$ rpki-client -vvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft File: vbWSaolrtlGg51QKOYzV7wcUFx8.mft (raw, json) Hash identifier: 7OT2+4tAdX1hJ0H7+MLaRD+Rz36jPmz8WMdHr6gtiiA= Subject key identifier: 21:38:43:9F:F2:54:08:A9:A9:64:CD:42:C4:B6:75:82:6D:39:2C:BB Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F Certificate issuer: /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Certificate serial: 0430 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft Manifest number: 042C Signing time: Tue 01 Jul 2025 00:53:58 +0000 Manifest this update: Tue 01 Jul 2025 00:53:58 +0000 Manifest next update: Tue 08 Jul 2025 00:53:58 +0000 Files and hashes: 1: vbWSaolrtlGg51QKOYzV7wcUFx8.crl (hash: s6QqhjwtEK6ZCO8ZbcfMeLvPO/b8quYfNlAynLHVm40=) 2: 66864FCE688011ECAA829E31C4F9AE02.roa (hash: w5bL3BxYC2VJUK/MoXPR18n/PN4tqZHifWiPk20fkzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1072 (0x430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A5CD, serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Validity Not Before: Jul 1 00:53:58 2025 GMT Not After : Jul 8 00:53:58 2025 GMT Subject: CN=686331a6-1b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c7:19:4c:91:b2:32:35:96:6d:4e:41:92:10: 54:0b:95:ee:50:ad:42:7a:92:21:e9:90:e7:7b:02: 2c:9b:22:f7:bc:1e:fe:19:ff:64:32:32:22:12:88: 74:36:65:04:d2:35:5d:b1:e2:13:bb:8a:8b:d7:a4: 36:6f:e9:09:39:b7:2e:0b:02:c8:e0:98:0c:30:bf: e8:79:94:62:f3:90:62:1a:ef:c8:5a:e8:80:c7:db: 29:cf:ca:7f:b1:06:00:8a:cd:9a:6c:27:2a:66:77: 9e:d8:ca:ef:36:a3:29:5b:47:7e:08:ae:fe:be:1f: d8:b8:97:47:4a:dc:d3:f6:16:f5:3f:26:3b:45:e7: d1:a1:d5:81:e7:f9:59:82:9d:ba:73:37:51:a2:d1: 44:83:1c:e7:27:ed:22:8e:91:fa:02:c2:25:e1:46: 15:c8:2a:c3:ed:57:00:7f:28:08:4c:3f:80:0c:cd: b7:ff:1e:c8:e7:60:ad:98:d0:1f:53:79:79:78:0b: 17:42:9a:d7:fb:f6:71:7b:82:5a:4a:f4:1a:25:7c: 7b:18:94:5f:0a:58:54:65:93:25:e4:9a:38:18:e8: d1:a5:7d:0a:c5:62:55:f1:4a:fd:52:12:42:3a:3c: 79:cc:c9:7c:6a:6e:c2:80:90:87:62:94:70:6b:2a: c1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:38:43:9F:F2:54:08:A9:A9:64:CD:42:C4:B6:75:82:6D:39:2C:BB X509v3 Authority Key Identifier: keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:a6:0a:05:72:90:48:dc:d6:d5:a5:09:fe:43:63:a8:d5:1b: 81:76:2c:28:f0:23:57:f4:13:3f:b2:41:d5:01:7e:2f:c1:66: b6:1a:20:b6:df:25:77:82:ee:39:df:d4:49:a1:26:7c:23:00: 20:c3:0c:1c:3e:dc:e8:36:39:8a:ba:64:b7:5c:d2:8c:5f:ed: 63:f3:43:e9:a2:8b:2d:81:cb:0f:12:63:7e:c5:2a:35:f6:4d: 2f:d4:b0:6c:b1:f3:43:d3:80:65:28:55:53:8d:34:20:68:56: 6f:ff:f5:ca:39:a0:95:d2:17:9b:b5:16:01:68:05:f1:b8:75: 06:eb:51:9b:de:87:71:45:c6:55:6f:e4:70:b7:7e:a5:57:b6: 4b:c4:e5:2a:3d:9f:13:69:f4:50:39:82:59:4b:c0:e9:8f:30: 04:67:8f:dc:9f:49:c9:9d:d7:b5:28:14:4d:91:d4:0c:f0:ad: a8:9d:af:3e:63:e4:48:88:e6:92:48:5e:9c:25:ad:4b:3e:fe: c2:b4:8f:b1:bf:6f:c0:fa:7f:07:86:d3:8d:da:1a:d6:53:a4: 36:44:5d:77:a8:29:e2:22:94:88:1b:c7:03:e3:9e:9d:40:49: 32:d4:67:aa:e0:d8:95:14:f7:d9:31:8c:59:93:46:1f:77:31: 78:c4:42:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1Q0QxMTAvBgNVBAUTKEJEQjU5MjZBODk2QkI2NTFBMEU3NTQwQTM5OENENUVG MDcxNDE3MUYwHhcNMjUwNzAxMDA1MzU4WhcNMjUwNzA4MDA1MzU4WjAYMRYwFAYD VQQDEw02ODYzMzFhNi0xYjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMcZTJGyMjWWbU5BkhBUC5XuUK1CepIh6ZDnewIsmyL3vB7+Gf9kMjIiEoh0 NmUE0jVdseITu4qL16Q2b+kJObcuCwLI4JgMML/oeZRi85BiGu/IWuiAx9spz8p/ sQYAis2abCcqZnee2MrvNqMpW0d+CK7+vh/YuJdHStzT9hb1PyY7RefRodWB5/lZ gp26czdRotFEgxznJ+0ijpH6AsIl4UYVyCrD7VcAfygITD+ADM23/x7I52CtmNAf U3l5eAsXQprX+/Zxe4JaSvQaJXx7GJRfClhUZZMl5Jo4GOjRpX0KxWJV8Ur9UhJC Ojx5zMl8am7CgJCHYpRwayrBKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCE4Q5/y VAipqWTNQsS2dYJtOSy7MB8GA1UdIwQYMBaAFL21kmqJa7ZRoOdUCjmM1e8HFBcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTVDRC8yOTQzNkZDRTY4 N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRsR2c1MVFLT1l6Vjd3Y1VG eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZiV1Nhb2xydGxHZzUxUUtPWXpWN3djVUZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTVDRC8yOTQzNkZDRTY4N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRs R2c1MVFLT1l6Vjd3Y1VGeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhpgoFcpBI3NbVpQn+Q2Oo1RuBdiwo8CNX9BM/skHVAX4vwWa2GiC2 3yV3gu4539RJoSZ8IwAgwwwcPtzoNjmKumS3XNKMX+1j80PpoostgcsPEmN+xSo1 9k0v1LBssfND04BlKFVTjTQgaFZv//XKOaCV0hebtRYBaAXxuHUG61Gb3odxRcZV b+Rwt36lV7ZLxOUqPZ8TafRQOYJZS8DpjzAEZ4/cn0nJnde1KBRNkdQM8K2ona8+ Y+RIiOaSSF6cJa1LPv7CtI+xv2/A+n8HhtON2hrWU6Q2RF13qCniIpSIG8cD456d QEky1Geq4NiVFPfZMYxZk0YfdzF4xEJw -----END CERTIFICATE-----Generated at Tue Jul 1 13:11:59 2025 by rpki-client