$ rpki-client -vvf rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft File: Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft (raw, json) Hash identifier: 5rQ/YbIco7iOSGOIkP8tLON6ny1eiDGon9HcztugNuE= Subject key identifier: 75:AB:55:3D:59:09:0F:E9:AF:33:C9:23:3C:C2:88:6D:37:4A:26:11 Authority key identifier: 56:8F:76:5C:CA:B4:2C:52:30:79:8E:68:FB:C3:7C:8A:A4:9F:5F:44 Certificate issuer: /CN=A913F478/serialNumber=568F765CCAB42C5230798E68FBC37C8AA49F5F44 Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft Manifest number: 01EC Signing time: Thu 03 Jul 2025 02:41:33 +0000 Manifest this update: Thu 03 Jul 2025 02:41:33 +0000 Manifest next update: Thu 10 Jul 2025 02:41:33 +0000 Files and hashes: 1: Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl (hash: k8PHZwmXFwnpXM8vt9xKNT5vPFXRMEEN6/biRbN371g=) 2: A89C497E6D1911ED9C34360FC4F9AE02.roa (hash: UQCZG7itJMxo24ik+1Acdmbu5iaW6o2y95pik3WrmR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F478, serialNumber=568F765CCAB42C5230798E68FBC37C8AA49F5F44 Validity Not Before: Jul 3 02:41:33 2025 GMT Not After : Jul 10 02:41:33 2025 GMT Subject: CN=6865eddd-1d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:11:fc:d6:61:8a:92:5a:ec:94:bb:bd:65:f7: 8e:76:9d:4b:44:df:b3:b1:9c:a6:10:ee:94:43:2e: 43:cf:7d:18:2d:b7:38:1f:ac:9b:9e:25:c4:fb:07: 95:c7:96:bb:82:dc:fb:13:fa:d0:e0:ce:e1:da:a6: ab:d6:df:25:44:29:94:f0:8f:ec:b0:f6:81:14:3f: f0:63:48:ef:3f:71:1a:70:d8:cd:79:91:90:4c:d8: c4:4e:d1:a9:f5:1d:7e:15:34:fc:e2:61:71:eb:fb: d7:02:93:f2:ba:63:9c:2c:5a:ad:5b:31:84:7a:4b: 7c:c4:c2:a2:88:26:2a:57:c2:ee:0c:ba:cc:79:67: 1a:69:29:53:d0:d4:55:7c:a4:d3:84:27:ea:a9:cf: f8:80:f8:8c:50:ba:9b:97:73:81:11:4f:55:6b:b3: e5:96:07:e7:4b:9c:31:a4:8b:89:71:b7:f3:a0:cf: b1:f9:25:49:53:fc:9d:bb:bd:ec:e2:dd:29:e4:b0: 58:74:50:21:64:27:ea:06:21:20:c2:33:6b:bf:ba: 59:d8:1f:04:60:b8:13:ae:47:f5:41:cb:e4:d1:e8: 7d:0d:ee:a8:cd:1b:73:d4:9e:c3:9e:21:86:84:11: 39:3a:fc:78:86:2d:16:cf:08:60:5b:b0:36:71:80: 89:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AB:55:3D:59:09:0F:E9:AF:33:C9:23:3C:C2:88:6D:37:4A:26:11 X509v3 Authority Key Identifier: keyid:56:8F:76:5C:CA:B4:2C:52:30:79:8E:68:FB:C3:7C:8A:A4:9F:5F:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:af:d3:23:dd:ad:67:8b:aa:c3:8c:0c:7e:33:5e:47:80:39: