$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft File: vvMhsD2CRd537IDdAzG_uo0IWdg.mft (raw, json) Hash identifier: mSVnCVvst4/XtZqZYg+YrAjGj3YFCVYPgP33OWCEtUw= Subject key identifier: FD:B2:02:74:1F:2F:98:7D:26:8E:90:F8:67:EB:5A:3C:2E:B4:56:53 Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 Certificate issuer: /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft Manifest number: 02AD Signing time: Sat 31 May 2025 02:39:06 +0000 Manifest this update: Sat 31 May 2025 02:39:06 +0000 Manifest next update: Sat 07 Jun 2025 02:39:06 +0000 Files and hashes: 1: vvMhsD2CRd537IDdAzG_uo0IWdg.crl (hash: ZNS3H8cY6FnPCeoNhav7fwKhe2STlhrUDrLnMx36tUY=) 2: 5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (hash: AaKJfFADfdiocRuahwwRayJxxniMqc1ubRpa5kB8ql4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE8AC, serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Validity Not Before: May 31 02:39:06 2025 GMT Not After : Jun 7 02:39:06 2025 GMT Subject: CN=683a6bca-7026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e2:ba:cd:8e:7f:5e:0a:fb:f2:98:86:8d:10: 77:da:5d:0b:63:c6:f9:b2:7d:19:7d:15:ba:83:c9: e0:5a:f4:f4:a6:df:69:9e:04:82:90:01:38:3e:40: bf:2e:fd:8b:f0:a4:47:8c:5d:48:b5:24:54:20:20: 56:99:56:c2:c3:ed:e4:9c:ff:79:32:08:69:81:b3: 50:ec:ea:f4:74:64:fe:46:1c:52:7a:ff:f5:6b:98: cd:c6:cb:f1:b6:ef:31:00:ec:46:f0:3c:5c:ac:74: 82:d5:da:10:ac:99:78:00:0b:70:e1:75:3e:c4:aa: 85:10:7c:b7:bd:4c:c8:15:0a:6e:b1:84:36:86:e1: 32:4f:73:d3:37:df:15:3a:8f:d7:0f:be:24:1a:ff: f2:64:51:cb:4c:de:86:5c:f5:e1:66:63:c6:23:3a: c0:bd:85:8b:74:44:93:ab:ec:04:07:35:8f:b5:0e: 5f:e9:11:eb:ce:e9:03:ee:66:01:ce:cb:58:ef:a0: 64:4c:b3:1e:1f:db:0f:6f:d3:32:2a:dd:9f:e6:e4: 80:d5:5d:ba:d9:fe:5f:ad:63:84:d1:5e:f2:f7:27: 56:d0:59:41:8b:ce:7d:dc:54:34:c9:e4:8f:9e:b8: bb:28:83:63:23:17:08:19:4d:83:5f:86:d1:be:73: 53:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B2:02:74:1F:2F:98:7D:26:8E:90:F8:67:EB:5A:3C:2E:B4:56:53 X509v3 Authority Key Identifier: keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:71:6a:ba:a0:a3:12:09:b3:83:c4:72:79:d6:fe:84:9b:60: b4:d3:77:fb:c7:c1:24:ee:bf:07:dc:e8:9b:e9:d1:21:6b:8a: fe:81:95:4a:58:73:9c:df:38:7a:51:f3:d6:ee:34:0b:e1:67: fc:ce:c5:ee:e2:1d:db:b1:f4:b5:99:50:8c:bb:61:74:32:e4: e0:c8:24:67:40:d4:f7:fc:7a:b5:1f:87:0f:fa:3f:a6:db:c7: 88:3c:67:cd:87:8f:8e:71:6b:3e:3c:d4:89:3a:3b:af:ec:5c: 2e:65:e0:8d:f6:26:92:97:95:7c:3f:f7:3e:d5:86:11:4f:f3: de:1a:99:b1:89:bb:42:d3:57:f0:23:c8:7f:8d:0d:35:cc:80: bf:c6:9f:6c:a5:d3:75:64:3d:da:ae:26:e0:94:4d:e9:1a:9a: ea:30:78:e4:82:75:ab:c1:24:03:1b:fc:2e:98:1d:e7:d2:09: 13:d9:3b:82:4c:d7:af:b4:02:8b:e5:cc:9d:11:83:e3:34:27: af:4f:a4:a6:11:28:ca:55:09:56:3a:b5:4f:48:59:93:12:b9: 3e:5a:4d:f6:c7:e4:a1:3b:c8:7c:bd:f2:9e:88:e5:b0:cf:d5: 18:3e:9a:d9:a4:5f:94:33:93:53:d6:e8:2d:11:c1:f7:fc:99: f9:2b:cf:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU4QUMxMTAvBgNVBAUTKEJFRjMyMUIwM0Q4MjQ1REU3N0VDODBERDAzMzFCRkJB OEQwODU5RDgwHhcNMjUwNTMxMDIzOTA2WhcNMjUwNjA3MDIzOTA2WjAYMRYwFAYD VQQDEw02ODNhNmJjYS03MDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuK6zY5/Xgr78piGjRB32l0LY8b5sn0ZfRW6g8ngWvT0pt9pngSCkAE4PkC/ Lv2L8KRHjF1ItSRUICBWmVbCw+3knP95MghpgbNQ7Or0dGT+RhxSev/1a5jNxsvx tu8xAOxG8DxcrHSC1doQrJl4AAtw4XU+xKqFEHy3vUzIFQpusYQ2huEyT3PTN98V Oo/XD74kGv/yZFHLTN6GXPXhZmPGIzrAvYWLdESTq+wEBzWPtQ5f6RHrzukD7mYB zstY76BkTLMeH9sPb9MyKt2f5uSA1V262f5frWOE0V7y9ydW0FlBi8593FQ0yeSP nri7KINjIxcIGU2DX4bRvnNTlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2yAnQf L5h9Jo6Q+GfrWjwutFZTMB8GA1UdIwQYMBaAFL7zIbA9gkXed+yA3QMxv7qNCFnY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRThBQy81MDM4RUM4QzdE RUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1JkNTM3SURkQXpHX3VvMElX ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z2TWhzRDJDUmQ1MzdJRGRBekdfdW8wSVdkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RThBQy81MDM4RUM4QzdERUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1Jk NTM3SURkQXpHX3VvMElXZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRcWq6oKMSCbODxHJ51v6Em2C003f7x8Ek7r8H3Oib6dEha4r+gZVK WHOc3zh6UfPW7jQL4Wf8zsXu4h3bsfS1mVCMu2F0MuTgyCRnQNT3/Hq1H4cP+j+m 28eIPGfNh4+OcWs+PNSJOjuv7FwuZeCN9iaSl5V8P/c+1YYRT/PeGpmxibtC01fw I8h/jQ01zIC/xp9spdN1ZD3aribglE3pGprqMHjkgnWrwSQDG/wumB3n0gkT2TuC TNevtAKL5cydEYPjNCevT6SmESjKVQlWOrVPSFmTErk+Wk32x+ShO8h8vfKeiOWw z9UYPprZpF+UM5NT1ugtEcH3/Jn5K8/K -----END CERTIFICATE-----Generated at Sat May 31 16:29:40 2025 by rpki-client