$ rpki-client -vvf rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft File: VB4KZv5g86rAJQLO8eSOYnpi90E.mft (raw, json) Hash identifier: qLcKcovK3QLMtZCi2NaAyLQ3DOo9RY98WyY9RD2scZE= Subject key identifier: B8:B9:E2:4B:DB:85:FC:EA:4E:B0:94:3F:98:D9:89:BD:D2:7D:E5:3C Authority key identifier: 54:1E:0A:66:FE:60:F3:AA:C0:25:02:CE:F1:E4:8E:62:7A:62:F7:41 Certificate issuer: /CN=A91288D9/serialNumber=541E0A66FE60F3AAC02502CEF1E48E627A62F741 Certificate serial: 0B20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft Manifest number: 0B18 Signing time: Fri 04 Jul 2025 19:36:57 +0000 Manifest this update: Fri 04 Jul 2025 19:36:57 +0000 Manifest next update: Fri 11 Jul 2025 19:36:57 +0000 Files and hashes: 1: VB4KZv5g86rAJQLO8eSOYnpi90E.crl (hash: d8l7nwFBZDjARTXfpFJsuKaS7z9ia9/ODfUfSZFSY4w=) 2: E0FCE614425811EAADEA3B45C4F9AE02.roa (hash: 4i/qRxDxm1IhOaEBUeWCrIN1RXkz58rViMQa88EFEXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.crl rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2848 (0xb20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91288D9, serialNumber=541E0A66FE60F3AAC02502CEF1E48E627A62F741 Validity Not Before: Jul 4 19:36:57 2025 GMT Not After : Jul 11 19:36:57 2025 GMT Subject: CN=68682d59-bae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b1:4f:63:b0:64:5e:55:3a:b5:b4:09:36:ef: 93:88:1a:f9:df:2a:22:61:27:17:1d:f1:d5:f1:3d: c8:b8:61:72:bd:50:77:83:c8:b6:0c:a8:bb:c8:d2: d3:21:6e:62:66:7d:9e:db:56:d6:36:b1:02:c3:bc: 0a:5a:f4:25:97:62:8b:ca:78:5a:10:26:57:e0:b6: 3c:c9:18:02:cc:e2:8a:76:56:68:6c:9f:31:66:5f: 17:3d:cf:ed:a8:35:20:d4:13:b8:86:fe:96:69:ed: f0:77:96:76:8f:7b:11:3f:df:d9:5d:c8:32:b6:26: 1c:5e:5f:15:9c:bf:4a:cb:fc:75:6c:35:98:a5:47: 44:e2:f2:8b:d0:a4:0b:24:c9:74:31:df:f7:52:1f: 30:b8:3e:64:4a:fc:c2:2c:a1:45:f4:09:f1:8b:08: 7f:bd:00:cf:85:39:28:2e:11:22:25:df:1c:87:05: ff:86:7d:ca:fb:b9:ca:93:41:f5:19:1f:87:05:85: 3b:71:57:34:56:ec:96:e4:3e:42:58:46:38:83:bd: d0:a1:f2:e7:2a:ed:95:48:38:35:3c:48:7d:cd:29: 37:18:39:b5:c6:a0:4c:72:ca:82:ca:33:86:1d:c1: 4a:81:ac:14:dc:02:11:7b:0c:eb:fa:30:de:bd:96: 01:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B9:E2:4B:DB:85:FC:EA:4E:B0:94:3F:98:D9:89:BD:D2:7D:E5:3C X509v3 Authority Key Identifier: keyid:54:1E:0A:66:FE:60:F3:AA:C0:25:02:CE:F1:E4:8E:62:7A:62:F7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a8:53:ea:d6:2f:a0:cf:bd:44:fc:5f:23:4e:ae:20:a2:8d: