$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft File: VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft (raw, json) Hash identifier: v/8N3orkCe+ctJr4Oula67lNmNHNNIPKe2d6ojesIlk= Subject key identifier: 41:27:80:4D:1E:0D:45:6D:1E:A4:C1:3A:BF:3B:65:A7:1F:14:21:F9 Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Certificate serial: 05EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft Manifest number: 0539 Signing time: Thu 03 Jul 2025 00:26:37 +0000 Manifest this update: Thu 03 Jul 2025 00:26:36 +0000 Manifest next update: Thu 10 Jul 2025 00:26:36 +0000 Files and hashes: 1: VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl (hash: hHLqzuSOFgAM8O2A8VCPpOzJ4xQOEmFL9QeNj1yFGEw=) 2: 0BD4BBC2716911EDA03D4A50C4F9AE02.roa (hash: iCGYHqcapZ1DKt8RS4ox+PrMVLiDQPhQLsfb9ZqKn8Y=) 3: 48CB7422E27911ED88B5A641C4F9AE02.roa (hash: AVBCDstPuY5yPO2Ydm26gKhlgmx2X61R7QXZR/yk1Zo=) 4: D4FCF92C716B11ED9F349A49C4F9AE02.roa (hash: UuOQPjOHW3te4OiVFYw+HXL7r4q+xv2PoIFABxSLF70=) 5: B7342ECA555B11F0B35B1E0DC4F9AE02.roa (hash: ZCWgM50hKhmVlBN6caSNUYvrDT45U67mSi8JO40F7Hk=) 6: ECC41AD2748A11ED80EF3436C4F9AE02.roa (hash: sg221W/egXu0ZEIvG5/3NuaO+9JdsATAt/T48V/WxaU=) 7: 0C5EDCDA716911EDA03D4A50C4F9AE02.roa (hash: /udoJCuRJJiznFyAsVCyc0gM64uxhJqp5G9jTAQbZu4=) 8: 9A1D8B2E867D11ED856A8E54C4F9AE02.roa (hash: cieJSU2MctUg0O+GWn4XGuRsQ3vHkHefCudId57mspk=) 9: 8DEEDC96E6B511EF9FEF6436C4F9AE02.roa (hash: PXNaSMJ5YVKmgSX7D94F0YVFvnDTmRG8eGKKeg/Al70=) 10: 0D0517EE716911EDA03D4A50C4F9AE02.roa (hash: fhtBFY+6U1Q/NDrcrqBZE1BQCslriv3eFT6qN9HqyO4=) 11: D359E238716B11ED9F349A49C4F9AE02.roa (hash: aJuLqquEQyyIiKwXY41VQpBHPxNA/CIwMjOgaOCooJI=) 12: 1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa (hash: F6cMcszW3btFH4NtjFMkcGJMShjA1GIWoT3qHzp5ayU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1515 (0x5eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Validity Not Before: Jul 3 00:26:36 2025 GMT Not After : Jul 10 00:26:36 2025 GMT Subject: CN=6865ce3d-ec1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b6:5b:37:6c:84:51:01:0d:78:e9:6a:5b:49: 23:69:1d:fb:5f:a1:67:bf:a5:5b:36:85:a5:df:10: 64:f0:07:3a:0a:f7:63:ea:48:b9:89:62:a9:6f:66: 9d:92:b2:a4:c2:e8:1d:3b:ba:ff:81:51:f9:c7:01: 6b:2c:33:8a:57:74:1d:44:1f:a7:72:48:5e:2d:17: 79:2e:e0:5c:a5:08:58:af:8a:64:1b:9a:bb:af:a5: b8:5b:03:88:f8:75:6b:00:0f:e4:a3:01:d3:5e:55: e9:66:18:73:91:3c:d8:4e:1a:a9:5a:6e:53:36:03: 31:f2:aa:39:a1:6e:0d:e2:d9:9e:fa:db:53:62:24: 44:11:8c:71:70:41:4e:fd:6f:db:bd:95:90:89:fd: d7:dd:38:c8:4c:c8:d2:fd:0e:66:dd:66:42:9b:98: 