$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json) Hash identifier: mL8Zkgu5Z1Cmu7WwKguXlOpBHM6VvxERRCgXFwCYYtc= Subject key identifier: 20:90:18:29:B3:F4:41:11:89:83:6D:6F:86:81:3E:78:93:01:F8:5C Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 34E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft Manifest number: 34BF Signing time: Mon 30 Jun 2025 14:42:22 +0000 Manifest this update: Mon 30 Jun 2025 14:42:22 +0000 Manifest next update: Mon 07 Jul 2025 14:42:22 +0000 Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: tXMfc5Vkqp9nXKFsYZ14IpSTKc1ncx2bkofvn1RZ590=) 2: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: B6iIcDp1e+xSTCgDaU39YslsY3oYKHC1G8nj3LY3fyg=) 3: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: 3yE7jzzRRf/nsUpYCxz901DViCqtx9fcvzcGq8i3VT0=) 4: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: iBQaFzR8EsNKfOhQyR2WaqwTnXNt65iEA7xvcPEERlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13538 (0x34e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: Jun 30 14:42:22 2025 GMT Not After : Jul 7 14:42:22 2025 GMT Subject: CN=6862a24e-8b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:63:7c:d9:ad:af:69:e2:75:88:be:a6:06:8c: 2d:00:5b:4a:d4:4c:29:fd:da:d4:45:39:96:53:95: 93:dc:43:6d:be:d3:4f:4f:09:28:5f:f0:a3:76:48: 91:4d:97:a1:15:d6:3f:96:37:d2:41:f5:ff:fc:b3: c5:38:62:2a:f5:72:89:cf:a4:6e:8d:b7:6b:cf:24: 50:61:18:86:82:22:ae:f9:c8:9e:ac:7c:50:27:4e: 96:20:8c:c9:c8:c6:14:45:ac:1f:63:46:22:49:f1: 8e:1b:42:8b:96:ca:97:b1:88:8c:f0:63:e8:37:40: 0f:66:45:83:d1:30:da:9b:2c:2f:06:b3:57:40:55: fd:e0:32:52:f2:d4:eb:99:9d:da:d3:89:84:d0:ed: cb:a9:ec:6e:71:59:b0:b4:76:78:b6:d7:e9:a6:58: cf:0c:08:e2:3b:94:15:e5:2c:31:18:73:d5:6b:33: 17:1d:90:de:5e:5a:fb:f7:a5:dd:8d:7e:f2:5a:23: 11:8d:05:e3:28:8e:b8:a7:b3:41:93:62:78:8b:f4: 08:54:46:95:d2:20:c0:55:e7:39:4e:01:6b:e6:75: 83:2b:fc:2f:9a:54:88:51:a9:ee:c1:27:ac:a1:3f: 05:86:22:5b:a4:03:38:2e:2e:20:30:b8:d4:20:7f: ee:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:90:18:29:B3:F4:41:11:89:83:6D:6F:86:81:3E:78:93:01:F8:5C X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:1d:7f:c4:1a:9b:c9:d6:ba:db:de:b6:62:ba:26:0a:b7:0c: 47:af:33:0d:79:b6:30:1b:d9:d7:5e:ee:9b:8c:09:06:cb:b9: 9b:71:9d:cc:a4:2a:94:0f:6d:1c:e0:b5:40:2c:06:bb:19:4d: 11:14:d5:70:e0:31:23:4b:ab:b0:89:72:60:33:d2:a7:c5:dd: 4d:37:e3:78:23:9a:6b:9d:37:08:b8:af:20:76:a7:12:b8:63: 87:29:44:09:5b:79:d6:d5:2f:6b:56:05:c2:91:ee:97:93:5b: ed:a6:f3:c3:1b:8d:87:8d:46:bd:73:5d:88:18:4c:06:68:4c: 81:5c:ad:fa:b3:65:ae:d6:e0:95:cb:0f:fa:2f:af:73:9a:c8: 3f:f5:98:22:4b:50:f9:aa:c6:dc:96:50:f0:9b:4c:c3:da:99: 09:c6:aa:d6:72:31:8a:35:3d:b1:b1:f7:1e:51:d5:37:e4:e3: f4:da:db:43:b7:0a:74:2d:6c:7b:84:94:ef:5a:47:fa:08:f3: 2d:58:5a:38:24:5b:90:c4:52:60:72:90:e2:2e:01:bb:10:8d: 5c:b8:b3:ae:1d:51:d5:9b:af:8f:3d:94:5a:ab:b0:63:36:fb: 49:52:5a:00:59:01:30:62:a5:66:99:dd:e1:df:40:4b:0d:91: 26:4c:4f:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjUwNjMwMTQ0MjIyWhcNMjUwNzA3MTQ0MjIyWjAYMRYwFAYD VQQDEw02ODYyYTI0ZS04YjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmN82a2vaeJ1iL6mBowtAFtK1Ewp/drURTmWU5WT3ENtvtNPTwkoX/CjdkiR TZehFdY/ljfSQfX//LPFOGIq9XKJz6RujbdrzyRQYRiGgiKu+cierHxQJ06WIIzJ yMYURawfY0YiSfGOG0KLlsqXsYiM8GPoN0APZkWD0TDamywvBrNXQFX94DJS8tTr mZ3a04mE0O3LqexucVmwtHZ4ttfppljPDAjiO5QV5SwxGHPVazMXHZDeXlr796Xd jX7yWiMRjQXjKI64p7NBk2J4i/QIVEaV0iDAVec5TgFr5nWDK/wvmlSIUanuwSes oT8FhiJbpAM4Li4gMLjUIH/uKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCQGCmz 9EERiYNtb4aBPniTAfhcMB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ4Ri84QzgxQTg1NjFEOEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdj WlVZeTZMNkE2Ny1mLTFaUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbHX/EGpvJ1rrb3rZiuiYKtwxHrzMNebYwG9nXXu6bjAkGy7mbcZ3M pCqUD20c4LVALAa7GU0RFNVw4DEjS6uwiXJgM9Knxd1NN+N4I5prnTcIuK8gdqcS uGOHKUQJW3nW1S9rVgXCke6Xk1vtpvPDG42HjUa9c12IGEwGaEyBXK36s2Wu1uCV yw/6L69zmsg/9ZgiS1D5qsbcllDwm0zD2pkJxqrWcjGKNT2xsfceUdU35OP02ttD twp0LWx7hJTvWkf6CPMtWFo4JFuQxFJgcpDiLgG7EI1cuLOuHVHVm6+PPZRaq7Bj NvtJUloAWQEwYqVmmd3h30BLDZEmTE9F -----END CERTIFICATE-----Generated at Wed Jul 2 11:47:48 2025 by rpki-client