$ rpki-client -vvf rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft File: VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft (raw, json) Hash identifier: HPviIyeicRUG6+6xmfYH0wKx/5rlrD4GsLmXQ6FzAGU= Subject key identifier: 1D:A4:7C:EB:57:C3:08:8E:4B:69:3A:10:11:89:A1:99:14:5B:17:59 Authority key identifier: 55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 Certificate issuer: /CN=A9154534/serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Certificate serial: 0B57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft Manifest number: 0B4F Signing time: Mon 30 Jun 2025 19:17:31 +0000 Manifest this update: Mon 30 Jun 2025 19:17:30 +0000 Manifest next update: Mon 07 Jul 2025 19:17:30 +0000 Files and hashes: 1: VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl (hash: A1F6GiEgJULrU2MW977lTpT9PtmjuPUO3xTIL/CwO1Q=) 2: 8789C45E384311EAAA40EE51C4F9AE02.roa (hash: MAWDNXgpu9PgJn7Gnnkwa2ICesKD1B+IPcDJf1k8UoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2903 (0xb57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154534, serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Validity Not Before: Jun 30 19:17:30 2025 GMT Not After : Jul 7 19:17:30 2025 GMT Subject: CN=6862e2ca-f60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:48:48:3a:bd:93:a3:97:ca:f1:8a:f4:6b:9f: 9d:97:fd:20:41:22:d8:fe:ee:6e:f0:a1:39:eb:8d: 41:86:39:c9:ca:78:23:02:9f:ae:61:a7:50:92:1e: 22:b5:cb:b3:59:1b:9f:1c:58:fa:9a:29:82:ba:d2: 27:ea:ef:c1:4d:72:50:fa:3a:bd:10:6d:51:25:92: 7d:36:93:ca:a1:7d:86:ca:4c:b9:b1:d9:12:f9:d2: 5d:9f:3c:50:2a:d7:14:2b:fa:37:e3:d3:fb:df:1a: 02:a0:09:51:e0:25:11:01:b2:81:b7:4f:db:e1:0f: c7:5f:58:6f:f1:47:24:6d:ae:f4:ea:16:54:61:bf: 99:83:36:e7:a8:f3:47:87:38:fe:fa:21:51:e9:8e: 16:d9:8c:51:4e:52:96:7b:4d:47:37:73:43:16:90: 4f:71:d0:0b:5d:80:7c:40:7b:00:ed:84:fb:6f:70: 41:0d:07:ae:f3:ea:a6:87:dd:17:78:56:49:57:88: 5f:09:d8:a6:91:7e:d4:58:41:8f:51:97:ec:d8:69: b9:0d:ed:7b:fa:f2:44:8c:9e:3a:2b:57:4f:f5:15: db:94:01:0f:fa:7e:5e:88:b7:a3:f4:64:66:c2:04: 6e:ae:4c:17:cf:4a:95:aa:cc:d7:a2:1e:c7:e6:d5: 23:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A4:7C:EB:57:C3:08:8E:4B:69:3A:10:11:89:A1:99:14:5B:17:59 X509v3 Authority Key Identifier: keyid:55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:90:21:b4:be:b1:91:26:05:c8:c4:c9:9b:67:30:e6:2f:00: df:e2:a2:93:df:83:0e:c5:f6:97:ed:fb:fc:88:f4:22:6c:6d: 46:6b:57:32:0b:36:4d:ad:9d:a7:87:60:3e:30:0d:99:89:d8: cc:93:9a:8b:0c:a0:71:29:f1:e1:71:13:d1:5f:eb:70:83:c2: e1:83:68:08:cf:1c:6f:25:cd:d4:7d:89:46:ef:51:84:f2:dc: b9:91:8c:72:1f:88:ae:d0:c8:c0:78:f9:86:b8:2a:a8:43:a5: 94:16:fc:47:16:ec:9a:fe:42:e0:fb:c3:19:9f:2d:75:fc:de: f9:9c:d0:7d:3c:82:5e:ef:9d:86:d9:bd:97:ba:31:f3:d8:74: 10:1a:89:ee:09:52:e3:c8:40:ab:a4:72:a5:b3:87:68:f7:36: c9:7b:b6:9d:98:99:d6:ea:0f:96:d0:a8:5a:31:b7:21:51:a4: c6:4f:be:9b:e3:f2:99:df:9e:f2:20:ce:55:fa:01:61:30:ab: dd:47:e6:02:e1:22:4d:d6:c6:2b:53:c8:01:17:c5:b7:de:dd: c7:3d:dc:5e:75:5f:8a:e6:38:d6:93:f4:f6:d0:4b:0b:fd:c2: 5c:be:b3:43:5e:9f:c0:42:b0:02:06:fc:7d:34:6b:46:a6:e1: e3:20:14:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1MzQxMTAvBgNVBAUTKDU1QzQ2ODU1Q0M5MUFDNTRBQzA3NUMyOTdCNzUzMUZB ODhBNzM1RDkwHhcNMjUwNjMwMTkxNzMwWhcNMjUwNzA3MTkxNzMwWjAYMRYwFAYD VQQDEw02ODYyZTJjYS1mNjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEhIOr2To5fK8Yr0a5+dl/0gQSLY/u5u8KE5641BhjnJyngjAp+uYadQkh4i tcuzWRufHFj6mimCutIn6u/BTXJQ+jq9EG1RJZJ9NpPKoX2Gyky5sdkS+dJdnzxQ KtcUK/o349P73xoCoAlR4CURAbKBt0/b4Q/HX1hv8Uckba706hZUYb+ZgzbnqPNH hzj++iFR6Y4W2YxRTlKWe01HN3NDFpBPcdALXYB8QHsA7YT7b3BBDQeu8+qmh90X eFZJV4hfCdimkX7UWEGPUZfs2Gm5De17+vJEjJ46K1dP9RXblAEP+n5eiLej9GRm wgRurkwXz0qVqszXoh7H5tUjiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2kfOtX wwiOS2k6EBGJoZkUWxdZMB8GA1UdIwQYMBaAFFXEaFXMkaxUrAdcKXt1MfqIpzXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDUzNC9CRDI2OTA5RTM4 NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJGU3NCMXdwZTNVeC1vaW5O ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZjUm9WY3lSckZTc0Ixd3BlM1V4LW9pbk5kay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDUzNC9CRDI2OTA5RTM4NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJG U3NCMXdwZTNVeC1vaW5OZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMkCG0vrGRJgXIxMmbZzDmLwDf4qKT34MOxfaX7fv8iPQibG1Ga1cy CzZNrZ2nh2A+MA2ZidjMk5qLDKBxKfHhcRPRX+twg8Lhg2gIzxxvJc3UfYlG71GE 8ty5kYxyH4iu0MjAePmGuCqoQ6WUFvxHFuya/kLg+8MZny11/N75nNB9PIJe752G 2b2XujHz2HQQGonuCVLjyECrpHKls4do9zbJe7admJnW6g+W0KhaMbchUaTGT76b 4/KZ357yIM5V+gFhMKvdR+YC4SJN1sYrU8gBF8W33t3HPdxedV+K5jjWk/T20EsL /cJcvrNDXp/AQrACBvx9NGtGpuHjIBTd -----END CERTIFICATE-----Generated at Tue Jul 1 16:06:45 2025 by rpki-client