$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft File: VQWhoodm2zGCLEYVhuaO3fKnk_o.mft (raw, json) Hash identifier: A7hSS2PiCipAnApR5vRWp1AY4PTHiKe+VMz4aWCliSw= Subject key identifier: 25:0C:47:C9:89:F9:6D:DC:D0:0F:F7:8F:62:B6:90:EF:4F:AE:69:D5 Authority key identifier: 55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA Certificate issuer: /CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft Manifest number: 9F Signing time: Thu 03 Jul 2025 06:26:59 +0000 Manifest this update: Thu 03 Jul 2025 06:26:59 +0000 Manifest next update: Thu 10 Jul 2025 06:26:59 +0000 Files and hashes: 1: VQWhoodm2zGCLEYVhuaO3fKnk_o.crl (hash: dGdtk3M3WmRD2Byj1txtfpM3hI5duxv8po0pI5eja7A=) 2: 95737270643711EFBCD1344AC4F9AE02.roa (hash: 0MmgAOsynAk/z75v6F6/3mM/hRV1GTY1/gUKJqE0crQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91850AD, serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA Validity Not Before: Jul 3 06:26:59 2025 GMT Not After : Jul 10 06:26:59 2025 GMT Subject: CN=686622b3-1e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2f:fd:a5:c0:85:e0:3d:4c:1d:8f:14:54:ff: 0f:0b:09:5e:6f:cb:af:44:3b:de:5d:fc:aa:63:be: 20:23:05:c2:ce:0e:33:cd:54:41:86:ef:12:5f:d0: 01:7a:f7:97:c2:d6:36:f4:eb:19:5a:3a:97:0d:db: 81:f7:51:4e:d1:da:a7:dc:0c:5d:00:60:e9:fe:81: 53:03:81:f1:8e:af:71:73:2a:5e:ea:2b:72:f7:35: 68:64:2e:90:03:29:f2:4b:c7:a0:4d:8a:14:12:16: e8:c1:1b:70:cb:2c:99:b8:2a:31:70:9d:48:05:f6: 5d:71:21:51:31:91:9a:eb:0a:5e:5e:8a:09:8b:f2: 85:c9:36:2b:29:54:2c:ac:62:93:4f:9d:91:2b:36: 87:90:bd:e7:7f:ca:a9:fe:91:ae:5a:d8:11:d9:fc: 07:8f:51:bb:45:fa:6a:3f:bd:11:0a:97:64:96:e9: b0:ee:23:71:4f:d7:41:68:95:dd:86:c1:68:af:19: d8:e4:f5:1d:cf:81:3f:34:e3:8e:82:6c:2c:2a:3d: 86:ee:b7:dd:60:db:31:2d:93:7e:ed:5c:d2:30:5e: 33:d3:36:00:ab:c7:39:ad:0c:6a:06:c3:7c:6a:63: 44:a0:c6:da:0e:16:ee:4a:e7:3f:a4:19:e6:3a:bc: ff:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0C:47:C9:89:F9:6D:DC:D0:0F:F7:8F:62:B6:90:EF:4F:AE:69:D5 X509v3 Authority Key Identifier: keyid:55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:da:2c:42:ad:d2:a2:12:e4:c9:d9:27:6f:15:40:58:4b:e7: 1f:9c:58:49:c6:1a:cb:8d:44:4e:12:03:e9:74:06:fa:c4:9a: 40:54:3b:b3:10:08:0b:46:9c:cc:9d:ec:39:6a:a7:dc:11:7c: 55:6b:f4:fc:49:9a:6d:1e:d6:5a:19:70:bb:9f:02:15:b5:18: f3:d7:69:d2:12:2d:c9:1c:57:3a:8d:33:88:15:9d:0c:5c:71: e1:20:ff:03:3c:e9:58:e4:93:8c:ac:5e:fe:d9:2c:b8:0a:6d: fb:a7:43:a9:85:50:70:c3:ad:db:4a:78:50:95:fb:0d:86:1e: fb:df:0c:09:ac:9d:9d:33:bc:05:65:6a:cc:7e:ff:d7:c4:9c: 0d:dc:cd:9a:ce:97:dc:52:88:6b:87:cd:a2:44:48:b3:c5:a7: cc:3c:b5:35:cd:59:e8:24:7a:54:7a:5d:35:d9:e4:a9:d7:13: 9a:9f:1b:9e:9f:cc:35:f2:79:74:37:49:81:69:69:b5:18:36: bc:f1:3e:d0:cf:97:b4:4d:05:bb:04:bd:6c:5b:b0:44:da:3c: d0:de:f8:46:69:84:de:c1:75:4a:a8:f6:4a:34:2b:e9:02:b7: 35:a8:db:bc:42:b6:cf:60:25:3b:c4:a7:84:6c:8c:64:81:a3: 4b:7d:a4:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUwQUQxMTAvBgNVBAUTKDU1MDVBMUEyODc2NkRCMzE4MjJDNDYxNTg2RTY4RURE RjJBNzkzRkEwHhcNMjUwNzAzMDYyNjU5WhcNMjUwNzEwMDYyNjU5WjAYMRYwFAYD VQQDEw02ODY2MjJiMy0xZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4S/9pcCF4D1MHY8UVP8PCwleb8uvRDveXfyqY74gIwXCzg4zzVRBhu8SX9AB eveXwtY29OsZWjqXDduB91FO0dqn3AxdAGDp/oFTA4Hxjq9xcype6ity9zVoZC6Q AynyS8egTYoUEhbowRtwyyyZuCoxcJ1IBfZdcSFRMZGa6wpeXooJi/KFyTYrKVQs rGKTT52RKzaHkL3nf8qp/pGuWtgR2fwHj1G7RfpqP70RCpdklumw7iNxT9dBaJXd hsForxnY5PUdz4E/NOOOgmwsKj2G7rfdYNsxLZN+7VzSMF4z0zYAq8c5rQxqBsN8 amNEoMbaDhbuSuc/pBnmOrz/UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUMR8mJ +W3c0A/3j2K2kO9PrmnVMB8GA1UdIwQYMBaAFFUFoaKHZtsxgixGFYbmjt3yp5P6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTBBRC82QTBBQzgwMjY0 MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9WUVdob29kbTJ6R0NMRVlWaHVhTzNmS25r X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZRV2hvb2RtMnpHQ0xFWVZodWFPM2ZLbmtfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTBBRC82QTBBQzgwMjY0MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9WUVdob29kbTJ6 R0NMRVlWaHVhTzNmS25rX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu2ixCrdKiEuTJ2SdvFUBYS+cfnFhJxhrLjUROEgPpdAb6xJpAVDuz EAgLRpzMnew5aqfcEXxVa/T8SZptHtZaGXC7nwIVtRjz12nSEi3JHFc6jTOIFZ0M XHHhIP8DPOlY5JOMrF7+2Sy4Cm37p0OphVBww63bSnhQlfsNhh773wwJrJ2dM7wF ZWrMfv/XxJwN3M2azpfcUohrh82iREizxafMPLU1zVnoJHpUel012eSp1xOanxue n8w18nl0N0mBaWm1GDa88T7Qz5e0TQW7BL1sW7BE2jzQ3vhGaYTewXVKqPZKNCvp Arc1qNu8QrbPYCU7xKeEbIxkgaNLfaS7 -----END CERTIFICATE-----Generated at Thu Jul 3 10:37:39 2025 by rpki-client