$ rpki-client -vvf rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft File: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft (raw, json) Hash identifier: mMjA7kK7lPD1s3CjTa5lkEBetof4AH9LJnJ9fgBjRFs= Subject key identifier: 15:4A:8D:CA:63:79:3D:51:9E:02:D9:7C:16:B1:96:74:C8:EB:96:A2 Authority key identifier: 56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA Certificate issuer: /CN=A914F22A/serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA Certificate serial: 1382 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft Manifest number: 137B Signing time: Sat 28 Jun 2025 16:49:56 +0000 Manifest this update: Sat 28 Jun 2025 16:49:56 +0000 Manifest next update: Sat 05 Jul 2025 16:49:56 +0000 Files and hashes: 1: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl (hash: mRypYHVVZGAVG5Ba/847THfbuvOGHOEOsb3RjqSB/Mw=) 2: 8B2E3BA270BD11ED970C535FC4F9AE02.roa (hash: zF4nygNChVvUs9Ge82/WKpjyi9YwONpMsx8hvCjTDOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 16:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4994 (0x1382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F22A, serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA Validity Not Before: Jun 28 16:49:56 2025 GMT Not After : Jul 5 16:49:56 2025 GMT Subject: CN=68601d34-c047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0c:8a:16:27:67:70:6e:5d:ce:5a:d8:90:1d: 4e:43:d1:e2:59:b0:ec:81:39:c8:36:11:3a:29:15: 43:dd:5d:92:a3:fb:43:f0:dc:17:80:f9:81:b2:3f: b5:b2:64:2d:d9:1d:09:55:eb:9b:32:98:b5:74:38: 14:e0:6f:7a:ee:14:a9:f4:08:be:16:eb:f5:48:9a: b4:f7:06:17:09:14:80:44:2b:9a:bb:54:48:fd:7d: 57:09:63:30:67:20:52:20:ed:ca:a3:99:c3:a0:5a: c2:23:c0:bd:6d:a5:f9:13:d0:ec:a0:8f:b2:5b:f3: 85:78:f6:c2:4a:5a:13:f4:dc:04:fd:59:7d:1f:8a: 8b:f4:14:2b:8c:28:08:31:92:fd:27:81:64:c9:bc: bd:24:a6:a4:dc:3a:23:7f:52:b7:2f:57:8a:f7:41: 26:b4:dd:07:72:58:12:57:3b:45:7b:f6:41:e5:06: b5:17:8f:ad:27:7c:fb:6f:b5:77:ea:5c:41:98:9b: 51:83:27:39:1d:f2:9f:8a:e2:3d:45:69:d6:c8:61: 80:cc:db:25:72:2f:2c:e6:71:f6:ab:6d:c1:49:d3: 94:d3:71:d2:e4:b7:4b:a5:7c:62:98:ac:8a:a2:86: f4:10:0e:f4:e6:5b:2c:a8:de:f9:9b:f4:6a:a6:33: ed:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4A:8D:CA:63:79:3D:51:9E:02:D9:7C:16:B1:96:74:C8:EB:96:A2 X509v3 Authority Key Identifier: keyid:56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:0f:36:c7:d0:6c:7d:c9:5f:e8:dd:7b:81:95:af:2e:0d:7c: d1:b7:5e:18:22:12:e3:1d:84:37:60:c5:b6:d0:da:ae:c0:1e: cb:07:a7:08:33:95:b6:84:6b:4d:01:85:81:49:c5:7f:c7:ec: d2:3f:0b:f9:ea:68:98:59:7c:66:2f:8f:4d:e7:41:78:0b:0e: 19:e2:4f:56:28:c9:78:f6:2a:fc:36:8e:64:64:53:3b:ea:d1: 83:1f:2a:b8:70:a4:40:07:c7:a2:8a:22:0a:e8:a6:67:b4:3d: 7b:a6:97:9c:3b:55:30:38:a2:0f:18:7a:fa:86:21:74:34:19: 1a:74:a6:22:3b:81:46:34:db:54:68:16:f7:53:3e:ac:12:c6: f7:81:b3:59:4a:36:d3:07:d9:78:ec:49:5b:2b:b0:a6:31:19: 41:e9:f3:0c:6b:f0:a1:75:06:7e:15:bf:6d:29:1b:b5:31:f1: 0c:47:47:16:d9:d5:7c:c0:54:18:d2:29:d8:7b:97:4d:a5:7a: 43:e7:b1:5d:46:24:d2:e3:d2:ce:15:9c:c9:cb:08:7f:8b:18: 9f:ee:93:7e:7e:4a:8f:ef:61:5b:4f:98:94:af:c3:8a:2e:45: 7b:28:d7:6f:0a:09:a0:c5:97:48:fd:61:85:0d:e8:2b:04:ee: 4b:33:9e:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYyMkExMTAvBgNVBAUTKDU2QUYxQ0QwQjRFMDdEMDAwQzY0QUIwMTZDMzNGNzg2 QTBERDkwRkEwHhcNMjUwNjI4MTY0OTU2WhcNMjUwNzA1MTY0OTU2WjAYMRYwFAYD VQQDEw02ODYwMWQzNC1jMDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwyKFidncG5dzlrYkB1OQ9HiWbDsgTnINhE6KRVD3V2So/tD8NwXgPmBsj+1 smQt2R0JVeubMpi1dDgU4G967hSp9Ai+Fuv1SJq09wYXCRSARCuau1RI/X1XCWMw ZyBSIO3Ko5nDoFrCI8C9baX5E9DsoI+yW/OFePbCSloT9NwE/Vl9H4qL9BQrjCgI MZL9J4Fkyby9JKak3Dojf1K3L1eK90EmtN0HclgSVztFe/ZB5Qa1F4+tJ3z7b7V3 6lxBmJtRgyc5HfKfiuI9RWnWyGGAzNslci8s5nH2q23BSdOU03HS5LdLpXximKyK oob0EA705lssqN75m/RqpjPtjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVKjcpj eT1RngLZfBaxlnTI65aiMB8GA1UdIwQYMBaAFFavHNC04H0ADGSrAWwz94ag3ZD6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjIyQS83RUVDMUU0QzlD RDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZRQU1aS3NCYkRQM2hxRGRr UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZxOGMwTFRnZlFBTVpLc0JiRFAzaHFEZGtQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjIyQS83RUVDMUU0QzlDRDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZR QU1aS3NCYkRQM2hxRGRrUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/DzbH0Gx9yV/o3XuBla8uDXzRt14YIhLjHYQ3YMW20NquwB7LB6cI M5W2hGtNAYWBScV/x+zSPwv56miYWXxmL49N50F4Cw4Z4k9WKMl49ir8No5kZFM7 6tGDHyq4cKRAB8eiiiIK6KZntD17ppecO1UwOKIPGHr6hiF0NBkadKYiO4FGNNtU aBb3Uz6sEsb3gbNZSjbTB9l47ElbK7CmMRlB6fMMa/ChdQZ+Fb9tKRu1MfEMR0cW 2dV8wFQY0inYe5dNpXpD57FdRiTS49LOFZzJywh/ixif7pN+fkqP72FbT5iUr8OK LkV7KNdvCgmgxZdI/WGFDegrBO5LM577 -----END CERTIFICATE-----Generated at Sun Jun 29 11:33:53 2025 by rpki-client