$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft File: VGTkn1YOwQ1JdvbilhE7ryKoz18.mft (raw, json) Hash identifier: evTgmgb3/3YERai3sa8/Yypn+QW4/wqroVR5lUafHzE= Subject key identifier: 14:00:A6:02:F7:E4:02:CB:68:42:65:39:19:5A:7B:86:33:DB:6A:60 Authority key identifier: 54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F Certificate issuer: /CN=A91E3F3C/serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft Manifest number: 014B Signing time: Thu 03 Jul 2025 04:20:31 +0000 Manifest this update: Thu 03 Jul 2025 04:20:31 +0000 Manifest next update: Thu 10 Jul 2025 04:20:31 +0000 Files and hashes: 1: VGTkn1YOwQ1JdvbilhE7ryKoz18.crl (hash: 6i/I1vBzcqFSu4stcHbhE9buSPzLTG4lhwisWAQGRgU=) 2: 7148438E5DC211EE954BE21DC4F9AE02.roa (hash: DaoJhbsGXkUC42pkhjpzJhDA/mxo+1TSGX1zlEEQkMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3F3C, serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F Validity Not Before: Jul 3 04:20:31 2025 GMT Not After : Jul 10 04:20:31 2025 GMT Subject: CN=6866050f-bf6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:69:29:ea:1f:0e:9f:d4:93:f3:f4:54:db:40: c8:21:9f:ca:70:13:a7:c8:3c:65:51:35:77:42:1a: 74:56:4f:fc:84:5c:33:76:db:21:0a:a3:ec:4d:86: d2:2b:4f:54:b3:03:5a:16:f8:d1:f2:6e:d9:13:cd: f4:84:dc:1e:b5:32:4c:ae:55:5c:ba:4a:3a:1e:4a: c7:97:8f:d3:df:d0:71:dc:8f:d3:95:48:7e:34:56: e4:d0:8a:7f:56:aa:bf:d4:d9:c9:76:9a:2f:ac:43: 2d:cf:90:fa:52:2d:d7:2b:7e:05:62:14:34:23:a1: fc:92:55:46:6c:41:b5:c3:13:16:bf:cf:e8:58:bd: f9:43:ee:37:68:51:20:c7:9d:e6:eb:b8:40:00:8c: 53:01:2e:43:c3:fc:25:f0:b7:8c:ab:df:f4:d1:ee: 63:0a:6b:88:ed:b8:c1:1f:20:df:d2:b8:30:b0:44: 77:86:b7:b6:ee:b0:71:e9:64:9f:61:00:ca:a1:8c: 7a:1d:c6:fb:4b:a7:9d:16:8f:97:b7:a1:ee:29:a8: 48:67:63:26:ae:54:ba:53:55:8b:37:d1:41:3c:d2: 77:2d:62:ae:1c:c7:f3:46:c9:17:6d:6c:80:8c:b4: e9:22:37:e0:aa:c3:3a:bd:85:a8:e4:cb:3a:54:77: ed:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:00:A6:02:F7:E4:02:CB:68:42:65:39:19:5A:7B:86:33:DB:6A:60 X509v3 Authority Key Identifier: keyid:54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:e8:df:a5:0e:2d:a2:b8:14:f9:7a:f4:37:15:bf:a9:33:94: b9:87:cf:2c:88:78:69:b4:b7:0f:2d:80:8f:9f:29:97:82:a9: cc:28:94:83:0e:d0:cc:e0:26:39:62:e6:be:4c:f0:f2:2c:49: 09:ff:da:0c:8c:41:da:ed:80:ec:7e:e2:c7:2b:12:69:32:52: 10:85:08:35:72:f6:68:9c:12:38:8c:31:44:b5:ae:ab:c3:0a: 2b:c3:0c:79:1c:67:8a:c3:be:08:50:b9:50:57:18:ca:56:74: 2d:6a:18:7f:a2:73:32:ea:8d:01:0d:87:43:5b:3d:f3:70:ab: a4:7d:c7:86:26:44:7e:61:7a:b2:fd:c3:ec:8a:40:dc:ab:46: a2:fc:dd:e5:4e:23:9d:f9:cb:ab:5f:05:d2:41:88:d7:6d:2c: 79:5a:59:23:95:f3:4d:79:95:e2:40:b1:ae:a5:b8:d3:ba:86: fd:ca:39:00:c1:8d:02:2c:c3:cf:83:15:e4:6d:88:b8:c6:4c: 03:02:4c:09:98:1e:eb:d6:b1:59:d6:5c:3a:4d:7b:f6:e7:34: 8f:26:0d:5c:78:3e:30:02:45:67:31:21:9d:95:a3:be:a9:6e: d9:ee:b7:bf:81:c7:90:3b:f7:03:48:c2:f1:bb:e3:98:d1:f4: b1:c6:cd:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGM0MxMTAvBgNVBAUTKDU0NjRFNDlGNTYwRUMxMEQ0OTc2RjZFMjk2MTEzQkFG MjJBOENGNUYwHhcNMjUwNzAzMDQyMDMxWhcNMjUwNzEwMDQyMDMxWjAYMRYwFAYD VQQDEw02ODY2MDUwZi1iZjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymkp6h8On9ST8/RU20DIIZ/KcBOnyDxlUTV3Qhp0Vk/8hFwzdtshCqPsTYbS K09UswNaFvjR8m7ZE830hNwetTJMrlVcuko6HkrHl4/T39Bx3I/TlUh+NFbk0Ip/ Vqq/1NnJdpovrEMtz5D6Ui3XK34FYhQ0I6H8klVGbEG1wxMWv8/oWL35Q+43aFEg x53m67hAAIxTAS5Dw/wl8LeMq9/00e5jCmuI7bjBHyDf0rgwsER3hre27rBx6WSf YQDKoYx6Hcb7S6edFo+Xt6HuKahIZ2MmrlS6U1WLN9FBPNJ3LWKuHMfzRskXbWyA jLTpIjfgqsM6vYWo5Ms6VHftLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQApgL3 5ALLaEJlORlae4Yz22pgMB8GA1UdIwQYMBaAFFRk5J9WDsENSXb24pYRO68iqM9f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0YzQy85NTUxM0JBNjVE QzExMUVFOTg5NDk5MUNDNEY5QUUwMi9WR1RrbjFZT3dRMUpkdmJpbGhFN3J5S296 MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZHVGtuMVlPd1ExSmR2YmlsaEU3cnlLb3oxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0YzQy85NTUxM0JBNjVEQzExMUVFOTg5NDk5MUNDNEY5QUUwMi9WR1RrbjFZT3dR MUpkdmJpbGhFN3J5S296MTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr6N+lDi2iuBT5evQ3Fb+pM5S5h88siHhptLcPLYCPnymXgqnMKJSD DtDM4CY5Yua+TPDyLEkJ/9oMjEHa7YDsfuLHKxJpMlIQhQg1cvZonBI4jDFEta6r wworwwx5HGeKw74IULlQVxjKVnQtahh/onMy6o0BDYdDWz3zcKukfceGJkR+YXqy /cPsikDcq0ai/N3lTiOd+curXwXSQYjXbSx5WlkjlfNNeZXiQLGupbjTuob9yjkA wY0CLMPPgxXkbYi4xkwDAkwJmB7r1rFZ1lw6TXv25zSPJg1ceD4wAkVnMSGdlaO+ qW7Z7re/gceQO/cDSMLxu+OY0fSxxs2R -----END CERTIFICATE-----Generated at Thu Jul 3 07:03:26 2025 by rpki-client