$ rpki-client -vvf rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft File: VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft (raw, json) Hash identifier: 7pm5uKiFT4ea30fTRBIbuFFvpj5ZvcLBGrm1WuDi/NI= Subject key identifier: 1D:7E:D7:68:93:C5:D4:A9:C5:E1:12:37:77:1A:1C:F4:1E:BD:4F:47 Authority key identifier: 55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E Certificate issuer: /CN=A915B878/serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E Certificate serial: 05B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft Manifest number: 05AE Signing time: Fri 04 Jul 2025 23:33:48 +0000 Manifest this update: Fri 04 Jul 2025 23:33:47 +0000 Manifest next update: Fri 11 Jul 2025 23:33:47 +0000 Files and hashes: 1: VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl (hash: Ku5heuPBfnTZj0FGtCP7c0eS/sd8vq27ItaAUm21jq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1456 (0x5b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B878, serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E Validity Not Before: Jul 4 23:33:47 2025 GMT Not After : Jul 11 23:33:47 2025 GMT Subject: CN=686864dc-de4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ca:97:d4:e2:83:15:7a:7d:7b:49:86:f8:ca: a8:fa:00:ac:78:3f:a8:25:f1:fd:90:51:ef:eb:c1: 14:67:c5:73:5c:ff:fb:11:17:bd:72:07:d6:91:4a: 2d:31:d4:eb:1e:57:19:1e:cf:2a:b0:1c:3e:5d:23: 91:63:01:d8:a3:2b:41:d3:08:cf:6a:91:d0:3d:4e: 79:47:20:bd:84:67:ce:b5:e2:51:47:94:5b:62:93: 3f:6d:38:10:e2:5a:df:2b:21:5d:58:dc:71:4b:49: a5:eb:a0:8b:93:72:de:90:56:e7:05:61:6c:cc:12: f0:b3:01:29:e8:11:ad:76:c8:34:a6:2c:04:d8:6d: d1:24:22:d9:bc:53:01:97:26:1f:be:dc:65:2b:6f: c7:bf:73:3d:97:19:99:29:c4:76:88:5c:28:2c:42: f8:e8:5a:b2:c4:27:41:67:b1:6b:3d:7d:eb:53:7e: 6d:61:b5:7f:b6:f2:68:05:72:a9:4b:b6:2f:2e:ca: c8:96:33:d4:ac:7f:39:6d:36:89:17:f2:d5:2f:da: 6f:c4:64:43:0e:4f:e3:17:b0:43:26:eb:e7:90:3a: a1:6e:4d:0f:a5:18:03:ea:0a:35:1b:30:35:03:4a: b9:6f:d9:b3:86:58:3a:a3:c5:1f:33:96:2d:e2:82: 49:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7E:D7:68:93:C5:D4:A9:C5:E1:12:37:77:1A:1C:F4:1E:BD:4F:47 X509v3 Authority Key Identifier: keyid:55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:8f:9a:40:66:56:ef:5b:dd:75:b2:07:37:95:e3:23:58:54: fd:82:83:8a:1a:6e:e8:0b:52:45:53:0e:e6:33:3d:50:fa:67: a9:bd:dd:ad:db:94:7b:12:fd:78:b5:a4:5a:6a:ac:c8:d4:d1: 01:1c:ea:f1:c2:12:df:5d:43:03:47:ae:e0:3f:78:63:93:8c: dd:71:29:92:ed:ac:34:0b:7c:ef:6d:90:6a:91:76:b2:50:7f: ef:ac:46:2f:10:0e:47:b4:81:d9:34:e3:8c:b8:d9:59:80:aa: 82:fb:cf:50:1b:c5:03:46:f0:d6:cf:3a:c6:8b:20:ae:07:65: 4c:51:db:2c:4a:cf:96:6b:0e:bb:ee:3c:35:30:35:9c:5b:9f: f2:c8:0c:1a:9f:2d:0c:af:fd:21:2a:8d:05:20:f8:ed:bb:03: 4f:ca:00:0a:a3:8b:e4:0d:e0:de:89:09:4a:43:0d:2e:07:d5: 76:59:a6:26:48:00:b0:37:07:2b:46:dd:73:8d:f0:b1:6e:20: 1e:fe:da:47:7d:44:8c:57:cc:c6:de:39:9b:1a:1f:58:87:80: 76:8f:7c:cc:9c:ca:35:36:71:cf:16:b4:0b:14:bb:b1:86:e2: 0e:64:93:e0:fc:1b:fe:3b:17:a6:a0:89:77:63:21:e2:39:6d: 95:43:35:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4NzgxMTAvBgNVBAUTKDU1RjJFOURCMjgzQ0I0NTlFMjY2NjhGOTIyNEYyNkIz QTJBNDQ2NEUwHhcNMjUwNzA0MjMzMzQ3WhcNMjUwNzExMjMzMzQ3WjAYMRYwFAYD VQQDEw02ODY4NjRkYy1kZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcqX1OKDFXp9e0mG+Mqo+gCseD+oJfH9kFHv68EUZ8VzXP/7ERe9cgfWkUot MdTrHlcZHs8qsBw+XSORYwHYoytB0wjPapHQPU55RyC9hGfOteJRR5RbYpM/bTgQ 4lrfKyFdWNxxS0ml66CLk3LekFbnBWFszBLwswEp6BGtdsg0piwE2G3RJCLZvFMB lyYfvtxlK2/Hv3M9lxmZKcR2iFwoLEL46FqyxCdBZ7FrPX3rU35tYbV/tvJoBXKp S7YvLsrIljPUrH85bTaJF/LVL9pvxGRDDk/jF7BDJuvnkDqhbk0PpRgD6go1GzA1 A0q5b9mzhlg6o8UfM5Yt4oJJVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1+12iT xdSpxeESN3caHPQevU9HMB8GA1UdIwQYMBaAFFXy6dsoPLRZ4mZo+SJPJrOipEZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjg3OC9CRUQ4MzY2NkNE MTExMUVCQkM5MzVGMTZDNEY5QUUwMi9WZkxwMnlnOHRGbmlabWo1SWs4bXM2S2tS azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZmTHAyeWc4dEZuaVptajVJazhtczZLa1JrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjg3OC9CRUQ4MzY2NkNEMTExMUVCQkM5MzVGMTZDNEY5QUUwMi9WZkxwMnlnOHRG bmlabWo1SWs4bXM2S2tSazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+j5pAZlbvW911sgc3leMjWFT9goOKGm7oC1JFUw7mMz1Q+mepvd2t 25R7Ev14taRaaqzI1NEBHOrxwhLfXUMDR67gP3hjk4zdcSmS7aw0C3zvbZBqkXay UH/vrEYvEA5HtIHZNOOMuNlZgKqC+89QG8UDRvDWzzrGiyCuB2VMUdssSs+Waw67 7jw1MDWcW5/yyAwany0Mr/0hKo0FIPjtuwNPygAKo4vkDeDeiQlKQw0uB9V2WaYm SACwNwcrRt1zjfCxbiAe/tpHfUSMV8zG3jmbGh9Yh4B2j3zMnMo1NnHPFrQLFLux huIOZJPg/Bv+OxemoIl3YyHiOW2VQzU7 -----END CERTIFICATE-----Generated at Sat Jul 5 01:54:23 2025 by rpki-client