$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft File: VFxHwOQxMzjcm0QCwSuty06YV8E.mft (raw, json) Hash identifier: 6qVJibeKrnerhA16WURxfkv8zeGC5BBVo51r8+R3hu0= Subject key identifier: 50:CB:53:25:7B:86:34:40:53:E3:EA:6D:EC:7E:72:EC:38:58:CE:77 Authority key identifier: 54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1 Certificate issuer: /CN=A91FB103/serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft Manifest number: 011F Signing time: Sat 31 May 2025 04:30:26 +0000 Manifest this update: Sat 31 May 2025 04:30:25 +0000 Manifest next update: Sat 07 Jun 2025 04:30:25 +0000 Files and hashes: 1: VFxHwOQxMzjcm0QCwSuty06YV8E.crl (hash: jQMhbKbLcgL40FMcEaBurDq9+GqNtJAOsq05uRJ4NpA=) 2: 77F8EAD29CF811EFA2E0CD6AC4F9AE02.roa (hash: Ain3qdd9woinL4inH/8nG99VHakyMNpv4v8rmQWJ1Bs=) 3: 0F440AB26E7711EFAA4A1C1AC4F9AE02.roa (hash: O1np95hbIM7tMbwqTYjzC3DrWBrLxkB/hTITnk5MJww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB103, serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1 Validity Not Before: May 31 04:30:25 2025 GMT Not After : Jun 7 04:30:25 2025 GMT Subject: CN=683a85e1-5f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ae:08:b1:a6:3a:d7:b4:e7:ef:d9:44:8e:73: 2b:95:27:36:83:33:78:60:41:9d:a5:cf:98:e0:64: 5c:23:40:98:86:b2:ba:a3:d7:98:4d:27:44:5f:3f: b3:a8:3c:2f:90:63:e4:62:a9:f8:6b:93:7a:f3:40: 41:ef:2d:11:4f:6b:b6:12:37:90:77:e7:77:d4:11: 79:d5:06:06:98:20:5c:6f:66:4f:6f:78:22:30:76: e8:76:0d:e4:a1:59:60:1a:bb:8c:ad:8d:17:db:ae: c1:20:b1:83:90:19:f1:0a:96:af:ae:d2:d2:b7:21: 23:4d:68:55:79:59:59:48:c6:81:92:4e:d5:d5:a8: 53:f4:3f:74:4e:c4:90:de:55:dc:38:44:2c:96:0e: 8a:8d:28:d5:58:9a:ae:08:6b:1c:1a:fe:c8:d5:fc: 15:3e:c2:49:85:5b:35:65:16:7f:5f:e1:59:48:63: e5:0f:5f:a3:84:59:cd:7c:0c:15:9d:04:40:6d:92: 08:d6:0c:07:a2:77:32:25:27:af:85:72:53:34:44: 72:8d:eb:8b:c2:4e:81:b0:06:00:0b:62:98:b6:86: 41:ec:85:e5:89:d4:da:7d:ef:08:9e:00:65:6e:16: 5f:4a:bf:24:8d:04:bc:f6:1d:a8:f8:c0:85:51:5f: 0e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:CB:53:25:7B:86:34:40:53:E3:EA:6D:EC:7E:72:EC:38:58:CE:77 X509v3 Authority Key Identifier: keyid:54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:26:57:0f:6c:16:50:74:ab:26:8b:63:98:68:c2:63:97:c6: 3e:c7:ee:bf:d5:2e:af:9a:4d:df:11:57:10:ab:c4:19:17:cf: f9:bc:43:fc:c9:4a:94:b7:2c:26:1b:3c:05:b0:56:98:07:d5: 6a:05:f1:f7:0e:ca:28:31:90:67:e7:ab:5d:3a:68:32:3d:67: 16:c7:ee:4a:12:01:2f:61:39:c4:64:37:a4:47:54:fe:96:e7: b1:ef:0f:bf:90:aa:35:35:0e:5b:4b:51:03:09:a0:07:5f:0d: 0d:e5:92:77:98:cc:c5:b4:83:93:ce:1e:4a:9d:94:d4:2c:35: 15:05:d8:78:ab:72:02:2d:4d:07:fc:42:a0:de:9a:5a:96:67: 10:36:a3:97:b9:7a:59:dc:6a:54:4a:58:77:7d:a8:10:7c:5c: e0:e5:51:25:90:72:63:1d:7b:79:a8:77:67:e4:6b:78:72:25: c7:76:ca:8d:2a:67:df:76:13:99:43:12:29:4e:2e:f9:6a:a1: 90:71:72:f5:80:9d:3c:c6:99:98:99:70:72:b9:ca:80:75:b8: 43:e0:56:85:f6:78:fa:11:6d:2a:36:91:f8:2a:07:0e:a0:f2: 5b:fd:d4:ec:a3:53:f2:60:92:45:d8:6b:4c:a3:b1:88:26:f5: 9b:07:1c:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIxMDMxMTAvBgNVBAUTKDU0NUM0N0MwRTQzMTMzMzhEQzlCNDQwMkMxMkJBRENC NEU5ODU3QzEwHhcNMjUwNTMxMDQzMDI1WhcNMjUwNjA3MDQzMDI1WjAYMRYwFAYD VQQDEw02ODNhODVlMS01ZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsq4IsaY617Tn79lEjnMrlSc2gzN4YEGdpc+Y4GRcI0CYhrK6o9eYTSdEXz+z qDwvkGPkYqn4a5N680BB7y0RT2u2EjeQd+d31BF51QYGmCBcb2ZPb3giMHbodg3k oVlgGruMrY0X267BILGDkBnxCpavrtLStyEjTWhVeVlZSMaBkk7V1ahT9D90TsSQ 3lXcOEQslg6KjSjVWJquCGscGv7I1fwVPsJJhVs1ZRZ/X+FZSGPlD1+jhFnNfAwV nQRAbZII1gwHoncyJSevhXJTNERyjeuLwk6BsAYAC2KYtoZB7IXlidTafe8IngBl bhZfSr8kjQS89h2o+MCFUV8OxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDLUyV7 hjRAU+Pqbex+cuw4WM53MB8GA1UdIwQYMBaAFFRcR8DkMTM43JtEAsErrctOmFfB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjEwMy8yRkI5ODUwODkz RkIxMUVFOTY4RUU0NDJDNEY5QUUwMi9WRnhId09ReE16amNtMFFDd1N1dHkwNllW OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGeEh3T1F4TXpqY20wUUN3U3V0eTA2WVY4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjEwMy8yRkI5ODUwODkzRkIxMUVFOTY4RUU0NDJDNEY5QUUwMi9WRnhId09ReE16 amNtMFFDd1N1dHkwNllWOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUJlcPbBZQdKsmi2OYaMJjl8Y+x+6/1S6vmk3fEVcQq8QZF8/5vEP8 yUqUtywmGzwFsFaYB9VqBfH3DsooMZBn56tdOmgyPWcWx+5KEgEvYTnEZDekR1T+ luex7w+/kKo1NQ5bS1EDCaAHXw0N5ZJ3mMzFtIOTzh5KnZTULDUVBdh4q3ICLU0H /EKg3ppalmcQNqOXuXpZ3GpUSlh3fagQfFzg5VElkHJjHXt5qHdn5Gt4ciXHdsqN KmffdhOZQxIpTi75aqGQcXL1gJ08xpmYmXByucqAdbhD4FaF9nj6EW0qNpH4KgcO oPJb/dTso1PyYJJF2GtMo7GIJvWbBxwO -----END CERTIFICATE-----Generated at Sat May 31 17:54:56 2025 by rpki-client