$ rpki-client -vvf rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft File: vNgnSl8YLOQAgCwIPo0VQi-bthE.mft (raw, json) Hash identifier: 5Ll2ar6M5QXOx+3DnLSsjmbf8lhe7aIK7vSTYskeW6U= Subject key identifier: 69:63:AE:F4:52:D5:A4:13:87:64:19:C5:DE:C4:37:AB:EC:B3:9C:2E Authority key identifier: BC:D8:27:4A:5F:18:2C:E4:00:80:2C:08:3E:8D:15:42:2F:9B:B6:11 Certificate issuer: /CN=A91554E6/serialNumber=BCD8274A5F182CE400802C083E8D15422F9BB611 Certificate serial: 02DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNgnSl8YLOQAgCwIPo0VQi-bthE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft Manifest number: 0419 Signing time: Sun 29 Jun 2025 00:53:33 +0000 Manifest this update: Sun 29 Jun 2025 00:53:32 +0000 Manifest next update: Sun 06 Jul 2025 00:53:32 +0000 Files and hashes: 1: vNgnSl8YLOQAgCwIPo0VQi-bthE.crl (hash: x6GV9aR2dB1CWnF8f8fR/6E577WKtBDPdPn81lKG4G4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.crl rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNgnSl8YLOQAgCwIPo0VQi-bthE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 00:53:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 735 (0x2df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91554E6, serialNumber=BCD8274A5F182CE400802C083E8D15422F9BB611 Validity Not Before: Jun 29 00:53:32 2025 GMT Not After : Jul 6 00:53:32 2025 GMT Subject: CN=68608e8d-1088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:59:ac:69:db:73:fa:04:7c:37:3d:2c:74:89: 0d:fe:eb:62:72:c3:a1:58:7a:4b:e9:82:53:19:27: 8d:e8:57:66:ef:c3:24:5e:69:c8:4b:4d:96:74:a9: 88:36:4e:ab:5c:d6:4c:00:c6:cd:f8:52:16:f5:02: 41:61:7f:cc:48:ed:d6:5e:f2:36:b3:af:17:3b:4b: a4:9e:e1:80:0c:09:65:32:9b:18:ed:f1:2b:c2:c0: 86:5f:5d:89:9a:ff:3e:f8:c0:3c:a9:e6:d7:7b:ed: 8b:01:8e:83:35:15:7f:77:e2:50:cd:3e:31:19:d2: 28:05:a2:8d:77:e7:76:a3:f9:f1:dc:75:22:26:4c: f5:0b:c6:22:76:50:b8:3c:a5:67:e6:ae:8c:22:c1: c5:3c:1f:ff:f8:6f:e9:d0:61:78:24:35:05:62:2e: c4:df:53:9c:4d:82:47:bc:de:b2:0f:f7:e4:34:94: 1a:3e:a9:9b:f6:33:ee:bf:5f:eb:eb:ab:57:bf:85: 67:ee:05:2a:3d:08:60:e6:76:46:8d:8b:cc:a7:f1: 95:c7:2a:8e:6e:a0:f9:aa:f3:6c:f4:36:71:0f:7b: bc:85:e5:f1:a4:6e:58:03:ab:0e:5d:a9:f8:d4:97: 91:a4:ae:78:32:a5:f9:01:c2:25:25:65:c3:e2:6d: 9d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:63:AE:F4:52:D5:A4:13:87:64:19:C5:DE:C4:37:AB:EC:B3:9C:2E X509v3 Authority Key Identifier: