$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft File: VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft (raw, json) Hash identifier: fzCW2nG0HYo+n5v3I9tfUjRcWuUsY+X8wgTatOB7zV0= Subject key identifier: C0:E6:C0:26:30:CD:CF:24:A1:8D:AC:B9:F9:89:26:2D:2D:9B:E3:AF Authority key identifier: 56:B6:5B:80:9F:5D:AB:3A:5A:B1:57:CA:05:79:FD:8E:16:ED:CF:B3 Certificate issuer: /CN=A91DB782/serialNumber=56B65B809F5DAB3A5AB157CA0579FD8E16EDCFB3 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft Manifest number: 0127 Signing time: Thu 03 Jul 2025 04:49:43 +0000 Manifest this update: Thu 03 Jul 2025 04:49:43 +0000 Manifest next update: Thu 10 Jul 2025 04:49:43 +0000 Files and hashes: 1: VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl (hash: GWg6tlvdtiFfokiCkVKhe/DSSAdktDAyCN+NeDzQM/M=) 2: F4DE3470979B11EE901E210BC4F9AE02.roa (hash: fdTip7KBE0W3pKG2131dWHPNYEedkvXm8McPxmdQVeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB782, serialNumber=56B65B809F5DAB3A5AB157CA0579FD8E16EDCFB3 Validity Not Before: Jul 3 04:49:43 2025 GMT Not After : Jul 10 04:49:43 2025 GMT Subject: CN=68660be7-500f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c8:b5:75:a4:45:9b:6d:fb:87:dc:f9:e0:f4: 78:78:31:12:19:c0:fe:ea:16:e7:39:75:be:6d:b9: 06:63:7c:dc:99:1a:3c:03:1d:fc:41:d2:e6:36:f6: 4a:b6:ef:37:0f:a2:83:d9:32:28:a0:9a:93:64:f1: 8c:bf:72:34:e9:95:9e:41:be:48:24:5d:99:02:1a: 06:aa:56:6e:44:59:b3:27:03:34:81:76:1e:cf:53: 16:5f:c5:18:7a:ce:d2:16:56:1d:34:94:b5:e5:e7: 5f:48:10:d8:01:8a:2c:aa:97:78:de:90:02:fd:ce: 4e:ab:4b:8d:e1:45:81:be:83:e8:af:e3:f0:41:f8: 22:55:7f:b9:94:7f:29:53:71:3f:52:5a:64:27:8a: 3f:50:d0:e2:43:40:f5:64:e2:41:4a:58:cb:ed:92: f7:f1:69:a0:58:cd:15:74:c7:b1:27:70:5f:a4:5e: fe:c7:c5:f0:c2:40:0c:0b:9c:53:d9:30:42:3e:dd: d3:5f:aa:da:a9:0a:1d:42:27:ba:32:74:08:fa:ad: a5:fa:35:d2:e9:8d:08:8c:28:52:7b:22:81:aa:ea: bb:65:59:2a:11:cf:3c:ad:64:51:6c:c6:90:30:64: c3:23:2d:f4:53:2c:27:e0:be:7e:13:68:0e:b4:75: b6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E6:C0:26:30:CD:CF:24:A1:8D:AC:B9:F9:89:26:2D:2D:9B:E3:AF X509v3 Authority Key Identifier: keyid:56:B6:5B:80:9F:5D:AB:3A:5A:B1:57:CA:05:79:FD:8E:16:ED:CF:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:e1:b5:4d:77:a7:b1:b2:d2:21:f0:df:15:43:cf:a6:1c:95: 