$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft File: VlIPoddulfCBm23dSWe0VQRphp0.mft (raw, json) Hash identifier: vty/510YZzFN6d0g3Wtz0aW7Vc8TIA1M1T6oLSjZmZo= Subject key identifier: 8E:D9:F9:E8:1E:23:06:02:A2:7E:30:36:FD:C0:C4:FD:E9:04:EA:AB Authority key identifier: 56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D Certificate issuer: /CN=A91A91CB/serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft Manifest number: 40 Signing time: Tue 17 Jun 2025 06:20:56 +0000 Manifest this update: Tue 17 Jun 2025 06:20:55 +0000 Manifest next update: Tue 24 Jun 2025 06:20:55 +0000 Files and hashes: 1: VlIPoddulfCBm23dSWe0VQRphp0.crl (hash: LKO4at5yTbL1Ull6v9gaNY5VBEQ4J20YJUu7lmhbrpk=) 2: EE8CD88EEA5A11EF922B276DC4F9AE02.roa (hash: NgoL1gjr88ZdEn/6hgZXntqKOlCBVmw0eMD59yFjWlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91CB, serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D Validity Not Before: Jun 17 06:20:55 2025 GMT Not After : Jun 24 06:20:55 2025 GMT Subject: CN=68510948-6329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bd:00:0b:a2:f9:d1:03:6c:f8:df:dd:d1:d1: 72:45:25:22:c1:87:16:10:88:02:3a:c6:b8:cf:f2: 48:16:8c:7a:b9:55:f2:ab:5f:77:72:05:b5:17:f7: 1e:0b:06:67:e2:51:28:3d:7d:b7:e9:cd:f2:bc:30: 88:f7:ef:71:90:58:55:10:66:6d:ef:12:78:84:e0: fd:fd:a2:dd:9c:47:cd:95:d1:d7:99:e7:eb:94:6e: 96:2f:86:5c:43:e1:f6:17:cc:85:4b:7f:a7:cf:7f: 22:78:79:d9:b4:b6:15:0d:23:ab:f2:3f:60:a5:e9: d2:88:4e:b6:58:13:f7:bd:b5:b9:f8:a5:25:cd:47: aa:44:bb:3f:f9:a6:b5:27:15:a5:28:e1:d1:06:3c: 4e:34:21:05:e6:d2:5f:ca:74:f8:de:ae:db:44:56: 98:8f:b8:0d:7b:82:89:71:07:04:1c:11:4f:db:be: ae:f0:2d:23:13:00:1e:1e:7f:f5:63:1e:5e:5d:56: 60:1b:3e:1c:13:90:ef:25:5d:91:97:d8:ec:6e:a0: ad:6a:7f:5c:40:a5:c2:3f:d0:fa:a4:cc:52:17:a6: 00:9a:2c:93:1f:9f:c3:2b:d5:b5:2b:72:b5:49:25: 13:37:8c:d1:24:da:96:3e:be:91:e5:c3:47:34:1a: d9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D9:F9:E8:1E:23:06:02:A2:7E:30:36:FD:C0:C4:FD:E9:04:EA:AB X509v3 Authority Key Identifier: keyid:56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:f4:16:b4:f6:04:ff:46:77:10:4b:4b:5a:6e:34:13:79:f9: c4:37:02:fa:77:7b:8c:2d:d6:ea:5a:83:a7:01:ba:ff:00:be: d7:bf:50:31:f3:b1:ea:cf:a7:ac:48:3c:2f:9a:fc:e7:26:11: 1a:fe:08:14:67:5d:bc:9e:dd:c3:e1:f9:1c:3e:b3:0d:6e:dd: dc:5d:e9:a4:26:9d:11:2b:b8:82:c8:bc:54:6b:47:ca:98:3e: 24:0f:ef:8e:2b:96:9b:d7:97:3b:ce:bd:77:9c:4e:e5:70:fd: 4b:d0:88:43:40:4c:19:85:55:70:5f:9b:09:dc:3e:cb:05:4c: 67:4f:2a:5a:78:a6:41:20:59:0e:04:b6:45:f2:19:20:a2:f3: e2:13:34:68:70:16:29:44:4c:0b:4e:a0:ea:62:38:8c:88:a8: 96:d3:bf:ec:f4:8b:66:76:29:3a:81:9d:5a:2f:a9:69:98:13: f5:44:4e:33:75:3a:ef:53:bf:a2:6c:40:2b:c3:6c:16:88:56: 53:9b:c9:88:71:42:ef:ae:a8:e2:6a:03:da:b0:fd:ee:9e:dd: f3:5b:e5:f5:74:6a:23:12:a9:8a:13:eb:ee:a0:18:e9:a7:43: 78:85:de:a0:26:da:26:57:3b:2a:d7:cd:9a:66:b8:17:64:d8: 7f:50:56:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTFDQjExMC8GA1UEBRMoNTY1MjBGQTFENzZFOTVGMDgxOUI2RERENDk2N0I0NTUw NDY5ODY5RDAeFw0yNTA2MTcwNjIwNTVaFw0yNTA2MjQwNjIwNTVaMBgxFjAUBgNV BAMTDTY4NTEwOTQ4LTYzMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAvQALovnRA2z4393R0XJFJSLBhxYQiAI6xrjP8kgWjHq5VfKrX3dyBbUX9x4L BmfiUSg9fbfpzfK8MIj373GQWFUQZm3vEniE4P39ot2cR82V0deZ5+uUbpYvhlxD 4fYXzIVLf6fPfyJ4edm0thUNI6vyP2Cl6dKITrZYE/e9tbn4pSXNR6pEuz/5prUn FaUo4dEGPE40IQXm0l/KdPjerttEVpiPuA17golxBwQcEU/bvq7wLSMTAB4ef/Vj Hl5dVmAbPhwTkO8lXZGX2OxuoK1qf1xApcI/0PqkzFIXpgCaLJMfn8Mr1bUrcrVJ JRM3jNEk2pY+vpHlw0c0GtkpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjtn56B4j BgKifjA2/cDE/ekE6qswHwYDVR0jBBgwFoAUVlIPoddulfCBm23dSWe0VQRphp0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5MUNCLzVCNkZBMzYwRUE1 QTExRUZCODRBRTQ2OEM0RjlBRTAyL1ZsSVBvZGR1bGZDQm0yM2RTV2UwVlFScGhw MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVmxJUG9kZHVsZkNCbTIzZFNXZTBWUVJwaHAwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 MUNCLzVCNkZBMzYwRUE1QTExRUZCODRBRTQ2OEM0RjlBRTAyL1ZsSVBvZGR1bGZD Qm0yM2RTV2UwVlFScGhwMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMX0FrT2BP9GdxBLS1puNBN5+cQ3Avp3e4wt1upag6cBuv8Avte/UDHz serPp6xIPC+a/OcmERr+CBRnXbye3cPh+Rw+sw1u3dxd6aQmnREruILIvFRrR8qY PiQP744rlpvXlzvOvXecTuVw/UvQiENATBmFVXBfmwncPssFTGdPKlp4pkEgWQ4E tkXyGSCi8+ITNGhwFilETAtOoOpiOIyIqJbTv+z0i2Z2KTqBnVovqWmYE/VETjN1 Ou9Tv6JsQCvDbBaIVlObyYhxQu+uqOJqA9qw/e6e3fNb5fV0aiMSqYoT6+6gGOmn Q3iF3qAm2iZXOyrXzZpmuBdk2H9QVmU= -----END CERTIFICATE-----Generated at Wed Jun 18 12:47:02 2025 by rpki-client