$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft File: vxobyMAsIDYtD9n5K8AGoolejIA.mft (raw, json) Hash identifier: DoeA7flbRllOT36XTheb9KK8/VPGBzLlWLQmVMH4aZ8= Subject key identifier: AB:45:8E:B0:FE:09:4D:FA:22:33:D8:5D:FE:41:EE:48:E7:E0:74:7F Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80 Certificate issuer: /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80 Certificate serial: 07AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft Manifest number: 07A8 Signing time: Mon 30 Jun 2025 21:27:50 +0000 Manifest this update: Mon 30 Jun 2025 21:27:49 +0000 Manifest next update: Mon 07 Jul 2025 21:27:49 +0000 Files and hashes: 1: vxobyMAsIDYtD9n5K8AGoolejIA.crl (hash: Oeo1swZwjq4sAGBuAwGyEDrgcEcb1Y6zt7Kib+SNPi8=) 2: ABD5003E079C11EBA7C04832C4F9AE02.roa (hash: 1LIqaLcLd8sIbPgwe6w2+ZfDiBIad4OGJXBnSw3QIfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1965 (0x7ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A423B, serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80 Validity Not Before: Jun 30 21:27:49 2025 GMT Not After : Jul 7 21:27:49 2025 GMT Subject: CN=68630155-c6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:44:69:6e:46:62:e9:06:ac:5c:65:1f:3a:29: b7:c3:ac:76:08:28:c9:83:a3:c7:47:25:ef:a0:19: 9b:b9:c2:6d:0f:a7:08:17:a4:5c:cb:6b:d6:0e:af: f2:f3:5b:f4:b7:46:f0:24:75:e3:27:e6:28:a0:4e: 10:1c:5e:ef:2d:91:03:b3:6e:4b:4c:dd:3e:22:a6: bd:2f:3d:5d:51:19:5b:77:a4:53:bd:ec:d3:0e:28: 01:78:aa:b5:6d:2d:b0:be:80:57:fc:77:07:02:00: 2e:4b:83:bc:0e:83:e5:3f:ff:6c:da:ea:44:fb:4c: fb:8b:4d:d5:fe:a3:f1:00:59:98:11:d0:1c:6c:74: 72:e5:49:b6:f3:6d:04:7b:80:31:71:f2:af:be:9a: 57:44:30:67:ce:4d:4a:33:a0:ab:4c:cd:a8:fb:ae: fc:86:0e:2a:c3:7e:06:6d:51:27:58:97:8f:52:76: c3:da:7f:f4:85:f9:7f:dd:0a:5a:f7:5b:b0:bc:f9: 80:fe:f5:f0:ad:bc:cb:fc:02:95:e0:45:76:1c:5d: 73:8b:11:28:dd:17:73:51:42:1a:64:8b:e1:0b:73: fc:f3:0a:9d:06:fb:be:e2:e2:2d:0f:eb:2a:1d:80: c8:05:d5:7d:fd:b5:fc:73:75:8b:2f:96:9f:ff:f5: c2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:45:8E:B0:FE:09:4D:FA:22:33:D8:5D:FE:41:EE:48:E7:E0:74:7F X509v3 Authority Key Identifier: keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:cf:e8:bb:b3:5e:1e:80:9a:52:2d:aa:1b:d0:96:dd:17:3a: 88:53:be:fb:c2:ae:c1:8a:0e:3f:11:4e:40:42:e1:9f:1f:e7: 27:7b:01:77:b3:6e:45:d9:17:c8:40:c6:46:4e:b8:06:fa:52: 84:56:be:51:dd:de:32:03:4c:e8:65:fb:32:1d:cc:b4:42:a6: d5:55:ef:97:89:72:9e:9f:60:e8:c3:a7:1c:6f:c2:de:b3:29: bb:d7:a1:46:bd:1f:66:59:bd:64:30:f5:eb:e8:5c:53:9a:30: 38:67:17:d5:ed:98:b5:2c:64:32:f0:d0:18:06:3c:c0:29:16: b9:30:d7:82:58:ad:18:d7:95:bc:d9:12:f2:a7:1d:f3:3f:f5: be:72:41:49:e7:55:2b:e8:66:eb:05:35:77:a6:0e:67:2d:66: 5c:3f:78:54:53:2d:75:82:7a:66:46:a7:e5:fd:62:e9:aa:10: 10:85:86:e7:d5:67:f4:ed:32:5c:96:31:38:96:fe:32:ae:02: 71:90:d5:20:f7:7b:3e:f8:19:aa:aa:0b:5b:45:73:f0:d8:25: ce:6c:68:95:ec:41:e7:30:34:2b:92:f8:66:b0:a7:da:2f:11: f2:7b:ff:93:5f:6c:87:36:0f:e7:15:2a:29:04:4b:e4:f0:10: b3:cd:0f:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyM0IxMTAvBgNVBAUTKEJGMUExQkM4QzAyQzIwMzYyRDBGRDlGOTJCQzAwNkEy ODk1RThDODAwHhcNMjUwNjMwMjEyNzQ5WhcNMjUwNzA3MjEyNzQ5WjAYMRYwFAYD VQQDEw02ODYzMDE1NS1jNmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0RpbkZi6QasXGUfOim3w6x2CCjJg6PHRyXvoBmbucJtD6cIF6Rcy2vWDq/y 81v0t0bwJHXjJ+YooE4QHF7vLZEDs25LTN0+Iqa9Lz1dURlbd6RTvezTDigBeKq1 bS2wvoBX/HcHAgAuS4O8DoPlP/9s2upE+0z7i03V/qPxAFmYEdAcbHRy5Um2820E e4AxcfKvvppXRDBnzk1KM6CrTM2o+678hg4qw34GbVEnWJePUnbD2n/0hfl/3Qpa 91uwvPmA/vXwrbzL/AKV4EV2HF1zixEo3RdzUUIaZIvhC3P88wqdBvu+4uItD+sq HYDIBdV9/bX8c3WLL5af//XC9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtFjrD+ CU36IjPYXf5B7kjn4HR/MB8GA1UdIwQYMBaAFL8aG8jALCA2LQ/Z+SvABqKJXoyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDIzQi9BRjc1NkI5NDA3 OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lEWXREOW41SzhBR29vbGVq SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z4b2J5TUFzSURZdEQ5bjVLOEFHb29sZWpJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDIzQi9BRjc1NkI5NDA3OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lE WXREOW41SzhBR29vbGVqSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDz+i7s14egJpSLaob0JbdFzqIU777wq7Big4/EU5AQuGfH+cnewF3 s25F2RfIQMZGTrgG+lKEVr5R3d4yA0zoZfsyHcy0QqbVVe+XiXKen2Dow6ccb8Le sym716FGvR9mWb1kMPXr6FxTmjA4ZxfV7Zi1LGQy8NAYBjzAKRa5MNeCWK0Y15W8 2RLypx3zP/W+ckFJ51Ur6GbrBTV3pg5nLWZcP3hUUy11gnpmRqfl/WLpqhAQhYbn 1Wf07TJcljE4lv4yrgJxkNUg93s++BmqqgtbRXPw2CXObGiV7EHnMDQrkvhmsKfa LxHye/+TX2yHNg/nFSopBEvk8BCzzQ+i -----END CERTIFICATE-----Generated at Wed Jul 2 03:39:40 2025 by rpki-client