$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft File: vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft (raw, json) Hash identifier: /y5uzKT8mBWDb8JNKJmvhPIQm2EmQYnG7ifsN3GzqP4= Subject key identifier: 3E:C7:A9:2A:45:94:6E:4A:47:97:81:25:95:CC:E4:1A:B0:B0:8B:26 Authority key identifier: BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F Certificate issuer: /CN=A91F4957/serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft Manifest number: 0167 Signing time: Sat 31 May 2025 03:36:15 +0000 Manifest this update: Sat 31 May 2025 03:36:14 +0000 Manifest next update: Sat 07 Jun 2025 03:36:14 +0000 Files and hashes: 1: vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl (hash: 9yol1x+Tk9SZHnBzcj0grO32DGj6H5wWsViztvi2wvY=) 2: 4231A1AA1B1711EEA5566A23C4F9AE02.roa (hash: lTkc7C0RlmKbFSYdbjr+dPk/Bz3louAuGeeNLMUaa3U=) 3: F0237E941B1911EE9DFF2942C4F9AE02.roa (hash: OFcdlnYr84QtfXIjFkq221jW9RB67N6+iA5hYs6y+y0=) 4: 60B707FA1AEA11EE92BEA24CC4F9AE02.roa (hash: kXqagkJo/A0eBKA6rzsFPrgkBqXmX4C+r5kQGo8fciw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4957, serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Validity Not Before: May 31 03:36:14 2025 GMT Not After : Jun 7 03:36:14 2025 GMT Subject: CN=683a792f-b942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:45:2d:4c:6a:7f:1d:cb:89:b2:9c:af:81:99: e9:f2:c7:64:d5:58:63:ec:35:c1:7a:15:0e:4a:87: 99:f6:79:88:8f:c3:05:cf:54:46:c3:fd:df:0e:1e: 41:81:58:b7:8e:c9:8c:fa:ad:6e:c1:ea:84:72:9c: 91:35:5a:e8:75:4a:f7:24:0d:62:ba:34:40:1e:0d: 6e:27:8e:c4:3c:39:17:57:72:53:3d:3e:30:24:dd: e1:1f:55:4b:e2:8b:1d:6a:e2:11:d4:1a:52:a6:11: 3d:54:f2:fa:01:b1:5f:99:c1:98:07:c6:0a:b8:a8: 89:9a:e3:df:8d:7e:91:d0:00:ba:93:dd:b7:f0:ff: c9:50:b3:aa:a2:e8:fe:4d:74:32:66:a8:9e:c4:0f: d0:20:34:c9:55:d6:b2:2b:95:d4:a0:d5:7a:8e:58: 57:d6:98:a6:c3:a2:a1:16:b8:19:99:a9:15:6e:e7: 31:cd:57:c4:cb:ff:bc:53:fb:7b:8c:fe:f4:11:68: 2a:e6:b1:86:5c:8c:21:a9:23:b2:2c:fd:66:6a:f4: 84:a8:4a:56:d2:b7:95:ca:d7:4c:e4:36:10:16:4c: 05:6e:63:07:dc:90:9e:a5:22:d8:01:c0:a4:61:14: 00:5a:bf:9c:84:8c:da:59:6a:db:12:01:4a:31:0c: 56:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C7:A9:2A:45:94:6E:4A:47:97:81:25:95:CC:E4:1A:B0:B0:8B:26 X509v3 Authority Key Identifier: keyid:BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:8f:99:21:36:e0:8c:4f:da:f1:fb:86:3f:0b:45:e6:55:22: 6a:58:ab:cc:9c:09:23:52:d2:b5:f3:9f:22:b0:d1:33:74:ac: fa:ea:7b:de:b5:dc:4d:11:f7:b6:de:70:a4:68:6d:27:02:df: 32:d2:fa:14:c5:17:dd:55:23:b3:4b:06:68:c6:43:f0:77:f7: 17:60:1c:f6:21:c5:4b:93:d7:50:85:cc:4b:d7:59:f4:3f:ba: 9f:1a:a9:a6:21:4f:26:17:eb:e9:1c:21:0d:3a:74:20:ea:7a: b1:3f:31:61:9a:76:19:50:5b:df:9a:07:26:bd:0e:7e:6d:d9: 18:d7:02:42:f1:b0:a3:20:98:36:9f:ed:b5:ef:f3:6e:fd:93: 17:9d:8c:e6:78:25:a5:5e:00:4a:81:46:33:65:af:8c:28:bb: 13:ad:89:fb:08:04:99:4e:cd:13:5c:be:d3:0e:f5:4d:61:41: 8a:71:b3:88:6a:ec:5e:d1:0f:de:30:4a:e3:bc:51:80:b3:19: c7:a9:4a:09:81:d4:c5:53:10:0c:36:a1:cd:29:47:c1:1f:25: b0:f6:10:d1:e7:dc:c5:4c:a9:6c:ea:03:93:a9:ef:d1:aa:d8: 7b:0c:21:28:36:c7:2d:b4:4e:6f:68:2a:ad:39:0d:0f:3c:af: f2:ee:70:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NTcxMTAvBgNVBAUTKEJGMkQxQjM5RDNDMkU5QUUwQUE4RkFCOTRCQUM1NDBD QzUyNjUyNEYwHhcNMjUwNTMxMDMzNjE0WhcNMjUwNjA3MDMzNjE0WjAYMRYwFAYD VQQDEw02ODNhNzkyZi1iOTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30UtTGp/HcuJspyvgZnp8sdk1Vhj7DXBehUOSoeZ9nmIj8MFz1RGw/3fDh5B gVi3jsmM+q1uweqEcpyRNVrodUr3JA1iujRAHg1uJ47EPDkXV3JTPT4wJN3hH1VL 4osdauIR1BpSphE9VPL6AbFfmcGYB8YKuKiJmuPfjX6R0AC6k9238P/JULOqouj+ TXQyZqiexA/QIDTJVdayK5XUoNV6jlhX1pimw6KhFrgZmakVbucxzVfEy/+8U/t7 jP70EWgq5rGGXIwhqSOyLP1mavSEqEpW0reVytdM5DYQFkwFbmMH3JCepSLYAcCk YRQAWr+chIzaWWrbEgFKMQxWmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7HqSpF lG5KR5eBJZXM5BqwsIsmMB8GA1UdIwQYMBaAFL8tGznTwumuCqj6uUusVAzFJlJP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Ny81NzFCMjIxMDFB RTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZhNEtxUHE1UzZ4VURNVW1V azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z5MGJPZFBDNmE0S3FQcTVTNnhVRE1VbVVrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Ny81NzFCMjIxMDFBRTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZh NEtxUHE1UzZ4VURNVW1VazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7j5khNuCMT9rx+4Y/C0XmVSJqWKvMnAkjUtK1858isNEzdKz66nve tdxNEfe23nCkaG0nAt8y0voUxRfdVSOzSwZoxkPwd/cXYBz2IcVLk9dQhcxL11n0 P7qfGqmmIU8mF+vpHCENOnQg6nqxPzFhmnYZUFvfmgcmvQ5+bdkY1wJC8bCjIJg2 n+217/Nu/ZMXnYzmeCWlXgBKgUYzZa+MKLsTrYn7CASZTs0TXL7TDvVNYUGKcbOI auxe0Q/eMErjvFGAsxnHqUoJgdTFUxAMNqHNKUfBHyWw9hDR59zFTKls6gOTqe/R qth7DCEoNscttE5vaCqtOQ0PPK/y7nBv -----END CERTIFICATE-----Generated at Sat May 31 16:52:10 2025 by rpki-client