$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft File: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft (raw, json) Hash identifier: 5Pivr1b3Cv+Gb83hJl0DPNPsA/3/86tsxLXFbu2bQkY= Subject key identifier: EA:9D:BA:D5:4F:BD:66:97:69:10:42:64:EA:39:C9:1F:95:0C:9A:50 Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34 Certificate issuer: /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134 Certificate serial: 054E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft Manifest number: 0544 Signing time: Thu 12 Jun 2025 23:02:42 +0000 Manifest this update: Thu 12 Jun 2025 23:02:41 +0000 Manifest next update: Thu 19 Jun 2025 23:02:41 +0000 Files and hashes: 1: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl (hash: t5ESjqqR/JOat27rDBubosI3vdOAZ6LTaUe0HuvAZLo=) 2: 7FBF284EF5B211EB8419A23AC4F9AE02.roa (hash: F1yI/TsRKRhHW6oPEGF67PMGcvjA0TRHWq4d5ykeYdI=) 3: 0EF4DA3A38D011EC936A8C4FC4F9AE02.roa (hash: oeOjTuSdHmJNxJZBHkzGR+nKwmbuVyglKsBg5lLfOOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1358 (0x54e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7C21, serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134 Validity Not Before: Jun 12 23:02:41 2025 GMT Not After : Jun 19 23:02:41 2025 GMT Subject: CN=684b5c92-65e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:25:31:56:29:37:a5:ef:c5:da:91:36:65:97: f9:b9:cc:a7:ef:41:12:f7:e2:80:7b:93:75:41:54: 44:78:8e:35:14:f5:bc:f4:b6:db:e5:26:55:4d:bb: 33:de:36:87:2e:15:27:da:d0:bd:0a:6e:b6:f7:a8: d7:3a:99:13:d7:d2:56:98:d4:83:6b:13:1e:f6:5e: e2:b3:8e:72:75:11:51:72:b7:f9:3e:ae:ec:a9:54: 0c:32:3b:bd:78:e2:d8:21:b0:3e:02:74:8e:5b:72: 7a:68:25:25:74:d3:da:ed:58:2d:27:b7:f0:3d:8c: f4:11:4e:83:91:12:0a:02:d1:19:ce:e4:e6:27:88: 63:f4:b0:e6:48:7b:cb:3f:ef:31:f1:91:77:33:61: 50:11:e4:ef:c0:d4:96:99:e7:93:a1:be:35:11:17: fc:c0:9d:ba:0f:c0:b9:53:2e:1a:39:37:06:35:f4: dd:da:19:bc:43:59:a8:05:10:ba:72:9b:59:0f:8d: 81:bc:64:e6:08:7d:69:c8:48:9a:b6:af:8f:c8:5e: 9f:0b:d3:58:29:ea:6c:ad:36:e3:66:94:86:72:18: 54:38:6c:d1:fd:da:1c:1c:84:36:b8:4f:2e:8d:71: ee:92:cd:55:53:15:cd:71:91:cc:3e:80:ad:d8:1b: 95:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9D:BA:D5:4F:BD:66:97:69:10:42:64:EA:39:C9:1F:95:0C:9A:50 X509v3 Authority Key Identifier: keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:73:0d:dd:8f:ba:c1:b4:97:e3:f8:bc:8d:25:65:72:20:08: 33:69:09:13:10:e7:ef:a1:0a:47:97:98:eb:40:dc:9d:0a:ce: 39:bc:62:d7:0f:fd:8e:af:c0:4c:1e:7b:6b:a7:1c:4f:10:8d: a4:72:74:09:92:17:1a:95:b0:db:37:58:db:fc:b9:cb:6a:d5: ae:0c:83:1e:ca:72:eb:c4:f5:02:f2:b2:de:b0:33:f7:24:1d: 59:ec:52:af:19:19:e8:69:0f:a4:23:35:75:92:71:30:1f:28: 9c:67:ed:bc:90:a7:51:1e:ee:cf:08:b4:b2:08:0e:68:eb:b9: e5:f8:25:0a:d4:f0:a0:cd:2a:7f:8a:3d:df:b4:5e:45:4c:1a: 60:f7:35:e2:f7:57:7a:d8:e2:3e:87:58:ef:76:6d:74:48:99: 3b:53:68:1f:14:17:da:69:de:7b:b0:f2:cc:21:cf:08:e9:48: 52:47:e9:87:ed:7c:5d:73:32:d5:a2:ca:d3:ab:fd:dd:6b:39: 90:a5:56:6e:00:26:cb:96:a2:67:76:b1:7e:de:9a:ed:fb:79: 9a:f1:cb:0f:18:08:4a:fc:82:d5:ab:a5:ac:d4:bb:ee:fa:fb: 08:3a:b0:c8:f1:23:09:68:21:35:4c:ac:40:e6:af:4f:bc:b3: 3a:1e:12:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdDMjExMTAvBgNVBAUTKEJDMkRBMzVDQjU2NTEzQTk0QTY4QjU5MUREMkM3NkM1 MUQ4MTExMzQwHhcNMjUwNjEyMjMwMjQxWhcNMjUwNjE5MjMwMjQxWjAYMRYwFAYD VQQDEw02ODRiNWM5Mi02NWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSUxVik3pe/F2pE2ZZf5ucyn70ES9+KAe5N1QVREeI41FPW89Lbb5SZVTbsz 3jaHLhUn2tC9Cm6296jXOpkT19JWmNSDaxMe9l7is45ydRFRcrf5Pq7sqVQMMju9 eOLYIbA+AnSOW3J6aCUldNPa7VgtJ7fwPYz0EU6DkRIKAtEZzuTmJ4hj9LDmSHvL P+8x8ZF3M2FQEeTvwNSWmeeTob41ERf8wJ26D8C5Uy4aOTcGNfTd2hm8Q1moBRC6 cptZD42BvGTmCH1pyEiatq+PyF6fC9NYKepsrTbjZpSGchhUOGzR/docHIQ2uE8u jXHuks1VUxXNcZHMPoCt2BuV1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqdutVP vWaXaRBCZOo5yR+VDJpQMB8GA1UdIwQYMBaAFLwto1y1ZROpSmi1kd0sdsUdgRE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0MyMS8zQkNEMDA3NEY1 QUUxMUVCOEUzRUZCMzNDNEY5QUUwMi92QzJqWExWbEU2bEthTFdSM1N4MnhSMkJF VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZDMmpYTFZsRTZsS2FMV1IzU3gyeFIyQkVUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0MyMS8zQkNEMDA3NEY1QUUxMUVCOEUzRUZCMzNDNEY5QUUwMi92QzJqWExWbEU2 bEthTFdSM1N4MnhSMkJFVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUcw3dj7rBtJfj+LyNJWVyIAgzaQkTEOfvoQpHl5jrQNydCs45vGLX D/2Or8BMHntrpxxPEI2kcnQJkhcalbDbN1jb/LnLatWuDIMeynLrxPUC8rLesDP3 JB1Z7FKvGRnoaQ+kIzV1knEwHyicZ+28kKdRHu7PCLSyCA5o67nl+CUK1PCgzSp/ ij3ftF5FTBpg9zXi91d62OI+h1jvdm10SJk7U2gfFBfaad57sPLMIc8I6UhSR+mH 7XxdczLVosrTq/3dazmQpVZuACbLlqJndrF+3prt+3ma8csPGAhK/ILVq6Ws1Lvu +vsIOrDI8SMJaCE1TKxA5q9PvLM6HhI2 -----END CERTIFICATE-----Generated at Sat Jun 14 19:35:59 2025 by rpki-client