$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft File: Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft (raw, json) Hash identifier: tTba43uvukx5hHzN7NDyOKvFFYEEQyhYVe3UWY905sI= Subject key identifier: 9D:5B:92:48:EB:E6:CD:36:A2:7E:F1:29:AB:29:2E:05:A1:16:CA:FB Authority key identifier: 56:2F:B3:02:A8:76:78:3A:08:41:58:03:8B:D4:9E:F7:05:1A:60:3C Certificate issuer: /CN=A91EEB51/serialNumber=562FB302A876783A084158038BD49EF7051A603C Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft Manifest number: EF Signing time: Tue 01 Jul 2025 05:51:15 +0000 Manifest this update: Tue 01 Jul 2025 05:51:15 +0000 Manifest next update: Tue 08 Jul 2025 05:51:15 +0000 Files and hashes: 1: Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl (hash: fT85ew82yIlcIvmHIn8EG4+3PX9FWQkNVFn2OCo/F5I=) 2: 748B00F4EA8A11EE9295672AC4F9AE02.roa (hash: ygDdUhDKlEYCgdYnkaYBpEgiP+SGTZxYs8Pi7efBQ5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEB51, serialNumber=562FB302A876783A084158038BD49EF7051A603C Validity Not Before: Jul 1 05:51:15 2025 GMT Not After : Jul 8 05:51:15 2025 GMT Subject: CN=68637753-0487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:59:75:26:da:a8:59:28:45:51:9f:eb:1d:ae: 7c:3d:f0:e6:e4:74:6f:cf:cc:2c:45:19:bb:a7:44: 01:83:e1:81:d6:5f:94:de:0d:ec:33:84:78:e4:59: ac:82:4b:fc:37:2a:cd:e3:62:17:11:cf:78:33:ea: 13:59:91:3b:b6:7e:e4:08:38:f9:35:3a:b0:0e:73: e3:3e:06:64:ca:b6:7a:c1:ec:ce:10:db:42:92:30: e5:b9:0f:57:5e:45:e5:5a:fe:c2:78:cf:8d:a0:29: bb:ea:78:1f:2d:dc:7c:c2:f4:3a:65:3d:d1:b8:f0: 19:82:7b:ae:0e:6f:e3:39:80:b3:04:2b:2e:b3:cd: 58:35:4f:f0:ec:af:8a:00:a7:db:da:f3:4f:0a:f1: 57:c5:45:e4:4a:50:fa:5e:aa:bf:66:2b:35:81:d4: ad:4d:d1:dc:97:25:8f:3c:ac:4d:c5:97:c7:5b:30: 5b:7d:83:7a:1b:00:4d:03:df:35:a7:aa:d6:5b:c1: 8e:a5:4b:52:83:1f:10:1b:37:8f:a5:55:e2:0c:0b: e5:95:a9:fc:b7:54:b7:86:9e:e0:25:2b:1e:38:7d: bc:2d:5d:3f:7e:6d:37:f8:b7:a7:72:ef:8e:d2:27: ee:f0:c9:43:2e:45:3f:74:47:a1:21:fd:4a:cf:ed: 5d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5B:92:48:EB:E6:CD:36:A2:7E:F1:29:AB:29:2E:05:A1:16:CA:FB X509v3 Authority Key Identifier: keyid:56:2F:B3:02:A8:76:78:3A:08:41:58:03:8B:D4:9E:F7:05:1A:60:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:8c:88:20:b0:05:2e:1b:1a:01:c6:59:76:36:cb:65:0b:0c: 