$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft File: VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft (raw, json) Hash identifier: h9cbNZ54lpf9S5Hw6XNkB4fivVTrsedz4TXasp8408Y= Subject key identifier: 3C:17:C8:CF:B9:3F:03:33:D7:ED:F6:58:35:43:2B:5E:49:E0:A3:D2 Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Certificate serial: 058B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft Manifest number: 04F3 Signing time: Wed 30 Apr 2025 23:45:58 +0000 Manifest this update: Wed 30 Apr 2025 23:45:58 +0000 Manifest next update: Wed 07 May 2025 23:45:58 +0000 Files and hashes: 1: VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl (hash: xxFL/QfOL5iBKp16Bc1XWoDNnVuEQtuxNH5ysuozwSM=) 2: 0BD4BBC2716911EDA03D4A50C4F9AE02.roa (hash: iCGYHqcapZ1DKt8RS4ox+PrMVLiDQPhQLsfb9ZqKn8Y=) 3: 48CB7422E27911ED88B5A641C4F9AE02.roa (hash: PbZFsJ2ylUyKCBCI4ffjpcbXFms6YNAMvxiYJ/jYDds=) 4: D4FCF92C716B11ED9F349A49C4F9AE02.roa (hash: UuOQPjOHW3te4OiVFYw+HXL7r4q+xv2PoIFABxSLF70=) 5: A1AD2E1A100711F0A5348853C4F9AE02.roa (hash: +PShJ4EoqfuCpf6gNxDmu7aN/QAGBDfOwwk1McSjw5Q=) 6: ECC41AD2748A11ED80EF3436C4F9AE02.roa (hash: sg221W/egXu0ZEIvG5/3NuaO+9JdsATAt/T48V/WxaU=) 7: 0C5EDCDA716911EDA03D4A50C4F9AE02.roa (hash: /udoJCuRJJiznFyAsVCyc0gM64uxhJqp5G9jTAQbZu4=) 8: 9A1D8B2E867D11ED856A8E54C4F9AE02.roa (hash: cieJSU2MctUg0O+GWn4XGuRsQ3vHkHefCudId57mspk=) 9: 8DEEDC96E6B511EF9FEF6436C4F9AE02.roa (hash: 0Wp24a54v+z2yZzn7ZdVr/HDi0WffJnb8k/Q3oLm6hg=) 10: 0D0517EE716911EDA03D4A50C4F9AE02.roa (hash: fhtBFY+6U1Q/NDrcrqBZE1BQCslriv3eFT6qN9HqyO4=) 11: D359E238716B11ED9F349A49C4F9AE02.roa (hash: aJuLqquEQyyIiKwXY41VQpBHPxNA/CIwMjOgaOCooJI=) 12: 1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa (hash: F6cMcszW3btFH4NtjFMkcGJMShjA1GIWoT3qHzp5ayU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 23:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1419 (0x58b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Validity Not Before: Apr 30 23:45:58 2025 GMT Not After : May 7 23:45:58 2025 GMT Subject: CN=6812b636-80e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:eb:a9:21:13:dc:24:04:f6:35:58:22:da:d9: 83:23:21:93:69:aa:bd:4b:b2:a4:2d:f5:95:5b:0b: 09:b6:47:c3:37:35:38:dc:5b:cc:c7:e9:af:92:b1: 0a:b6:6d:ed:4d:10:aa:5b:22:02:1c:bc:09:2f:a8: 6e:21:77:d0:78:f6:fe:99:26:d8:1a:20:3b:d4:e4: 07:73:14:1d:57:55:a5:de:fe:d3:40:46:c7:49:0f: cd:fe:77:c0:9b:aa:0a:91:ae:40:b5:b2:32:c7:08: 9f:4a:03:46:5b:7a:a4:f5:85:54:6c:2e:bc:b4:8c: ab:21:c5:d1:bc:53:9f:46:21:36:6d:83:c9:ed:27: 69:37:83:a6:fd:9c:3a:69:d0:a5:88:c6:56:0d:ab: 