$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft File: vK5XMu8hlzK0msgoTbGBTpLIaxE.mft (raw, json) Hash identifier: UwwxGQ+SdGl/rDAuBTNVYgM7hGeDJs039cyZpm54+YM= Subject key identifier: 68:B0:F0:11:54:D5:DB:A5:29:CE:67:2E:7D:E4:20:5A:B1:42:24:3D Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 Certificate issuer: /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Certificate serial: 089A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft Manifest number: 088C Signing time: Wed 02 Jul 2025 20:52:49 +0000 Manifest this update: Wed 02 Jul 2025 20:52:49 +0000 Manifest next update: Wed 09 Jul 2025 20:52:49 +0000 Files and hashes: 1: vK5XMu8hlzK0msgoTbGBTpLIaxE.crl (hash: I1eFSCZwxt9rp06/W3pb/Ln9IWXAGJp5munQ89zqBYA=) 2: 2015E6B2C66F11EAA0B1B019C4F9AE02.roa (hash: h3J4Tvd13De8oeu9y10qw5WhotHnj9E107WlmlhLTLE=) 3: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (hash: WRLRqvOq3SfDppm3IqDFX7iVTIlxw9qpmPcVf6+EH5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2202 (0x89a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Validity Not Before: Jul 2 20:52:49 2025 GMT Not After : Jul 9 20:52:49 2025 GMT Subject: CN=68659c21-ee25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3f:2a:88:e5:0a:28:34:34:91:f6:2b:6b:9e: 13:8b:de:c7:b2:09:47:71:22:44:3d:bd:f7:44:8b: d9:6a:57:c1:b6:63:0d:55:a1:9c:aa:16:bf:78:be: 97:c4:f2:39:82:17:48:8d:26:d6:5d:c4:27:66:0c: e3:bc:16:8d:c8:da:b3:64:24:79:a5:de:cd:91:87: ff:95:a6:49:a6:d1:ca:d9:29:20:84:dc:39:3e:90: 2e:be:fe:1e:7c:b3:e6:1c:2b:45:9c:3f:16:9e:7b: f2:1d:c7:85:21:b3:7f:75:79:9b:a9:b8:d8:e7:85: c3:90:0d:f6:b2:2e:a0:56:d1:1b:72:6b:27:b9:f1: a6:74:1b:1c:1f:44:5a:33:8d:b6:69:55:2a:35:85: 9e:7e:63:82:9b:96:bf:5e:2b:3a:5d:10:74:25:57: 75:92:e1:0a:37:47:66:1d:f4:91:59:30:f3:8b:0a: 7a:91:d6:72:4d:61:b8:cd:7f:c8:f3:65:e8:c7:ae: 4c:e5:70:7a:45:e7:ff:ee:3a:b2:ae:57:9a:24:e6: b1:a3:50:dd:16:e3:97:d6:eb:8b:4a:eb:18:88:27: 5f:cc:ee:cd:cd:12:22:84:e8:d3:09:9a:2f:2a:5a: 5c:bf:0f:f6:cd:47:f9:ed:29:4e:54:5c:b8:e2:2f: a9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B0:F0:11:54:D5:DB:A5:29:CE:67:2E:7D:E4:20:5A:B1:42:24:3D X509v3 Authority Key Identifier: keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:fa:5c:69:95:fa:49:74:b2:74:58:59:a3:32:96:43:ca:39: 13:6f:b0:8f:58:58:e5:f3:82:d8:05:d1:0f:da:95:41:e6:e8: b3:76:e9:1a:0e:e5:40:10:88:0e:11:dd:ba:a1:c0:31:08:16: 17:67:7f:18:45:ba:13:f3:bb:d3:1e:36:57:97:b5:a2:45:f0: 47:a7:62:5c:ba:f6:1b:d5:59:a2:3f:c5:c9:c1:d2:6d:a9:c7: cb:4f:6d:dd:d0:83:c1:53:e3:c5:58:15:f1:f0:6d:60:0a:f8: 3a:ae:da:11:11:82:3b:ba:cb:76:f2:b5:6e:14:80:86:fb:10: 7f:4c:88:0d:57:9d:b9:64:28:18:e8:ec:f6:3f:68:dd:60:b3: 1d:60:3a:46:01:8e:65:54:fb:ff:d0:30:4d:49:2b:22:96:df: 96:b0:0c:09:ad:2e:2a:54:20:66:a8:d3:48:74:e3:3f:23:cd: 6a:cf:82:33:b4:a6:e2:30:51:a4:12:95:b5:4b:b9:e0:a2:71: 34:fe:e0:32:a0:32:93:04:1f:61:56:db:44:6a:6b:a6:a1:65: 40:b8:1e:f0:e1:65:41:5c:13:91:e6:05:8e:5b:6b:38:d5:f0: ce:df:c3:f9:32:5a:ec:05:ed:99:e4:c0:9f:dc:8c:c1:65:be: e3:9a:4f:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1M0IxMTAvBgNVBAUTKEJDQUU1NzMyRUYyMTk3MzJCNDlBQzgyODREQjE4MTRF OTJDODZCMTEwHhcNMjUwNzAyMjA1MjQ5WhcNMjUwNzA5MjA1MjQ5WjAYMRYwFAYD VQQDEw02ODY1OWMyMS1lZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuj8qiOUKKDQ0kfYra54Ti97HsglHcSJEPb33RIvZalfBtmMNVaGcqha/eL6X xPI5ghdIjSbWXcQnZgzjvBaNyNqzZCR5pd7NkYf/laZJptHK2SkghNw5PpAuvv4e fLPmHCtFnD8WnnvyHceFIbN/dXmbqbjY54XDkA32si6gVtEbcmsnufGmdBscH0Ra M422aVUqNYWefmOCm5a/Xis6XRB0JVd1kuEKN0dmHfSRWTDziwp6kdZyTWG4zX/I 82Xox65M5XB6Ref/7jqyrleaJOaxo1DdFuOX1uuLSusYiCdfzO7NzRIihOjTCZov Klpcvw/2zUf57SlOVFy44i+pJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiw8BFU 1dulKc5nLn3kIFqxQiQ9MB8GA1UdIwQYMBaAFLyuVzLvIZcytJrIKE2xgU6SyGsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjUzQi8yOTM4M0NERUMy MEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6SzBtc2dvVGJHQlRwTElh eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLNVhNdThobHpLMG1zZ29UYkdCVHBMSWF4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjUzQi8yOTM4M0NERUMyMEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6 SzBtc2dvVGJHQlRwTElheEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf+lxplfpJdLJ0WFmjMpZDyjkTb7CPWFjl84LYBdEP2pVB5uizduka DuVAEIgOEd26ocAxCBYXZ38YRboT87vTHjZXl7WiRfBHp2JcuvYb1VmiP8XJwdJt qcfLT23d0IPBU+PFWBXx8G1gCvg6rtoREYI7ust28rVuFICG+xB/TIgNV525ZCgY 6Oz2P2jdYLMdYDpGAY5lVPv/0DBNSSsilt+WsAwJrS4qVCBmqNNIdOM/I81qz4Iz tKbiMFGkEpW1S7ngonE0/uAyoDKTBB9hVttEamumoWVAuB7w4WVBXBOR5gWOW2s4 1fDO38P5MlrsBe2Z5MCf3IzBZb7jmk/7 -----END CERTIFICATE-----Generated at Thu Jul 3 06:54:50 2025 by rpki-client