$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft File: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft (raw, json) Hash identifier: Id/P3mxsoGDygG9gHBF07yFJyV44AcbWpQyCgh7t9q4= Subject key identifier: 34:AA:61:02:EE:8D:78:C3:D5:F4:13:43:53:7B:7E:6C:51:91:67:A6 Authority key identifier: 54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39 Certificate issuer: /CN=A9195AA2/serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39 Certificate serial: 0C4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft Manifest number: 142E Signing time: Wed 02 Jul 2025 18:41:34 +0000 Manifest this update: Wed 02 Jul 2025 18:41:33 +0000 Manifest next update: Wed 09 Jul 2025 18:41:33 +0000 Files and hashes: 1: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl (hash: IRnIiPbrwwRxY8US1ascmxYs0VUZIJS62lJGYSfwcy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3146 (0xc4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195AA2, serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39 Validity Not Before: Jul 2 18:41:33 2025 GMT Not After : Jul 9 18:41:33 2025 GMT Subject: CN=68657d5e-c751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:04:19:c7:db:e0:d0:14:5e:46:a2:7c:7d:b9: 70:c5:fe:c6:d5:05:69:e4:c2:b1:5c:c9:88:f2:6f: 99:57:b8:0b:91:88:6c:c4:6a:c0:2f:3d:b4:9a:f8: 6e:f4:33:25:3b:50:31:f8:05:d5:4b:b8:85:77:c6: 82:93:cf:08:89:93:f1:35:59:dc:43:77:a9:00:d9: ce:0c:f4:10:d2:dc:6c:a7:c0:a9:61:a3:db:76:79: 60:06:01:25:a9:50:c7:cd:2a:84:b7:71:0d:f2:cb: a2:31:f2:d6:84:ae:dd:1e:98:bd:d2:b3:e1:df:3e: 6a:d7:b0:50:64:65:0d:e3:5c:81:bd:22:78:b3:1e: 36:c2:cd:f1:85:15:e5:4d:3b:b5:ca:c1:38:37:b5: 9f:29:16:c3:f6:c2:81:c7:9f:5c:57:c3:32:40:06: 9b:01:62:d4:d6:a5:ec:c1:65:06:15:c9:01:c6:76: 33:88:12:8c:db:15:a4:73:7f:23:b2:30:66:42:ac: 5a:a0:70:93:4b:c5:cc:53:20:7c:0c:37:63:08:f7: 8e:72:31:ba:0d:9b:0f:9d:e6:0a:5f:b2:90:25:63: 9f:a2:fe:01:e7:b4:47:84:3c:4f:ca:a6:76:e5:58: ac:13:a0:a1:41:54:0d:a2:93:a0:ed:f0:7a:99:f2: ea:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AA:61:02:EE:8D:78:C3:D5:F4:13:43:53:7B:7E:6C:51:91:67:A6 X509v3 Authority Key Identifier: keyid:54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:bf:bd:ae:e3:36:d8:40:ba:d6:64:65:7c:8d:14:70:6c:a8: 39:26:39:e5:30:6f:bc:8e:cc:7b:b7:c4:c7:b0:1d:28:cd:81: 0d:5c:84:a0:df:e2:36:c0:e7:a9:d3:00:d1:d2:ad:de:38:3a: f5:47:e8:76:0f:4d:35:a7:3e:af:8f:16:7f:ed:5b:cc:dd:e7: 95:5c:2f:be:46:a4:11:17:43:44:e6:73:dc:f4:30:fd:08:cf: 73:e6:6c:3c:4b:1a:c7:7c:f8:b6:36:43:37:e3:16:fb:2b:73: 01:a6:22:cc:8a:0e:37:00:bb:33:ed:fe:36:8b:5d:59:d2:96: 16:34:41:d5:89:b1:3f:d3:a4:c1:58:01:f0:5c:57:d7:74:ed: 66:fe:df:09:ca:52:9d:b9:de:42:e1:e0:dd:38:0e:0e:c4:e6: e4:da:dc:a5:51:2e:ee:3d:8d:49:45:eb:2a:86:95:04:b2:6d: 50:82:1c:f9:fa:a0:dd:2b:b0:74:ac:e0:bd:10:44:e7:08:fa: b8:5c:19:9d:1c:28:dd:8e:18:b2:0a:7f:b5:51:b3:8d:f1:0a: 5e:c5:c5:5e:3b:28:88:58:37:9b:42:9a:df:15:2b:c8:34:77: 37:c2:c5:cf:d1:af:2d:1c:c0:60:50:1a:3b:7d:d3:bc:54:1d: f4:32:b1:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBQTIxMTAvBgNVBAUTKDU0NTgzQzI5QkJGQjUwMDlEQjlDQzA1NjE0RjYzRDYy QkNCNzdDMzkwHhcNMjUwNzAyMTg0MTMzWhcNMjUwNzA5MTg0MTMzWjAYMRYwFAYD VQQDEw02ODY1N2Q1ZS1jNzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQQZx9vg0BReRqJ8fblwxf7G1QVp5MKxXMmI8m+ZV7gLkYhsxGrALz20mvhu 9DMlO1Ax+AXVS7iFd8aCk88IiZPxNVncQ3epANnODPQQ0txsp8CpYaPbdnlgBgEl qVDHzSqEt3EN8suiMfLWhK7dHpi90rPh3z5q17BQZGUN41yBvSJ4sx42ws3xhRXl TTu1ysE4N7WfKRbD9sKBx59cV8MyQAabAWLU1qXswWUGFckBxnYziBKM2xWkc38j sjBmQqxaoHCTS8XMUyB8DDdjCPeOcjG6DZsPneYKX7KQJWOfov4B57RHhDxPyqZ2 5VisE6ChQVQNopOg7fB6mfLq3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSqYQLu jXjD1fQTQ1N7fmxRkWemMB8GA1UdIwQYMBaAFFRYPCm7+1AJ25zAVhT2PWK8t3w5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2 QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VBbmJuTUJXRlBZOVlyeTNm RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGZzhLYnY3VUFuYm5NQldGUFk5WXJ5M2ZEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VB bmJuTUJXRlBZOVlyeTNmRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYv72u4zbYQLrWZGV8jRRwbKg5JjnlMG+8jsx7t8THsB0ozYENXISg 3+I2wOep0wDR0q3eODr1R+h2D001pz6vjxZ/7VvM3eeVXC++RqQRF0NE5nPc9DD9 CM9z5mw8SxrHfPi2NkM34xb7K3MBpiLMig43ALsz7f42i11Z0pYWNEHVibE/06TB WAHwXFfXdO1m/t8JylKdud5C4eDdOA4OxObk2tylUS7uPY1JResqhpUEsm1Qghz5 +qDdK7B0rOC9EETnCPq4XBmdHCjdjhiyCn+1UbON8QpexcVeOyiIWDebQprfFSvI NHc3wsXP0a8tHMBgUBo7fdO8VB30MrE6 -----END CERTIFICATE-----Generated at Thu Jul 3 06:09:26 2025 by rpki-client