$ rpki-client -vvf rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft File: vUxEHwLHrdQvpiQugzHZP1nlGDo.mft (raw, json) Hash identifier: suzXZJiNzMUm0S0mVJOerVI7oiCFY3TZcBM5+ItXDCA= Subject key identifier: 7C:CD:D2:85:13:23:43:8E:7B:FA:E8:95:9D:CD:4B:35:9B:A6:70:D5 Authority key identifier: BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A Certificate issuer: /CN=A91C67F9/serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft Manifest number: 01D8 Signing time: Sat 05 Jul 2025 03:06:39 +0000 Manifest this update: Sat 05 Jul 2025 03:06:39 +0000 Manifest next update: Sat 12 Jul 2025 03:06:39 +0000 Files and hashes: 1: vUxEHwLHrdQvpiQugzHZP1nlGDo.crl (hash: GU7Q4qrc8oTtts2O4DxJXuvMWyzEB+O+YmkxgjhRAdk=) 2: 079523028DB211ED910C330CC4F9AE02.roa (hash: W9Hoie4kNxclHpEMWbcvds2qMQa9C1Hni+pmtAE5bWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C67F9, serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A Validity Not Before: Jul 5 03:06:39 2025 GMT Not After : Jul 12 03:06:39 2025 GMT Subject: CN=686896bf-6563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fa:04:c9:48:47:c1:00:67:fa:b0:74:0b:c3: a9:2e:39:1a:3d:fe:cb:86:9f:3c:89:3d:8e:1f:3f: 4a:da:df:c9:13:2a:2f:0d:f4:cc:41:fb:40:8d:d0: 34:0d:1b:16:25:e6:f3:9a:b3:bc:e1:c1:ff:ae:45: 6e:a2:36:9f:d7:04:99:57:a7:cb:8e:24:d9:fb:75: eb:fb:b1:35:b9:4e:a9:4d:01:d6:93:cc:91:e8:f1: b1:c3:15:b0:d7:ea:42:d7:e2:63:93:37:7f:66:71: 32:19:ca:5f:cb:b0:73:29:32:2a:81:8d:b3:83:78: d7:c4:50:e8:f9:3d:4d:72:8c:f5:b7:d2:27:db:ab: 6c:f8:a1:aa:a5:5f:33:53:45:9c:bb:0a:8d:52:e8: bc:1c:8e:d9:3f:21:13:34:22:67:df:37:08:4f:09: 92:77:b8:13:d5:ef:02:f8:4d:41:ec:6c:ce:e3:ee: 4c:fa:ba:ac:22:18:18:64:b1:bb:41:74:bc:85:97: 7b:a4:bf:33:71:19:89:08:36:4e:9d:04:fb:3d:1f: 24:d5:00:15:4a:fd:52:0c:cb:f4:2d:f5:01:b1:d8: 05:1d:7f:5e:1b:7b:40:41:b5:d0:0f:a0:4d:8f:c8: de:77:cf:16:38:50:ed:6c:76:08:7c:b9:52:f8:13: 1f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CD:D2:85:13:23:43:8E:7B:FA:E8:95:9D:CD:4B:35:9B:A6:70:D5 X509v3 Authority Key Identifier: keyid:BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d5:ae:c2:99:b8:49:db:85:ba:6d:08:a0:a2:54:36:8a:60: ed:4d:0f:8f:f9:7f:de:57:ef:af:8a:1c:54:10:55:3e:c0:a0: 