$ rpki-client -vvf rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft File: vbEpSPLgeJsV8C1ROboGsjBqKOc.mft (raw, json) Hash identifier: wnEwqF/dIMMS9ZRCsGKMuMw5UH8EkhY1rkbC9KYuhak= Subject key identifier: FA:D2:86:59:3C:BA:BE:D0:5A:D3:8E:62:6F:BD:EF:AF:A9:BA:3E:0C Authority key identifier: BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7 Certificate issuer: /CN=A91649F9/serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7 Certificate serial: 0507 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft Manifest number: 0500 Signing time: Tue 01 Jul 2025 00:05:53 +0000 Manifest this update: Tue 01 Jul 2025 00:05:52 +0000 Manifest next update: Tue 08 Jul 2025 00:05:52 +0000 Files and hashes: 1: vbEpSPLgeJsV8C1ROboGsjBqKOc.crl (hash: sIkhTxt7Q7d3tnq2/0KCHZygdoG0Ya7CYH2D0tsu3Vw=) 2: 9CC8124414FB11EC89900016C4F9AE02.roa (hash: Mu5DpSvcAvLSAvKYi5dzkCjd+xb0gmYIGSkhKtbIqg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1287 (0x507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91649F9, serialNumber=BDB12948F2E0789B15F02D5139BA06B2306A28E7 Validity Not Before: Jul 1 00:05:52 2025 GMT Not After : Jul 8 00:05:52 2025 GMT Subject: CN=68632660-6940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:ce:f0:88:b4:2f:37:4d:ec:b4:cb:06:e5: a4:99:b2:65:ab:68:73:65:34:55:62:fb:be:ec:9e: 35:92:0e:cb:f3:63:43:23:e5:88:14:e4:e0:80:78: 70:5a:14:05:a7:02:c1:d5:68:07:c7:a6:1f:e2:b5: 6e:93:90:d1:4b:70:02:99:37:79:84:67:4d:28:31: c9:a2:a8:4a:93:f9:3e:57:ce:1f:fb:db:0d:44:8b: 71:44:43:c3:f2:6a:42:90:9a:71:a7:9d:12:33:f8: a2:72:be:ba:6c:31:4f:89:93:31:f1:18:a0:50:9d: 9e:2b:57:d5:be:07:4e:30:8a:ec:ed:e1:03:d8:01: 8b:e4:29:9b:fc:53:d0:26:9b:e1:ce:20:7d:53:04: c7:54:1e:14:5a:b1:24:d8:ea:4c:45:4b:cf:58:98: 5d:70:37:63:e2:fa:3e:23:cd:6e:71:74:be:8a:4b: 6e:ad:ab:5b:03:3e:cf:b4:94:e6:d4:f8:ea:9e:1b: a6:34:16:b6:bf:de:b3:68:1a:c9:f5:d6:1a:33:23: 0a:8a:d5:7c:0e:01:6e:78:31:58:05:ab:e9:b6:ad: 2b:7c:2e:68:d1:b4:a8:90:49:62:e5:87:1e:b8:aa: 71:92:0b:7f:eb:8c:76:8d:42:32:a2:49:50:cc:53: 02:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D2:86:59:3C:BA:BE:D0:5A:D3:8E:62:6F:BD:EF:AF:A9:BA:3E:0C X509v3 Authority Key Identifier: keyid:BD:B1:29:48:F2:E0:78:9B:15:F0:2D:51:39:BA:06:B2:30:6A:28:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbEpSPLgeJsV8C1ROboGsjBqKOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91649F9/6C692AF414F911EC89435514C4F9AE02/vbEpSPLgeJsV8C1ROboGsjBqKOc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f6:76:66:4f:34:b6:a7:1f:a9:0b:ce:8a:92:0a:fe:a7:41: 