$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft File: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft (raw, json) Hash identifier: yMKCd42I/Dm3q3aDaGEPZ66rJSFVcOxVbdXwCoMI5dY= Subject key identifier: 10:19:E9:72:88:D4:51:F8:53:0B:4C:4C:CB:AB:05:E5:84:5A:9E:FD Authority key identifier: 56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29 Certificate issuer: /CN=A9136BD7/serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829 Certificate serial: 060C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft Manifest number: 0607 Signing time: Sat 28 Jun 2025 22:27:22 +0000 Manifest this update: Sat 28 Jun 2025 22:27:21 +0000 Manifest next update: Sat 05 Jul 2025 22:27:21 +0000 Files and hashes: 1: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl (hash: mBIqVxNWpQDkz6eCWZADSUnR3I3lvujcCbM7xm7KO0U=) 2: E22BD636AC5011EBA37CCA28C4F9AE02.roa (hash: fdFSt8Mu6WuYnLA2fbE3V7b+qZmpKdHiBdsuXljNq4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 22:27:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1548 (0x60c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BD7, serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829 Validity Not Before: Jun 28 22:27:21 2025 GMT Not After : Jul 5 22:27:21 2025 GMT Subject: CN=68606c4a-56bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:42:42:8e:2a:ef:9b:e4:69:09:b1:38:a2:d1: da:c2:72:9f:8a:1b:b7:58:75:55:77:6e:65:51:9f: d9:f7:45:b6:27:f0:86:57:c1:bf:db:51:71:2a:f6: 05:c9:be:d2:0f:ea:bd:12:1b:2a:45:4e:b6:29:c3: 89:d5:d1:7e:38:9a:57:48:17:36:25:c1:36:8f:d1: 06:7b:f2:ad:8d:a8:10:fe:67:43:ac:f9:84:13:58: 93:48:30:95:27:d9:e5:41:30:9a:c5:a8:f8:f4:d3: 0e:22:c3:93:c8:a3:98:72:3f:eb:66:32:e2:c2:30: 55:b6:22:50:02:6d:b8:85:c0:4a:11:27:ac:2e:10: 03:e2:49:30:90:83:0c:b1:9c:05:31:14:f0:da:9d: 08:c3:3e:ac:93:0f:41:1f:95:9d:26:c4:16:50:68: 87:46:53:f6:92:18:d1:dc:bc:25:92:5d:fe:06:30: ce:47:01:c9:c4:32:44:b9:62:cf:af:a9:4f:8f:ba: 85:42:e8:fc:8b:d6:c9:58:62:e2:d3:84:7a:f8:be: 23:4d:d0:3d:5f:94:72:cb:80:78:2a:8e:ec:7d:fd: ad:13:bf:55:10:32:4d:05:14:c5:60:f5:7f:26:05: 7a:4d:fe:69:9c:cc:7b:43:cd:57:21:dc:57:4f:5a: 35:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:19:E9:72:88:D4:51:F8:53:0B:4C:4C:CB:AB:05:E5:84:5A:9E:FD X509v3 Authority Key Identifier: keyid:56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:65:7e:52:d0:f7:4b:5b:38:18:9c:e8:ea:9c:88:c9:8b:18: 02:88:44:b7:ad:64:42:f4:56:dd:99:9a:73:48:80:2f:ce:3b: 6b:04:ea:8a:67:b5:99:33:69:30:94:ee:07:3a:ed:e0:a2:82: 19:6a:2a:3a:20:ca:34:db:af:51:94:97:7e:b2:14:85:59:34: 1d:72:a8:cd:84:c5:6e:96:07:e8:d4:b0:80:bf:4d:19:fe:ca: 3c:9d:bf:d2:f8:c4:58:c1:bb:13:07:2d:90:ea:81:a9:6e:a1: fd:c6:93:fd:ee:49:a8:b4:c4:f8:8b:24:7c:5d:96:e4:41:31: a6:e7:f7:f2:81:a7:0c:c5:cf:af:61:37:10:c8:c2:ed:a3:6e: f4:b9:62:9d:36:cd:bd:91:97:27:52:e7:a5:9d:23:26:d9:ae: e0:1c:b2:c3:b1:00:c2:15:76:63:bc:ec:6d:fa:f7:f9:b5:fa: 45:79:32:27:8e:09:ac:e7:4a:b8:f3:12:36:cf:4a:1e:36:b0: 06:93:79:40:ef:de:59:90:53:1b:13:f9:d0:84:ab:4c:71:04: 5e:fc:6e:79:fb:2f:43:25:88:27:26:70:23:01:a1:84:11:51: dd:70:6e:fb:14:23:6e:06:b8:b5:b2:4f:34:86:fa:5f:f4:59: a0:33:14:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRDcxMTAvBgNVBAUTKDU2QTAzMTY3RkFFMTJCMUJBMTRCQjg0NzRENDQyQjY3 NzBCQjk4MjkwHhcNMjUwNjI4MjIyNzIxWhcNMjUwNzA1MjIyNzIxWjAYMRYwFAYD VQQDEw02ODYwNmM0YS01NmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0JCjirvm+RpCbE4otHawnKfihu3WHVVd25lUZ/Z90W2J/CGV8G/21FxKvYF yb7SD+q9EhsqRU62KcOJ1dF+OJpXSBc2JcE2j9EGe/KtjagQ/mdDrPmEE1iTSDCV J9nlQTCaxaj49NMOIsOTyKOYcj/rZjLiwjBVtiJQAm24hcBKESesLhAD4kkwkIMM sZwFMRTw2p0Iwz6skw9BH5WdJsQWUGiHRlP2khjR3Lwlkl3+BjDORwHJxDJEuWLP r6lPj7qFQuj8i9bJWGLi04R6+L4jTdA9X5Ryy4B4Ko7sff2tE79VEDJNBRTFYPV/ JgV6Tf5pnMx7Q81XIdxXT1o1TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAZ6XKI 1FH4UwtMTMurBeWEWp79MB8GA1UdIwQYMBaAFFagMWf64SsboUu4R01EK2dwu5gp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJENy9BNjUxQjQ3NEFD NEYxMUVCODNEMThFMjhDNEY5QUUwMi9WcUF4Wl9yaEt4dWhTN2hIVFVRclozQzdt Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZxQXhaX3JoS3h1aFM3aEhUVVFyWjNDN21Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkJENy9BNjUxQjQ3NEFDNEYxMUVCODNEMThFMjhDNEY5QUUwMi9WcUF4Wl9yaEt4 dWhTN2hIVFVRclozQzdtQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpZX5S0PdLWzgYnOjqnIjJixgCiES3rWRC9FbdmZpzSIAvzjtrBOqK Z7WZM2kwlO4HOu3gooIZaio6IMo0269RlJd+shSFWTQdcqjNhMVulgfo1LCAv00Z /so8nb/S+MRYwbsTBy2Q6oGpbqH9xpP97kmotMT4iyR8XZbkQTGm5/fygacMxc+v YTcQyMLto270uWKdNs29kZcnUuelnSMm2a7gHLLDsQDCFXZjvOxt+vf5tfpFeTIn jgms50q48xI2z0oeNrAGk3lA795ZkFMbE/nQhKtMcQRe/G55+y9DJYgnJnAjAaGE EVHdcG77FCNuBri1sk80hvpf9FmgMxSd -----END CERTIFICATE-----Generated at Sun Jun 29 17:36:30 2025 by rpki-client