28:38:35:b9:ef:63:d9:6d:74:3f:8b:1b:fb:b0:ba:b5:9e:d2: 47:25:fc:03:e6:0c:4e:a5:9b:15:75:11:42:a1:5e:3f:3e:59: 2e:4e:86:52:f6:ce:cc:cd:82:20:a6:b2:07:27:61:f6:12:8f: e6:24:01:57:e5:24:ba:fd:a0:8b:c4:b2:c8:58:95:3f:fa:04: 48:38:99:de:4f:ca:dd:9c:51:6b:39:90:5c:0c:95:21:38:ce: 59:b1:a4:23:28:21:8a:a3:80:91:a7:c3:fd:7a:b2:1c:7b:0c: 0a:12:42:c5:4e:d9:7f:59:7c:07:e6:95:b5:4d:ed:a6:4a:d3: 3d:99:1a:3e:ae:69:3c:54:3b:8b:ca:bb:7e:89:9d:38:f9:3d: 0d:4f:6c:c7:ec:09:e1:ed:26:8d:82:4a:73:77:91:1c:d9:98: 16:8a:ad:67:36:27:c7:3e:c0:d7:6b:08:bc:39:10:b2:fa:01: 08:00:be:61:79:a7:59:96:85:25:ab:79:9a:6a:7b:79:f3:01: cb:6a:d4:8a:a2:0d:4f:71:7c:48:8a:49:be:cd:9f:3a:3a:ab: 23:fe:1d:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY3RjkxMTAvBgNVBAUTKEJENEM0NDFGMDJDN0FERDQyRkE2MjQyRTgzMzFEOTNG NTlFNTE4M0EwHhcNMjUwNzA1MDMwNjM5WhcNMjUwNzEyMDMwNjM5WjAYMRYwFAYD VQQDEw02ODY4OTZiZi02NTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5foEyUhHwQBn+rB0C8OpLjkaPf7Lhp88iT2OHz9K2t/JEyovDfTMQftAjdA0 DRsWJebzmrO84cH/rkVuojaf1wSZV6fLjiTZ+3Xr+7E1uU6pTQHWk8yR6PGxwxWw 1+pC1+Jjkzd/ZnEyGcpfy7BzKTIqgY2zg3jXxFDo+T1Ncoz1t9In26ts+KGqpV8z U0WcuwqNUui8HI7ZPyETNCJn3zcITwmSd7gT1e8C+E1B7GzO4+5M+rqsIhgYZLG7 QXS8hZd7pL8zcRmJCDZOnQT7PR8k1QAVSv1SDMv0LfUBsdgFHX9eG3tAQbXQD6BN j8jed88WOFDtbHYIfLlS+BMfrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzN0oUT I0OOe/rolZ3NSzWbpnDVMB8GA1UdIwQYMBaAFL1MRB8Cx63UL6YkLoMx2T9Z5Rg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjdGOS9FQUUxMkU0NDhE QUQxMUVEQjJEQ0M0ODdDNEY5QUUwMi92VXhFSHdMSHJkUXZwaVF1Z3pIWlAxbmxH RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZVeEVId0xIcmRRdnBpUXVnekhaUDFubEdEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjdGOS9FQUUxMkU0NDhEQUQxMUVEQjJEQ0M0ODdDNEY5QUUwMi92VXhFSHdMSHJk UXZwaVF1Z3pIWlAxbmxHRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq1a7CmbhJ24W6bQigolQ2imDtTQ+P+X/eV++vihxUEFU+wKAoODW5 72PZbXQ/ixv7sLq1ntJHJfwD5gxOpZsVdRFCoV4/PlkuToZS9s7MzYIgprIHJ2H2 Eo/mJAFX5SS6/aCLxLLIWJU/+gRIOJneT8rdnFFrOZBcDJUhOM5ZsaQjKCGKo4CR p8P9erIcewwKEkLFTtl/WXwH5pW1Te2mStM9mRo+rmk8VDuLyrt+iZ04+T0NT2zH 7Anh7SaNgkpzd5Ec2ZgWiq1nNifHPsDXawi8ORCy+gEIAL5headZloUlq3maant5 8wHLatSKog1PcXxIikm+zZ86Oqsj/h0e -----END CERTIFICATE-----Generated at Sat Jul 5 14:26:25 2025 by rpki-client