$ rpki-client -vvf rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft File: _Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft (raw, json) Hash identifier: FDlgVokmBWunJ0Mp1m3wAckInwIk/nTXVfC8uaKlK1k= Subject key identifier: 5F:0D:FC:5C:07:B7:07:B4:0A:F2:7B:C9:9C:93:9B:A3:FA:CD:CC:11 Authority key identifier: FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F Certificate issuer: /CN=A916ACF5/serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft Manifest number: 9D Signing time: Thu 03 Jul 2025 06:32:59 +0000 Manifest this update: Thu 03 Jul 2025 06:32:58 +0000 Manifest next update: Thu 10 Jul 2025 06:32:58 +0000 Files and hashes: 1: _Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl (hash: O6kxun9BwEATDBIfLJh9BbLYkrIRknAGX+RBpuN5CJs=) 2: B538B552701211EFB6868329C4F9AE02.roa (hash: 29NsNsEH3hS+ytz7V80jP+Hgfwg6ZXrunR8Rxp6hBOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ACF5, serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F Validity Not Before: Jul 3 06:32:58 2025 GMT Not After : Jul 10 06:32:58 2025 GMT Subject: CN=6866241b-d360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:58:af:1e:80:79:07:b2:18:4a:63:8b:fe:f4: 06:58:2f:59:0d:8e:8e:7f:32:91:6a:59:7c:4f:50: 78:2e:86:ce:56:1b:98:7c:3a:fb:3f:d6:30:af:95: 56:12:6d:d0:8a:dd:9b:9c:25:d5:31:af:63:75:ce: 38:ce:a5:3e:47:38:18:9e:c9:c6:c4:bb:49:75:3e: 51:6f:5c:57:47:a3:64:be:92:de:3d:df:e9:25:fa: 7a:f3:95:56:0f:51:cc:3c:5d:e9:12:70:f2:44:83: 95:bb:a7:0a:73:a5:a3:00:ff:0b:1f:f9:2d:b2:a5: 21:f8:b5:84:8d:48:4c:0b:61:ed:96:a2:bb:59:a8: d2:e9:47:d2:ca:e8:38:c1:e0:46:1e:91:7a:cc:fa: a6:eb:b9:55:01:2f:81:1e:b1:94:92:97:49:0a:98: cc:1d:47:84:13:3e:06:f3:09:05:07:37:ba:98:67: b7:5e:26:c7:8f:e9:a7:d6:47:83:98:34:32:67:85: 51:fd:e4:04:5b:e7:6d:fe:68:79:bc:bb:42:51:98: b7:d9:a9:df:8d:04:66:9a:ab:d9:2b:ff:e1:39:42: 02:d3:fc:26:6e:ba:ad:31:e4:fa:7d:c3:70:59:77: 27:7c:44:22:6a:29:65:4d:cd:e5:c9:6a:3a:21:97: 86:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0D:FC:5C:07:B7:07:B4:0A:F2:7B:C9:9C:93:9B:A3:FA:CD:CC:11 X509v3 Authority Key Identifier: keyid:FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:32:ae:ab:3a:d1:64:28:ba:4c:e8:2f:1b:4e:07:0d:44:c6: 47:6f:89:6a:f7:be:df:58:07:58:2c:75:33:38:b9:03:3e:4a: 6e:be:c4:27:bc:2d:08:9a:70:ce:12:87:38:92:8a:07:87:b7: 0c:a2:e4:84:c7:de:4e:cd:6d:c7:7d:b9:41:e1:f6:32:3e:6c: e8:ba:ae:53:d0:2a:26:52:e2:96:c1:1a:0f:1a:b0:54:1f:0e: 63:c6:05:c8:f7:18:23:d0:34:b4:10:7d:8a:67:e2:38:89:a6: b1:99:a9:55:34:88:48:1e:ca:79:1d:1e:8e:9b:d7:93:e7:1f: 2b:5b:9e:fe:2d:17:08:ba:b4:03:19:5d:86:99:9c:d1:de:88: 05:c7:d9:31:b1:8e:41:9d:56:d5:9a:b2:9f:56:f3:e8:c3:97: 0d:0a:87:ae:2f:c2:b2:51:1d:9f:7d:26:f6:9d:07:75:ea:d6: f1:f8:d3:14:a8:3d:b1:95:2f:4a:22:a9:ee:ef:81:6d:0b:ef: c1:6f:18:3d:be:ef:81:af:ee:25:e2:22:48:7f:be:99:93:7c: 56:af:8c:19:ca:f0:21:ad:db:ea:4d:c3:98:72:de:98:13:64: 37:f7:81:e6:2a:12:67:d8:83:89:66:01:02:89:d9:26:29:97: 70:6e:50:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFDRjUxMTAvBgNVBAUTKEZENUEzRjVBMUYzMzU3NDRDMEMxNDJBQzQyMTdFQ0JD M0QyMENBMEYwHhcNMjUwNzAzMDYzMjU4WhcNMjUwNzEwMDYzMjU4WjAYMRYwFAYD VQQDEw02ODY2MjQxYi1kMzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1livHoB5B7IYSmOL/vQGWC9ZDY6OfzKRall8T1B4LobOVhuYfDr7P9Ywr5VW Em3Qit2bnCXVMa9jdc44zqU+RzgYnsnGxLtJdT5Rb1xXR6NkvpLePd/pJfp685VW D1HMPF3pEnDyRIOVu6cKc6WjAP8LH/ktsqUh+LWEjUhMC2HtlqK7WajS6UfSyug4 weBGHpF6zPqm67lVAS+BHrGUkpdJCpjMHUeEEz4G8wkFBze6mGe3XibHj+mn1keD mDQyZ4VR/eQEW+dt/mh5vLtCUZi32anfjQRmmqvZK//hOUIC0/wmbrqtMeT6fcNw WXcnfEQiaillTc3lyWo6IZeGcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8N/FwH twe0CvJ7yZyTm6P6zcwRMB8GA1UdIwQYMBaAFP1aP1ofM1dEwMFCrEIX7Lw9IMoP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUNGNS81QjMwQzQ5QTZG M0MxMUVGQjU4OTk2MTJDNEY5QUUwMi9fVm9fV2g4elYwVEF3VUtzUWhmc3ZEMGd5 ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Wb19XaDh6VjBUQXdVS3NRaGZzdkQwZ3lnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUNGNS81QjMwQzQ5QTZGM0MxMUVGQjU4OTk2MTJDNEY5QUUwMi9fVm9fV2g4elYw VEF3VUtzUWhmc3ZEMGd5ZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXMq6rOtFkKLpM6C8bTgcNRMZHb4lq977fWAdYLHUzOLkDPkpuvsQn vC0ImnDOEoc4kooHh7cMouSEx95OzW3HfblB4fYyPmzouq5T0ComUuKWwRoPGrBU Hw5jxgXI9xgj0DS0EH2KZ+I4iaaxmalVNIhIHsp5HR6Om9eT5x8rW57+LRcIurQD GV2GmZzR3ogFx9kxsY5BnVbVmrKfVvPow5cNCoeuL8KyUR2ffSb2nQd16tbx+NMU qD2xlS9KIqnu74FtC+/Bbxg9vu+Br+4l4iJIf76Zk3xWr4wZyvAhrdvqTcOYct6Y E2Q394HmKhJn2IOJZgECidkmKZdwblDy -----END CERTIFICATE-----Generated at Fri Jul 4 12:01:00 2025 by rpki-client