$ rpki-client -vvf rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft File: VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft (raw, json) Hash identifier: oCZZIXbBS9F7JFpfX/9BtVVWiOdHLEBW04gHTOZp23k= Subject key identifier: DE:CB:44:A6:D9:18:2C:07:67:46:14:6F:7A:03:59:25:95:0C:1D:E1 Authority key identifier: 54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD Certificate issuer: /CN=A91790C3/serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD Certificate serial: 0681 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft Manifest number: 066E Signing time: Thu 12 Jun 2025 22:04:44 +0000 Manifest this update: Thu 12 Jun 2025 22:04:43 +0000 Manifest next update: Thu 19 Jun 2025 22:04:43 +0000 Files and hashes: 1: VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl (hash: wnan1wX+nV2RrvpW5IEt/AGSD1mGWTEjWWwfmu/gjWU=) 2: C437B01282C211EBBB08B280C4F9AE02.roa (hash: jFt3e40+ALQhrJp6OJZEoPNCJM/tKBFq4PlGOIsp684=) 3: C3AD861C82C211EBBB08B280C4F9AE02.roa (hash: ExeORiGRCNK8jvuw56sySZxqK+GOSBQ3JY3+3QQDiXc=) 4: 9EA2D73236D311EF89295180C4F9AE02.roa (hash: f2ke3ZBYV1Ribvo8r5rmx6HoUBDp7E1lgqZwRkmtN9g=) 5: C310545082C211EBBB08B280C4F9AE02.roa (hash: +qteBc7xk/iNE1OmAmAugB8Y+ErzQcUywqF9mnDTvtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1665 (0x681) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91790C3, serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD Validity Not Before: Jun 12 22:04:43 2025 GMT Not After : Jun 19 22:04:43 2025 GMT Subject: CN=684b4efb-4e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a4:8c:46:81:17:8d:42:75:da:c5:97:6e:da: 65:fd:99:4d:54:d8:26:e0:2a:a4:44:50:8f:9f:11: 64:7c:79:78:da:80:1b:84:a3:1c:75:59:bc:ef:e6: 4b:9e:03:92:0c:0b:eb:d5:8d:2e:6f:eb:cf:47:37: 69:c4:c8:e7:99:e1:74:fe:4f:88:cc:15:9c:b3:07: fc:d7:e3:b7:3c:13:d9:6c:e0:eb:0f:8c:78:16:60: ee:8e:9f:b2:4d:0f:2a:24:34:12:78:3a:d1:37:dc: f4:7a:5b:a5:85:ee:ac:fa:94:aa:7c:ee:42:ad:05: 91:6b:09:fe:6e:c7:02:c8:af:53:22:d2:7d:c4:98: 04:f5:e2:3a:3e:23:51:2e:80:07:9f:16:c5:fa:f7: 28:40:2d:27:73:af:d8:60:c9:70:6e:57:05:32:c4: 75:b6:31:e9:fb:5b:c7:e0:19:04:fa:86:6d:80:0d: 4e:d7:49:ce:86:3d:b3:31:5e:b7:49:ee:2d:dd:26: 25:cb:f5:4d:3f:ab:d2:34:22:76:bc:2f:a8:0c:0c: 89:e4:d9:3d:07:8d:53:87:05:64:84:e0:06:64:ee: 81:15:40:e9:58:a2:de:6e:a3:42:c4:60:90:71:74: 0d:07:8f:97:04:76:35:38:16:53:25:c4:5f:d1:35: c3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CB:44:A6:D9:18:2C:07:67:46:14:6F:7A:03:59:25:95:0C:1D:E1 