$ rpki-client -vvf rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft File: vPLIrbwz4n5cdnSmbahlv1qma-U.mft (raw, json) Hash identifier: LvGLxDEzZEgpO+/2xGkEdV6udHk3n46KGfga7oFqv04= Subject key identifier: 1C:01:BD:D8:86:97:63:B8:8E:B6:5E:27:B5:9E:2D:6C:A3:32:8A:8C Authority key identifier: BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5 Certificate issuer: /CN=A91619D8/serialNumber=BCF2C8ADBC33E27E5C7674A66DA865BF5AA66BE5 Certificate serial: 05AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft Manifest number: 0593 Signing time: Mon 30 Jun 2025 23:41:58 +0000 Manifest this update: Mon 30 Jun 2025 23:41:57 +0000 Manifest next update: Mon 07 Jul 2025 23:41:57 +0000 Files and hashes: 1: vPLIrbwz4n5cdnSmbahlv1qma-U.crl (hash: wjBtkRfyhUBhS/24Bwx7DFCdiwb7jAqUBjyjA8Tx1Y8=) 2: E7584B4C86A211EE9791E012C4F9AE02.roa (hash: RSFBrcUB82s0UoBxBM98+yUNvaLcAoEBour0Tf8ih9A=) 3: 7B40808086A411EE90BD604AC4F9AE02.roa (hash: lZVwUpYNNsT1fd9mbvv02JyhK4hGCQK4gwWy8e3HbXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.crl rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1452 (0x5ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91619D8, serialNumber=BCF2C8ADBC33E27E5C7674A66DA865BF5AA66BE5 Validity Not Before: Jun 30 23:41:57 2025 GMT Not After : Jul 7 23:41:57 2025 GMT Subject: CN=686320c5-d752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:68:0c:2b:47:e1:3e:fa:69:9a:f5:43:41:c8: 4d:98:29:26:dd:87:1b:3f:eb:76:0a:90:cd:19:d0: 63:af:c8:7c:b5:9c:bb:07:de:de:d0:3e:9b:7a:b0: ae:af:c3:43:62:f0:e8:3d:34:66:38:df:95:48:03: 70:e0:c7:29:90:de:b2:c8:bc:41:1e:a2:1a:57:da: a1:2c:83:dd:2e:1b:0e:98:eb:61:78:35:f4:4b:bf: 35:6d:db:01:1c:35:21:96:b1:0b:bb:b7:b4:b6:25: ba:3a:e6:50:9f:16:c7:66:8a:c8:d0:23:fa:70:51: e0:89:cc:8e:c6:9f:aa:9d:26:6b:16:93:ab:c7:26: 9f:40:e6:cb:20:f3:40:53:87:27:cc:41:06:c9:41: 33:e9:ed:17:c6:ed:3b:46:20:09:0e:fd:e4:ae:6c: a9:97:b9:dd:c5:0d:3d:ef:fc:f3:eb:de:c6:bb:6b: 15:92:c9:90:0f:3b:25:10:d0:8b:90:33:e8:27:6f: c2:15:d7:85:9e:32:ca:8b:fb:5d:b2:dd:6b:2c:c7: be:e0:fd:4c:b3:40:6f:4f:f2:5e:af:79:29:9c:e3: aa:c0:1c:8e:27:7c:2b:52:2a:17:fc:3e:90:f1:e5: 89:a8:74:42:b8:00:57:5a:b6:5d:1a:e0:9c:bd:7a: 95:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:01:BD:D8:86:97:63:B8:8E:B6:5E:27:B5:9E:2D:6C:A3:32:8A:8C X509v3 Authority Key Identifier: