35E, serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Validity Not Before: May 31 04:38:08 2025 GMT Not After : Jun 7 04:38:08 2025 GMT Subject: CN=683a87b0-c143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0f:c5:4e:56:2c:03:70:c1:dc:47:ce:54:00: dc:12:c7:57:40:53:3d:bf:17:85:b5:85:94:ac:70: 7d:82:90:06:10:fd:52:80:8e:3a:f8:08:41:9d:00: 17:83:4b:9e:12:3a:ea:bc:73:3f:a1:bd:d1:b0:9a: 2f:61:8e:0e:72:70:5a:0e:cc:56:d3:6f:d0:00:fb: b1:75:fc:59:23:c3:26:f9:da:0e:85:24:d6:07:b8: 54:66:82:5e:03:d6:25:f0:17:7c:85:e5:ee:c5:64: bd:fb:e7:44:69:66:60:f0:b2:57:cd:93:95:87:4e: 58:69:8d:7e:03:ac:34:54:db:7a:e9:04:06:3e:af: dc:74:7c:8d:27:c4:db:de:41:88:cb:37:f0:5d:ed: 67:ca:cb:6a:f7:8e:7f:24:fe:03:08:eb:cf:6d:22: 4a:4d:89:83:02:1a:34:fc:fe:15:0b:6f:93:84:ea: f9:03:c5:29:c6:54:c4:63:de:ee:7a:fe:40:e3:3b: bd:3d:ab:01:04:11:5f:02:66:00:60:e4:f1:9c:62: 1f:65:9e:6e:e5:8b:44:6f:30:0e:76:11:69:f4:85: 75:d2:ea:f7:f5:99:0d:5e:3c:b2:81:d7:06:36:81: b6:85:f0:2c:8c:a1:3a:87:c1:36:88:77:0d:b5:c8: 67:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:72:F4:67:F2:44:E9:97:5C:4C:AD:19:4B:67:D9:AF:82:34:A2:76 X509v3 Authority Key Identifier: keyid:BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:cd:2b:00:1b:e3:8d:76:36:a4:74:84:db:ca:31:b1:cf:ec: ad:9f:33:39:82:45:5a:49:01:19:c3:42:d2:4d:5b:08:c8:20: dc:5b:af:9c:2e:99:10:f0:5d:74:10:3c:b6:7b:26:a1:ae:d2: b7:37:a9:ab:5a:7d:4f:31:d6:bd:10:62:ce:75:41:05:b9:6e: ef:96:8e:ad:81:43:bc:8c:38:e6:0f:a2:9b:eb:73:af:51:49: 76:02:37:82:95:78:a7:ad:ee:7c:43:04:87:a5:9a:87:d4:16: 78:c1:e3:87:e5:85:c2:2c:51:e0:02:81:b5:fd:78:38:cf:c2: 74:cd:fc:65:5c:c7:c3:2c:72:49:de:af:fa:04:84:d1:c6:dd: f7:8a:7e:ab:5a:43:83:a0:bc:7a:07:38:ea:f5:7a:54:8d:9b: 2d:48:85:f6:b9:f9:44:0c:a7:73:9c:0e:d5:3b:35:b0:39:0c: f9:07:08:b1:70:13:37:3f:d7:7e:50:e8:97:0e:ac:bd:22:09: 7a:13:e1:98:df:f8:22:98:5f:0f:00:ad:87:ae:f5:28:33:96: d3:1b:44:6c:15:c3:b3:34:da:73:d6:ac:f9:32:11:a2:11:c9: 19:9a:36:6f:93:ff:27:fe:13:06:82:88:a8:53:df:34:df:48: e5:f8:a4:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQzNUUxMTAvBgNVBAUTKEJFNkQ3NzI2RjlENzM5RTZFQzlBRjkzNDdFQ0VDQjQy MTdBRjdBM0YwHhcNMjUwNTMxMDQzODA4WhcNMjUwNjA3MDQzODA4WjAYMRYwFAYD VQQDEw02ODNhODdiMC1jMTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzA/FTlYsA3DB3EfOVADcEsdXQFM9vxeFtYWUrHB9gpAGEP1SgI46+AhBnQAX g0ueEjrqvHM/ob3RsJovYY4OcnBaDsxW02/QAPuxdfxZI8Mm+doOhSTWB7hUZoJe A9Yl8Bd8heXuxWS9++dEaWZg8LJXzZOVh05YaY1+A6w0VNt66QQGPq/cdHyNJ8Tb 3kGIyzfwXe1nystq945/JP4DCOvPbSJKTYmDAho0/P4VC2+ThOr5A8UpxlTEY97u ev5A4zu9PasBBBFfAmYAYOTxnGIfZZ5u5YtEbzAOdhFp9IV10ur39ZkNXjyygdcG NoG2hfAsjKE6h8E2iHcNtchnQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCty9Gfy ROmXXEytGUtn2a+CNKJ2MB8GA1UdIwQYMBaAFL5tdyb51znm7Jr5NH7Oy0IXr3o/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDM1RS8yMDhERkMzNkFD NDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9lYnNtdmswZnM3TFFoZXZl ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtMTNKdm5YT2Vic212azBmczdMUWhldmVqOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDM1RS8yMDhERkMzNkFDNDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9l YnNtdmswZnM3TFFoZXZlajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4zSsAG+ONdjakdITbyjGxz+ytnzM5gkVaSQEZw0LSTVsIyCDcW6+c LpkQ8F10EDy2eyahrtK3N6mrWn1PMda9EGLOdUEFuW7vlo6tgUO8jDjmD6Kb63Ov UUl2AjeClXinre58QwSHpZqH1BZ4weOH5YXCLFHgAoG1/Xg4z8J0zfxlXMfDLHJJ 3q/6BITRxt33in6rWkODoLx6Bzjq9XpUjZstSIX2uflEDKdznA7VOzWwOQz5Bwix cBM3P9d+UOiXDqy9Igl6E+GY3/gimF8PAK2HrvUoM5bTG0RsFcOzNNpz1qz5MhGi EckZmjZvk/8n/hMGgoioU98030jl+KT0 -----END CERTIFICATE-----Generated at Sat May 31 17:20:34 2025 by rpki-client