$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft File: VzWraqwyeVRCT5_oyoUzQpnde8I.mft (raw, json) Hash identifier: kO5h2cARXKQfEX+zdYd5vpmfhbVPgSJxjNw053cQtyE= Subject key identifier: A8:39:B2:E6:60:6F:8A:C9:B9:46:4A:A3:8D:13:DF:BB:C9:0F:16:A8 Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 Certificate issuer: /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Certificate serial: 0F69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft Manifest number: 0F5E Signing time: Mon 30 Jun 2025 17:47:28 +0000 Manifest this update: Mon 30 Jun 2025 17:47:27 +0000 Manifest next update: Mon 07 Jul 2025 17:47:27 +0000 Files and hashes: 1: VzWraqwyeVRCT5_oyoUzQpnde8I.crl (hash: 7dKfP/h/HWe2B50H71HhxCXUw+zNoKKbUi/tIkXsSgo=) 2: F27C04B8779E11E997C0204AC4F9AE02.roa (hash: DZGyjsonfYGjBw4hHPzT7rTakbn4N6VzJZPth34e8Gc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3945 (0xf69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE392, serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Validity Not Before: Jun 30 17:47:27 2025 GMT Not After : Jul 7 17:47:27 2025 GMT Subject: CN=6862cdb0-ce07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:28:db:50:95:3f:15:fc:0b:9c:8d:4a:28: 20:e6:d8:48:96:2f:f1:09:fe:ee:77:96:21:a1:46: 6f:dc:1e:b6:a6:90:c7:8d:d9:a6:60:fd:c5:ab:9e: 43:1f:88:86:16:d4:11:f4:c9:bc:96:5e:d2:d1:73: b4:b3:73:61:bb:a5:f6:b6:e4:b1:bb:e8:33:74:49: 54:b9:23:c3:5f:6a:9c:59:0e:0b:f5:8f:e0:3f:19: e7:61:16:98:c8:a0:c3:23:d6:9c:a3:41:19:96:13: f7:43:b2:07:77:a5:01:2a:9c:68:38:31:f5:16:70: 44:b4:bf:10:77:f6:1b:88:8c:1b:70:d9:98:2e:66: fc:ef:0d:fe:fd:fb:f7:1b:be:2d:ce:e0:2c:46:dd: d6:8c:38:d8:06:2d:8b:9f:4f:c3:03:ae:25:1f:8e: ec:09:15:58:a6:8c:21:a6:36:dd:e3:f8:74:70:3f: 52:06:e5:3d:12:72:40:5a:3a:3a:bd:17:24:eb:51: 51:9d:6b:19:ad:d6:e9:c0:3e:d4:61:de:eb:41:bd: d8:83:19:3a:32:bc:c4:a7:89:d1:2a:74:55:13:6a: ef:db:55:7a:84:71:b8:74:41:cb:06:64:d8:bf:73: 1d:86:9f:c1:e2:f9:b6:4c:66:6f:41:08:ee:bb:e6: 6d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:39:B2:E6:60:6F:8A:C9:B9:46:4A:A3:8D:13:DF:BB:C9:0F:16:A8 X509v3 Authority Key Identifier: keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:02:fd:36:51:cf:71:28:cc:05:29:94:fa:85:71:68:1f:ec: 3a:83:55:55:13:66:52:99:43:f4:62:1f:de:b8:3a:ca:06:a0: e4:3b:e5:9f:6f:f8:cf:45:3e:c8:aa:34:2b:b3:1a:6c:20:1d: a3:3c:3b:aa:6c:42:13:a8:49:76:67:19:fb:a8:6c:de:0a:50: cf:d3:0e:21:26:76:93:c9:e8:b4:1b:07:81:21:ec:e0:4a:dd: ac:1e:59:b2:33:ed:99:fa:5c:2e:1b:91:7b:59:26:c1:73:5b: 44:7e:00:52:02:55:05:66:eb:91:91:40:68:18:63:3f:86:a3: db:f6:d4:51:bd:cf:45:d2:9e:4d:db:69:49:f7:1b:fa:0b:fa: 70:32:3b:ae:41:d1:93:f4:60:aa:5f:af:1f:f7:a4:f1:1a:32: fe:dc:95:3f:d5:03:7d:63:9c:69:da:dd:26:13:7e:9c:24:d0: 05:ff:8e:43:70:5d:08:ff:7c:16:e5:79:84:2c:2f:2c:42:a1: 7e:7e:69:34:9e:20:d9:6f:15:e0:d4:96:fe:f1:e5:7c:1c:29: 04:71:b6:ed:cb:4e:b1:7a:0a:4f:ca:27:27:74:39:07:1b:ef: 58:20:f2:ff:c9:4e:50:0f:a4:ba:b6:a0:0c:16:af:a2:1a:94: 7d:2b:c5:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOTIxMTAvBgNVBAUTKDU3MzVBQjZBQUMzMjc5NTQ0MjRGOUZFOENBODUzMzQy OTlERDdCQzIwHhcNMjUwNjMwMTc0NzI3WhcNMjUwNzA3MTc0NzI3WjAYMRYwFAYD VQQDEw02ODYyY2RiMC1jZTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmQo21CVPxX8C5yNSigg5thIli/xCf7ud5YhoUZv3B62ppDHjdmmYP3Fq55D H4iGFtQR9Mm8ll7S0XO0s3Nhu6X2tuSxu+gzdElUuSPDX2qcWQ4L9Y/gPxnnYRaY yKDDI9aco0EZlhP3Q7IHd6UBKpxoODH1FnBEtL8Qd/YbiIwbcNmYLmb87w3+/fv3 G74tzuAsRt3WjDjYBi2Ln0/DA64lH47sCRVYpowhpjbd4/h0cD9SBuU9EnJAWjo6 vRck61FRnWsZrdbpwD7UYd7rQb3Ygxk6MrzEp4nRKnRVE2rv21V6hHG4dEHLBmTY v3Mdhp/B4vm2TGZvQQjuu+ZtHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKg5suZg b4rJuUZKo40T37vJDxaoMB8GA1UdIwQYMBaAFFc1q2qsMnlUQk+f6MqFM0KZ3XvC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Mi82RDZBMkEyODZD RDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVWUkNUNV9veW9VelFwbmRl OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z6V3JhcXd5ZVZSQ1Q1X295b1V6UXBuZGU4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Mi82RDZBMkEyODZDRDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVW UkNUNV9veW9VelFwbmRlOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWAv02Uc9xKMwFKZT6hXFoH+w6g1VVE2ZSmUP0Yh/euDrKBqDkO+Wf b/jPRT7IqjQrsxpsIB2jPDuqbEITqEl2Zxn7qGzeClDP0w4hJnaTyei0GweBIezg St2sHlmyM+2Z+lwuG5F7WSbBc1tEfgBSAlUFZuuRkUBoGGM/hqPb9tRRvc9F0p5N 22lJ9xv6C/pwMjuuQdGT9GCqX68f96TxGjL+3JU/1QN9Y5xp2t0mE36cJNAF/45D cF0I/3wW5XmELC8sQqF+fmk0niDZbxXg1Jb+8eV8HCkEcbbty06xegpPyicndDkH G+9YIPL/yU5QD6S6tqAMFq+iGpR9K8UM -----END CERTIFICATE-----Generated at Wed Jul 2 06:38:25 2025 by rpki-client