81:64:f2:66:dc:0f:69:44:1f:7f:3e:fe:cc:b7:10: 30:5f:53:ce:b0:62:50:b3:d3:6b:7e:51:2e:ea:02: ed:23:36:96:fc:92:a3:ea:dd:cf:92:6b:4e:0a:e5: d3:8d:ef:b4:f1:d2:c2:1a:22:25:60:df:52:da:ba: d4:90:e1:32:82:3e:23:2a:72:13:57:39:77:ca:8d: 73:9b:4c:94:1a:f7:e7:79:76:bf:0f:b2:f6:8c:8e: 98:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:27:80:4D:1E:0D:45:6D:1E:A4:C1:3A:BF:3B:65:A7:1F:14:21:F9 X509v3 Authority Key Identifier: keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:49:4b:31:7b:45:ad:8e:5b:d9:d9:ce:76:3b:5b:97:73:c3: 38:68:a6:fb:72:c2:48:82:5f:a1:d4:c2:f1:de:70:5c:2f:57: d7:3c:07:40:3e:08:7f:56:24:bc:c0:b6:43:6e:53:63:8c:6f: 6d:0e:c3:16:de:0e:e5:b6:07:d8:3c:54:59:06:ed:14:cb:06: 8e:14:67:e6:75:68:bf:f8:36:5a:e8:cb:86:1f:a2:77:c3:1f: bb:1a:9c:43:45:d8:9e:1c:07:42:01:b0:39:a4:6f:15:ce:1d: 70:2e:c1:57:08:5e:34:c2:26:ff:e5:3c:4b:42:41:10:81:76: ec:91:23:c3:50:79:5f:72:53:32:23:59:44:e2:ee:2b:22:af: 38:9a:ae:0c:0d:39:08:8c:f2:ed:f8:51:bd:2f:ab:04:4b:49: d0:f2:92:fe:63:a7:85:2c:84:ba:cf:96:be:88:f2:43:5d:fe: a6:3a:9f:c0:bf:64:3c:48:34:ed:a4:11:09:4f:5e:b5:3e:98: dd:3b:e6:1d:01:19:0c:0f:74:8a:a6:f0:ca:ba:cb:ce:fa:05: 1f:78:1e:f9:da:c3:cb:44:10:b2:87:53:8d:84:7c:94:63:38: 35:54:fa:82:f0:a6:c4:db:71:05:ba:7e:db:08:05:af:9e:ed: 58:33:34:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3 RDc0MTQ3RjMwHhcNMjUwNzAzMDAyNjM2WhcNMjUwNzEwMDAyNjM2WjAYMRYwFAYD VQQDEw02ODY1Y2UzZC1lYzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbZbN2yEUQENeOlqW0kjaR37X6Fnv6VbNoWl3xBk8Ac6Cvdj6ki5iWKpb2ad krKkwugdO7r/gVH5xwFrLDOKV3QdRB+nckheLRd5LuBcpQhYr4pkG5q7r6W4WwOI +HVrAA/kowHTXlXpZhhzkTzYThqpWm5TNgMx8qo5oW4N4tme+ttTYiREEYxxcEFO /W/bvZWQif3X3TjITMjS/Q5m3WZCm5iBZPJm3A9pRB9/Pv7MtxAwX1POsGJQs9Nr flEu6gLtIzaW/JKj6t3PkmtOCuXTje+08dLCGiIlYN9S2rrUkOEygj4jKnITVzl3 yo1zm0yUGvfneXa/D7L2jI6Y1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEngE0e DUVtHqTBOr87ZacfFCH5MB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDM5RC9ERTdEMkY5NDRFNzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9S WF9JbVgtU1JrSng5ZEJSX00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeSUsxe0WtjlvZ2c52O1uXc8M4aKb7csJIgl+h1MLx3nBcL1fXPAdA Pgh/ViS8wLZDblNjjG9tDsMW3g7ltgfYPFRZBu0UywaOFGfmdWi/+DZa6MuGH6J3 wx+7GpxDRdieHAdCAbA5pG8Vzh1wLsFXCF40wib/5TxLQkEQgXbskSPDUHlfclMy I1lE4u4rIq84mq4MDTkIjPLt+FG9L6sES0nQ8pL+Y6eFLIS6z5a+iPJDXf6mOp/A v2Q8SDTtpBEJT161PpjdO+YdARkMD3SKpvDKusvO+gUfeB752sPLRBCyh1ONhHyU Yzg1VPqC8KbE23EFun7bCAWvnu1YMzQU -----END CERTIFICATE-----Generated at Thu Jul 3 05:06:43 2025 by rpki-client