$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft File: T_VN6rrUlFWSUQEqpawiKVDLJh4.mft (raw, json) Hash identifier: bUfXouV9byqzmUVR6c7XwYD+37QmlXbeFvFaqflZ99U= Subject key identifier: 23:E6:20:6E:72:E3:AD:A9:09:A7:68:4B:92:CF:C2:72:DD:15:0C:9D Authority key identifier: 4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E Certificate issuer: /CN=A91B38F5/serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft Manifest number: 38 Signing time: Tue 01 Jul 2025 08:21:39 +0000 Manifest this update: Tue 01 Jul 2025 08:21:39 +0000 Manifest next update: Tue 08 Jul 2025 08:21:38 +0000 Files and hashes: 1: T_VN6rrUlFWSUQEqpawiKVDLJh4.crl (hash: 8T3CNrWV7PRsIc4BKSlPrTFBlcUx5ngb36fqFzL87K8=) 2: B66603C6025C11F0BDF41912C4F9AE02.roa (hash: H2+Ddkh87XoYI/8vzCTZnxyRNxL5o9son0tiMIrsX2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B38F5, serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E Validity Not Before: Jul 1 08:21:39 2025 GMT Not After : Jul 8 08:21:38 2025 GMT Subject: CN=68639a93-69c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:66:97:e7:db:66:c5:d0:d1:8b:83:cf:2c:c4: fb:77:ec:a5:3b:5c:89:b9:6c:0a:62:e7:66:5b:3d: 99:11:62:90:3f:44:c6:eb:28:10:a8:de:f8:45:ae: 79:af:7b:73:df:61:85:12:6d:33:f2:c9:ed:2b:7f: 77:bc:08:bf:b4:ca:0b:df:f9:5f:76:1b:47:a0:40: 67:7e:44:40:80:7f:62:53:87:e8:3f:8d:ac:aa:8a: c9:a7:d2:40:4e:49:60:39:c7:63:a6:38:5a:5c:2c: 3e:f8:f0:71:2b:ad:d4:05:5c:fd:42:7a:2a:f9:ca: 48:84:e1:72:c2:23:bf:36:bf:6c:f8:7d:d4:a7:94: b5:f2:c9:d8:ab:f3:22:f8:4a:15:57:67:69:bd:51: 22:fd:ef:c4:dc:31:4f:f9:49:c1:e1:f1:be:f5:88: a4:c9:da:a5:e0:43:84:14:b6:e9:af:f0:14:93:85: 71:7f:89:d3:ba:82:8e:c3:46:a5:19:78:13:e8:f2: bf:f5:e3:b5:18:73:48:42:b8:ac:08:08:5f:2b:65: 60:2a:85:4f:e2:70:f5:d1:54:2f:d0:3d:45:28:13: 8d:f5:6c:03:9e:ab:c7:85:09:e9:f8:f2:7c:81:c5: 90:db:fb:6f:8a:0b:26:fe:ee:54:21:d5:04:aa:f1: 31:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E6:20:6E:72:E3:AD:A9:09:A7:68:4B:92:CF:C2:72:DD:15:0C:9D X509v3 Authority Key Identifier: keyid:4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:fd:c8:c4:85:e2:9a:a9:0c:70:36:f3:d2:40:04:ab:bd:98: d2:ed:13:c1:ec:91:c1:94:e5:1c:4d:1e:5a:f7:9a:fc:46:a9: 1d:c7:66:ee:e7:f0:6b:37:3d:fa:58:66:79:1b:0c:4b:f3:c4: b9:54:6b:01:a8:2f:4a:56:ba:b8:47:77:20:8d:db:c2:36:c1: 55:4b:41:4f:5c:dd:c0:c2:9d:fb:51:f7:53:62:ff:9f:5a:7c: a3:84:8b:5e:09:93:dc:54:ba:43:09:ab:ff:96:a5:6b:2a:08: cc:42:63:02:5c:f8:73:12:c4:e3:23:b0:5b:1c:b9:8b:c2:a7: aa:3e:8e:bf:15:f3:7f:eb:c7:fb:55:8a:a4:16:1f:41:9b:5e: 75:a6:b1:f2:55:6f:00:6b:c6:48:3a:11:77:d5:99:6c:1f:de: 01:16:86:02:27:73:69:cf:bb:25:8d:e9:ca:55:1a:4b:78:ff: 09:57:db:b4:d8:38:67:cf:8a:07:3d:5e:ba:dd:f7:68:f3:83: ac:26:cb:5c:05:3e:28:d2:bf:51:fa:09:df:60:2d:c2:13:ee: b7:d4:fd:93:95:78:d9:1d:a0:14:d2:44:db:d5:f5:5f:95:e6: bb:57:6b:5c:c2:af:d3:6f:8b:1d:cd:53:a9:14:05:e8:e6:4e: f1:35:45:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzhGNTExMC8GA1UEBRMoNEZGNTRERUFCQUQ0OTQ1NTkyNTEwMTJBQTVBQzIyMjk1 MENCMjYxRTAeFw0yNTA3MDEwODIxMzlaFw0yNTA3MDgwODIxMzhaMBgxFjAUBgNV BAMTDTY4NjM5YTkzLTY5YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIZpfn22bF0NGLg88sxPt37KU7XIm5bApi52ZbPZkRYpA/RMbrKBCo3vhFrnmv e3PfYYUSbTPyye0rf3e8CL+0ygvf+V92G0egQGd+RECAf2JTh+g/jayqismn0kBO SWA5x2OmOFpcLD748HErrdQFXP1Ceir5ykiE4XLCI782v2z4fdSnlLXyydir8yL4 ShVXZ2m9USL978TcMU/5ScHh8b71iKTJ2qXgQ4QUtumv8BSThXF/idO6go7DRqUZ eBPo8r/147UYc0hCuKwICF8rZWAqhU/icPXRVC/QPUUoE431bAOeq8eFCen48nyB xZDb+2+KCyb+7lQh1QSq8THXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUI+YgbnLj rakJp2hLks/Cct0VDJ0wHwYDVR0jBBgwFoAUT/VN6rrUlFWSUQEqpawiKVDLJh4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzOEY1L0YwMjYzRkYwMDI1 QjExRjA5QUNGRDkxMEM0RjlBRTAyL1RfVk42cnJVbEZXU1VRRXFwYXdpS1ZETEpo NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVF9WTjZyclVsRldTVVFFcXBhd2lLVkRMSmg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz OEY1L0YwMjYzRkYwMDI1QjExRjA5QUNGRDkxMEM0RjlBRTAyL1RfVk42cnJVbEZX U1VRRXFwYXdpS1ZETEpoNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIP9yMSF4pqpDHA289JABKu9mNLtE8HskcGU5RxNHlr3mvxGqR3HZu7n 8Gs3PfpYZnkbDEvzxLlUawGoL0pWurhHdyCN28I2wVVLQU9c3cDCnftR91Ni/59a fKOEi14Jk9xUukMJq/+WpWsqCMxCYwJc+HMSxOMjsFscuYvCp6o+jr8V83/rx/tV iqQWH0GbXnWmsfJVbwBrxkg6EXfVmWwf3gEWhgInc2nPuyWN6cpVGkt4/wlX27TY OGfPigc9Xrrd92jzg6wmy1wFPijSv1H6Cd9gLcIT7rfU/ZOVeNkdoBTSRNvV9V+V 5rtXa1zCr9Nvix3NU6kUBejmTvE1RXU= -----END CERTIFICATE-----Generated at Tue Jul 1 12:34:07 2025 by rpki-client