$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft File: VIY3awW4olUjKeNhvXJcd-H40Mk.mft (raw, json) Hash identifier: MK4xfTGmYO8zjvlY4mnA0FSrFXhN2NOs2SUNwNX3DzQ= Subject key identifier: A8:42:0D:42:31:D4:26:CD:BA:8B:48:D2:14:3B:59:D7:8C:20:EC:DA Authority key identifier: 54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9 Certificate issuer: /CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9 Certificate serial: 0D45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft Manifest number: 0CE8 Signing time: Fri 20 Jun 2025 18:12:51 +0000 Manifest this update: Fri 20 Jun 2025 18:12:51 +0000 Manifest next update: Fri 27 Jun 2025 18:12:51 +0000 Files and hashes: 1: VIY3awW4olUjKeNhvXJcd-H40Mk.crl (hash: ivmkz/+7ZMS32saMwtAJV3LWDpDF0k66GBrS9Q9/Ezc=) 2: 56B11920B64911EFBDB0DF37C4F9AE02.roa (hash: XCT7tuDg7rRdggBIsYIkP0xUcz1gGkq6RdReIlG+HqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 18:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3397 (0xd45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17F2, serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9 Validity Not Before: Jun 20 18:12:51 2025 GMT Not After : Jun 27 18:12:51 2025 GMT Subject: CN=6855a4a3-b290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:91:1c:7e:21:fd:56:72:f8:a0:f4:d8:4f:4f: 98:f6:14:f7:ec:42:a4:4e:5b:a8:a5:02:f7:79:76: f6:0f:53:02:6d:04:02:96:e4:3f:1f:d0:37:05:97: f2:ef:b6:c9:7f:12:b2:69:4d:45:8e:f2:f7:25:43: 4a:fc:7d:3f:a6:29:0b:9b:d5:e1:72:55:08:90:41: d2:42:1d:12:94:0a:58:a8:c9:9a:37:3c:58:8f:90: 8c:db:ff:6f:1d:aa:c4:01:80:15:09:d5:80:04:73: c4:86:fe:1c:87:55:e4:f1:9d:99:90:cb:38:46:1c: 87:b6:3c:99:dd:57:23:00:35:8c:9e:0c:7b:43:14: 4c:05:d1:5f:71:90:fb:bd:2c:14:8c:4e:91:e4:65: 7c:89:13:8c:46:8b:9b:1e:65:e3:b7:60:40:c0:fb: 37:15:6a:5e:21:ce:a1:9a:f7:50:7f:e2:5b:cb:f1: 73:0e:ff:40:e2:dd:87:c2:e7:31:b0:f7:0a:f1:c8: a0:f0:4e:40:30:7e:aa:c5:46:60:e3:2b:bc:79:5c: f6:2b:a4:8d:03:99:c0:ac:1b:d4:5f:e3:85:8f:4c: 0a:da:75:ca:5b:f7:ab:a2:30:e9:26:80:40:4f:dd: bc:b2:71:53:53:ed:ae:8a:c3:66:94:f2:d4:2d:2d: dd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:42:0D:42:31:D4:26:CD:BA:8B:48:D2:14:3B:59:D7:8C:20:EC:DA X509v3 Authority Key Identifier: keyid:54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:81:b6:e1:00:ae:3c:b6:7e:3d:e7:b9:38:72:20:77:9a:96: ab:d7:57:83:01:19:e3:84:5a:ad:53:b4:df:a9:1b:d1:c1:9c: a4:f5:91:b2:a9:ba:22:75:41:3c:13:82:cc:56:93:b3:ab:ba: f8:ad:4c:35:30:aa:2d:e3:c2:64:6d:f2:84:5b:0c:17:11:e3: f2:9b:5d:d7:bd:7e:90:c6:62:46:e6:7f:a3:0b:58:80:5c:36: 8e:1f:87:3e:7c:9f:e4:c6:de:a0:13:b0:c3:b6:27:61:e8:f2: 05:7d:e2:49:45:39:20:9e:de:b7:45:53:aa:8c:a9:a2:ba:c0: 9e:10:84:42:a8:0d:e3:79:07:94:d9:45:91:76:ba:78:57:a6: 49:5d:de:4d:11:0f:07:e0:8d:10:a6:f3:8e:3b:22:34:56:59: 1f:10:05:19:85:39:47:4f:94:df:6d:ed:47:28:6a:f1:00:1e: c2:2d:14:b7:02:4f:31:9a:b6:d0:07:f2:34:96:d3:5b:e1:fb: fd:ee:c6:43:7c:96:57:56:e8:6a:11:c4:9f:3a:bf:03:63:43: 01:c8:c6:af:50:ee:8b:0d:3f:ad:54:69:aa:40:23:65:ce:9a: 8e:59:e5:47:73:d8:fa:10:c3:db:d0:1b:ee:18:70:09:38:94: 5c:66:31:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE3RjIxMTAvBgNVBAUTKDU0ODYzNzZCMDVCOEEyNTUyMzI5RTM2MUJENzI1Qzc3 RTFGOEQwQzkwHhcNMjUwNjIwMTgxMjUxWhcNMjUwNjI3MTgxMjUxWjAYMRYwFAYD VQQDEw02ODU1YTRhMy1iMjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA85EcfiH9VnL4oPTYT0+Y9hT37EKkTluopQL3eXb2D1MCbQQCluQ/H9A3BZfy 77bJfxKyaU1FjvL3JUNK/H0/pikLm9XhclUIkEHSQh0SlApYqMmaNzxYj5CM2/9v HarEAYAVCdWABHPEhv4ch1Xk8Z2ZkMs4RhyHtjyZ3VcjADWMngx7QxRMBdFfcZD7 vSwUjE6R5GV8iROMRoubHmXjt2BAwPs3FWpeIc6hmvdQf+Jby/FzDv9A4t2Hwucx sPcK8cig8E5AMH6qxUZg4yu8eVz2K6SNA5nArBvUX+OFj0wK2nXKW/erojDpJoBA T928snFTU+2uisNmlPLULS3dxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhCDUIx 1CbNuotI0hQ7WdeMIOzaMB8GA1UdIwQYMBaAFFSGN2sFuKJVIynjYb1yXHfh+NDJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTdGMi80Qzg4QTdBMEZE RkUxMUU5QkQ2NjdEMUZDNEY5QUUwMi9WSVkzYXdXNG9sVWpLZU5odlhKY2QtSDQw TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJWTNhd1c0b2xVaktlTmh2WEpjZC1INDBNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTdGMi80Qzg4QTdBMEZERkUxMUU5QkQ2NjdEMUZDNEY5QUUwMi9WSVkzYXdXNG9s VWpLZU5odlhKY2QtSDQwTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVgbbhAK48tn4957k4ciB3mpar11eDARnjhFqtU7TfqRvRwZyk9ZGy qboidUE8E4LMVpOzq7r4rUw1MKot48JkbfKEWwwXEePym13XvX6QxmJG5n+jC1iA XDaOH4c+fJ/kxt6gE7DDtidh6PIFfeJJRTkgnt63RVOqjKmiusCeEIRCqA3jeQeU 2UWRdrp4V6ZJXd5NEQ8H4I0QpvOOOyI0VlkfEAUZhTlHT5Tfbe1HKGrxAB7CLRS3 Ak8xmrbQB/I0ltNb4fv97sZDfJZXVuhqEcSfOr8DY0MByMavUO6LDT+tVGmqQCNl zpqOWeVHc9j6EMPb0BvuGHAJOJRcZjF7 -----END CERTIFICATE-----Generated at Sun Jun 22 16:02:10 2025 by rpki-client