keyid:BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:b9:f9:dc:76:24:58:e9:47:72:0f:02:45:6b:50:8a:8c:79: 1e:53:de:ba:83:4d:94:94:6e:2e:e6:cd:36:d6:02:0c:53:50: de:ef:cb:53:f8:e5:1c:b6:40:8d:3e:05:49:4e:d5:76:75:25: cd:a7:15:f7:ae:6b:65:74:8e:22:41:07:a8:eb:55:1f:5a:7e: 9f:9f:57:9c:4f:b2:27:50:a3:42:0f:a8:71:9b:3a:1e:32:ea: 02:ff:95:d9:5e:bb:e4:2d:63:f1:fc:2d:6b:ea:9c:fd:e5:b1: 4b:54:d1:03:c0:f2:49:29:50:76:14:aa:20:eb:9c:38:80:d0: d0:51:57:f5:2e:b0:cd:0d:d5:1a:e0:e2:d2:6f:92:1c:c0:f7: 59:5c:3a:2b:d7:4a:25:04:16:d4:e7:42:44:4f:45:59:2d:6c: e0:a5:0c:85:43:b6:06:04:bd:3a:06:5c:7e:ee:60:64:b6:39: e4:93:f5:b6:bd:a2:80:e8:52:a0:59:0b:22:e5:f7:38:32:5a: 8c:cd:70:81:09:9c:81:59:0c:d6:9e:d2:74:45:89:5b:60:9d: c2:4d:3a:c7:b5:b3:5c:4b:17:46:87:68:c5:b6:6e:24:8a:47: 81:50:11:cd:0c:94:19:cd:37:e1:f7:0f:23:00:f1:26:e9:1e: 5e:b5:90:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE5RDgxMTAvBgNVBAUTKEJDRjJDOEFEQkMzM0UyN0U1Qzc2NzRBNjZEQTg2NUJG NUFBNjZCRTUwHhcNMjUwNjMwMjM0MTU3WhcNMjUwNzA3MjM0MTU3WjAYMRYwFAYD VQQDEw02ODYzMjBjNS1kNzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmgMK0fhPvppmvVDQchNmCkm3YcbP+t2CpDNGdBjr8h8tZy7B97e0D6berCu r8NDYvDoPTRmON+VSANw4McpkN6yyLxBHqIaV9qhLIPdLhsOmOtheDX0S781bdsB HDUhlrELu7e0tiW6OuZQnxbHZorI0CP6cFHgicyOxp+qnSZrFpOrxyafQObLIPNA U4cnzEEGyUEz6e0Xxu07RiAJDv3krmypl7ndxQ097/zz697Gu2sVksmQDzslENCL kDPoJ2/CFdeFnjLKi/tdst1rLMe+4P1Ms0BvT/Jer3kpnOOqwByOJ3wrUioX/D6Q 8eWJqHRCuABXWrZdGuCcvXqVEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwBvdiG l2O4jrZeJ7WeLWyjMoqMMB8GA1UdIwQYMBaAFLzyyK28M+J+XHZ0pm2oZb9apmvl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTlEOC8zNTU4RDFDNkU0 M0ExMUVCQUM4RDUwMUFDNEY5QUUwMi92UExJcmJ3ejRuNWNkblNtYmFobHYxcW1h LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQTElyYnd6NG41Y2RuU21iYWhsdjFxbWEtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTlEOC8zNTU4RDFDNkU0M0ExMUVCQUM4RDUwMUFDNEY5QUUwMi92UExJcmJ3ejRu NWNkblNtYmFobHYxcW1hLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApufncdiRY6UdyDwJFa1CKjHkeU966g02UlG4u5s021gIMU1De78tT +OUctkCNPgVJTtV2dSXNpxX3rmtldI4iQQeo61UfWn6fn1ecT7InUKNCD6hxmzoe MuoC/5XZXrvkLWPx/C1r6pz95bFLVNEDwPJJKVB2FKog65w4gNDQUVf1LrDNDdUa 4OLSb5IcwPdZXDor10olBBbU50JET0VZLWzgpQyFQ7YGBL06Blx+7mBktjnkk/W2 vaKA6FKgWQsi5fc4MlqMzXCBCZyBWQzWntJ0RYlbYJ3CTTrHtbNcSxdGh2jFtm4k ikeBUBHNDJQZzTfh9w8jAPEm6R5etZD9 -----END CERTIFICATE-----Generated at Wed Jul 2 19:16:13 2025 by rpki-client