$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft File: vFNsAPhfWQQdnEwpYfciQr9g1R4.mft (raw, json) Hash identifier: 6bFJCTdCASAVKCJjfTUf70rmzvk/ongp71d4wfEFX9M= Subject key identifier: BD:A2:38:3E:88:2E:EC:3E:3C:B0:48:3C:60:F5:EF:19:59:0E:1D:B8 Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Certificate serial: 126C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft Manifest number: 1237 Signing time: Wed 02 Jul 2025 17:21:17 +0000 Manifest this update: Wed 02 Jul 2025 17:21:16 +0000 Manifest next update: Wed 09 Jul 2025 17:21:16 +0000 Files and hashes: 1: vFNsAPhfWQQdnEwpYfciQr9g1R4.crl (hash: NVkid8F5xKithTOwYbBCJKLSDg3O7+7e61o62aRiSNs=) 2: DA505546B74C11ED916B5A6AC4F9AE02.roa (hash: 9RHwtONKgQdHSDennn4HM2Ikhdy+C6zf57qmecAxamQ=) 3: 3A9AD3CEDAD411EBB35DA50AC4F9AE02.roa (hash: EztUCIPqk3y/a6AcLfvax6DUhCHP6l9BEvQIvIo9iws=) 4: E0ACCAC4ECD211EFA6C15823C4F9AE02.roa (hash: /d3XQ565KopoANcg+pwgBZqGoqy8+pW8EGFbyyXXzys=) 5: 57A84138605911EE8ABC9318C4F9AE02.roa (hash: acU+THblHTmNuI3hvXPa2l7l+23XT3W88AntJDw2zgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4716 (0x126c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Validity Not Before: Jul 2 17:21:16 2025 GMT Not After : Jul 9 17:21:16 2025 GMT Subject: CN=68656a8d-9ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f0:70:61:18:f8:12:3e:dd:30:68:17:64:fc: 40:82:04:ac:ca:eb:40:f8:12:bd:9f:6f:90:be:fa: a2:6b:79:c1:a6:6c:c3:3a:e2:a7:d4:d4:44:81:63: 9a:d0:f6:5b:61:d2:b7:aa:8a:e8:55:d0:20:f5:a9: da:df:8a:0c:0d:19:56:44:89:ae:ba:99:19:55:0e: ad:79:96:89:cf:20:cb:92:a8:29:94:48:34:61:85: 3e:d1:e5:ba:18:23:2e:d7:97:9e:46:c3:d1:27:9d: 6b:f0:ea:b9:ee:21:3d:6a:02:0d:22:d8:6f:36:72: 6b:51:1b:84:82:47:3a:33:42:8b:0f:5e:eb:60:74: d6:9d:a5:e6:60:3f:54:17:19:42:3a:8d:e9:24:1d: 70:cb:77:18:56:a3:5a:83:6a:cd:0e:37:6b:3d:9c: 21:13:bf:99:8d:9b:3d:53:62:e7:78:75:fe:41:47: cc:27:93:6e:82:fb:03:bf:31:cc:c0:44:a4:64:8b: d3:d8:8f:36:75:4d:8a:31:e2:36:27:e9:72:b2:ea: ba:34:24:1d:07:fd:43:5a:a4:a2:ba:54:f3:1f:cf: 8a:e7:e3:5d:61:39:e1:14:4e:8a:24:c1:2c:15:f0: d4:78:7d:66:aa:23:ea:70:61:66:24:db:a4:94:39: 73:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A2:38:3E:88:2E:EC:3E:3C:B0:48:3C:60:F5:EF:19:59:0E:1D:B8 X509v3 Authority Key Identifier: keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:75:db:09:90:26:cf:ad:b2:06:a1:4a:b3:a7:4c:2f:74:52: a5:05:de:13:34:35:05:4d:5e:dd:a8:8e:30:c8:76:d2:7e:54: a6:cc:aa:a8:f3:0d:87:36:e0:cf:35:c0:62:5d:d5:5c:3a:22: 24:59:9f:8d:6a:ea:9d:cc:71:bf:78:b6:07:29:7f:25:93:b4: 7d:92:59:b0:b7:8f:5f:57:88:7c:04:be:4c:5a:b5:24:e6:ee: b9:c7:70:f4:63:3f:28:7e:2c:63:9a:dc:2b:b2:12:da:4a:1c: 36:39:61:96:b8:24:28:b1:4e:eb:17:89:15:5b:ae:1a:81:ec: 93:91:ce:b1:b4:fd:c7:68:a4:93:29:f9:42:21:0e:24:44:62: 73:ae:fd:d3:09:8d:3e:f5:d6:26:27:36:88:36:56:a4:04:58: a3:68:41:e9:12:21:58:72:d3:7a:08:ac:2c:54:51:96:7a:6c: b3:f4:ab:48:29:4f:19:c2:a6:62:cc:8c:cd:2f:36:e8:c6:5e: 6c:02:62:86:aa:8e:f6:01:97:0b:1e:9e:9f:8b:f6:6f:21:01: 5c:7b:fc:03:ed:02:f6:42:ba:ee:83:01:b8:62:36:17:a3:be: 3d:00:54:5f:f2:df:bd:a1:f4:49:40:09:17:34:cb:06:81:88: 38:db:98:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy QkY2MEQ1MUUwHhcNMjUwNzAyMTcyMTE2WhcNMjUwNzA5MTcyMTE2WjAYMRYwFAYD VQQDEw02ODY1NmE4ZC05YWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/BwYRj4Ej7dMGgXZPxAggSsyutA+BK9n2+Qvvqia3nBpmzDOuKn1NREgWOa 0PZbYdK3qoroVdAg9ana34oMDRlWRImuupkZVQ6teZaJzyDLkqgplEg0YYU+0eW6 GCMu15eeRsPRJ51r8Oq57iE9agINIthvNnJrURuEgkc6M0KLD17rYHTWnaXmYD9U FxlCOo3pJB1wy3cYVqNag2rNDjdrPZwhE7+ZjZs9U2LneHX+QUfMJ5NugvsDvzHM wESkZIvT2I82dU2KMeI2J+lysuq6NCQdB/1DWqSiulTzH8+K5+NdYTnhFE6KJMEs FfDUeH1mqiPqcGFmJNuklDlzWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2iOD6I Luw+PLBIPGD17xlZDh24MB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5 NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDg2MC9CNDAxQzk4MkU5NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldR UWRuRXdwWWZjaVFyOWcxUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgddsJkCbPrbIGoUqzp0wvdFKlBd4TNDUFTV7dqI4wyHbSflSmzKqo 8w2HNuDPNcBiXdVcOiIkWZ+NauqdzHG/eLYHKX8lk7R9klmwt49fV4h8BL5MWrUk 5u65x3D0Yz8ofixjmtwrshLaShw2OWGWuCQosU7rF4kVW64ageyTkc6xtP3HaKST KflCIQ4kRGJzrv3TCY0+9dYmJzaINlakBFijaEHpEiFYctN6CKwsVFGWemyz9KtI KU8ZwqZizIzNLzboxl5sAmKGqo72AZcLHp6fi/ZvIQFce/wD7QL2QrrugwG4YjYX o749AFRf8t+9ofRJQAkXNMsGgYg425if -----END CERTIFICATE-----Generated at Thu Jul 3 08:13:53 2025 by rpki-client