$ rpki-client -vvf rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft File: VFiH13GXSLRp0FP_MWpqV6uZYjM.mft (raw, json) Hash identifier: ggbdi1YPN1r9VdwrPDNRHN0DKYvFVwxx8/9TFAArnSQ= Subject key identifier: AC:96:25:48:7B:9C:B2:14:7D:F7:5C:D2:F4:33:93:28:5C:EB:41:9D Authority key identifier: 54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 Certificate issuer: /CN=A91173B6/serialNumber=545887D7719748B469D053FF316A6A57AB996233 Certificate serial: 0821 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft Manifest number: 0816 Signing time: Mon 30 Jun 2025 21:05:07 +0000 Manifest this update: Mon 30 Jun 2025 21:05:07 +0000 Manifest next update: Mon 07 Jul 2025 21:05:07 +0000 Files and hashes: 1: VFiH13GXSLRp0FP_MWpqV6uZYjM.crl (hash: GJqYvsvocCm2ZaIz16dywK2S2V4OXRGVCXvFk1Ui6CM=) 2: CA290E34341311EFA3C99F09C4F9AE02.roa (hash: i/g/3tYg+cOFFmeFmf1wzVIm1860HHoYX7kFrZIFYhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2081 (0x821) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91173B6, serialNumber=545887D7719748B469D053FF316A6A57AB996233 Validity Not Before: Jun 30 21:05:07 2025 GMT Not After : Jul 7 21:05:07 2025 GMT Subject: CN=6862fc03-c6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4c:bb:90:0f:b1:68:67:13:a4:bf:51:2a:f6: 50:21:60:01:b9:d5:41:99:9c:c4:66:ed:43:e8:f4: 3c:b9:9f:f8:d4:26:f4:7d:7a:a3:60:28:ad:6a:d2: 69:93:10:88:69:f8:1b:3c:91:ef:62:46:97:b1:1f: 33:05:e0:70:7e:d9:d6:13:bd:93:cf:9a:7b:5d:60: c1:08:a4:db:b1:ed:c9:0f:69:12:ef:49:64:b9:f1: 8f:cc:b4:1b:f2:21:15:b3:ea:65:38:09:3b:d6:56: 5f:78:8e:ef:22:af:7c:70:1a:7b:da:92:8d:e2:79: c9:27:7a:ce:f5:fc:94:97:58:3c:35:35:65:c5:99: 6f:51:6b:6f:eb:9b:26:ce:77:27:f9:b9:7a:aa:3b: 4c:43:4d:43:b6:e0:5b:77:bf:45:a7:50:05:f5:33: 19:53:48:10:95:63:fe:3b:2c:88:26:4b:d8:eb:90: 20:35:85:84:6c:97:87:9d:c0:bf:5e:9e:bb:55:23: 4c:f5:b8:a7:87:46:04:03:e7:d4:8e:f5:9b:95:27: 3d:11:90:8f:97:71:98:5a:b7:c7:2b:80:8f:57:b9: 62:b2:5d:f3:01:09:26:83:78:d0:9f:1e:81:a9:7a: ff:8f:dc:ee:b3:b0:be:28:21:2e:22:d8:c0:1a:67: 80:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:96:25:48:7B:9C:B2:14:7D:F7:5C:D2:F4:33:93:28:5C:EB:41:9D X509v3 Authority Key Identifier: keyid:54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:73:e6:95:4c:c1:39:9b:3f:af:c3:24:0e:94:d4:71:ab:e0: 41:89:49:5e:fb:c3:b1:e4:77:88:28:50:5b:ea:f2:2f:0c:56: bd:a3:2a:53:69:78:2e:46:b4:bf:f4:26:f2:b6:04:d3:f6:7d: 0f:2e:97:f2:e0:15:7b:2a:39:ba:40:2d:a0:70:da:9b:17:a1: 3f:bd:7b:58:79:fc:7f:0c:42:92:09:dc:3c:e7:ef:29:9c:52: 28:6d:cc:30:e9:6c:2d:f2:a4:be:7b:10:e2:ae:16:9c:ae:c6: ea:5b:6d:25:31:00:6b:6b:61:a7:e7:8e:fa:95:28:bc:cc:7c: 8a:ec:1d:dd:6a:0c:6a:b5:bd:cb:67:4f:a0:8c:63:2c:40:06: 2d:dd:c1:b0:a0:fd:90:b3:d7:46:55:70:0a:52:f2:7b:3d:c6: dd:ad:e1:06:2b:a9:bf:52:4c:50:e3:87:06:47:9a:66:30:a2: dd:cf:42:20:a4:31:c4:64:88:51:b7:c2:e4:bd:bb:29:8c:e3: 63:31:da:f7:dc:6c:7b:40:d7:40:43:ee:98:09:55:55:82:a0: 69:ed:98:a7:49:ec:bc:2a:e4:aa:58:60:18:3d:6d:6d:17:0d: 7b:2b:8f:9d:37:d5:82:71:ac:31:b1:de:77:5b:c2:19:ec:ff: 2f:89:e2:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTczQjYxMTAvBgNVBAUTKDU0NTg4N0Q3NzE5NzQ4QjQ2OUQwNTNGRjMxNkE2QTU3 QUI5OTYyMzMwHhcNMjUwNjMwMjEwNTA3WhcNMjUwNzA3MjEwNTA3WjAYMRYwFAYD VQQDEw02ODYyZmMwMy1jNmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ey7kA+xaGcTpL9RKvZQIWABudVBmZzEZu1D6PQ8uZ/41Cb0fXqjYCitatJp kxCIafgbPJHvYkaXsR8zBeBwftnWE72Tz5p7XWDBCKTbse3JD2kS70lkufGPzLQb 8iEVs+plOAk71lZfeI7vIq98cBp72pKN4nnJJ3rO9fyUl1g8NTVlxZlvUWtv65sm zncn+bl6qjtMQ01DtuBbd79Fp1AF9TMZU0gQlWP+OyyIJkvY65AgNYWEbJeHncC/ Xp67VSNM9binh0YEA+fUjvWblSc9EZCPl3GYWrfHK4CPV7lisl3zAQkmg3jQnx6B qXr/j9zus7C+KCEuItjAGmeAUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyWJUh7 nLIUffdc0vQzkyhc60GdMB8GA1UdIwQYMBaAFFRYh9dxl0i0adBT/zFqalermWIz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzNCNi8xMEY0ODQ4NkUx OUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNMUnAwRlBfTVdwcVY2dVpZ ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGaUgxM0dYU0xScDBGUF9NV3BxVjZ1WllqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzNCNi8xMEY0ODQ4NkUxOUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNM UnAwRlBfTVdwcVY2dVpZak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKc+aVTME5mz+vwyQOlNRxq+BBiUle+8Ox5HeIKFBb6vIvDFa9oypT aXguRrS/9CbytgTT9n0PLpfy4BV7Kjm6QC2gcNqbF6E/vXtYefx/DEKSCdw85+8p nFIobcww6Wwt8qS+exDirhacrsbqW20lMQBra2Gn5476lSi8zHyK7B3dagxqtb3L Z0+gjGMsQAYt3cGwoP2Qs9dGVXAKUvJ7PcbdreEGK6m/UkxQ44cGR5pmMKLdz0Ig pDHEZIhRt8LkvbspjONjMdr33Gx7QNdAQ+6YCVVVgqBp7ZinSey8KuSqWGAYPW1t Fw17K4+dN9WCcawxsd53W8IZ7P8vieK8 -----END CERTIFICATE-----Generated at Wed Jul 2 05:06:51 2025 by rpki-client