$ rpki-client -vvf rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft File: vNgnSl8YLOQAgCwIPo0VQi-bthE.mft (raw, json) Hash identifier: pbI14Yz8Jg4jckfql6vkJc0zsEUmHp2CFHapVdEw/Nw= Subject key identifier: 91:1B:48:39:05:2B:B4:A5:13:79:BB:22:D9:84:AF:D8:51:D5:CA:A2 Authority key identifier: BC:D8:27:4A:5F:18:2C:E4:00:80:2C:08:3E:8D:15:42:2F:9B:B6:11 Certificate issuer: /CN=A91554E6/serialNumber=BCD8274A5F182CE400802C083E8D15422F9BB611 Certificate serial: 02D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNgnSl8YLOQAgCwIPo0VQi-bthE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft Manifest number: 040B Signing time: Sun 15 Jun 2025 01:04:28 +0000 Manifest this update: Sun 15 Jun 2025 01:04:27 +0000 Manifest next update: Sun 22 Jun 2025 01:04:27 +0000 Files and hashes: 1: vNgnSl8YLOQAgCwIPo0VQi-bthE.crl (hash: I0nfaT8lgqlZf2koKrRfnjRkxStkwn2QXRsgyIo5T4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.crl rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNgnSl8YLOQAgCwIPo0VQi-bthE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 728 (0x2d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91554E6, serialNumber=BCD8274A5F182CE400802C083E8D15422F9BB611 Validity Not Before: Jun 15 01:04:27 2025 GMT Not After : Jun 22 01:04:27 2025 GMT Subject: CN=684e1c1b-003d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ab:bc:83:82:7d:ef:c5:16:73:1a:f8:fb:e8: 33:56:f5:c6:36:63:dd:7b:4d:98:27:4a:8d:58:fe: ba:06:fa:d0:18:8e:97:47:64:15:c1:70:a3:f2:70: 6e:15:84:1c:f2:6c:21:43:14:33:02:0b:04:6e:e4: 79:2b:44:49:8e:92:97:3f:2b:01:f5:45:f8:26:62: b2:41:65:bc:dc:b4:ea:e4:df:7d:01:19:01:4e:db: 50:b4:aa:a4:7d:04:28:ec:3f:a2:12:e8:94:13:60: 55:67:65:63:69:60:94:fa:9e:74:84:d5:61:b3:1f: fe:71:cc:53:1a:78:6f:69:23:57:ed:d6:c7:73:52: 5d:68:c3:20:27:71:5b:40:47:e4:4d:35:6e:a4:1c: d6:cb:4d:2d:58:cc:9b:bb:8e:b9:99:51:19:ea:97: 55:08:b5:c9:0c:96:20:ff:a1:e1:2e:cc:fc:2a:25: 9c:3f:00:d6:4f:ac:01:15:28:cd:4c:61:4f:de:8b: 53:ac:01:ed:40:67:c9:00:64:9b:97:0a:23:a1:31: ac:1b:06:34:b5:9d:3c:39:9f:2e:95:29:f7:eb:43: ae:af:2e:ec:a6:8d:54:1b:78:e8:a1:fa:b0:e7:e3: 1e:ba:c9:18:10:c3:ec:84:a4:5d:92:bd:9f:d6:79: 74:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1B:48:39:05:2B:B4:A5:13:79:BB:22:D9:84:AF:D8:51:D5:CA:A2 X509v3 Authority Key Identifier: keyid:BC:D8:27:4A:5F:18:2C:E4:00:80:2C:08:3E:8D:15:42:2F:9B:B6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNgnSl8YLOQAgCwIPo0VQi-bthE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:11:61:f6:2b:cb:66:13:65:2d:a6:93:ad:fd:71:5d:66:4c: 