$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft File: vIYhQTCXFsDk3Dff_zPlqwxVStA.mft (raw, json) Hash identifier: uMc14ehWNYIkA/eS3P6AmqycaEyReFpH5YFye9H+UGU= Subject key identifier: C5:92:35:2C:08:B1:9A:50:79:B6:7D:ED:46:07:70:16:48:3A:79:B5 Authority key identifier: BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0 Certificate issuer: /CN=A911EA27/serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0 Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft Manifest number: 0201 Signing time: Tue 01 Jul 2025 02:43:55 +0000 Manifest this update: Tue 01 Jul 2025 02:43:55 +0000 Manifest next update: Tue 08 Jul 2025 02:43:55 +0000 Files and hashes: 1: vIYhQTCXFsDk3Dff_zPlqwxVStA.crl (hash: XTArDttGTq0wtRqsspsjGjqa7dgBSdsYcaqb/yslzZs=) 2: 3DE0E9065F0811EDB42DC97FC4F9AE02.roa (hash: MoE7MEPCOyGB/9EMlTXV0tN9ZG/UinteAkee65hBGJ0=) 3: 3F2E65045F0811EDB42DC97FC4F9AE02.roa (hash: IgAv5ZJEhwoH7uEYAUCxosir/fX/9UUdUT7CtlM0EKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EA27, serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0 Validity Not Before: Jul 1 02:43:55 2025 GMT Not After : Jul 8 02:43:55 2025 GMT Subject: CN=68634b6b-1cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:37:dc:8c:d6:74:3f:0d:4f:08:ce:ef:8a:6d: ea:e2:46:04:8e:f7:9b:eb:97:74:09:35:23:35:82: 4f:5c:1d:52:30:70:df:01:61:f2:5a:34:4f:5c:52: 9d:e6:b1:0b:f2:5f:b6:e7:0e:df:10:03:c4:14:f0: 00:9b:7a:5b:fe:09:59:a5:db:6e:c5:02:1c:7c:39: f1:41:09:89:2f:3f:3b:06:5f:26:8c:5b:a3:4e:86: dd:b2:ae:24:20:e3:24:f5:40:44:d8:02:be:14:42: 9d:0a:8b:ab:ee:49:77:39:90:4a:c6:21:e9:a7:5f: 8a:44:35:b8:28:37:53:bc:a1:85:3e:07:c2:e3:6e: be:ee:8a:ec:b8:1c:14:6f:03:da:23:6e:87:26:ea: 50:c7:b9:dc:24:f1:01:be:92:3b:97:20:ed:0e:ed: e9:81:64:3c:e4:8b:06:45:bb:ec:a1:8c:ac:fa:13: 75:14:c6:b6:9e:fc:28:5d:da:d7:3e:2b:b2:7e:c7: 41:80:19:e0:28:58:92:08:cd:03:f2:9e:91:60:c8: 82:57:3b:5b:05:ac:a1:18:a5:08:5a:22:27:e7:38: df:ba:6a:fa:03:e1:45:7e:d8:77:ad:5f:98:a4:44: 88:b7:d3:6a:6b:92:6b:49:21:ee:94:d7:45:36:20: 88:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:92:35:2C:08:B1:9A:50:79:B6:7D:ED:46:07:70:16:48:3A:79:B5 X509v3 Authority Key Identifier: keyid:BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:f8:ca:27:24:83:61:76:78:b9:7b:61:f2:7c:0c:ad:0f:c5: