$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft File: VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft (raw, json) Hash identifier: aVObSTN5epsC+7W0OiebsbrB4CConjgAzrZQSxNZXzA= Subject key identifier: E8:4C:E7:5E:96:EF:F8:8F:C4:1B:FA:C2:99:A8:F7:66:06:D2:DD:96 Authority key identifier: 56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94 Certificate issuer: /CN=A91AD9BD/serialNumber=56B76801D50A4E63C85E0645770654B7F936C994 Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft Manifest number: 01D1 Signing time: Tue 01 Jul 2025 03:19:29 +0000 Manifest this update: Tue 01 Jul 2025 03:19:28 +0000 Manifest next update: Tue 08 Jul 2025 03:19:28 +0000 Files and hashes: 1: VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl (hash: invjh2Y6XmqVKDICkZV5sgq2pg7+6ogO7cR1Q0Yu/XQ=) 2: B9E2643697CE11EDB7D5B312C4F9AE02.roa (hash: wecHmgc8mAml3STsCKA2AkYz2fTeY9/0oK/QY5GUmjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD9BD, serialNumber=56B76801D50A4E63C85E0645770654B7F936C994 Validity Not Before: Jul 1 03:19:28 2025 GMT Not After : Jul 8 03:19:28 2025 GMT Subject: CN=686353c0-a4e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:79:f6:64:10:75:ff:35:55:c8:43:af:ff:f0: 31:6a:a5:5e:ad:8e:0d:ea:24:a7:28:02:05:7b:29: a6:1a:89:d0:6e:94:31:d9:fd:9a:a5:09:be:22:48: 67:c0:7e:21:8b:de:ae:d7:df:74:67:c6:cd:c5:4f: 49:7e:6c:62:6b:37:27:67:f6:7e:b8:f4:4c:1c:07: 47:9a:12:b5:b5:73:89:b8:a1:12:ea:3f:8c:28:5f: 06:d3:37:44:f9:60:79:7b:0e:f5:c3:7a:3c:b2:52: 06:d2:8d:14:30:7b:06:e0:7f:50:90:ec:40:70:cf: f4:ef:c0:2e:3a:1a:91:24:b5:3b:c0:1b:d7:bd:0a: e6:3f:c4:c5:bc:ca:35:14:88:82:66:a1:ef:04:a9: 56:4e:80:db:d1:b5:be:84:57:36:4f:b2:44:bd:01: ec:ea:f7:2c:a0:a5:23:af:3b:a1:42:3a:0f:7c:0d: f9:52:ad:1b:9d:4e:e0:d2:44:49:87:93:bb:32:70: 0b:4c:14:56:4e:54:05:92:c7:74:f2:9c:97:6b:07: 0b:3c:7d:14:29:f8:3a:eb:97:6c:03:85:e4:df:4f: 60:db:c0:9d:a4:e2:89:1f:1c:87:c5:fd:38:62:6a: 70:85:b7:54:23:2f:76:b6:34:a4:5b:27:a4:0c:bd: 40:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4C:E7:5E:96:EF:F8:8F:C4:1B:FA:C2:99:A8:F7:66:06:D2:DD:96 X509v3 Authority Key Identifier: keyid:56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:c9:6b:91:96:88:28:b6:f6:ef:d7:35:fb:93:a1:20:90:67: 82:0d:00:04:76:c0:80:8f:c3:d2:2f:9b:28:e1:3a:8a:3f:d2: 7d:3e:37:7c:00:bc:7f:35:73:25:d7:d6:22:3f:b2:0a:f8:0e: 0c:72:4f:18:c5:28:23:00:f7:e7:05:6e:80:36:30:84:ca:12: e1:8a:e6:78:1f:1a:8b:de:ac:33:e0:58:27:d9:97:89:41:01: de:97:b0:23:36:68:13:dc:3f:90:e4:12:a4:7d:85:d5:0d:0b: 5e:ce:84:11:86:99:40:51:71:5d:cf:2e:c4:01:20:dc:3c:69: 7f:5c:40:2d:ca:b6:54:a7:67:26:5b:bc:ed:c3:89:3f:1f:91: 7e:ef:26:ff:69:b7:ab:f2:87:98:f4:f8:c6:94:26:88:bc:da: 99:fc:b2:e2:2d:cb:bf:35:c6:e8:31:34:dc:42:82:76:21:84: 54:f4:3a:b6:32:f7:54:16:97:dd:4a:5e:f2:23:a8:cf:74:92: 35:45:35:6b:1a:e8:d9:48:ea:9a:56:e2:69:c2:7f:53:ec:9b: 48:01:27:75:64:29:b3:e5:3d:2a:37:dc:36:d2:d0:67:da:e6: 36:7a:55:b3:22:6a:9a:75:52:c4:59:ac:09:ac:bd:e1:41:f4: 3e:08:fb:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5QkQxMTAvBgNVBAUTKDU2Qjc2ODAxRDUwQTRFNjNDODVFMDY0NTc3MDY1NEI3 RjkzNkM5OTQwHhcNMjUwNzAxMDMxOTI4WhcNMjUwNzA4MDMxOTI4WjAYMRYwFAYD VQQDEw02ODYzNTNjMC1hNGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03n2ZBB1/zVVyEOv//AxaqVerY4N6iSnKAIFeymmGonQbpQx2f2apQm+Ikhn wH4hi96u1990Z8bNxU9JfmxiazcnZ/Z+uPRMHAdHmhK1tXOJuKES6j+MKF8G0zdE +WB5ew71w3o8slIG0o0UMHsG4H9QkOxAcM/078AuOhqRJLU7wBvXvQrmP8TFvMo1 FIiCZqHvBKlWToDb0bW+hFc2T7JEvQHs6vcsoKUjrzuhQjoPfA35Uq0bnU7g0kRJ h5O7MnALTBRWTlQFksd08pyXawcLPH0UKfg665dsA4Xk309g28CdpOKJHxyHxf04 YmpwhbdUIy92tjSkWyekDL1AUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhM516W 7/iPxBv6wpmo92YG0t2WMB8GA1UdIwQYMBaAFFa3aAHVCk5jyF4GRXcGVLf5NsmU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDlCRC8yN0QzRkNBQTk3 Q0MxMUVEQkRCQTEyMTJDNEY5QUUwMi9WcmRvQWRVS1RtUElYZ1pGZHdaVXRfazJ5 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZyZG9BZFVLVG1QSVhnWkZkd1pVdF9rMnlaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDlCRC8yN0QzRkNBQTk3Q0MxMUVEQkRCQTEyMTJDNEY5QUUwMi9WcmRvQWRVS1Rt UElYZ1pGZHdaVXRfazJ5WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADyWuRlogotvbv1zX7k6EgkGeCDQAEdsCAj8PSL5so4TqKP9J9Pjd8 ALx/NXMl19YiP7IK+A4Mck8YxSgjAPfnBW6ANjCEyhLhiuZ4HxqL3qwz4Fgn2ZeJ QQHel7AjNmgT3D+Q5BKkfYXVDQtezoQRhplAUXFdzy7EASDcPGl/XEAtyrZUp2cm W7ztw4k/H5F+7yb/aber8oeY9PjGlCaIvNqZ/LLiLcu/NcboMTTcQoJ2IYRU9Dq2 MvdUFpfdSl7yI6jPdJI1RTVrGujZSOqaVuJpwn9T7JtIASd1ZCmz5T0qN9w20tBn 2uY2elWzImqadVLEWawJrL3hQfQ+CPsG -----END CERTIFICATE-----Generated at Wed Jul 2 21:51:35 2025 by rpki-client