d0:d3:bf:2b:53:84:e2:65:71:7d:6b:09:a7:f2:a2:90:b7:74: c1:f6:42:db:af:4a:53:a1:f6:b2:b7:b9:0a:a1:41:40:c2:a1: 4b:cc:b8:0e:e5:8a:d7:06:a8:20:4b:19:d2:b2:ff:02:d7:36: 33:81:c1:ab:e3:15:88:f4:9c:af:36:87:fd:89:db:40:ae:56: ed:af:4d:21:af:f5:46:5b:eb:c4:ed:da:8a:25:88:23:d0:d1: 05:8d:a2:44:1e:ad:52:9c:36:4b:06:c7:06:39:c4:f3:c5:57: e4:c8:bf:d7:b5:40:4b:08:27:11:f2:08:fe:f4:27:a6:33:bd: 69:65:b3:3d:f4:9b:8a:7d:50:02:e4:ff:ea:c1:36:00:ef:d6: f8:52:3d:82:9e:92:05:e5:00:70:6e:5d:d1:12:44:3f:fa:6a: 13:d9:b0:24:e5:3f:22:0f:2d:d0:8e:05:fd:58:35:b2:68:75: 51:7d:58:62:88:91:8c:04:ff:fb:f8:09:1b:3a:de:85:1e:a7: e8:e3:62:64:48:5d:24:01:37:6a:eb:4b:e8:18:e0:0d:68:ca: a3:38:6e:e7:49:2c:0f:a3:2e:be:3f:af:13:7a:7a:4e:84:3f: 5a:29:58:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y0NzgxMTAvBgNVBAUTKDU2OEY3NjVDQ0FCNDJDNTIzMDc5OEU2OEZCQzM3QzhB QTQ5RjVGNDQwHhcNMjUwNzAzMDI0MTMzWhcNMjUwNzEwMDI0MTMzWjAYMRYwFAYD VQQDEw02ODY1ZWRkZC0xZDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hH81mGKklrslLu9ZfeOdp1LRN+zsZymEO6UQy5Dz30YLbc4H6ybniXE+weV x5a7gtz7E/rQ4M7h2qar1t8lRCmU8I/ssPaBFD/wY0jvP3EacNjNeZGQTNjETtGp 9R1+FTT84mFx6/vXApPyumOcLFqtWzGEekt8xMKiiCYqV8LuDLrMeWcaaSlT0NRV fKTThCfqqc/4gPiMULqbl3OBEU9Va7PllgfnS5wxpIuJcbfzoM+x+SVJU/ydu73s 4t0p5LBYdFAhZCfqBiEgwjNrv7pZ2B8EYLgTrkf1Qcvk0eh9De6ozRtz1J7DniGG hBE5Ovx4hi0WzwhgW7A2cYCJkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWrVT1Z CQ/przPJIzzCiG03SiYRMB8GA1UdIwQYMBaAFFaPdlzKtCxSMHmOaPvDfIqkn19E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjQ3OC80OTlBOTE1RTZE MTYxMUVEQkUxMjA1MENDNEY5QUUwMi9WbzkyWE1xMExGSXdlWTVvLThOOGlxU2ZY MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZvOTJYTXEwTEZJd2VZNW8tOE44aXFTZlgwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjQ3OC80OTlBOTE1RTZEMTYxMUVEQkUxMjA1MENDNEY5QUUwMi9WbzkyWE1xMExG SXdlWTVvLThOOGlxU2ZYMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmr9Mj3a1ni6rDjAx+M15HgDnQ078rU4TiZXF9awmn8qKQt3TB9kLb r0pTofayt7kKoUFAwqFLzLgO5YrXBqggSxnSsv8C1zYzgcGr4xWI9JyvNof9idtA rlbtr00hr/VGW+vE7dqKJYgj0NEFjaJEHq1SnDZLBscGOcTzxVfkyL/XtUBLCCcR 8gj+9CemM71pZbM99JuKfVAC5P/qwTYA79b4Uj2CnpIF5QBwbl3REkQ/+moT2bAk 5T8iDy3QjgX9WDWyaHVRfVhiiJGMBP/7+AkbOt6FHqfo42JkSF0kATdq60voGOAN aMqjOG7nSSwPoy6+P68TenpOhD9aKVhw -----END CERTIFICATE-----Generated at Thu Jul 3 21:46:16 2025 by rpki-client