f4:9f:2c:8b:c0:ed:7f:7f:0e:2a:de:01:dd:7c:5f:d9:c0:de: a6:db:39:77:da:0d:c7:3a:a1:38:15:08:40:53:c0:ba:88:f1: 2a:53:b1:ed:5b:36:0a:9f:45:92:42:81:bf:b1:7b:4d:2d:7f: 5b:20:5d:20:61:ec:1a:4e:cc:f3:87:e7:cc:19:f1:fb:4c:80: 8d:fb:c3:7d:ab:3f:e9:7b:61:6b:80:ac:be:87:1e:23:ed:38: aa:ee:f7:66:a2:90:92:58:ef:c5:45:3b:05:b5:b6:e4:4f:71: c3:fe:d0:dd:cb:be:3a:79:0b:7d:79:bc:d4:5d:8d:b3:92:4e: 75:63:ad:ec:0c:5e:3a:3b:de:aa:4f:79:5d:fe:66:50:4b:b9: de:87:0f:e3:9b:23:d1:2f:6f:4c:53:99:22:cc:e4:46:92:34: 99:d7:1d:dc:56:0e:0a:92:d7:ff:69:5d:c8:90:1b:13:6e:17: f1:0d:d1:8f:69:66:03:04:a1:8f:e9:71:a1:48:7b:86:bc:1c: c6:e3:8c:1e:29:01:fb:0d:f4:df:a8:50:bf:aa:b7:00:c5:e8: 89:3c:58:1c:0d:c2:5a:47:cb:b2:80:d5:e9:21:eb:98:61:0b: 38:f8:aa:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4RDkxMTAvBgNVBAUTKDU0MUUwQTY2RkU2MEYzQUFDMDI1MDJDRUYxRTQ4RTYy N0E2MkY3NDEwHhcNMjUwNzA0MTkzNjU3WhcNMjUwNzExMTkzNjU3WjAYMRYwFAYD VQQDEw02ODY4MmQ1OS1iYWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7FPY7BkXlU6tbQJNu+TiBr53yoiYScXHfHV8T3IuGFyvVB3g8i2DKi7yNLT IW5iZn2e21bWNrECw7wKWvQll2KLynhaECZX4LY8yRgCzOKKdlZobJ8xZl8XPc/t qDUg1BO4hv6Wae3wd5Z2j3sRP9/ZXcgytiYcXl8VnL9Ky/x1bDWYpUdE4vKL0KQL JMl0Md/3Uh8wuD5kSvzCLKFF9Anxiwh/vQDPhTkoLhEiJd8chwX/hn3K+7nKk0H1 GR+HBYU7cVc0VuyW5D5CWEY4g73QofLnKu2VSDg1PEh9zSk3GDm1xqBMcsqCyjOG HcFKgawU3AIRewzr+jDevZYB4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLi54kvb hfzqTrCUP5jZib3SfeU8MB8GA1UdIwQYMBaAFFQeCmb+YPOqwCUCzvHkjmJ6YvdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODhEOS9CQTU5NTM1RTQy NTcxMUVBOEY4MzhBNDNDNEY5QUUwMi9WQjRLWnY1Zzg2ckFKUUxPOGVTT1lucGk5 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZCNEtadjVnODZyQUpRTE84ZVNPWW5waTkwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODhEOS9CQTU5NTM1RTQyNTcxMUVBOEY4MzhBNDNDNEY5QUUwMi9WQjRLWnY1Zzg2 ckFKUUxPOGVTT1lucGk5MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbqFPq1i+gz71E/F8jTq4goo30nyyLwO1/fw4q3gHdfF/ZwN6m2zl3 2g3HOqE4FQhAU8C6iPEqU7HtWzYKn0WSQoG/sXtNLX9bIF0gYewaTszzh+fMGfH7 TICN+8N9qz/pe2FrgKy+hx4j7Tiq7vdmopCSWO/FRTsFtbbkT3HD/tDdy746eQt9 ebzUXY2zkk51Y63sDF46O96qT3ld/mZQS7nehw/jmyPRL29MU5kizORGkjSZ1x3c Vg4Kktf/aV3IkBsTbhfxDdGPaWYDBKGP6XGhSHuGvBzG44weKQH7DfTfqFC/qrcA xeiJPFgcDcJaR8uygNXpIeuYYQs4+Krb -----END CERTIFICATE-----Generated at Sat Jul 5 01:54:29 2025 by rpki-client