$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft File: Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft (raw, json) Hash identifier: BC52ZrM5dBHZ0fUbDY+hdTw32H8ahb0095zkjzM9u8A= Subject key identifier: E1:C9:DE:ED:FD:D5:FD:86:A6:B2:06:88:30:08:42:22:66:D4:9D:71 Authority key identifier: 55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6 Certificate issuer: /CN=A91127C1/serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6 Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft Manifest number: 01F2 Signing time: Wed 16 Jul 2025 20:06:27 +0000 Manifest this update: Wed 16 Jul 2025 20:06:26 +0000 Manifest next update: Wed 23 Jul 2025 20:06:26 +0000 Files and hashes: 1: Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl (hash: SbjfLaigtfIojdr3lbup0OdfipFf+XC31SZ+vQoDDi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 20:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127C1, serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6 Validity Not Before: Jul 16 20:06:26 2025 GMT Not After : Jul 23 20:06:26 2025 GMT Subject: CN=68780643-072c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f6:7d:ec:48:a4:02:ff:31:92:cf:fe:b6:46: f5:dd:23:6d:19:95:74:e5:c6:9e:cf:0f:45:3d:89: 18:4a:89:4e:90:86:9d:f8:6c:35:64:bf:2e:5a:a0: 7f:c4:02:90:77:7f:17:37:9b:c5:c1:68:c9:7b:aa: 41:79:ca:f9:d3:a7:4b:9f:3d:7a:f3:2c:48:fa:1e: ad:0a:95:bd:51:f6:64:e8:1f:dd:76:9b:9b:49:a6: f3:64:0d:67:ba:a8:69:a5:4f:e9:87:7d:9e:00:5f: d2:e4:13:05:26:a2:00:5a:97:4d:35:7b:b3:f2:b7: d8:8d:ad:4f:63:a8:ce:ba:68:1b:bf:1d:65:04:0e: c6:3f:15:90:e6:eb:98:3a:99:f2:e0:5b:f8:5c:9e: c3:05:02:b1:4e:80:a1:35:47:21:89:fd:6c:b1:42: 8a:e5:51:51:98:23:d0:aa:65:76:17:3f:dc:88:0e: 7c:f3:b7:2c:93:17:bc:de:b1:07:a6:f6:e8:2b:da: ae:fe:62:0d:09:c8:05:c8:c8:27:ee:8e:01:5e:db: fe:55:61:9c:95:a4:9e:77:e5:9f:4a:b5:ef:87:48: 85:98:c0:77:c7:09:4b:d4:56:55:ac:74:13:97:3c: 46:d5:06:a1:1d:da:9e:63:27:12:d2:a5:06:97:f5: 58:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C9:DE:ED:FD:D5:FD:86:A6:B2:06:88:30:08:42:22:66:D4:9D:71 X509v3 Authority Key Identifier: keyid:55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:35:67:cf:7a:d8:d5:33:18:13:c8:cb:54:50:62:9b:86:80: 13:ba:5a:7d:83:f8:9a:b8:d3:9b:16:06:09:ce:5b:47:70:b3: 31:98:2c:4a:5e:2a:75:bb:33:cd:fa:47:20:b0:28:04:a6:98: 6d:d8:b9:a1:6e:cb:f5:ee:50:a3:f5:aa:3a:10:3c:74:36:7b: eb:e6:15:f3:27:61:12:6a:dd:9c:03:71:ce:63:d1:d7:c3:b5: 2d:f8:a0:9a:e0:2d:22:2e:37:d7:2f:d3:c5:ec:5d:f3:1f:80: d6:50:66:16:dc:c7:45:10:f9:0b:81:07:85:be:e4:d0:95:30: a8:dc:78:0e:b0:74:16:33:a9:06:e3:a2:ea:8f:f9:d8:2c:63: 61:d9:11:89:dd:97:ec:27:10:dd:94:23:b0:e3:87:67:25:2c: 33:4f:67:93:46:42:79:64:78:cb:0b:86:83:0e:45:be:89:a4: 42:b4:7d:c6:85:79:a3:17:73:68:5c:26:a1:72:ab:e6:77:f6: 8e:96:c1:4b:7b:44:69:f4:e6:26:6e:24:e3:fa:ed:ae:4d:55: 44:b1:e8:ab:ed:d9:24:58:8b:90:48:f2:3a:79:d2:5a:df:f5: 1e:34:a5:af:90:43:32:7d:ce:a8:f9:3c:00:71:83:9c:1c:df: de:c1:c0:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QzExMTAvBgNVBAUTKDU1RkI3QkNDQTc0MDI4NUZDODFBQTM2MEYwMkNFMzJG OTU4MTZEQjYwHhcNMjUwNzE2MjAwNjI2WhcNMjUwNzIzMjAwNjI2WjAYMRYwFAYD VQQDEw02ODc4MDY0My0wNzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/Z97EikAv8xks/+tkb13SNtGZV05caezw9FPYkYSolOkIad+Gw1ZL8uWqB/ xAKQd38XN5vFwWjJe6pBecr506dLnz168yxI+h6tCpW9UfZk6B/ddpubSabzZA1n uqhppU/ph32eAF/S5BMFJqIAWpdNNXuz8rfYja1PY6jOumgbvx1lBA7GPxWQ5uuY Opny4Fv4XJ7DBQKxToChNUchif1ssUKK5VFRmCPQqmV2Fz/ciA5887cskxe83rEH pvboK9qu/mINCcgFyMgn7o4BXtv+VWGclaSed+WfSrXvh0iFmMB3xwlL1FZVrHQT lzxG1QahHdqeYycS0qUGl/VYiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHJ3u39 1f2GprIGiDAIQiJm1J1xMB8GA1UdIwQYMBaAFFX7e8ynQChfyBqjYPAs4y+VgW22 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdDMS9EQ0Y5OEExNjc3 ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtGX0lHcU5nOEN6akw1V0Ji YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZmdDd6S2RBS0ZfSUdxTmc4Q3pqTDVXQmJiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdDMS9EQ0Y5OEExNjc3ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtG X0lHcU5nOEN6akw1V0JiYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUNWfPetjVMxgTyMtUUGKbhoATulp9g/iauNObFgYJzltHcLMxmCxK Xip1uzPN+kcgsCgEppht2Lmhbsv17lCj9ao6EDx0Nnvr5hXzJ2ESat2cA3HOY9HX w7Ut+KCa4C0iLjfXL9PF7F3zH4DWUGYW3MdFEPkLgQeFvuTQlTCo3HgOsHQWM6kG 46Lqj/nYLGNh2RGJ3ZfsJxDdlCOw44dnJSwzT2eTRkJ5ZHjLC4aDDkW+iaRCtH3G hXmjF3NoXCahcqvmd/aOlsFLe0Rp9OYmbiTj+u2uTVVEseir7dkkWIuQSPI6edJa 3/UeNKWvkEMyfc6o+TwAcYOcHN/ewcAL -----END CERTIFICATE-----Generated at Wed Jul 16 23:09:47 2025 by rpki-client