$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft File: VFjEVinBBKqnpYcoaG-NHihyqSo.mft (raw, json) Hash identifier: 8PckuTn0ug3CGBhMx0g6RAvpsHF/9HnfvN1MAGyqqiA= Subject key identifier: 0F:61:BC:01:A6:64:E8:56:E9:63:FC:9D:9F:40:06:EC:CD:DE:6A:91 Authority key identifier: 54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A Certificate issuer: /CN=A9153C27/serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Certificate serial: 0C76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft Manifest number: 0C6E Signing time: Fri 04 Jul 2025 18:36:31 +0000 Manifest this update: Fri 04 Jul 2025 18:36:31 +0000 Manifest next update: Fri 11 Jul 2025 18:36:31 +0000 Files and hashes: 1: VFjEVinBBKqnpYcoaG-NHihyqSo.crl (hash: cUtIWzb8blVh1P7lw13165g+Mx3mmmmzbIiM3YEspu0=) 2: DB020E9C010D11EAA82AD83CC4F9AE02.roa (hash: +/HgExCatPcRmJalycUeFMmwknrCCg9dQk/HjuFZjUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3190 (0xc76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C27, serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Validity Not Before: Jul 4 18:36:31 2025 GMT Not After : Jul 11 18:36:31 2025 GMT Subject: CN=68681f2f-3b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:22:2f:c5:e1:f9:4d:e6:42:3f:6f:81:9c:78: cf:4f:78:dd:fb:19:e2:60:26:cb:9e:75:34:dc:9c: 14:58:b5:4e:19:cd:af:56:c0:72:11:5f:dd:27:17: 98:5f:81:4c:65:3a:03:34:ae:e0:eb:64:d0:09:42: b0:76:ee:40:19:97:06:99:1b:1b:cc:0b:2a:22:aa: bd:6c:5f:4e:d4:d3:52:a6:d4:e6:98:42:6e:c9:19: e0:65:a0:19:07:aa:d9:33:2f:e3:18:15:61:46:9f: cb:65:7b:99:f9:54:3d:cb:33:30:8f:43:06:56:f9: 8b:70:e0:9c:77:69:93:07:b0:69:be:8e:29:bf:c0: ea:fe:dc:e2:da:e1:6d:70:76:e2:2f:43:3d:42:32: 93:ca:af:ed:28:70:00:19:ac:2c:7f:80:42:ab:92: d5:32:17:c2:c3:76:00:89:05:a0:01:c3:88:c7:8f: 1d:2e:d0:2a:8b:94:15:03:e1:28:27:aa:e1:ae:af: 22:17:46:8f:41:15:1f:73:bc:45:0d:64:84:bb:c1: d1:cf:4b:31:62:77:4a:94:35:01:d0:a1:44:92:89: 95:03:63:91:71:ce:67:5f:57:34:5e:00:96:65:05: af:9b:12:aa:fc:c4:c8:cc:40:9c:14:1f:5e:e4:79: e1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:61:BC:01:A6:64:E8:56:E9:63:FC:9D:9F:40:06:EC:CD:DE:6A:91 X509v3 Authority Key Identifier: keyid:54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:62:89:c5:a0:ec:a9:d0:9f:74:07:c4:55:d6:db:77:74:19: 83:93:26:ac:f6:eb:c2:24:4d:c1:24:48:10:d0:9c:a6:26:1a: 49:b9:c8:9d:2f:3d:fb:c2:15:7f:1c:03:6c:d1:e8:19:d4:88: fc:d3:c4:1e:ff:dd:4b:b9:80:55:59:6a:a1:4f:cc:05:6b:88: 67:ff:d3:39:06:4c:85:da:72:3b:58:71:23:1d:bd:52:89:70: 2e:ba:2a:d2:c5:1d:ff:5b:a8:c9:9b:c0:b2:fc:14:bd:e9:3c: 24:61:d6:78:d0:16:65:af:5f:09:bb:d8:ad:89:62:38:61:7e: 32:33:11:52:3d:5b:85:d6:2e:31:e4:da:c5:38:2e:25:8a:b3: 1a:dd:78:03:b5:42:ae:66:2a:74:54:2e:4d:fb:2c:31:b5:4a: 10:4f:36:28:6b:78:0f:a0:ff:18:96:1d:21:39:39:65:76:22: b7:8c:03:19:49:68:be:cb:94:35:67:73:c1:d1:64:c9:9e:09: e3:6a:99:af:91:56:6a:ae:ab:cc:01:ae:2f:97:37:bb:ed:b3: 7d:86:76:a9:0a:c2:d3:af:63:df:0d:4a:12:9c:53:27:b9:30: 51:d0:75:ac:c9:72:ff:a1:c6:60:fc:b6:aa:fc:eb:37:d8:ba: 2c:aa:75:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDMjcxMTAvBgNVBAUTKDU0NThDNDU2MjlDMTA0QUFBN0E1ODcyODY4NkY4RDFF Mjg3MkE5MkEwHhcNMjUwNzA0MTgzNjMxWhcNMjUwNzExMTgzNjMxWjAYMRYwFAYD VQQDEw02ODY4MWYyZi0zYjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SIvxeH5TeZCP2+BnHjPT3jd+xniYCbLnnU03JwUWLVOGc2vVsByEV/dJxeY X4FMZToDNK7g62TQCUKwdu5AGZcGmRsbzAsqIqq9bF9O1NNSptTmmEJuyRngZaAZ B6rZMy/jGBVhRp/LZXuZ+VQ9yzMwj0MGVvmLcOCcd2mTB7Bpvo4pv8Dq/tzi2uFt cHbiL0M9QjKTyq/tKHAAGawsf4BCq5LVMhfCw3YAiQWgAcOIx48dLtAqi5QVA+Eo J6rhrq8iF0aPQRUfc7xFDWSEu8HRz0sxYndKlDUB0KFEkomVA2ORcc5nX1c0XgCW ZQWvmxKq/MTIzECcFB9e5Hnh8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9hvAGm ZOhW6WP8nZ9ABuzN3mqRMB8GA1UdIwQYMBaAFFRYxFYpwQSqp6WHKGhvjR4ocqkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0MyNy82NUJCNDg5QzAw NEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJLcW5wWWNvYUctTkhpaHlx U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGakVWaW5CQktxbnBZY29hRy1OSGloeXFTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0MyNy82NUJCNDg5QzAwNEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJL cW5wWWNvYUctTkhpaHlxU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHYonFoOyp0J90B8RV1tt3dBmDkyas9uvCJE3BJEgQ0JymJhpJucid Lz37whV/HANs0egZ1Ij808Qe/91LuYBVWWqhT8wFa4hn/9M5BkyF2nI7WHEjHb1S iXAuuirSxR3/W6jJm8Cy/BS96TwkYdZ40BZlr18Ju9itiWI4YX4yMxFSPVuF1i4x 5NrFOC4lirMa3XgDtUKuZip0VC5N+ywxtUoQTzYoa3gPoP8Ylh0hOTlldiK3jAMZ SWi+y5Q1Z3PB0WTJngnjapmvkVZqrqvMAa4vlze77bN9hnapCsLTr2PfDUoSnFMn uTBR0HWsyXL/ocZg/Laq/Os32LosqnUV -----END CERTIFICATE-----Generated at Fri Jul 4 20:19:19 2025 by rpki-client