$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft File: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft (raw, json) Hash identifier: zWrQT/p7c/e/RFMFSz0YHxlhVqe3yteUvz/9Ae2eq3A= Subject key identifier: B5:08:B4:1D:38:75:A9:D1:C9:DC:41:6E:4C:42:0A:20:6A:F1:98:F5 Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7 Certificate issuer: /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7 Certificate serial: 25CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft Manifest number: 25BA Signing time: Thu 24 Apr 2025 15:44:47 +0000 Manifest this update: Thu 24 Apr 2025 15:44:47 +0000 Manifest next update: Thu 01 May 2025 15:44:47 +0000 Files and hashes: 1: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl (hash: gJzXuELRNuuWW0jydAKwzQO5LOF8kGrUyy2I/MaYwBk=) 2: E2E360EEF3EE11ECBAE10054C4F9AE02.roa (hash: MwkxKey8SdTfX3rA2ndaHPVnUsJ97475p+Dzwmyl9SQ=) 3: E21E1C6CF3EE11ECBAE10054C4F9AE02.roa (hash: UiQJQcjiTKGUKZaMNBKg71L13IK59w5XS6QCL7nnWSE=) 4: E14BDC8EF3EE11ECBAE10054C4F9AE02.roa (hash: gP1rmRhgK5le3CICuUOYmVhhDItIyOhZ8RIHh+3gkE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9676 (0x25cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5B46, serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7 Validity Not Before: Apr 24 15:44:47 2025 GMT Not After : May 1 15:44:47 2025 GMT Subject: CN=680a5c6f-b8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2d:27:c7:ed:52:f8:02:48:7b:24:bb:a7:7d: c4:dc:f8:fb:aa:21:b7:6f:22:e5:fd:34:69:aa:72: 58:3b:a0:2c:ec:aa:da:ff:24:f8:31:bb:9d:84:1a: 40:46:b5:40:56:60:9d:be:67:ea:03:2e:9d:e1:0d: c9:d6:8b:18:3c:8e:99:92:6b:ce:2d:e2:ec:dc:33: ee:3e:62:0d:3e:21:50:66:99:41:57:64:18:63:d9: 3e:f1:8a:f2:a0:48:d4:f9:4f:c1:e7:cd:5e:1f:cc: 80:16:71:c4:03:2a:c7:59:65:d2:13:4d:4b:d8:86: 2b:7c:80:9d:06:9d:c9:93:e2:7d:4a:8b:45:30:04: 25:c7:cd:8a:f1:a0:9e:b5:cf:3f:a7:2d:ca:9f:b0: 0f:50:82:99:14:f8:e9:fd:1b:33:c1:8a:32:20:1d: ea:53:a2:64:2f:67:49:a1:c1:49:a8:a0:ed:98:5c: 2d:92:5c:73:5e:ce:ee:c6:62:10:4c:02:fd:44:76: 9f:f3:06:34:45:45:f1:a5:76:ed:bc:1f:bf:e0:dd: 6c:12:b4:2d:45:20:a4:29:d6:4d:72:48:3c:f9:50: 14:bf:fb:46:fe:ca:cd:67:a6:9b:56:ed:cb:6d:95: 85:eb:4b:7f:71:5f:6d:e0:b7:7b:ef:c8:e0:e2:d9: 91:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:08:B4:1D:38:75:A9:D1:C9:DC:41:6E:4C:42:0A:20:6A:F1:98:F5 X509v3 Authority Key Identifier: keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:54:52:c7:78:dd:cc:1c:c6:98:4d:02:a4:9c:91:38:40:14: 33:4c:b9:86:c0:ee:9f:59:fa:07:49:1f:69:3c:ac:94:40:6c: a0:d0:30:a2:08:a1:28:53:4f:45:17:5f:e1:4f:76:85:26:ef: 36:50:38:d5:c2:1a:46:ab:6d:a5:75:fe:11:60:52:c3:18:da: 74:dc:c0:29:55:b1:35:99:df:86:53:83:33:3c:36:c1:d2:d2: ae:93:71:24:d1:98:a5:b4:2e:3e:13:39:fe:85:5b:3c:c3:c9: f0:de:d5:25:7f:10:f4:33:4f:9d:03:10:81:04:49:9b:bb:28: 3d:08:74:cf:18:87:ec:54:48:b9:bf:38:08:10:90:c0:e3:b6: 7b:4f:1d:46:eb:66:04:ff:4c:86:91:7e:bc:07:9a:ba:4a:36: 0b:ed:3e:b7:57:57:08:a3:a9:a4:89:36:02:86:28:d2:03:49: da:14:88:06:55:cf:8c:bb:47:43:18:b3:06:08:73:54:29:05: e9:bb:56:16:fc:73:0d:9e:73:01:44:77:af:ec:0b:f2:8f:90: d0:26:99:4d:54:4a:8f:71:0c:22:8f:0a:a3:1a:54:d6:b1:1b: f2:5c:c0:80:1f:32:ae:05:5c:dc:f8:32:cf:49:ed:ae:1f:64: df:0d:6f:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVCNDYxMTAvBgNVBAUTKDU2Q0QzMkQxM0Y4Q0FFMUU5MkY5Qzk3RjM5NUYxQTIz QUJCOUM2RjcwHhcNMjUwNDI0MTU0NDQ3WhcNMjUwNTAxMTU0NDQ3WjAYMRYwFAYD VQQDEw02ODBhNWM2Zi1iOGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtC0nx+1S+AJIeyS7p33E3Pj7qiG3byLl/TRpqnJYO6As7Kra/yT4MbudhBpA RrVAVmCdvmfqAy6d4Q3J1osYPI6ZkmvOLeLs3DPuPmINPiFQZplBV2QYY9k+8Yry oEjU+U/B581eH8yAFnHEAyrHWWXSE01L2IYrfICdBp3Jk+J9SotFMAQlx82K8aCe tc8/py3Kn7APUIKZFPjp/RszwYoyIB3qU6JkL2dJocFJqKDtmFwtklxzXs7uxmIQ TAL9RHaf8wY0RUXxpXbtvB+/4N1sErQtRSCkKdZNckg8+VAUv/tG/srNZ6abVu3L bZWF60t/cV9t4Ld778jg4tmR9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUItB04 danRydxBbkxCCiBq8Zj1MB8GA1UdIwQYMBaAFFbNMtE/jK4ekvnJfzlfGiOrucb3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUI0Ni9CQTBCODQzMDAy ODgxMUU1QUUxRTQ3NjFDNEY5QUUwMi9WczB5MFQtTXJoNlMtY2xfT1Y4YUk2dTV4 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZzMHkwVC1Ncmg2Uy1jbF9PVjhhSTZ1NXh2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUI0Ni9CQTBCODQzMDAyODgxMUU1QUUxRTQ3NjFDNEY5QUUwMi9WczB5MFQtTXJo NlMtY2xfT1Y4YUk2dTV4dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8VFLHeN3MHMaYTQKknJE4QBQzTLmGwO6fWfoHSR9pPKyUQGyg0DCi CKEoU09FF1/hT3aFJu82UDjVwhpGq22ldf4RYFLDGNp03MApVbE1md+GU4MzPDbB 0tKuk3Ek0ZiltC4+Ezn+hVs8w8nw3tUlfxD0M0+dAxCBBEmbuyg9CHTPGIfsVEi5 vzgIEJDA47Z7Tx1G62YE/0yGkX68B5q6SjYL7T63V1cIo6mkiTYChijSA0naFIgG Vc+Mu0dDGLMGCHNUKQXpu1YW/HMNnnMBRHev7Avyj5DQJplNVEqPcQwijwqjGlTW sRvyXMCAHzKuBVzc+DLPSe2uH2TfDW/s -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:58 2025 by rpki-client