$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft File: vcSlFjMX9zCX8CejQrhgp5LX8dw.mft (raw, json) Hash identifier: BW2m1EAvIorvGn37PwEpWXui9iItcqfdemEfwjNGsmQ= Subject key identifier: 75:23:3A:1C:A6:08:F4:C1:A4:BF:41:7B:4B:2A:22:8C:C5:8E:AF:47 Authority key identifier: BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC Certificate issuer: /CN=A9179F64/serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft Manifest number: A3 Signing time: Tue 01 Jul 2025 06:58:40 +0000 Manifest this update: Tue 01 Jul 2025 06:58:39 +0000 Manifest next update: Tue 08 Jul 2025 06:58:39 +0000 Files and hashes: 1: vcSlFjMX9zCX8CejQrhgp5LX8dw.crl (hash: BKJyfmcaFSPsvVeTKd8Sas4aJsaKCdFtBc/bfnEAIkg=) 2: AB4A60EECBA311EFB9E20E13C4F9AE02.roa (hash: Xcy4MFhRyr2k/5Jm4R5iv0t1VBaS/P+wq9LQCj1UUVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F64, serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC Validity Not Before: Jul 1 06:58:39 2025 GMT Not After : Jul 8 06:58:39 2025 GMT Subject: CN=6863871f-9a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ec:5d:ec:cf:17:6e:b3:c2:c1:e9:0f:22:11: a9:31:ab:ef:0c:91:f0:75:ba:75:f7:23:ca:92:90: 41:74:f5:16:76:27:1a:df:1a:81:3d:50:72:3b:2f: 80:de:5d:1a:aa:e9:4c:58:15:2e:38:05:12:e9:63: 22:99:e0:2b:cf:2c:73:78:a2:2d:72:0d:b1:90:8d: 56:4c:1f:7b:67:90:00:f0:15:b7:73:a2:20:b3:0b: 84:88:ef:a1:32:a4:dd:39:43:23:8e:ac:76:11:c5: da:00:f3:70:73:72:80:89:e8:52:5a:41:6c:f3:41: 4d:e2:82:a1:82:9b:6a:52:02:55:2c:ee:f2:95:28: 2e:a4:73:92:96:b1:f5:e2:41:bc:41:38:8b:cc:f9: e7:94:d4:71:f3:cb:41:98:5c:3e:92:9c:f2:e6:9e: d7:73:db:c4:8e:a6:6b:a6:65:9b:9c:14:c8:b9:40: e3:18:30:4a:19:76:da:ee:34:2e:36:89:7d:96:61: 8f:8c:24:8e:32:20:35:38:a9:f2:b3:31:d8:c6:46: be:ab:3b:89:3d:b5:62:9d:cd:60:d2:64:66:2e:6e: 75:28:27:c9:3f:60:9b:64:16:26:39:92:88:50:8f: b2:d1:51:f9:72:ab:53:43:bc:dc:2f:34:b5:f1:8f: be:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:23:3A:1C:A6:08:F4:C1:A4:BF:41:7B:4B:2A:22:8C:C5:8E:AF:47 X509v3 Authority Key Identifier: keyid:BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:b9:9b:a0:49:f8:df:b2:7c:fb:71:d6:fb:e9:61:5e:db:f7: f7:d6:a2:1d:ea:66:12:74:8b:92:e6:61:02:3c:f3:64:51:65: fe:d7:ee:e3:8b:0b:b8:cc:b4:74:20:b6:a4:b4:a7:b6:57:f2: bc:41:a7:cc:fc:19:cb:d5:19:af:a0:a8:fb:cb:1b:b9:66:20: 49:ae:16:84:e0:90:af:70:d7:1d:07:53:23:69:57:55:01:dc: 8c:0d:fd:5a:d6:2d:23:93:e9:42:1f:15:aa:d5:fd:92:7e:27: d0:71:71:b5:61:5f:c7:92:15:56:9e:4b:2e:e8:bc:f1:b8:68: d8:92:ac:90:af:88:3c:85:de:d5:91:28:e1:59:b2:73:8c:e1: 17:24:68:9c:d1:17:23:b6:14:aa:2c:96:c9:08:9b:c0:94:f9: 73:63:d6:7c:d3:88:e2:be:19:88:11:62:cd:1b:51:d2:72:ca: d1:47:13:b4:b3:79:84:0f:c0:74:cc:89:0c:5a:5c:9b:86:bd: d8:71:90:09:59:c3:7c:46:f8:2f:06:e5:c8:3a:a7:81:9d:9b: 1b:cf:4c:b4:0b:3b:c6:49:c0:ba:41:96:d4:69:2b:93:73:db: 7b:c3:ae:b1:aa:e5:3d:06:9b:58:59:da:70:cd:a9:e5:ea:7c: 1b:9c:c1:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGNjQxMTAvBgNVBAUTKEJEQzRBNTE2MzMxN0Y3MzA5N0YwMjdBMzQyQjg2MEE3 OTJEN0YxREMwHhcNMjUwNzAxMDY1ODM5WhcNMjUwNzA4MDY1ODM5WjAYMRYwFAYD VQQDEw02ODYzODcxZi05YTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Oxd7M8XbrPCwekPIhGpMavvDJHwdbp19yPKkpBBdPUWdica3xqBPVByOy+A 3l0aqulMWBUuOAUS6WMimeArzyxzeKItcg2xkI1WTB97Z5AA8BW3c6IgswuEiO+h MqTdOUMjjqx2EcXaAPNwc3KAiehSWkFs80FN4oKhgptqUgJVLO7ylSgupHOSlrH1 4kG8QTiLzPnnlNRx88tBmFw+kpzy5p7Xc9vEjqZrpmWbnBTIuUDjGDBKGXba7jQu Nol9lmGPjCSOMiA1OKnyszHYxka+qzuJPbVinc1g0mRmLm51KCfJP2CbZBYmOZKI UI+y0VH5cqtTQ7zcLzS18Y++jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUjOhym CPTBpL9Be0sqIozFjq9HMB8GA1UdIwQYMBaAFL3EpRYzF/cwl/Ano0K4YKeS1/Hc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2NC84MDkzODQ2NDYy NEIxMUVGQUIxMjBGNEZDNEY5QUUwMi92Y1NsRmpNWDl6Q1g4Q2VqUXJoZ3A1TFg4 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZjU2xGak1YOXpDWDhDZWpRcmhncDVMWDhkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUY2NC84MDkzODQ2NDYyNEIxMUVGQUIxMjBGNEZDNEY5QUUwMi92Y1NsRmpNWDl6 Q1g4Q2VqUXJoZ3A1TFg4ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQuZugSfjfsnz7cdb76WFe2/f31qId6mYSdIuS5mECPPNkUWX+1+7j iwu4zLR0ILaktKe2V/K8QafM/BnL1RmvoKj7yxu5ZiBJrhaE4JCvcNcdB1MjaVdV AdyMDf1a1i0jk+lCHxWq1f2SfifQcXG1YV/HkhVWnksu6LzxuGjYkqyQr4g8hd7V kSjhWbJzjOEXJGic0RcjthSqLJbJCJvAlPlzY9Z804jivhmIEWLNG1HScsrRRxO0 s3mED8B0zIkMWlybhr3YcZAJWcN8RvgvBuXIOqeBnZsbz0y0CzvGScC6QZbUaSuT c9t7w66xquU9BptYWdpwzanl6nwbnMGL -----END CERTIFICATE-----Generated at Thu Jul 3 05:14:32 2025 by rpki-client