30:95:bf:1c:78:84:10:22:db:2f:00:f7:53:f8:be: 01:25:89:e4:db:d4:29:6f:60:50:c4:ad:5c:e7:0d: fa:4a:50:dd:cf:f0:3c:69:f1:0e:18:61:9e:21:b8: 15:96:7a:95:94:0c:20:c4:44:de:4a:ec:98:65:54: de:3b:ab:91:dd:30:94:bf:9d:5f:c5:0b:6f:ac:4a: 6a:b3:1e:d4:3f:60:43:66:b9:a9:4b:6a:77:7f:ce: 03:95:87:aa:39:6c:6a:04:c0:bf:68:d9:f3:f9:db: 6b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:17:C8:CF:B9:3F:03:33:D7:ED:F6:58:35:43:2B:5E:49:E0:A3:D2 X509v3 Authority Key Identifier: keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:fe:62:bf:cf:cf:44:df:22:93:91:c4:91:4c:06:f3:04:6f: fb:bf:9f:be:af:4f:12:39:69:b4:d2:25:ee:59:6d:e2:c8:da: 11:0f:76:38:98:3f:c9:17:ee:4e:9c:19:e1:51:20:fb:8b:9a: 71:e3:cd:1b:27:0e:44:57:72:17:cc:0f:00:30:00:17:ec:4b: dc:6a:38:d1:f4:49:a9:e7:ab:2b:69:e6:be:47:95:76:09:68: d8:ed:b6:70:53:1e:64:be:7e:45:39:6d:05:92:6e:67:ce:77: e8:8f:6b:c8:62:36:d9:6d:c6:63:d7:db:cb:c6:b5:dc:bb:62: 87:99:06:75:97:d5:5d:53:26:65:ef:70:6c:f1:95:82:1e:a5: ca:40:8b:ca:48:6b:ee:c4:59:06:3f:c9:58:33:37:0a:b5:85: bd:d1:51:d4:db:76:48:05:1e:06:46:00:4e:80:67:2e:74:71: c3:de:e5:f0:bd:ac:9c:ee:ae:44:9c:df:d1:13:c4:81:85:58: f7:28:80:43:a5:6f:9a:21:a2:10:5a:cc:8a:02:a2:ff:6f:ca: f8:e9:b4:87:8a:b9:dd:db:3c:75:5e:ac:8b:18:f9:79:1a:94: 8c:fe:c1:ab:c7:ef:45:dd:f1:0f:d8:4b:eb:f8:f6:55:57:87: 3d:d1:65:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3 RDc0MTQ3RjMwHhcNMjUwNDMwMjM0NTU4WhcNMjUwNTA3MjM0NTU4WjAYMRYwFAYD VQQDEw02ODEyYjYzNi04MGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+upIRPcJAT2NVgi2tmDIyGTaaq9S7KkLfWVWwsJtkfDNzU43FvMx+mvkrEK tm3tTRCqWyICHLwJL6huIXfQePb+mSbYGiA71OQHcxQdV1Wl3v7TQEbHSQ/N/nfA m6oKka5AtbIyxwifSgNGW3qk9YVUbC68tIyrIcXRvFOfRiE2bYPJ7SdpN4Om/Zw6 adCliMZWDaswlb8ceIQQItsvAPdT+L4BJYnk29Qpb2BQxK1c5w36SlDdz/A8afEO GGGeIbgVlnqVlAwgxETeSuyYZVTeO6uR3TCUv51fxQtvrEpqsx7UP2BDZrmpS2p3 f84DlYeqOWxqBMC/aNnz+dtrdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwXyM+5 PwMz1+32WDVDK15J4KPSMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDM5RC9ERTdEMkY5NDRFNzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9S WF9JbVgtU1JrSng5ZEJSX00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw/mK/z89E3yKTkcSRTAbzBG/7v5++r08SOWm00iXuWW3iyNoRD3Y4 mD/JF+5OnBnhUSD7i5px480bJw5EV3IXzA8AMAAX7EvcajjR9Emp56sraea+R5V2 CWjY7bZwUx5kvn5FOW0Fkm5nznfoj2vIYjbZbcZj19vLxrXcu2KHmQZ1l9VdUyZl 73Bs8ZWCHqXKQIvKSGvuxFkGP8lYMzcKtYW90VHU23ZIBR4GRgBOgGcudHHD3uXw vayc7q5EnN/RE8SBhVj3KIBDpW+aIaIQWsyKAqL/b8r46bSHirnd2zx1XqyLGPl5 GpSM/sGrx+9F3fEP2Evr+PZVV4c90WW7 -----END CERTIFICATE-----Generated at Fri May 2 02:55:05 2025 by rpki-client