$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft File: vjdwS4x985dWFxlK8q3u2hzJvPY.mft (raw, json) Hash identifier: sF50GIT1AxQu6y7GDXWml86Pfdw7Gp6kTfVDIwNHBWo= Subject key identifier: F6:06:09:AE:97:65:14:CA:69:BE:E2:15:A8:80:75:55:2D:23:AA:65 Authority key identifier: BE:37:70:4B:8C:7D:F3:97:56:17:19:4A:F2:AD:EE:DA:1C:C9:BC:F6 Certificate issuer: /CN=A91D0432/serialNumber=BE37704B8C7DF3975617194AF2ADEEDA1CC9BCF6 Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft Manifest number: 01E1 Signing time: Thu 03 Jul 2025 02:48:13 +0000 Manifest this update: Thu 03 Jul 2025 02:48:12 +0000 Manifest next update: Thu 10 Jul 2025 02:48:12 +0000 Files and hashes: 1: vjdwS4x985dWFxlK8q3u2hzJvPY.crl (hash: wBfWanshsC3qUbmf2fCq3062MqyqeFqqXZdEyMoP11g=) 2: 539DF534D1FB11EDA0A31C2FC4F9AE02.roa (hash: ZwuvYUkBHuPjyaZwcok71ZoBlPTV1oL4tY+NTXiSqLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.crl rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0432, serialNumber=BE37704B8C7DF3975617194AF2ADEEDA1CC9BCF6 Validity Not Before: Jul 3 02:48:12 2025 GMT Not After : Jul 10 02:48:12 2025 GMT Subject: CN=6865ef6c-5781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:be:d0:01:51:56:fb:9b:7b:f8:8f:ff:92:79: fe:57:71:0d:df:83:88:0f:6d:dd:ea:48:b1:ea:fb: bc:83:9d:11:16:c9:67:2c:5e:6a:d0:3a:98:0f:b2: a4:cd:58:38:95:ab:d3:4c:f9:5e:26:ee:28:28:65: 24:c2:9a:7b:94:c4:a4:cd:e8:e6:0b:fa:da:d0:0e: 77:ab:55:ce:f9:67:0b:a7:3c:f4:65:a6:b2:d3:e7: bb:29:fb:b6:1f:c4:1c:0b:40:45:ab:26:f8:f8:8d: 33:b1:f1:7c:49:1b:e7:3a:18:d0:f4:63:56:16:b5: 4e:42:65:52:ae:2d:62:5b:27:e9:ed:c0:6b:22:a0: 13:8d:d2:83:53:4b:0a:c9:73:cd:d0:e2:12:d3:7c: 96:ff:78:57:ab:49:47:a3:58:a1:b9:d8:c0:55:0d: c2:85:e3:53:31:cb:ab:a7:83:85:ce:be:02:28:b2: 76:b2:22:94:f0:e3:23:fb:7c:e1:83:f1:6d:56:5b: 44:2f:43:13:26:bb:be:49:c5:8e:4e:7d:0c:52:04: 62:45:a8:31:0a:ba:64:04:31:c2:f2:9d:c6:8e:c3: dd:be:d7:85:80:1e:00:f5:cc:5d:71:70:88:a2:1f: c1:04:ba:65:ca:92:f1:7d:d5:a1:b9:aa:33:93:bd: 4c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:06:09:AE:97:65:14:CA:69:BE:E2:15:A8:80:75:55:2D:23:AA:65 X509v3 Authority Key Identifier: keyid:BE:37:70:4B:8C:7D:F3:97:56:17:19:4A:F2:AD:EE:DA:1C:C9:BC:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:71:f3:6f:45:54:70:7d:d0:16:52:dc:9c:fd:cd:da:dd:49: 