67:cd:d0:56:bf:45:88:d9:27:e9:15:27:a8:f5:49:e8:dc:5f: c4:6f:3b:51:d6:16:ca:1c:5d:0e:21:9c:e2:c9:13:b8:b5:56: 24:3a:5c:77:9e:8c:f8:e4:b7:92:95:57:13:4e:f2:ea:80:6d: 31:26:08:52:e1:40:05:ee:20:31:19:86:06:14:9a:4f:a1:8c: d5:29:ef:91:40:2e:92:30:4f:27:f5:00:c5:9e:09:3a:f1:e8: 42:4b:ce:a5:e5:2b:59:f8:04:1b:61:f8:8d:13:4d:ec:1e:c2: f8:bc:a0:4d:61:10:9e:e1:a1:24:6f:3b:41:d1:22:e7:31:7f: 84:c1:c2:72:a1:0d:73:3a:a5:41:f4:76:0e:71:1d:48:61:c1: 0f:30:da:c8:28:93:b1:b4:30:76:39:bd:ce:ed:ae:92:8d:f0: aa:eb:e3:41:11:44:ce:fc:19:f5:59:28:6e:53:ce:a9:b1:6c: 57:12:37:c6:e5:90:14:ad:29:b7:67:f6:04:a9:8e:27:b9:3c: 72:7b:4c:f7:79:52:52:dd:f6:b8:39:f7:95:c3:46:1e:f8:1d: 54:4d:25:f4:db:c7:50:cf:40:a4:5a:07:d4:b2:f3:04:ca:71: 3c:46:2f:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ5RjkxMTAvBgNVBAUTKEJEQjEyOTQ4RjJFMDc4OUIxNUYwMkQ1MTM5QkEwNkIy MzA2QTI4RTcwHhcNMjUwNzAxMDAwNTUyWhcNMjUwNzA4MDAwNTUyWjAYMRYwFAYD VQQDEw02ODYzMjY2MC02OTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUTO8Ii0LzdN7LTLBuWkmbJlq2hzZTRVYvu+7J41kg7L82NDI+WIFOTggHhw WhQFpwLB1WgHx6Yf4rVuk5DRS3ACmTd5hGdNKDHJoqhKk/k+V84f+9sNRItxREPD 8mpCkJpxp50SM/iicr66bDFPiZMx8RigUJ2eK1fVvgdOMIrs7eED2AGL5Cmb/FPQ JpvhziB9UwTHVB4UWrEk2OpMRUvPWJhdcDdj4vo+I81ucXS+ikturatbAz7PtJTm 1PjqnhumNBa2v96zaBrJ9dYaMyMKitV8DgFueDFYBavptq0rfC5o0bSokEli5Yce uKpxkgt/64x2jUIyoklQzFMCSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrShlk8 ur7QWtOOYm+976+puj4MMB8GA1UdIwQYMBaAFL2xKUjy4HibFfAtUTm6BrIwaijn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDlGOS82QzY5MkFGNDE0 RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VKc1Y4QzFST2JvR3NqQnFL T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZiRXBTUExnZUpzVjhDMVJPYm9Hc2pCcUtPYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDlGOS82QzY5MkFGNDE0RjkxMUVDODk0MzU1MTRDNEY5QUUwMi92YkVwU1BMZ2VK c1Y4QzFST2JvR3NqQnFLT2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb9nZmTzS2px+pC86Kkgr+p0FnzdBWv0WI2SfpFSeo9Uno3F/EbztR 1hbKHF0OIZziyRO4tVYkOlx3noz45LeSlVcTTvLqgG0xJghS4UAF7iAxGYYGFJpP oYzVKe+RQC6SME8n9QDFngk68ehCS86l5StZ+AQbYfiNE03sHsL4vKBNYRCe4aEk bztB0SLnMX+EwcJyoQ1zOqVB9HYOcR1IYcEPMNrIKJOxtDB2Ob3O7a6SjfCq6+NB EUTO/Bn1WShuU86psWxXEjfG5ZAUrSm3Z/YEqY4nuTxye0z3eVJS3fa4OfeVw0Ye +B1UTSX028dQz0CkWgfUsvMEynE8Ri+F -----END CERTIFICATE-----Generated at Tue Jul 1 22:37:25 2025 by rpki-client