6a:6d:78:f2:7b:6d:7a:f2:bd:6f:4a:f7:9f:0b:87:aa:dd:2c: 58:3e:c7:d0:36:3d:1c:c4:e4:dd:19:af:34:6b:1f:e6:60:ab: f6:84:44:1e:df:6c:9e:27:dc:f2:82:76:f4:71:35:f7:cd:96: 22:d9:ba:8a:b7:e1:df:fe:3c:c6:24:c8:30:45:c7:70:05:4b: 73:8e:53:64:58:9a:d2:3d:b3:dc:1a:ce:14:07:08:46:b0:ba: f6:44:39:91:62:b6:62:13:d8:6a:13:52:71:04:07:3a:a6:50: 42:ec:fe:de:42:8f:f6:6d:7c:6f:80:f9:59:83:af:db:a7:9e: 5b:3b:31:a6:10:f5:bf:9e:07:91:ba:9b:a2:e9:55:04:d0:2d: 7b:00:65:2f:80:ac:6e:87:68:fb:d3:a9:43:b5:e2:39:4f:7d: 36:12:05:b2:39:55:d9:ed:49:d3:42:36:a2:e8:5b:3f:88:d6: e1:a9:df:33:70:60:90:fb:6f:02:0e:b6:65:eb:f8:ff:c5:b4: fa:03:cb:19:a2:c5:ef:7a:c5:d4:57:a5:df:4a:f5:b4:9a:44: d7:a2:de:7b:e4:31:61:af:19:9d:0c:1b:f3:b2:06:fa:ff:d0: d5:bc:c4:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0RTYxMTAvBgNVBAUTKEJDRDgyNzRBNUYxODJDRTQwMDgwMkMwODNFOEQxNTQy MkY5QkI2MTEwHhcNMjUwNjE1MDEwNDI3WhcNMjUwNjIyMDEwNDI3WjAYMRYwFAYD VQQDEw02ODRlMWMxYi0wMDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2au8g4J978UWcxr4++gzVvXGNmPde02YJ0qNWP66BvrQGI6XR2QVwXCj8nBu FYQc8mwhQxQzAgsEbuR5K0RJjpKXPysB9UX4JmKyQWW83LTq5N99ARkBTttQtKqk fQQo7D+iEuiUE2BVZ2VjaWCU+p50hNVhsx/+ccxTGnhvaSNX7dbHc1JdaMMgJ3Fb QEfkTTVupBzWy00tWMybu465mVEZ6pdVCLXJDJYg/6HhLsz8KiWcPwDWT6wBFSjN TGFP3otTrAHtQGfJAGSblwojoTGsGwY0tZ08OZ8ulSn360Oury7spo1UG3joofqw 5+MeuskYEMPshKRdkr2f1nl0pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEbSDkF K7SlE3m7ItmEr9hR1cqiMB8GA1UdIwQYMBaAFLzYJ0pfGCzkAIAsCD6NFUIvm7YR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTRFNi85RjA2Nzc0OEVE NEIxMUVDQUI4RkFBNzdDNEY5QUUwMi92TmduU2w4WUxPUUFnQ3dJUG8wVlFpLWJ0 aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZOZ25TbDhZTE9RQWdDd0lQbzBWUWktYnRoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTRFNi85RjA2Nzc0OEVENEIxMUVDQUI4RkFBNzdDNEY5QUUwMi92TmduU2w4WUxP UUFnQ3dJUG8wVlFpLWJ0aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3EWH2K8tmE2UtppOt/XFdZkxqbXjye2168r1vSvefC4eq3SxYPsfQ Nj0cxOTdGa80ax/mYKv2hEQe32yeJ9zygnb0cTX3zZYi2bqKt+Hf/jzGJMgwRcdw BUtzjlNkWJrSPbPcGs4UBwhGsLr2RDmRYrZiE9hqE1JxBAc6plBC7P7eQo/2bXxv gPlZg6/bp55bOzGmEPW/ngeRupui6VUE0C17AGUvgKxuh2j706lDteI5T302EgWy OVXZ7UnTQjai6Fs/iNbhqd8zcGCQ+28CDrZl6/j/xbT6A8sZosXvesXUV6XfSvW0 mkTXot575DFhrxmdDBvzsgb6/9DVvMRX -----END CERTIFICATE-----Generated at Sun Jun 15 05:09:14 2025 by rpki-client