84:b4:1d:a7:5f:a9:0d:03:0b:43:cd:c4:72:b0:63:ca:4e:eb: b2:f4:34:9a:e1:b8:82:50:40:87:95:1d:b7:35:8c:fe:81:35: cf:63:54:9b:8d:44:27:f3:0b:dd:48:c8:ca:c0:8d:6e:89:4d: fc:1d:e7:d6:01:98:3c:9d:1b:e3:18:11:fe:60:1c:4b:8c:9d: f0:29:0a:35:62:3b:47:68:c8:16:7d:08:bb:b7:de:21:9b:8e: 2a:1d:36:6a:63:2f:2b:47:79:ce:00:f5:93:a9:41:55:6f:43: 29:35:dc:c2:39:b1:20:15:1d:5f:1a:57:de:8f:47:7c:88:7d: bf:2f:9d:f9:ab:91:fd:08:7b:98:49:45:bf:07:7f:e4:f3:5d: a1:39:df:8b:f4:85:ee:59:a5:b4:a1:cc:b7:8c:34:a6:f4:1a: d7:5f:26:16:0d:45:e9:73:5e:04:98:fa:ed:ff:9d:cc:4c:53: 19:bf:63:2a:6a:f1:db:59:a7:27:87:d4:ad:94:ef:55:8a:ce: 08:f3:2d:27:d8:45:00:93:b5:8d:20:45:02:7f:49:01:60:99: fc:15:a7:15:51:5d:56:26:00:51:32:98:49:c3:49:b8:f4:13: 69:a2:3a:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA0MzIxMTAvBgNVBAUTKEJFMzc3MDRCOEM3REYzOTc1NjE3MTk0QUYyQURFRURB MUNDOUJDRjYwHhcNMjUwNzAzMDI0ODEyWhcNMjUwNzEwMDI0ODEyWjAYMRYwFAYD VQQDEw02ODY1ZWY2Yy01NzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2r7QAVFW+5t7+I//knn+V3EN34OID23d6kix6vu8g50RFslnLF5q0DqYD7Kk zVg4lavTTPleJu4oKGUkwpp7lMSkzejmC/ra0A53q1XO+WcLpzz0Zaay0+e7Kfu2 H8QcC0BFqyb4+I0zsfF8SRvnOhjQ9GNWFrVOQmVSri1iWyfp7cBrIqATjdKDU0sK yXPN0OIS03yW/3hXq0lHo1ihudjAVQ3CheNTMcurp4OFzr4CKLJ2siKU8OMj+3zh g/FtVltEL0MTJru+ScWOTn0MUgRiRagxCrpkBDHC8p3GjsPdvteFgB4A9cxdcXCI oh/BBLplypLxfdWhuaozk71M9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYGCa6X ZRTKab7iFaiAdVUtI6plMB8GA1UdIwQYMBaAFL43cEuMffOXVhcZSvKt7tocybz2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDQzMi9FM0NBMThFQzdC ODcxMUVEQjU5RTNCODBDNEY5QUUwMi92amR3UzR4OTg1ZFdGeGxLOHEzdTJoekp2 UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqZHdTNHg5ODVkV0Z4bEs4cTN1Mmh6SnZQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDQzMi9FM0NBMThFQzdCODcxMUVEQjU5RTNCODBDNEY5QUUwMi92amR3UzR4OTg1 ZFdGeGxLOHEzdTJoekp2UFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChcfNvRVRwfdAWUtyc/c3a3UmEtB2nX6kNAwtDzcRysGPKTuuy9DSa 4biCUECHlR23NYz+gTXPY1SbjUQn8wvdSMjKwI1uiU38HefWAZg8nRvjGBH+YBxL jJ3wKQo1YjtHaMgWfQi7t94hm44qHTZqYy8rR3nOAPWTqUFVb0MpNdzCObEgFR1f Glfej0d8iH2/L535q5H9CHuYSUW/B3/k812hOd+L9IXuWaW0ocy3jDSm9BrXXyYW DUXpc14EmPrt/53MTFMZv2MqavHbWacnh9StlO9Vis4I8y0n2EUAk7WNIEUCf0kB YJn8FacVUV1WJgBRMphJw0m49BNpojrH -----END CERTIFICATE-----Generated at Thu Jul 3 15:05:58 2025 by rpki-client