$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft File: vm13JvnXOebsmvk0fs7LQhevej8.mft (raw, json) Hash identifier: Rx1FLRRlQCxk46mN7ZsZNmKOMz2lJQ5GVNYmX3HWQpQ= Subject key identifier: 23:60:0C:BE:F4:48:E6:78:EE:68:06:26:EE:04:82:4A:DA:26:F6:E0 Authority key identifier: BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F Certificate issuer: /CN=A91ED35E/serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft Manifest number: 0110 Signing time: Sun 15 Jun 2025 04:04:58 +0000 Manifest this update: Sun 15 Jun 2025 04:04:57 +0000 Manifest next update: Sun 22 Jun 2025 04:04:57 +0000 Files and hashes: 1: vm13JvnXOebsmvk0fs7LQhevej8.crl (hash: bHV6yf+uNazt/9n6fG/eBSZ8wbG1k+R+esjhb986j6c=) 2: 3AE10060B0F111EE9727201AC4F9AE02.roa (hash: KyJCsFenYj6fuJ23jzQVPwAa2Ss88E8BW4syF1uzypU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED35E, serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Validity Not Before: Jun 15 04:04:57 2025 GMT Not After : Jun 22 04:04:57 2025 GMT Subject: CN=684e466a-d382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ac:5b:6b:83:b0:a8:0f:1d:d7:12:12:43:58: a2:6d:93:61:0a:46:42:f1:87:7b:7f:52:b3:44:0c: 01:81:92:1e:31:f3:ff:a8:33:89:0d:ad:e6:87:d6: 27:66:0d:12:d6:da:9a:08:9e:60:95:df:9a:ac:ab: 4a:2f:f4:fb:dd:d5:95:c9:3e:aa:ea:d4:e5:c4:2f: 6f:53:bd:5b:ec:59:62:b4:d9:d5:d1:7f:de:81:f0: d7:76:e5:36:23:ac:75:b0:61:79:a6:f1:b2:08:4a: e4:53:22:63:b0:9a:fb:39:41:14:1c:13:e4:a0:ab: ec:95:41:e5:2b:9e:4d:f9:d2:08:6b:b5:84:33:38: 2a:58:39:86:38:d7:b9:fc:7e:1d:af:e2:0a:e4:d6: 48:55:02:2b:2a:cc:be:e8:0c:27:8a:10:d1:bc:94: d2:9b:07:5f:71:4a:5b:93:4c:1a:27:52:09:05:5d: b6:64:9b:50:91:94:fd:5d:23:42:91:dd:26:b3:ae: ab:d6:44:2c:00:1b:a9:a9:97:35:04:49:2a:74:c4: 28:b4:1b:52:be:b5:c0:c1:7f:39:99:4f:0e:fe:52: fc:fa:5c:00:2b:1c:ce:b9:b7:5c:f8:2d:16:5d:27: 8a:0a:33:1b:9b:3a:82:25:e8:62:d5:73:80:fd:c8: 0c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:60:0C:BE:F4:48:E6:78:EE:68:06:26:EE:04:82:4A:DA:26:F6:E0 X509v3 Authority Key Identifier: keyid:BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c9:1f:40:64:3a:bf:26:86:81:69:82:90:0b:cb:6f:33:cb: 4c:f1:84:32:11:3b:b0:dd:46:52:01:2d:19:b4:66:8f:26:5b: fa:c2:c3:c2:43:50:96:f8:11:7e:e2:ea:c8:b5:e9:0b:40:8a: 80:6b:83:3d:de:6a:25:c9:ef:ee:4b:db:85:62:36:6f:b9:78: ff:78:97:dd:4a:5f:5e:f0:f9:db:37:b4:ae:6b:52:2b:d5:62: 9e:1d:c6:9a:bc:c7:14:51:7c:33:b4:6f:07:00:c7:34:02:60: 33:71:5c:be:26:a9:6e:78:31:67:84:ed:13:9c:c6:eb:1e:6e: 05:52:da:1c:9e:35:e8:6a:86:c0:74:ee:dd:3d:bd:58:3a:d9: bd:b0:c0:81:58:aa:6a:c2:97:98:44:16:5f:50:b8:74:7c:f7: a1:95:e4:08:eb:c8:27:90:0c:cd:ad:3d:6a:7a:e6:01:32:5c: c2:0e:5c:34:03:31:2b:9b:cd:a1:58:5c:a3:5c:29:92:20:28: 47:6f:67:62:16:06:a4:85:04:42:f1:a7:20:36:42:25:89:07: fc:3a:f9:e1:db:10:6d:70:c6:38:b7:15:33:3e:4c:4b:fa:61: c7:6a:40:bb:aa:32:ed:b9:53:28:0d:f7:f6:34:da:71:87:12: 2b:dd:4f:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQzNUUxMTAvBgNVBAUTKEJFNkQ3NzI2RjlENzM5RTZFQzlBRjkzNDdFQ0VDQjQy MTdBRjdBM0YwHhcNMjUwNjE1MDQwNDU3WhcNMjUwNjIyMDQwNDU3WjAYMRYwFAYD VQQDEw02ODRlNDY2YS1kMzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKxba4OwqA8d1xISQ1iibZNhCkZC8Yd7f1KzRAwBgZIeMfP/qDOJDa3mh9Yn Zg0S1tqaCJ5gld+arKtKL/T73dWVyT6q6tTlxC9vU71b7FlitNnV0X/egfDXduU2 I6x1sGF5pvGyCErkUyJjsJr7OUEUHBPkoKvslUHlK55N+dIIa7WEMzgqWDmGONe5 /H4dr+IK5NZIVQIrKsy+6AwnihDRvJTSmwdfcUpbk0waJ1IJBV22ZJtQkZT9XSNC kd0ms66r1kQsABupqZc1BEkqdMQotBtSvrXAwX85mU8O/lL8+lwAKxzOubdc+C0W XSeKCjMbmzqCJehi1XOA/cgM1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNgDL70 SOZ47mgGJu4EgkraJvbgMB8GA1UdIwQYMBaAFL5tdyb51znm7Jr5NH7Oy0IXr3o/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDM1RS8yMDhERkMzNkFD NDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9lYnNtdmswZnM3TFFoZXZl ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtMTNKdm5YT2Vic212azBmczdMUWhldmVqOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDM1RS8yMDhERkMzNkFDNDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9l YnNtdmswZnM3TFFoZXZlajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeyR9AZDq/JoaBaYKQC8tvM8tM8YQyETuw3UZSAS0ZtGaPJlv6wsPC Q1CW+BF+4urItekLQIqAa4M93molye/uS9uFYjZvuXj/eJfdSl9e8PnbN7Sua1Ir 1WKeHcaavMcUUXwztG8HAMc0AmAzcVy+JqlueDFnhO0TnMbrHm4FUtocnjXoaobA dO7dPb1YOtm9sMCBWKpqwpeYRBZfULh0fPehleQI68gnkAzNrT1qeuYBMlzCDlw0 AzErm82hWFyjXCmSIChHb2diFgakhQRC8acgNkIliQf8Ovnh2xBtcMY4txUzPkxL +mHHakC7qjLtuVMoDff2NNpxhxIr3U9G -----END CERTIFICATE-----Generated at Sun Jun 15 09:41:37 2025 by rpki-client