$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft File: vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft (raw, json) Hash identifier: C7dDvsFA1YdeGpfkGIEUJhyRKLXCUIDt3D4DvfAlS0I= Subject key identifier: F0:3D:E1:FD:73:CA:E8:AD:4A:A1:A4:AA:C4:CA:22:61:A1:B2:33:9D Authority key identifier: BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D Certificate issuer: /CN=A91C612E/serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft Manifest number: 12FE Signing time: Fri 04 Jul 2025 18:54:30 +0000 Manifest this update: Fri 04 Jul 2025 18:54:29 +0000 Manifest next update: Fri 11 Jul 2025 18:54:29 +0000 Files and hashes: 1: vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl (hash: ERZSCwd4iSBfiuUQ6X9F/7/ctge4Rr1XujiaK6azMD8=) 2: 763E080A142911F087C1AF7CC4F9AE02.roa (hash: OqYmuSN5Gj4HYv1k95fE+DkrkF2QoPlx9+v7d3wB2mI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D Validity Not Before: Jul 4 18:54:29 2025 GMT Not After : Jul 11 18:54:29 2025 GMT Subject: CN=68682365-b4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:81:4e:fe:73:a1:b2:7a:30:13:83:cf:cc:f0: 86:4a:3c:f7:5a:cc:8c:f2:ae:27:5b:41:b8:3c:6a: e2:c8:24:6e:a8:cf:6b:d1:1b:04:72:7c:2c:08:c2: 68:9b:1b:0a:f6:42:c8:0e:77:0c:6b:d9:cc:22:be: 9c:d6:cc:b3:a4:08:ad:72:52:c1:97:4c:cd:58:e2: 68:df:0f:e1:97:95:7e:f0:58:ff:15:71:3e:6d:c0: 20:f8:83:24:98:5f:1f:e2:56:87:df:45:6e:19:35: ff:27:1f:19:9a:eb:69:93:31:3b:d7:b1:07:ce:54: fc:5f:b7:a0:a3:fd:9e:eb:c0:cc:0e:29:87:2b:50: 4d:ca:0f:80:69:79:56:2d:7f:4d:d0:1c:ef:bd:f6: e2:9e:a7:91:10:3e:05:e7:56:19:f2:a8:5e:6b:21: 59:78:2d:10:8c:9a:7e:7c:82:6b:a7:84:3a:9b:40: 83:0d:e1:77:12:1e:74:ff:2a:f0:ef:c1:f1:75:01: 35:81:b4:ea:a6:fb:7a:a4:04:c9:33:1b:bf:39:e9: 8b:23:cf:c3:58:a1:bb:ca:da:9d:0e:cb:f2:db:2d: db:d5:c2:86:67:b9:60:e4:56:f9:bc:f7:06:b0:8d: 68:35:f8:e1:84:04:41:a8:3b:17:47:f5:09:70:7b: df:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3D:E1:FD:73:CA:E8:AD:4A:A1:A4:AA:C4:CA:22:61:A1:B2:33:9D X509v3 Authority Key Identifier: keyid:BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:d4:54:be:41:0f:79:4d:a8:a0:ac:d9:a1:59:59:c2:d8:70: 0b:0d:4d:fd:d8:0f:c8:31:1a:4a:1e:3e:55:cc:a0:cc:64:6d: 4c:ed:a1:92:6b:a3:6c:3b:f5:8f:0f:67:1c:7e:d0:c6:b1:18: 84:93:20:6c:eb:46:a4:3c:f8:87:d5:42:c3:c6:3a:9b:fe:0a: bb:87:e9:3a:29:3b:0c:49:06:73:21:d1:16:6a:3e:3c:de:25: ca:a5:d0:d5:d6:5a:a1:d7:fa:0b:03:cb:28:a7:8f:0a:39:f8: ba:25:b0:54:f0:d0:fc:96:94:3c:2f:72:55:e0:a3:81:d9:d2: b4:cb:66:4d:0a:77:a1:fd:17:5a:5c:c4:27:db:d5:6e:87:61: e6:27:6e:2c:b8:73:89:b5:b1:b0:c0:c6:7d:77:48:9c:9e:6b: e8:e6:33:ce:ee:ab:6b:34:eb:fe:a9:4e:da:0b:a0:72:86:52: 46:e9:6c:6b:76:4e:d8:26:ec:c5:3f:a6:81:59:3e:1d:ba:65: 84:4a:71:6f:a1:e5:ac:11:24:f6:09:b3:fe:87:26:d0:64:ad: 91:75:51:9d:d8:37:20:e8:cd:42:20:cc:9d:9c:55:f8:8f:0a: db:00:19:0d:4a:f1:a7:02:00:98:3e:80:17:5d:f9:e6:b4:be: d0:1e:94:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjEyRTExMC8GA1UEBRMoQkVBN0U5OEM1QTNGQjVGQkQ4MzBBNDM1OTQ0MUI0MjI0 NzI3QzcyRDAeFw0yNTA3MDQxODU0MjlaFw0yNTA3MTExODU0MjlaMBgxFjAUBgNV BAMTDTY4NjgyMzY1LWI0ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqgU7+c6GyejATg8/M8IZKPPdazIzyridbQbg8auLIJG6oz2vRGwRyfCwIwmib Gwr2QsgOdwxr2cwivpzWzLOkCK1yUsGXTM1Y4mjfD+GXlX7wWP8VcT5twCD4gySY Xx/iVoffRW4ZNf8nHxma62mTMTvXsQfOVPxft6Cj/Z7rwMwOKYcrUE3KD4BpeVYt f03QHO+99uKep5EQPgXnVhnyqF5rIVl4LRCMmn58gmunhDqbQIMN4XcSHnT/KvDv wfF1ATWBtOqm+3qkBMkzG7856Ysjz8NYobvK2p0Oy/LbLdvVwoZnuWDkVvm89waw jWg1+OGEBEGoOxdH9Qlwe9//AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8D3h/XPK 6K1KoaSqxMoiYaGyM50wHwYDVR0jBBgwFoAUvqfpjFo/tfvYMKQ1lEG0Ikcnxy0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2MTJFLzY1QkMxN0QyMEI2 MTExRUFBRjA0MkY2OEM0RjlBRTAyL3ZxZnBqRm9fdGZ2WU1LUTFsRUcwSWtjbnh5 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdnFmcGpGb190ZnZZTUtRMWxFRzBJa2NueHkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 MTJFLzY1QkMxN0QyMEI2MTExRUFBRjA0MkY2OEM0RjlBRTAyL3ZxZnBqRm9fdGZ2 WU1LUTFsRUcwSWtjbnh5MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADbUVL5BD3lNqKCs2aFZWcLYcAsNTf3YD8gxGkoePlXMoMxkbUztoZJr o2w79Y8PZxx+0MaxGISTIGzrRqQ8+IfVQsPGOpv+CruH6TopOwxJBnMh0RZqPjze Jcql0NXWWqHX+gsDyyinjwo5+LolsFTw0PyWlDwvclXgo4HZ0rTLZk0Kd6H9F1pc xCfb1W6HYeYnbiy4c4m1sbDAxn13SJyea+jmM87uq2s06/6pTtoLoHKGUkbpbGt2 Ttgm7MU/poFZPh26ZYRKcW+h5awRJPYJs/6HJtBkrZF1UZ3YNyDozUIgzJ2cVfiP CtsAGQ1K8acCAJg+gBdd+ea0vtAelPc= -----END CERTIFICATE-----Generated at Sun Jul 6 00:51:42 2025 by rpki-client