$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft File: vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft (raw, json) Hash identifier: sklabutKMz4PD0gxW+io3IS5Zwvt8ND+3uSOgTLq7Hc= Subject key identifier: 53:40:00:19:45:08:1D:C8:31:DB:36:0A:A0:E6:13:F4:17:83:EE:48 Authority key identifier: BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F Certificate issuer: /CN=A91F4957/serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft Manifest number: 0177 Signing time: Tue 01 Jul 2025 04:11:32 +0000 Manifest this update: Tue 01 Jul 2025 04:11:32 +0000 Manifest next update: Tue 08 Jul 2025 04:11:32 +0000 Files and hashes: 1: vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl (hash: pSGSs8utBIZUfJ8nvo6FSdOVrE78Nly34NxrtIqiUfU=) 2: 4231A1AA1B1711EEA5566A23C4F9AE02.roa (hash: lTkc7C0RlmKbFSYdbjr+dPk/Bz3louAuGeeNLMUaa3U=) 3: F0237E941B1911EE9DFF2942C4F9AE02.roa (hash: OFcdlnYr84QtfXIjFkq221jW9RB67N6+iA5hYs6y+y0=) 4: 60B707FA1AEA11EE92BEA24CC4F9AE02.roa (hash: kXqagkJo/A0eBKA6rzsFPrgkBqXmX4C+r5kQGo8fciw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:11:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4957, serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Validity Not Before: Jul 1 04:11:32 2025 GMT Not After : Jul 8 04:11:32 2025 GMT Subject: CN=68635ff4-5cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:15:c7:99:21:aa:cf:a9:a2:d7:56:65:51:1a: 03:b1:4a:c9:18:fb:12:94:7a:88:83:4d:f1:41:3a: 1d:d6:11:86:f2:ea:c9:ad:7e:69:56:89:6f:41:82: 05:f6:dd:d2:80:b9:9e:9b:e2:78:bc:83:ae:c3:f3: ee:07:c5:60:7b:4f:0a:2d:c7:47:e8:15:ce:b0:5f: c6:a8:0f:65:01:15:07:98:44:d0:c3:1f:ba:ff:38: 64:1c:6f:04:0b:28:73:e2:7b:f0:49:69:a5:21:49: b6:26:1a:74:3a:40:fb:18:f9:0b:a8:9d:d2:9f:40: 76:92:8e:dd:3f:a5:f1:66:bb:e5:76:91:5c:b7:d6: 82:76:52:ed:ec:07:d4:a1:cf:8a:f5:84:5e:c4:ab: ac:c1:b9:b4:13:5e:55:83:02:dc:ce:7b:57:04:f8: 81:24:a8:89:ef:7e:fe:55:b2:00:ed:3b:4a:df:07: 23:28:b6:47:4a:fd:72:f9:04:12:af:5d:84:38:89: e7:9a:da:a2:03:0a:9d:54:59:9c:ba:e0:40:73:00: b5:bc:36:56:87:8c:9f:29:8b:db:40:80:c4:8a:23: 03:e5:7f:16:40:10:e0:79:7f:5c:8f:12:94:b4:63: 23:5b:df:54:1f:b6:d7:eb:4c:84:ee:e9:4c:3d:f7: a4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:40:00:19:45:08:1D:C8:31:DB:36:0A:A0:E6:13:F4:17:83:EE:48 X509v3 Authority Key Identifier: keyid:BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a3:e6:ce:70:dc:10:f7:ba:9d:6d:b9:04:ac:bf:d6:2a:cf: 12:d6:3e:5f:58:fe:93:41:68:00:d2:b1:38:8d:ba:c3:38:4a: c0:28:6f:84:ce:38:fa:a5:39:f5:03:e9:64:53:47:15:9d:65: 03:1b:fa:b7:5f:24:38:21:74:1f:48:76:56:89:6f:9d:4a:7d: d8:a9:7f:ab:b1:cf:52:96:b4:c2:29:49:1a:da:d4:44:18:14: f8:b1:25:2b:67:0d:ab:47:af:54:55:61:bb:de:f8:a3:d2:44: 9c:8d:9c:58:cc:a0:b9:0a:b6:00:17:b4:6f:7b:42:da:47:75: 29:32:32:b1:92:9d:fb:da:cf:0d:4c:77:e3:e6:02:b5:ff:08: 16:63:7e:a6:23:25:1b:2b:e9:c2:cc:4c:9a:f9:34:c6:ff:3d: ff:ec:87:f6:33:0c:b7:26:61:b9:ce:a7:4b:42:7e:ed:8f:dd: 20:e5:e5:cd:cf:bf:1f:5a:90:d8:e8:ee:82:05:5d:64:99:d5: af:e4:c7:7d:6c:8f:74:37:e0:d0:33:db:2d:85:c2:ca:39:e2: 80:76:08:ad:bf:83:cd:56:3e:f1:b4:e6:96:f3:5f:7f:05:64: 85:08:d6:0b:2f:2f:f5:ee:f4:2d:93:39:ab:53:86:17:a5:d3: fa:fd:d0:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NTcxMTAvBgNVBAUTKEJGMkQxQjM5RDNDMkU5QUUwQUE4RkFCOTRCQUM1NDBD QzUyNjUyNEYwHhcNMjUwNzAxMDQxMTMyWhcNMjUwNzA4MDQxMTMyWjAYMRYwFAYD VQQDEw02ODYzNWZmNC01Y2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5hXHmSGqz6mi11ZlURoDsUrJGPsSlHqIg03xQTod1hGG8urJrX5pVolvQYIF 9t3SgLmem+J4vIOuw/PuB8Vge08KLcdH6BXOsF/GqA9lARUHmETQwx+6/zhkHG8E Cyhz4nvwSWmlIUm2Jhp0OkD7GPkLqJ3Sn0B2ko7dP6XxZrvldpFct9aCdlLt7AfU oc+K9YRexKuswbm0E15VgwLczntXBPiBJKiJ737+VbIA7TtK3wcjKLZHSv1y+QQS r12EOInnmtqiAwqdVFmcuuBAcwC1vDZWh4yfKYvbQIDEiiMD5X8WQBDgeX9cjxKU tGMjW99UH7bX60yE7ulMPfekfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNAABlF CB3IMds2CqDmE/QXg+5IMB8GA1UdIwQYMBaAFL8tGznTwumuCqj6uUusVAzFJlJP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Ny81NzFCMjIxMDFB RTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZhNEtxUHE1UzZ4VURNVW1V azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z5MGJPZFBDNmE0S3FQcTVTNnhVRE1VbVVrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Ny81NzFCMjIxMDFBRTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZh NEtxUHE1UzZ4VURNVW1VazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBco+bOcNwQ97qdbbkErL/WKs8S1j5fWP6TQWgA0rE4jbrDOErAKG+E zjj6pTn1A+lkU0cVnWUDG/q3XyQ4IXQfSHZWiW+dSn3YqX+rsc9SlrTCKUka2tRE GBT4sSUrZw2rR69UVWG73vij0kScjZxYzKC5CrYAF7Rve0LaR3UpMjKxkp372s8N THfj5gK1/wgWY36mIyUbK+nCzEya+TTG/z3/7If2Mwy3JmG5zqdLQn7tj90g5eXN z78fWpDY6O6CBV1kmdWv5Md9bI90N+DQM9sthcLKOeKAdgitv4PNVj7xtOaW819/ BWSFCNYLLy/17vQtkzmrU4YXpdP6/dAY -----END CERTIFICATE-----Generated at Wed Jul 2 16:11:39 2025 by rpki-client