f1:90:ae:01:a9:d6:59:60:09:e2:d0:f8:4c:da:b4:0f:51:4c: 9f:46:68:44:7a:9f:4f:dc:ec:a1:8c:5c:e4:06:b0:a4:ee:d4: ba:49:90:ed:10:12:de:45:1e:22:5c:3b:3f:37:3b:4a:04:a7: 5b:9c:2a:ea:6f:17:d1:9b:52:7f:08:d9:02:78:a8:b0:7c:c6: c9:fa:8f:fa:07:92:0b:bb:a6:6a:e5:8e:cd:5c:b3:d3:c4:de: 3e:3c:7d:b1:37:5f:29:cc:06:5a:82:97:30:36:45:1f:00:62: d9:e1:c0:b8:20:7c:5f:4e:73:ff:7b:7e:af:10:13:a7:cc:58: 4f:91:c0:14:49:21:bf:97:27:d8:2b:50:4f:cb:5c:78:bf:62: 42:59:50:5e:77:93:5c:61:73:da:a6:83:4e:de:9d:df:c7:3a: 94:db:a1:f8:3a:bc:81:78:80:5c:0b:b4:cd:57:17:81:ce:5f: 84:5b:b6:95:de:2b:e2:b5:53:25:5f:e9:74:5b:96:47:07:e5: 76:29:fc:76:9a:ae:20:bb:fa:b7:cb:3b:f3:f1:f2:86:54:97: d7:4f:fb:1d:9f:12:88:13:33:3e:f3:85:d6:e1:02:7d:1c:de: 37:62:6e:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVBMjcxMTAvBgNVBAUTKEJDODYyMTQxMzA5NzE2QzBFNERDMzdERkZGMzNFNUFC MEM1NTRBRDAwHhcNMjUwNzAxMDI0MzU1WhcNMjUwNzA4MDI0MzU1WjAYMRYwFAYD VQQDEw02ODYzNGI2Yi0xY2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TfcjNZ0Pw1PCM7vim3q4kYEjveb65d0CTUjNYJPXB1SMHDfAWHyWjRPXFKd 5rEL8l+25w7fEAPEFPAAm3pb/glZpdtuxQIcfDnxQQmJLz87Bl8mjFujTobdsq4k IOMk9UBE2AK+FEKdCour7kl3OZBKxiHpp1+KRDW4KDdTvKGFPgfC426+7orsuBwU bwPaI26HJupQx7ncJPEBvpI7lyDtDu3pgWQ85IsGRbvsoYys+hN1FMa2nvwoXdrX PiuyfsdBgBngKFiSCM0D8p6RYMiCVztbBayhGKUIWiIn5zjfumr6A+FFfth3rV+Y pESIt9Nqa5JrSSHulNdFNiCIcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWSNSwI sZpQebZ97UYHcBZIOnm1MB8GA1UdIwQYMBaAFLyGIUEwlxbA5Nw33/8z5asMVUrQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUEyNy82QThCRDA4QzQ0 NkYxMUVEOTA5NUQ1NjVDNEY5QUUwMi92SVloUVRDWEZzRGszRGZmX3pQbHF3eFZT dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJWWhRVENYRnNEazNEZmZfelBscXd4VlN0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUEyNy82QThCRDA4QzQ0NkYxMUVEOTA5NUQ1NjVDNEY5QUUwMi92SVloUVRDWEZz RGszRGZmX3pQbHF3eFZTdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj+MonJINhdni5e2HyfAytD8XxkK4BqdZZYAni0PhM2rQPUUyfRmhE ep9P3OyhjFzkBrCk7tS6SZDtEBLeRR4iXDs/NztKBKdbnCrqbxfRm1J/CNkCeKiw fMbJ+o/6B5ILu6Zq5Y7NXLPTxN4+PH2xN18pzAZagpcwNkUfAGLZ4cC4IHxfTnP/ e36vEBOnzFhPkcAUSSG/lyfYK1BPy1x4v2JCWVBed5NcYXPapoNO3p3fxzqU26H4 OryBeIBcC7TNVxeBzl+EW7aV3ivitVMlX+l0W5ZHB+V2Kfx2mq4gu/q3yzvz8fKG VJfXT/sdnxKIEzM+84XW4QJ9HN43Ym5E -----END CERTIFICATE-----Generated at Tue Jul 1 10:31:14 2025 by rpki-client