keyid:BC:D8:27:4A:5F:18:2C:E4:00:80:2C:08:3E:8D:15:42:2F:9B:B6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNgnSl8YLOQAgCwIPo0VQi-bthE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0f:7a:42:75:24:85:01:88:be:15:22:b2:06:ef:b7:f7:32: 51:ba:6a:95:fc:8e:ab:a9:8c:bc:be:70:b0:6a:f3:96:09:ac: 93:6b:a2:84:9b:22:3b:e9:89:25:54:39:b6:cf:cd:1c:c3:22: 22:72:c6:dc:97:3f:8c:47:5a:0d:b2:cd:6e:ac:f3:92:15:70: 1d:a0:d5:09:f1:bb:2d:0c:a9:4d:d5:7b:1f:d2:0d:db:94:a3: 36:6d:9e:53:e0:05:c0:ea:65:6b:ab:93:30:ac:31:3d:33:d9: 83:98:87:f3:ba:60:81:e2:47:7b:0e:cd:54:3b:11:af:94:4d: c8:f2:12:55:05:34:9b:75:75:19:8e:af:fa:0b:d2:a0:91:05: 66:ab:35:c3:4c:b7:07:6e:a3:4f:45:2a:db:0e:a7:cb:7c:b7: d5:e2:9c:ee:0c:94:61:1f:1d:f4:33:07:0e:5e:4c:d1:71:66: 56:d5:82:0a:79:b6:66:24:30:b4:81:5c:a6:3e:32:df:c4:05: 8b:f6:bb:e4:32:56:91:bb:59:31:ab:84:33:67:9f:f5:96:df: a5:03:11:b4:5f:f4:08:a1:26:b8:86:df:52:21:02:27:3a:3b: 74:9f:99:88:79:30:34:be:87:e2:04:8d:75:48:ed:a0:32:f2: 23:b2:11:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0RTYxMTAvBgNVBAUTKEJDRDgyNzRBNUYxODJDRTQwMDgwMkMwODNFOEQxNTQy MkY5QkI2MTEwHhcNMjUwNjI5MDA1MzMyWhcNMjUwNzA2MDA1MzMyWjAYMRYwFAYD VQQDEw02ODYwOGU4ZC0xMDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Fmsadtz+gR8Nz0sdIkN/uticsOhWHpL6YJTGSeN6Fdm78MkXmnIS02WdKmI Nk6rXNZMAMbN+FIW9QJBYX/MSO3WXvI2s68XO0uknuGADAllMpsY7fErwsCGX12J mv8++MA8qebXe+2LAY6DNRV/d+JQzT4xGdIoBaKNd+d2o/nx3HUiJkz1C8YidlC4 PKVn5q6MIsHFPB//+G/p0GF4JDUFYi7E31OcTYJHvN6yD/fkNJQaPqmb9jPuv1/r 66tXv4Vn7gUqPQhg5nZGjYvMp/GVxyqObqD5qvNs9DZxD3u8heXxpG5YA6sOXan4 1JeRpK54MqX5AcIlJWXD4m2dkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGljrvRS 1aQTh2QZxd7EN6vss5wuMB8GA1UdIwQYMBaAFLzYJ0pfGCzkAIAsCD6NFUIvm7YR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTRFNi85RjA2Nzc0OEVE NEIxMUVDQUI4RkFBNzdDNEY5QUUwMi92TmduU2w4WUxPUUFnQ3dJUG8wVlFpLWJ0 aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZOZ25TbDhZTE9RQWdDd0lQbzBWUWktYnRoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTRFNi85RjA2Nzc0OEVENEIxMUVDQUI4RkFBNzdDNEY5QUUwMi92TmduU2w4WUxP UUFnQ3dJUG8wVlFpLWJ0aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOD3pCdSSFAYi+FSKyBu+39zJRumqV/I6rqYy8vnCwavOWCayTa6KE myI76YklVDm2z80cwyIicsbclz+MR1oNss1urPOSFXAdoNUJ8bstDKlN1Xsf0g3b lKM2bZ5T4AXA6mVrq5MwrDE9M9mDmIfzumCB4kd7Ds1UOxGvlE3I8hJVBTSbdXUZ jq/6C9KgkQVmqzXDTLcHbqNPRSrbDqfLfLfV4pzuDJRhHx30MwcOXkzRcWZW1YIK ebZmJDC0gVymPjLfxAWL9rvkMlaRu1kxq4QzZ5/1lt+lAxG0X/QIoSa4ht9SIQIn Ojt0n5mIeTA0vofiBI11SO2gMvIjshGD -----END CERTIFICATE-----Generated at Tue Jul 1 02:09:01 2025 by rpki-client