1d:9b:e2:3f:a0:f5:14:76:ee:f9:ba:e9:2c:49:7f:a7:05:33: b1:f7:7a:c3:0d:d5:dd:85:5d:0f:f7:46:77:ac:7a:0d:4f:85: 10:d0:10:d1:8a:52:36:b5:1c:34:dd:a1:b3:32:4e:7e:3e:66: d5:3c:99:18:cd:47:c6:19:40:5d:1a:6c:bc:ea:d4:06:b9:39: e4:ef:ac:f4:74:74:63:e5:47:2b:37:3b:a0:15:bd:92:2d:88: f3:7e:d5:12:ec:ab:c6:19:8f:4f:ba:d5:a1:14:7b:18:3b:8f: 7c:c2:72:c1:4e:70:f6:b2:f9:bd:30:57:e5:b0:da:31:65:e4: b4:e8:03:d5:37:78:90:8e:4c:8f:2a:ae:d8:2d:a1:cf:5f:ae: 4a:62:9f:2c:dd:5a:85:76:67:fc:49:9c:a7:a3:b0:7e:3a:37: 5b:fc:b3:c1:b4:42:d0:71:f7:45:2f:e7:da:9b:dc:9f:de:00: a3:c6:5e:a7:46:a8:fc:94:10:ef:87:0f:4f:13:f9:4d:16:f8: e5:1f:26:4d:a6:52:42:f7:33:4f:32:bd:2f:59:52:05:cd:3e: 21:e1:6a:6d:a3:a7:b1:b5:f8:5c:f7:e9:91:4f:7d:77:d6:44: ce:f1:c6:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVCNTExMTAvBgNVBAUTKDU2MkZCMzAyQTg3Njc4M0EwODQxNTgwMzhCRDQ5RUY3 MDUxQTYwM0MwHhcNMjUwNzAxMDU1MTE1WhcNMjUwNzA4MDU1MTE1WjAYMRYwFAYD VQQDEw02ODYzNzc1My0wNDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFl1JtqoWShFUZ/rHa58PfDm5HRvz8wsRRm7p0QBg+GB1l+U3g3sM4R45Fms gkv8NyrN42IXEc94M+oTWZE7tn7kCDj5NTqwDnPjPgZkyrZ6wezOENtCkjDluQ9X XkXlWv7CeM+NoCm76ngfLdx8wvQ6ZT3RuPAZgnuuDm/jOYCzBCsus81YNU/w7K+K AKfb2vNPCvFXxUXkSlD6Xqq/Zis1gdStTdHclyWPPKxNxZfHWzBbfYN6GwBNA981 p6rWW8GOpUtSgx8QGzePpVXiDAvllan8t1S3hp7gJSseOH28LV0/fm03+Lencu+O 0ifu8MlDLkU/dEehIf1Kz+1dgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1bkkjr 5s02on7xKaspLgWhFsr7MB8GA1UdIwQYMBaAFFYvswKodng6CEFYA4vUnvcFGmA8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUI1MS8zN0E1MzRCOEVB ODMxMUVFOTE4MDFBNzZDNEY5QUUwMi9WaS16QXFoMmVEb0lRVmdEaTlTZTl3VWFZ RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZpLXpBcWgyZURvSVFWZ0RpOVNlOXdVYVlEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUI1MS8zN0E1MzRCOEVBODMxMUVFOTE4MDFBNzZDNEY5QUUwMi9WaS16QXFoMmVE b0lRVmdEaTlTZTl3VWFZRHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAijIggsAUuGxoBxll2NstlCwwdm+I/oPUUdu75uuksSX+nBTOx93rD DdXdhV0P90Z3rHoNT4UQ0BDRilI2tRw03aGzMk5+PmbVPJkYzUfGGUBdGmy86tQG uTnk76z0dHRj5UcrNzugFb2SLYjzftUS7KvGGY9PutWhFHsYO498wnLBTnD2svm9 MFflsNoxZeS06APVN3iQjkyPKq7YLaHPX65KYp8s3VqFdmf8SZyno7B+Ojdb/LPB tELQcfdFL+fam9yf3gCjxl6nRqj8lBDvhw9PE/lNFvjlHyZNplJC9zNPMr0vWVIF zT4h4Wpto6extfhc9+mRT3131kTO8cZ2 -----END CERTIFICATE-----Generated at Thu Jul 3 02:23:12 2025 by rpki-client