$ rpki-client -vvf rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft File: vxurTPDVSTDgAbctJPMLPtaK4rM.mft (raw, json) Hash identifier: HhAochTxXlmqBXvUUIgy1JRmZ2lghWTROpD8i6/4x0M= Subject key identifier: F4:64:E9:ED:04:C7:74:11:BE:FD:9C:61:AA:3C:F9:AB:D7:6E:82:C4 Authority key identifier: BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3 Certificate issuer: /CN=A916F95E/serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3 Certificate serial: 10C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft Manifest number: 10BF Signing time: Wed 02 Jul 2025 17:30:45 +0000 Manifest this update: Wed 02 Jul 2025 17:30:44 +0000 Manifest next update: Wed 09 Jul 2025 17:30:44 +0000 Files and hashes: 1: vxurTPDVSTDgAbctJPMLPtaK4rM.crl (hash: 3PanpRiiqYzb42MBG8B1zmhvxdMmJPUoIMvzHN0XxYU=) 2: 1BB160C225EB11E9ADD6867FC4F9AE02.roa (hash: lwN0HxFqk+P+paikgj5BShG8YqJ+QsducNmiygkfDAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4295 (0x10c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F95E, serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3 Validity Not Before: Jul 2 17:30:44 2025 GMT Not After : Jul 9 17:30:44 2025 GMT Subject: CN=68656cc4-240a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d4:85:79:10:3c:a1:9e:51:50:8f:f7:c0:5e: 5a:61:c7:02:41:29:9c:ad:0b:0a:72:d2:df:da:8b: a6:97:09:0c:83:92:ce:aa:f4:b0:ee:89:98:d4:ba: 31:27:d4:98:03:11:e9:dd:da:1b:c2:bc:0f:a4:48: 33:7b:14:3a:71:e7:4b:e3:60:d0:5f:78:20:0f:b3: ad:a9:a3:c1:7a:3b:8b:e7:82:4e:d1:a3:27:c6:98: c4:20:b3:7a:ef:f0:0e:2e:0e:03:de:eb:ed:c4:3e: 10:ba:8c:77:51:c0:22:2d:70:7e:60:fb:72:c8:95: c1:08:61:50:ab:f9:72:a4:78:a4:6d:47:ca:7c:95: 36:f1:aa:25:c9:ed:f6:07:75:10:01:42:31:d7:60: d6:56:fb:d3:4e:65:30:20:49:20:a4:c9:bb:09:36: 13:5e:bd:24:e6:a9:00:d1:18:61:eb:39:24:28:36: 76:4b:53:de:7b:77:80:79:dd:84:14:69:0d:08:a4: 80:b5:10:16:af:ca:cc:12:cf:73:55:42:f1:f3:fd: 15:6b:b9:9e:0c:13:e0:ae:6d:d4:0f:60:a2:b6:ea: 1b:de:9a:1e:c6:f2:ce:32:00:4e:80:b5:ae:31:5e: bb:6c:52:ad:d7:cb:84:1d:12:26:d3:0c:e6:36:17: 43:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:64:E9:ED:04:C7:74:11:BE:FD:9C:61:AA:3C:F9:AB:D7:6E:82:C4 X509v3 Authority Key Identifier: keyid:BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:4d:58:b9:63:70:da:71:4f:d1:c5:ac:9e:e4:39:02:6e:4c: 42:c6:dc:1f:12:8e:4e:74:29:21:36:18:8f:33:50:49:14:8d: f7:04:cf:67:c8:e7:ce:d6:c4:b8:72:c2:e8:3a:a1:50:d9:f7: ac:de:f6:d4:83:6c:57:49:39:61:af:cd:9a:a8:fd:be:43:6a: b5:9c:76:f2:ae:34:7d:66:6b:42:77:e8:40:94:1a:d0:fc:70: 12:01:01:45:59:00:d4:a8:25:64:ee:60:cf:57:71:b1:a6:68: ad:b0:be:8c:91:11:33:3e:22:9e:06:a0:b1:e5:8c:2c:8f:bc: 50:19:00:85:3d:ba:2f:e2:54:32:8b:a5:ad:ad:1b:62:c7:91: 18:a2:64:1c:f8:12:49:e5:0e:74:e3:e6:1c:e9:3a:0f:c9:d7: 25:6d:9c:38:75:5f:c4:55:19:90:25:f5:c9:91:d2:a1:52:d2: 83:90:34:8d:ef:01:64:c1:66:ef:00:c1:a6:7c:95:bf:d0:f2: 96:af:af:d9:3f:29:ff:80:bd:0f:00:c8:bc:86:a6:f3:11:a6: 04:3d:72:3a:75:af:07:66:6e:75:31:a0:fd:7d:17:ab:eb:4c: 96:77:15:4b:17:c9:03:56:75:e6:85:1c:a4:64:23:bb:19:4a: e6:81:d3:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY5NUUxMTAvBgNVBAUTKEJGMUJBQjRDRjBENTQ5MzBFMDAxQjcyRDI0RjMwQjNF RDY4QUUyQjMwHhcNMjUwNzAyMTczMDQ0WhcNMjUwNzA5MTczMDQ0WjAYMRYwFAYD VQQDEw02ODY1NmNjNC0yNDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztSFeRA8oZ5RUI/3wF5aYccCQSmcrQsKctLf2oumlwkMg5LOqvSw7omY1Lox J9SYAxHp3dobwrwPpEgzexQ6cedL42DQX3ggD7OtqaPBejuL54JO0aMnxpjEILN6 7/AOLg4D3uvtxD4Quox3UcAiLXB+YPtyyJXBCGFQq/lypHikbUfKfJU28aolye32 B3UQAUIx12DWVvvTTmUwIEkgpMm7CTYTXr0k5qkA0Rhh6zkkKDZ2S1Pee3eAed2E FGkNCKSAtRAWr8rMEs9zVULx8/0Va7meDBPgrm3UD2Cituob3poexvLOMgBOgLWu MV67bFKt18uEHRIm0wzmNhdDqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRk6e0E x3QRvv2cYao8+avXboLEMB8GA1UdIwQYMBaAFL8bq0zw1Ukw4AG3LSTzCz7WiuKz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Rjk1RS9CNzA4Nzk2ODI1 RTkxMUU5QkUzMUQ0N0RDNEY5QUUwMi92eHVyVFBEVlNURGdBYmN0SlBNTFB0YUs0 ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z4dXJUUERWU1REZ0FiY3RKUE1MUHRhSzRyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Rjk1RS9CNzA4Nzk2ODI1RTkxMUU5QkUzMUQ0N0RDNEY5QUUwMi92eHVyVFBEVlNU RGdBYmN0SlBNTFB0YUs0ck0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJTVi5Y3DacU/Rxaye5DkCbkxCxtwfEo5OdCkhNhiPM1BJFI33BM9n yOfO1sS4csLoOqFQ2fes3vbUg2xXSTlhr82aqP2+Q2q1nHbyrjR9ZmtCd+hAlBrQ /HASAQFFWQDUqCVk7mDPV3GxpmitsL6MkREzPiKeBqCx5Ywsj7xQGQCFPbov4lQy i6WtrRtix5EYomQc+BJJ5Q504+Yc6ToPydclbZw4dV/EVRmQJfXJkdKhUtKDkDSN 7wFkwWbvAMGmfJW/0PKWr6/ZPyn/gL0PAMi8hqbzEaYEPXI6da8HZm51MaD9fRer 60yWdxVLF8kDVnXmhRykZCO7GUrmgdOk -----END CERTIFICATE-----Generated at Wed Jul 2 19:44:53 2025 by rpki-client