$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft File: vK5XMu8hlzK0msgoTbGBTpLIaxE.mft (raw, json) Hash identifier: ibVjPKLhUeC5i7KieTMpRIB8VMbqtvwMFdJ58f1CleE= Subject key identifier: 5B:15:8F:E1:B3:6E:0E:65:AC:D7:09:17:08:0E:D3:27:9F:6F:C4:F1 Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 Certificate issuer: /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Certificate serial: 0874 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft Manifest number: 0868 Signing time: Thu 24 Apr 2025 20:33:07 +0000 Manifest this update: Thu 24 Apr 2025 20:33:07 +0000 Manifest next update: Thu 01 May 2025 20:33:07 +0000 Files and hashes: 1: vK5XMu8hlzK0msgoTbGBTpLIaxE.crl (hash: 1sjT7X2XWNUsrQxvb4Iv7WOQ6/+KNKDCwCPpUmbVE6E=) 2: 2015E6B2C66F11EAA0B1B019C4F9AE02.roa (hash: C1ZgQz60lAzJ/pUgilayEtzS5Rl0aKnA28InX9MzEYY=) 3: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (hash: mBsQp19MJChPAh0neRjuRaTqTqqlhbgiZ+3pPDgiX8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2164 (0x874) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Validity Not Before: Apr 24 20:33:07 2025 GMT Not After : May 1 20:33:07 2025 GMT Subject: CN=680aa003-e6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:25:7c:ab:85:57:9c:6f:a8:27:55:b1:49:2a: e6:e9:50:74:e3:3d:e4:02:f3:e4:69:f7:96:01:33: 8f:73:13:5a:95:ba:1a:d9:9b:64:8e:ce:f6:cc:5c: 29:d1:10:fc:04:f0:06:3b:54:50:af:af:9c:0a:b6: 4d:57:b2:70:1a:75:f6:c2:65:bb:c5:4a:d1:d0:a2: 1b:d5:58:f1:4c:ae:e7:ed:22:46:4d:1d:fa:de:1b: b5:33:de:16:6f:f1:5c:2e:a9:b8:b6:df:4f:f8:d6: 32:cf:fe:6e:16:01:83:12:b8:51:af:99:a7:90:ad: 4a:bb:d3:12:72:f1:cc:1d:91:e3:01:cd:84:15:a0: d7:3d:5b:22:13:1f:33:53:0b:da:68:6a:5b:1a:e7: f2:b9:06:ea:73:2c:86:7d:7f:cc:2b:92:8f:b9:bc: e1:28:64:bb:a8:9d:21:a5:39:6d:62:3f:a8:c3:26: ec:e6:f8:17:35:3d:9e:09:d2:46:e5:6d:27:97:11: aa:dd:56:40:3f:cb:ae:fd:0f:32:c2:7f:fa:40:fa: f8:08:4b:68:e8:29:41:82:ae:6a:26:38:89:12:75: 50:b4:5a:6e:16:7b:ac:14:4a:77:09:8a:00:11:d9: 85:79:3f:3f:34:ca:49:16:37:8f:28:b5:37:a7:23: 32:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:15:8F:E1:B3:6E:0E:65:AC:D7:09:17:08:0E:D3:27:9F:6F:C4:F1 X509v3 Authority Key Identifier: keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:d6:40:95:99:3a:f1:18:5e:6b:8e:3e:a2:41:73:71:1d:1e: 88:43:65:00:25:5d:5d:9a:9e:55:c5:94:fd:0c:9c:72:1a:79: ef:2b:64:17:01:18:66:ed:ae:4f:07:86:2f:07:af:61:7a:96: 73:1f:b7:c8:0c:b8:4b:1b:7b:0d:0a:c2:cf:e9:55:b8:3f:35: 77:66:2a:39:bb:99:2e:ab:ef:32:1e:e7:ca:4d:f3:c7:64:f4: 75:e5:0c:c4:e0:cf:ff:50:f8:bc:a2:84:86:e3:b0:24:7d:6c: e0:ca:8e:98:b1:ee:7d:89:28:ac:a1:02:a9:e5:53:30:1d:b3: 9b:96:94:bd:b7:46:2e:75:51:7d:1e:dc:5e:f4:f1:8c:1f:dc: b5:1f:ca:23:e0:ac:87:46:b4:6d:99:91:ab:22:4a:74:e4:8d: d8:f3:d0:07:1f:55:bf:3f:74:66:58:d9:56:3e:1f:19:84:4a: a1:c9:5c:fe:dd:03:ed:36:2c:dd:82:72:61:75:b9:8e:f7:99: 83:ef:aa:a6:dd:3e:b4:3c:5a:8b:bd:da:38:d5:59:1f:3c:db: 69:38:6f:a3:95:f4:45:9b:61:93:9e:3d:a7:91:8b:80:3f:34: e6:92:fa:c7:5f:6f:55:b7:b6:cb:33:31:71:c6:0a:f2:0b:55: 66:cc:96:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1M0IxMTAvBgNVBAUTKEJDQUU1NzMyRUYyMTk3MzJCNDlBQzgyODREQjE4MTRF OTJDODZCMTEwHhcNMjUwNDI0MjAzMzA3WhcNMjUwNTAxMjAzMzA3WjAYMRYwFAYD VQQDEw02ODBhYTAwMy1lNmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAniV8q4VXnG+oJ1WxSSrm6VB04z3kAvPkafeWATOPcxNalboa2Ztkjs72zFwp 0RD8BPAGO1RQr6+cCrZNV7JwGnX2wmW7xUrR0KIb1VjxTK7n7SJGTR363hu1M94W b/FcLqm4tt9P+NYyz/5uFgGDErhRr5mnkK1Ku9MScvHMHZHjAc2EFaDXPVsiEx8z UwvaaGpbGufyuQbqcyyGfX/MK5KPubzhKGS7qJ0hpTltYj+owybs5vgXNT2eCdJG 5W0nlxGq3VZAP8uu/Q8ywn/6QPr4CEto6ClBgq5qJjiJEnVQtFpuFnusFEp3CYoA EdmFeT8/NMpJFjePKLU3pyMyMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsVj+Gz bg5lrNcJFwgO0yefb8TxMB8GA1UdIwQYMBaAFLyuVzLvIZcytJrIKE2xgU6SyGsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjUzQi8yOTM4M0NERUMy MEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6SzBtc2dvVGJHQlRwTElh eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLNVhNdThobHpLMG1zZ29UYkdCVHBMSWF4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjUzQi8yOTM4M0NERUMyMEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6 SzBtc2dvVGJHQlRwTElheEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj1kCVmTrxGF5rjj6iQXNxHR6IQ2UAJV1dmp5VxZT9DJxyGnnvK2QX ARhm7a5PB4YvB69hepZzH7fIDLhLG3sNCsLP6VW4PzV3Zio5u5kuq+8yHufKTfPH ZPR15QzE4M//UPi8ooSG47AkfWzgyo6Yse59iSisoQKp5VMwHbOblpS9t0YudVF9 Htxe9PGMH9y1H8oj4KyHRrRtmZGrIkp05I3Y89AHH1W/P3RmWNlWPh8ZhEqhyVz+ 3QPtNizdgnJhdbmO95mD76qm3T60PFqLvdo41VkfPNtpOG+jlfRFm2GTnj2nkYuA PzTmkvrHX29Vt7bLMzFxxgryC1VmzJap -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:46 2025 by rpki-client