X509v3 Authority Key Identifier: keyid:54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:85:9c:dd:ce:df:e4:a1:a8:69:f0:f9:c6:88:1b:d4:81:f9: e3:5d:38:2e:97:32:98:48:f3:76:3b:80:a2:6e:51:80:7d:74: f4:1c:9d:a0:56:13:c9:de:20:69:1e:88:58:ee:62:61:23:a4: cf:43:e5:3e:3a:d7:0b:79:0b:72:d1:86:0a:3a:41:79:c5:87: 9c:01:d3:89:57:4a:19:c8:23:8e:67:c8:ea:68:c3:02:42:24: f6:28:35:62:db:e2:a7:ff:9f:9d:60:bf:2d:82:5b:4e:c6:f6: 62:10:7e:e5:ae:91:8e:2b:85:72:68:ec:10:e1:d0:e1:53:70: ab:89:21:1b:aa:3b:50:08:8e:ce:e3:49:ca:29:24:b7:df:3f: 56:93:98:f6:6c:56:6a:30:c6:7e:e1:2d:14:87:7e:0f:71:88: 50:2d:a7:85:cc:be:6d:81:43:5e:ef:fe:75:35:df:e3:af:a7: 43:59:cd:c9:09:46:53:1d:75:f3:06:a5:b6:94:63:c4:51:1e: 1a:26:1f:00:55:3a:2b:28:0a:bc:54:bb:69:6d:f6:9b:8d:2b: 73:fd:2b:e2:6b:51:32:c0:66:58:91:a9:4e:66:d1:6c:23:e6: 3f:35:13:4f:b6:65:dc:89:45:d7:28:e9:ed:a7:50:6b:a1:fd: 1a:a5:de:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzkwQzMxMTAvBgNVBAUTKDU0ODdCNjNGNDRENjkxRDQzNTY4OEFGRTNDOEFDMjdC RkQ5MTEyQUQwHhcNMjUwNjEyMjIwNDQzWhcNMjUwNjE5MjIwNDQzWjAYMRYwFAYD VQQDEw02ODRiNGVmYi00ZTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5aSMRoEXjUJ12sWXbtpl/ZlNVNgm4CqkRFCPnxFkfHl42oAbhKMcdVm87+ZL ngOSDAvr1Y0ub+vPRzdpxMjnmeF0/k+IzBWcswf81+O3PBPZbODrD4x4FmDujp+y TQ8qJDQSeDrRN9z0elulhe6s+pSqfO5CrQWRawn+bscCyK9TItJ9xJgE9eI6PiNR LoAHnxbF+vcoQC0nc6/YYMlwblcFMsR1tjHp+1vH4BkE+oZtgA1O10nOhj2zMV63 Se4t3SYly/VNP6vSNCJ2vC+oDAyJ5Nk9B41ThwVkhOAGZO6BFUDpWKLebqNCxGCQ cXQNB4+XBHY1OBZTJcRf0TXDpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7LRKbZ GCwHZ0YUb3oDWSWVDB3hMB8GA1UdIwQYMBaAFFSHtj9E1pHUNWiK/jyKwnv9kRKt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTBDMy84NTUzMDVFMjgy QzAxMUVCQkFDRTJBN0JDNEY5QUUwMi9WSWUyUDBUV2tkUTFhSXItUElyQ2VfMlJF cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJZTJQMFRXa2RRMWFJci1QSXJDZV8yUkVxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTBDMy84NTUzMDVFMjgyQzAxMUVCQkFDRTJBN0JDNEY5QUUwMi9WSWUyUDBUV2tk UTFhSXItUElyQ2VfMlJFcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxhZzdzt/koahp8PnGiBvUgfnjXTgulzKYSPN2O4CiblGAfXT0HJ2g VhPJ3iBpHohY7mJhI6TPQ+U+OtcLeQty0YYKOkF5xYecAdOJV0oZyCOOZ8jqaMMC QiT2KDVi2+Kn/5+dYL8tgltOxvZiEH7lrpGOK4VyaOwQ4dDhU3CriSEbqjtQCI7O 40nKKSS33z9Wk5j2bFZqMMZ+4S0Uh34PcYhQLaeFzL5tgUNe7/51Nd/jr6dDWc3J CUZTHXXzBqW2lGPEUR4aJh8AVTorKAq8VLtpbfabjStz/Svia1EywGZYkalOZtFs I+Y/NRNPtmXciUXXKOntp1Brof0apd78 -----END CERTIFICATE-----Generated at Sat Jun 14 18:17:13 2025 by rpki-client