$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft File: VN6ZlQt_yVgf6KyWHze3iY81zcM.mft (raw, json) Hash identifier: r2B1gFKkIuP88Y2+IMU45YdgCaD/hTZyqmqGifw3Ak4= Subject key identifier: 13:6E:34:CC:1B:4A:91:BC:CF:D8:E5:32:8B:34:A1:2A:7D:F2:8D:2B Authority key identifier: 54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3 Certificate issuer: /CN=A917E458/serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft Manifest number: 19 Signing time: Thu 03 Jul 2025 08:11:45 +0000 Manifest this update: Thu 03 Jul 2025 08:11:44 +0000 Manifest next update: Thu 10 Jul 2025 08:11:44 +0000 Files and hashes: 1: VN6ZlQt_yVgf6KyWHze3iY81zcM.crl (hash: IMJ1UJpSQd2y1JXqRnu7oC2rqQv2odRFla69HfIboeM=) 2: 9A014CF430D811F0A444B26EC4F9AE02.roa (hash: C8ptyGvwWlQzeSGOofAg4DZdLAMRxqC9y9f9rO1gP40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E458, serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3 Validity Not Before: Jul 3 08:11:44 2025 GMT Not After : Jul 10 08:11:44 2025 GMT Subject: CN=68663b41-e335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:74:40:a8:a9:d7:44:9a:1c:70:2e:17:ff:fa: 2e:d7:57:bd:4e:f2:7f:46:c2:ce:49:9e:f2:43:f7: 9a:b0:84:d6:a2:3c:38:66:c8:7a:88:25:00:3e:b8: 64:97:95:2a:c3:13:62:11:3c:4a:1a:5e:05:c3:1a: b5:28:82:05:0e:ce:e1:de:d0:c0:a5:a2:c2:27:8d: f7:67:81:aa:88:b6:4e:60:be:01:45:d1:9f:66:a3: e0:d4:07:f3:04:8c:67:eb:75:1b:6f:91:49:8a:d9: 4b:f5:77:aa:7c:14:cb:c8:68:6d:0a:c2:c4:46:31: a8:7c:6a:ff:ca:33:03:0c:4e:07:1e:e6:cd:9a:9a: 4c:0c:11:b9:0a:9a:43:b9:84:95:ac:47:32:0b:d9: de:0a:5b:12:a7:f5:9c:4f:4d:d3:3f:d4:79:e9:f4: 88:6c:4b:7d:b3:ae:df:4f:2b:6b:48:fe:9b:d9:f5: f1:5d:00:3a:76:2f:42:38:fe:c2:42:ba:58:de:20: 4d:a3:2c:f9:49:0d:da:8c:36:2e:9f:2d:f9:1d:b4: f4:01:79:e2:56:5d:38:50:ba:82:e4:66:bd:45:40: ac:71:a2:e7:d9:10:63:a3:5e:a3:36:56:4a:99:44: c0:39:34:c1:5b:70:72:76:1b:15:9d:ca:78:ca:36: d8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6E:34:CC:1B:4A:91:BC:CF:D8:E5:32:8B:34:A1:2A:7D:F2:8D:2B X509v3 Authority Key Identifier: keyid:54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:74:81:1a:cc:fe:33:91:94:19:c4:14:d2:9b:55:8e:f4:5d: 6c:04:81:50:41:85:f7:4c:d4:94:78:83:16:63:3a:ee:af:a3: cc:a8:26:48:a8:53:fa:2a:45:0c:cb:95:ec:7c:87:88:8b:18: 1c:28:a2:da:4d:0f:5f:5b:93:67:7a:82:1b:a5:ae:8b:8e:19: 63:00:5f:04:ef:b4:fd:f8:72:bd:b8:ef:78:ab:e0:97:ac:43: c3:6a:1b:da:73:2b:18:59:48:f3:b8:cb:43:50:7b:c5:31:7d: ea:4a:4f:c7:e8:39:9c:b0:69:73:2f:ea:07:c8:90:8f:d9:7a: 22:9b:cf:b7:27:a1:11:8e:0b:d5:6c:d8:27:6f:c1:15:2f:82: 53:4a:93:7b:22:a1:ae:84:2f:87:fc:1a:f9:5d:42:28:e8:ae: 12:60:67:5c:0e:23:16:21:aa:35:7e:c9:87:53:10:4f:ec:77: ea:dd:73:0d:e3:2d:bf:e8:a1:ec:f6:2c:58:79:2b:4a:84:8e: f1:6b:39:9d:30:85:92:df:fd:59:7c:12:e4:d6:a0:0c:b8:70: 80:c8:fa:b6:f4:d9:eb:92:2b:6b:d1:02:8b:7a:7e:94:60:f4: 1a:c6:b5:2e:2f:5b:38:aa:ed:76:b4:6d:8f:23:54:6f:3d:29: c9:a3:b5:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTQ1ODExMC8GA1UEBRMoNTRERTk5OTUwQjdGQzk1ODFGRThBQzk2MUYzN0I3ODk4 RjM1Q0RDMzAeFw0yNTA3MDMwODExNDRaFw0yNTA3MTAwODExNDRaMBgxFjAUBgNV BAMTDTY4NjYzYjQxLWUzMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDydECoqddEmhxwLhf/+i7XV71O8n9Gws5JnvJD95qwhNaiPDhmyHqIJQA+uGSX lSrDE2IRPEoaXgXDGrUoggUOzuHe0MClosInjfdngaqItk5gvgFF0Z9mo+DUB/ME jGfrdRtvkUmK2Uv1d6p8FMvIaG0KwsRGMah8av/KMwMMTgce5s2amkwMEbkKmkO5 hJWsRzIL2d4KWxKn9ZxPTdM/1Hnp9IhsS32zrt9PK2tI/pvZ9fFdADp2L0I4/sJC uljeIE2jLPlJDdqMNi6fLfkdtPQBeeJWXThQuoLkZr1FQKxxoufZEGOjXqM2VkqZ RMA5NMFbcHJ2GxWdynjKNthHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUE240zBtK kbzP2OUyizShKn3yjSswHwYDVR0jBBgwFoAUVN6ZlQt/yVgf6KyWHze3iY81zcMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNDU4LzFFQzcyRjIyMzBE ODExRjBBN0JFMkU0RkM0RjlBRTAyL1ZONlpsUXRfeVZnZjZLeVdIemUzaVk4MXpj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVk42WmxRdF95VmdmNkt5V0h6ZTNpWTgxemNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF NDU4LzFFQzcyRjIyMzBEODExRjBBN0JFMkU0RkM0RjlBRTAyL1ZONlpsUXRfeVZn ZjZLeVdIemUzaVk4MXpjTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACJ0gRrM/jORlBnEFNKbVY70XWwEgVBBhfdM1JR4gxZjOu6vo8yoJkio U/oqRQzLlex8h4iLGBwootpND19bk2d6ghulrouOGWMAXwTvtP34cr2473ir4Jes Q8NqG9pzKxhZSPO4y0NQe8UxfepKT8foOZywaXMv6gfIkI/ZeiKbz7cnoRGOC9Vs 2CdvwRUvglNKk3sioa6EL4f8GvldQijorhJgZ1wOIxYhqjV+yYdTEE/sd+rdcw3j Lb/ooez2LFh5K0qEjvFrOZ0whZLf/Vl8EuTWoAy4cIDI+rb02euSK2vRAot6fpRg 9BrGtS4vWziq7Xa0bY8jVG89Kcmjteg= -----END CERTIFICATE-----Generated at Thu Jul 3 23:30:58 2025 by rpki-client