$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft File: VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft (raw, json) Hash identifier: kcGR0DHDwbTmXswPA3a4fcNPtYeCe/qBoBhshpCWfxs= Subject key identifier: A2:B8:08:88:B5:DE:7B:49:C1:D0:4D:FC:30:6F:FC:76:07:DA:E0:D0 Authority key identifier: 54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 Certificate issuer: /CN=A916DAC0/serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft Manifest number: FA Signing time: Thu 03 Jul 2025 05:23:35 +0000 Manifest this update: Thu 03 Jul 2025 05:23:34 +0000 Manifest next update: Thu 10 Jul 2025 05:23:34 +0000 Files and hashes: 1: VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl (hash: G/7nIdhFRotnxSJgyMjLIg2XIklHHidn3cv8884H4Gc=) 2: 2C06DFA22C4C11EFB6974530C4F9AE02.roa (hash: x0R7/aV5SAgSCY1aeBWFVSWK6YKsQh3+SMh4O+dO85w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DAC0, serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Validity Not Before: Jul 3 05:23:34 2025 GMT Not After : Jul 10 05:23:34 2025 GMT Subject: CN=686613d6-bcc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:59:31:33:c1:08:74:02:e6:83:f3:f3:e9:fb: 7f:69:4f:28:bb:57:5a:66:87:9d:33:bb:11:1a:d1: 07:e5:fb:7a:ea:f5:0b:0f:49:6b:a5:18:5e:84:6f: 94:00:12:94:28:d1:7a:6b:66:b3:31:d6:38:43:fd: 0c:7c:8a:79:18:e4:80:78:3a:c0:09:bd:47:df:c1: 45:c5:cf:39:b6:4b:d4:66:50:80:22:7c:4e:33:5c: 1a:b4:66:b5:f9:33:eb:57:2a:13:04:d2:5b:e2:c2: cb:2a:fd:f5:5d:1b:11:38:62:be:40:46:31:6d:f4: 9c:ec:2e:6b:8e:ad:ce:4e:e9:df:df:d7:72:f0:92: e2:74:8b:19:0b:ca:00:87:23:d1:b3:f7:4e:dc:6f: 7c:04:44:c1:2c:c3:aa:c9:74:5c:89:d1:f2:59:25: 0d:5d:bb:c5:2a:76:cf:c9:5a:22:c2:5f:81:37:83: 2f:65:a3:82:5c:5f:e7:e5:61:59:2b:f6:64:6e:2c: 20:7a:0b:0e:16:73:fb:69:c4:03:68:88:e9:bc:05: 22:72:9b:e1:fa:60:f4:a8:19:74:6a:d8:9a:ed:89: fe:ae:06:2e:78:ff:08:60:5e:7a:54:10:5a:30:e2: 70:31:5c:ed:cb:ee:dd:1c:d8:69:07:ef:72:69:3e: 0b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B8:08:88:B5:DE:7B:49:C1:D0:4D:FC:30:6F:FC:76:07:DA:E0:D0 X509v3 Authority Key Identifier: keyid:54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:f7:e7:30:63:25:3b:cf:52:77:06:d3:d4:63:c8:b2:72:f1: 5d:83:2a:94:66:79:90:8a:e1:1b:40:4a:0b:2b:e7:75:14:37: 76:ea:e3:40:ab:6a:22:e8:c9:ba:87:a8:8b:1f:4f:f4:d0:80: d9:88:7c:6f:df:c8:d8:8f:c0:b2:7f:da:81:d8:e5:0a:6b:5b: 37:c1:4b:d9:66:5d:bf:60:00:07:79:ee:4a:03:d0:8b:39:0a: 47:6e:0b:54:14:80:bb:bb:1c:a5:84:3c:a6:97:5f:d3:f3:bb: 52:5d:64:2e:dc:dd:9a:77:5b:ed:b7:80:73:f7:93:c1:52:5d: 7c:38:8e:d3:77:fb:90:97:43:2e:c6:17:27:3d:0b:1c:9e:ec: a1:14:69:ec:61:0e:51:5f:3a:c4:c4:49:b9:1b:94:cb:d8:42: 02:2b:2e:94:ca:35:b8:35:4c:95:9b:cd:04:9f:66:15:2a:51: e1:d3:eb:85:0d:02:7f:ed:0b:15:45:a2:b2:ef:5a:94:70:91: 7a:c8:e9:b8:a7:1b:c3:50:05:e3:ce:b9:02:d3:5e:7d:f2:1e: be:08:67:53:f9:01:c8:5d:5e:30:86:15:fb:a8:ed:62:41:22: 8c:9d:a2:6f:55:d9:e7:9f:72:30:14:6a:0b:62:d4:e7:dd:8e: a7:ea:0f:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBQzAxMTAvBgNVBAUTKDU0Qjk2NkFEOEI1NzMxNjQxNjUyOTUwN0Y1QkNBOUMw MEUxMTgxQjkwHhcNMjUwNzAzMDUyMzM0WhcNMjUwNzEwMDUyMzM0WjAYMRYwFAYD VQQDEw02ODY2MTNkNi1iY2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFkxM8EIdALmg/Pz6ft/aU8ou1daZoedM7sRGtEH5ft66vULD0lrpRhehG+U ABKUKNF6a2azMdY4Q/0MfIp5GOSAeDrACb1H38FFxc85tkvUZlCAInxOM1watGa1 +TPrVyoTBNJb4sLLKv31XRsROGK+QEYxbfSc7C5rjq3OTunf39dy8JLidIsZC8oA hyPRs/dO3G98BETBLMOqyXRcidHyWSUNXbvFKnbPyVoiwl+BN4MvZaOCXF/n5WFZ K/ZkbiwgegsOFnP7acQDaIjpvAUicpvh+mD0qBl0atia7Yn+rgYueP8IYF56VBBa MOJwMVzty+7dHNhpB+9yaT4LZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKK4CIi1 3ntJwdBN/DBv/HYH2uDQMB8GA1UdIwQYMBaAFFS5Zq2LVzFkFlKVB/W8qcAOEYG5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REFDMC9FNzYzQUE4QURF ODgxMUVFOTNEOUE3NDRDNEY5QUUwMi9WTGxtcll0WE1XUVdVcFVIOWJ5cHdBNFJn YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZMbG1yWXRYTVdRV1VwVUg5Ynlwd0E0Umdiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REFDMC9FNzYzQUE4QURFODgxMUVFOTNEOUE3NDRDNEY5QUUwMi9WTGxtcll0WE1X UVdVcFVIOWJ5cHdBNFJnYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE9+cwYyU7z1J3BtPUY8iycvFdgyqUZnmQiuEbQEoLK+d1FDd26uNA q2oi6Mm6h6iLH0/00IDZiHxv38jYj8Cyf9qB2OUKa1s3wUvZZl2/YAAHee5KA9CL OQpHbgtUFIC7uxylhDyml1/T87tSXWQu3N2ad1vtt4Bz95PBUl18OI7Td/uQl0Mu xhcnPQscnuyhFGnsYQ5RXzrExEm5G5TL2EICKy6UyjW4NUyVm80En2YVKlHh0+uF DQJ/7QsVRaKy71qUcJF6yOm4pxvDUAXjzrkC01598h6+CGdT+QHIXV4whhX7qO1i QSKMnaJvVdnnn3IwFGoLYtTn3Y6n6g/t -----END CERTIFICATE-----Generated at Thu Jul 3 07:00:12 2025 by rpki-client