$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft File: vrUOQRzD4sQGA7FqkWCepNQGZJU.mft (raw, json) Hash identifier: tWvZ8/xox1OFAa+Vm7zF1GNEAVGI3IZ6b4P34Kt08Qw= Subject key identifier: E2:06:6F:3E:DA:08:83:85:B8:8A:11:94:25:A7:3E:B7:71:1F:8A:E7 Authority key identifier: BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 Certificate issuer: /CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Certificate serial: 0DDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft Manifest number: 0DD6 Signing time: Wed 02 Jul 2025 18:06:45 +0000 Manifest this update: Wed 02 Jul 2025 18:06:45 +0000 Manifest next update: Wed 09 Jul 2025 18:06:45 +0000 Files and hashes: 1: vrUOQRzD4sQGA7FqkWCepNQGZJU.crl (hash: EQD4jIejK5FRIUpAGs6hKJv/c7jOy/2EnoglgGWvRac=) 2: 4BECBAFCB99811E98000600AC4F9AE02.roa (hash: rqASzwwK7FbCaVAYTK88nCqRcfP1vi7cp+uLy8ucquU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3550 (0xdde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B2F8, serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Validity Not Before: Jul 2 18:06:45 2025 GMT Not After : Jul 9 18:06:45 2025 GMT Subject: CN=68657535-14d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d5:74:3c:58:57:8b:25:d5:51:36:06:0d:1e: d2:bc:1e:ed:4f:c6:cf:b6:f5:40:61:58:e6:ec:ad: af:aa:d3:c2:e2:05:bd:c6:89:62:fd:4d:bc:fa:dd: 9b:89:5e:66:61:17:7a:fa:b7:16:88:7a:b1:af:e2: 84:ed:2b:bd:d9:ac:5c:13:ee:45:bd:c7:28:2d:e4: 23:4c:63:88:7e:a1:64:0e:2b:3f:4d:a2:4f:83:54: 25:13:79:d4:d3:a5:f3:28:31:73:10:18:df:68:f7: 73:1c:87:ae:89:a0:0a:52:a5:db:02:dd:5a:5c:f3: fb:64:fd:5b:64:13:d9:03:ef:90:d5:b3:df:55:14: 74:a4:98:7a:30:58:2f:ae:1a:d8:81:e9:a4:be:84: d9:15:05:ce:7f:21:9b:98:31:f1:3e:21:45:32:73: f2:0f:92:8f:19:92:fc:b7:f4:7c:e4:72:61:4e:1d: 7b:21:86:bc:4e:d4:9a:00:de:5d:ae:77:24:99:13: 1b:a1:bf:d2:74:28:31:6e:7d:60:e4:08:89:6c:dc: e6:dd:61:bb:5c:5f:4c:c5:51:ef:79:41:fa:03:9e: 50:ff:24:59:4b:d3:16:83:98:94:0b:94:18:3d:f6: 3d:b1:66:b6:8a:73:81:aa:a0:55:15:3d:3e:85:e8: f1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:06:6F:3E:DA:08:83:85:B8:8A:11:94:25:A7:3E:B7:71:1F:8A:E7 X509v3 Authority Key Identifier: keyid:BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c7:66:15:67:4e:ea:54:70:15:9e:35:5a:49:c7:0a:ef:4a: f2:37:48:92:d7:49:d9:9d:3b:9d:89:c6:22:a1:50:6a:29:10: d2:cf:9b:9b:ce:37:e3:e8:0f:d7:a1:14:10:1e:da:97:3c:54: ab:95:87:a8:9e:10:0b:bc:73:89:ba:22:e0:e8:f3:82:79:13: 1a:dc:d9:77:d1:d4:2c:d0:4e:c1:d8:27:78:19:c9:71:30:1a: 57:3d:73:d0:56:a1:eb:c8:05:0d:8c:5b:41:66:88:cb:71:7d: 8f:7a:3f:86:38:59:b6:41:bf:92:30:62:35:46:04:4f:ff:9d: 95:e4:52:ea:92:dd:8f:26:96:37:e4:71:80:99:52:7d:5f:f2: 77:62:0d:e5:49:ce:d3:e0:01:2b:fc:c9:1f:f7:41:59:61:7a: cb:6d:22:0e:3f:1f:d3:c4:60:4a:23:3c:48:98:04:9f:74:a9: 93:e0:6c:68:dc:dd:e2:b9:bd:97:85:c3:71:5b:b7:9a:59:77: d8:06:95:71:20:65:e9:aa:0d:cf:db:2c:c4:b2:ff:0d:5b:d4: 96:17:f7:9c:a8:fd:47:ec:3d:de:77:ad:0d:6d:03:50:10:63: 5d:fa:3c:72:34:30:94:32:7d:df:d1:45:5c:30:87:7e:2b:b9: bc:aa:d2:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyRjgxMTAvBgNVBAUTKEJFQjUwRTQxMUNDM0UyQzQwNjAzQjE2QTkxNjA5RUE0 RDQwNjY0OTUwHhcNMjUwNzAyMTgwNjQ1WhcNMjUwNzA5MTgwNjQ1WjAYMRYwFAYD VQQDEw02ODY1NzUzNS0xNGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNV0PFhXiyXVUTYGDR7SvB7tT8bPtvVAYVjm7K2vqtPC4gW9xoli/U28+t2b iV5mYRd6+rcWiHqxr+KE7Su92axcE+5FvccoLeQjTGOIfqFkDis/TaJPg1QlE3nU 06XzKDFzEBjfaPdzHIeuiaAKUqXbAt1aXPP7ZP1bZBPZA++Q1bPfVRR0pJh6MFgv rhrYgemkvoTZFQXOfyGbmDHxPiFFMnPyD5KPGZL8t/R85HJhTh17IYa8TtSaAN5d rnckmRMbob/SdCgxbn1g5AiJbNzm3WG7XF9MxVHveUH6A55Q/yRZS9MWg5iUC5QY PfY9sWa2inOBqqBVFT0+hejxkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIGbz7a CIOFuIoRlCWnPrdxH4rnMB8GA1UdIwQYMBaAFL61DkEcw+LEBgOxapFgnqTUBmSV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjJGOC9ERkVFNjFERUI5 OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRzUUdBN0Zxa1dDZXBOUUda SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyVU9RUnpENHNRR0E3RnFrV0NlcE5RR1pKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjJGOC9ERkVFNjFERUI5OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRz UUdBN0Zxa1dDZXBOUUdaSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNx2YVZ07qVHAVnjVaSccK70ryN0iS10nZnTudicYioVBqKRDSz5ub zjfj6A/XoRQQHtqXPFSrlYeonhALvHOJuiLg6POCeRMa3Nl30dQs0E7B2Cd4Gclx MBpXPXPQVqHryAUNjFtBZojLcX2Pej+GOFm2Qb+SMGI1RgRP/52V5FLqkt2PJpY3 5HGAmVJ9X/J3Yg3lSc7T4AEr/Mkf90FZYXrLbSIOPx/TxGBKIzxImASfdKmT4Gxo 3N3iub2XhcNxW7eaWXfYBpVxIGXpqg3P2yzEsv8NW9SWF/ecqP1H7D3ed60NbQNQ EGNd+jxyNDCUMn3f0UVcMId+K7m8qtL7 -----END CERTIFICATE-----Generated at Fri Jul 4 03:03:11 2025 by rpki-client