00:e2:16:c0:b3:cc:ff:82:59:29:86:a7:57:e6:ba:f7:c6:95: 7e:d6:f1:e6:70:47:0c:62:92:af:c1:64:0a:b4:d3:21:80:8b: 11:e7:6c:88:17:f7:ba:01:84:dc:78:d7:8b:92:da:87:cd:ae: 59:22:50:0f:c1:9f:98:6a:bf:b5:6d:65:3f:a3:f3:7c:e3:24: cf:39:2d:93:52:e3:2a:1d:78:1b:5b:de:f3:52:5b:94:50:12: 42:91:38:a0:47:95:0f:83:14:7a:15:39:a5:e7:ef:91:e5:b1: b2:e5:43:f4:77:bf:bf:85:c0:c1:06:7c:96:4f:66:e6:80:e9: c1:6d:80:50:c7:43:cb:9f:94:8f:5d:d8:39:63:f4:a1:6a:86: db:cd:e7:16:06:7c:1b:94:c1:73:cb:df:57:99:e0:e0:55:98: 2e:40:3c:8f:e4:2d:ef:be:b1:6f:c8:0b:0e:3d:10:f7:44:ac: 58:47:f0:65:87:6f:0d:d2:87:bd:5e:10:64:70:31:8f:7e:3d: cd:cd:8d:b3:1d:ef:0e:0c:bd:6d:80:ff:f2:9d:85:73:41:ac: 77:a1:c4:8f:e5:55:d5:0d:02:e3:13:9c:65:9e:f3:5d:c6:18: fc:c3:e5:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3ODIxMTAvBgNVBAUTKDU2QjY1QjgwOUY1REFCM0E1QUIxNTdDQTA1NzlGRDhF MTZFRENGQjMwHhcNMjUwNzAzMDQ0OTQzWhcNMjUwNzEwMDQ0OTQzWjAYMRYwFAYD VQQDEw02ODY2MGJlNy01MDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsi1daRFm237h9z54PR4eDESGcD+6hbnOXW+bbkGY3zcmRo8Ax38QdLmNvZK tu83D6KD2TIooJqTZPGMv3I06ZWeQb5IJF2ZAhoGqlZuRFmzJwM0gXYez1MWX8UY es7SFlYdNJS15edfSBDYAYosqpd43pAC/c5Oq0uN4UWBvoPor+PwQfgiVX+5lH8p U3E/UlpkJ4o/UNDiQ0D1ZOJBSljL7ZL38WmgWM0VdMexJ3BfpF7+x8XwwkAMC5xT 2TBCPt3TX6raqQodQie6MnQI+q2l+jXS6Y0IjChSeyKBquq7ZVkqEc88rWRRbMaQ MGTDIy30Uywn4L5+E2gOtHW2SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDmwCYw zc8koY2sufmJJi0tm+OvMB8GA1UdIwQYMBaAFFa2W4CfXas6WrFXygV5/Y4W7c+z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjc4Mi85RkVEQ0Y1Qzk3 OUIxMUVFOTg5RTYwMEFDNEY5QUUwMi9WclpiZ0o5ZHF6cGFzVmZLQlhuOWpoYnR6 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZyWmJnSjlkcXpwYXNWZktCWG45amhidHo3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qjc4Mi85RkVEQ0Y1Qzk3OUIxMUVFOTg5RTYwMEFDNEY5QUUwMi9WclpiZ0o5ZHF6 cGFzVmZLQlhuOWpoYnR6N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ4bVNd6exstIh8N8VQ8+mHJUA4hbAs8z/glkphqdX5rr3xpV+1vHm cEcMYpKvwWQKtNMhgIsR52yIF/e6AYTceNeLktqHza5ZIlAPwZ+Yar+1bWU/o/N8 4yTPOS2TUuMqHXgbW97zUluUUBJCkTigR5UPgxR6FTml5++R5bGy5UP0d7+/hcDB BnyWT2bmgOnBbYBQx0PLn5SPXdg5Y/ShaobbzecWBnwblMFzy99XmeDgVZguQDyP 5C3vvrFvyAsOPRD3RKxYR/Blh28N0oe9XhBkcDGPfj3NzY2zHe8ODL1tgP/ynYVz Qax3ocSP5VXVDQLjE5xlnvNdxhj8w+WL -----END CERTIFICATE-----Generated at Thu Jul 3 07:08:51 2025 by rpki-client