$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft File: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json) Hash identifier: oOUyPF+ibTDF7S3M7AgnGOawOQgsoRNel0vYAINTONI= Subject key identifier: 5C:ED:F6:C6:E0:DD:61:F1:F4:2C:2E:EF:75:85:9B:5C:98:89:3F:A8 Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D Certificate issuer: /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft Manifest number: 0166 Signing time: Thu 03 Jul 2025 04:04:18 +0000 Manifest this update: Thu 03 Jul 2025 04:04:17 +0000 Manifest next update: Thu 10 Jul 2025 04:04:17 +0000 Files and hashes: 1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: RzvFbMcCVADWV9wsc6T5SYFTU1bIY5gZAueK5LEj+28=) 2: 804B8FA6E91511EE8B622417C4F9AE02.roa (hash: ss8VIOhJqFqdKONVWR6vq+iPEbbcFBwiChhI9XQ77bk=) 3: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: P3RI+iahMSOMEtdBfrZDu8ZMcvFxJp6/7cmLyR0Owr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Validity Not Before: Jul 3 04:04:17 2025 GMT Not After : Jul 10 04:04:17 2025 GMT Subject: CN=68660141-1508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:43:75:19:a6:6a:e5:ad:fb:bf:18:96:a3:1c: 5d:82:03:af:50:35:45:c5:20:5f:9b:7f:8a:58:49: 2e:06:d3:e6:10:f3:b0:30:f6:21:5c:1d:98:91:15: 41:7c:c9:2b:61:e8:26:ec:53:55:61:a1:05:eb:38: a0:ba:4a:dc:29:43:c1:78:d2:f1:12:b4:b9:19:b8: 0e:91:1a:91:5d:bc:83:25:50:15:6f:f4:30:f1:9e: fd:6a:aa:07:1d:98:f1:ea:84:7e:09:e5:41:e1:12: c9:0c:26:29:aa:9b:ef:6e:6a:c3:a4:a1:18:5e:e7: fd:dd:06:9a:0b:72:c7:72:3c:f8:ad:e5:43:91:28: 4e:10:f2:1f:9a:52:a2:39:2e:57:80:be:85:30:22: 64:96:85:4d:d2:b7:a5:55:19:1d:3d:4d:98:d2:cf: 83:c4:74:85:c5:11:9f:7f:cf:e7:a8:08:8e:9b:d4: a4:c2:e1:03:39:30:e8:71:37:22:bc:ec:d2:99:6f: 4c:ad:d7:e9:78:8d:e9:ba:27:ac:ee:ea:d0:c8:ab: f7:8d:81:76:6f:77:e6:c5:d0:d4:a4:6c:46:d2:58: 0a:b3:45:c8:76:f2:5e:3d:86:aa:24:4e:75:d7:e5: 3c:99:bb:ce:bc:7c:2e:0c:89:0b:4d:63:57:82:e2: 7c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:ED:F6:C6:E0:DD:61:F1:F4:2C:2E:EF:75:85:9B:5C:98:89:3F:A8 X509v3 Authority Key Identifier: keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:2d:f2:ae:b0:5f:13:64:ca:6e:49:03:ce:1d:63:30:bb:3d: 4e:09:40:65:a7:73:71:b8:6a:65:88:9f:0f:0c:1e:d5:ad:9d: 5a:f1:4b:bf:65:45:22:52:af:bc:a4:02:f3:b9:0f:92:cc:1d: 15:a0:aa:55:81:c8:c6:1e:4a:57:e9:af:4b:97:ac:9a:01:2d: f0:34:d6:bc:4c:6d:41:de:a4:ff:f9:50:1f:33:5b:0a:3f:04: 3c:ba:50:15:6f:5b:2f:d6:6a:79:bc:1f:c9:a2:6f:06:a3:02: 00:38:90:d0:27:68:96:b8:04:13:fb:ed:36:b8:52:9d:65:89: bf:11:22:ac:57:84:81:ef:58:b5:30:5b:5b:a0:a0:c4:e0:57: e1:63:35:3f:f5:ec:c3:30:8b:7d:a4:24:8a:a6:fe:75:09:f2: c6:25:b0:a5:25:4d:2b:c9:38:2e:25:c3:83:2d:54:00:bc:05: c1:56:aa:44:fc:f6:e2:1d:e0:4e:90:d0:96:e9:31:f4:1d:1f: 39:b5:a8:64:0b:2a:16:dc:77:fe:19:a6:0d:c7:67:ca:62:b9: 23:6f:cf:c6:bb:10:2a:01:e2:bb:df:07:c4:ed:2f:cc:83:60: 89:1b:8c:61:02:6e:a0:31:a3:a7:1d:21:4a:40:ec:04:1b:78: 29:1d:c3:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjkxMTAvBgNVBAUTKEJFNjM0MUE3Q0MwQ0EwRjZDMUExNUUwNDY2RUM3MTU1 QjgyODNDOUQwHhcNMjUwNzAzMDQwNDE3WhcNMjUwNzEwMDQwNDE3WjAYMRYwFAYD VQQDEw02ODY2MDE0MS0xNTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkN1GaZq5a37vxiWoxxdggOvUDVFxSBfm3+KWEkuBtPmEPOwMPYhXB2YkRVB fMkrYegm7FNVYaEF6zigukrcKUPBeNLxErS5GbgOkRqRXbyDJVAVb/Qw8Z79aqoH HZjx6oR+CeVB4RLJDCYpqpvvbmrDpKEYXuf93QaaC3LHcjz4reVDkShOEPIfmlKi OS5XgL6FMCJkloVN0relVRkdPU2Y0s+DxHSFxRGff8/nqAiOm9SkwuEDOTDocTci vOzSmW9MrdfpeI3puies7urQyKv3jYF2b3fmxdDUpGxG0lgKs0XIdvJePYaqJE51 1+U8mbvOvHwuDIkLTWNXguJ8PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzt9sbg 3WHx9Cwu73WFm1yYiT+oMB8GA1UdIwQYMBaAFL5jQafMDKD2waFeBGbscVW4KDyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGOS80RTYwOUE3MjNC N0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9QYkJvVjRFWnV4eFZiZ29Q SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtTkJwOHdNb1BiQm9WNEVadXh4VmJnb1BKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGOS80RTYwOUE3MjNCN0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9Q YkJvVjRFWnV4eFZiZ29QSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVLfKusF8TZMpuSQPOHWMwuz1OCUBlp3NxuGpliJ8PDB7VrZ1a8Uu/ ZUUiUq+8pALzuQ+SzB0VoKpVgcjGHkpX6a9Ll6yaAS3wNNa8TG1B3qT/+VAfM1sK PwQ8ulAVb1sv1mp5vB/Jom8GowIAOJDQJ2iWuAQT++02uFKdZYm/ESKsV4SB71i1 MFtboKDE4FfhYzU/9ezDMIt9pCSKpv51CfLGJbClJU0ryTguJcODLVQAvAXBVqpE /PbiHeBOkNCW6TH0HR85tahkCyoW3Hf+GaYNx2fKYrkjb8/GuxAqAeK73wfE7S/M g2CJG4xhAm6gMaOnHSFKQOwEG3gpHcOG -----END CERTIFICATE-----Generated at Thu Jul 3 08:18:29 2025 by rpki-client