$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft File: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft (raw, json) Hash identifier: 6F5UW+BT2GLS9C2HlbBqJBacdErEL+pGLk3ySb08Yro= Subject key identifier: 50:E1:20:CE:3B:C7:0D:42:D1:71:62:0E:57:4C:64:D5:17:D3:4F:3E Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34 Certificate issuer: /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134 Certificate serial: 0558 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft Manifest number: 054E Signing time: Wed 02 Jul 2025 23:43:37 +0000 Manifest this update: Wed 02 Jul 2025 23:43:36 +0000 Manifest next update: Wed 09 Jul 2025 23:43:36 +0000 Files and hashes: 1: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl (hash: 1iv/LEfLOc34d/63+kEPjCy3OaEGD5ou8CkPTL8AoU8=) 2: 7FBF284EF5B211EB8419A23AC4F9AE02.roa (hash: F1yI/TsRKRhHW6oPEGF67PMGcvjA0TRHWq4d5ykeYdI=) 3: 0EF4DA3A38D011EC936A8C4FC4F9AE02.roa (hash: oeOjTuSdHmJNxJZBHkzGR+nKwmbuVyglKsBg5lLfOOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1368 (0x558) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7C21, serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134 Validity Not Before: Jul 2 23:43:36 2025 GMT Not After : Jul 9 23:43:36 2025 GMT Subject: CN=6865c428-6f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6b:fe:23:ba:ff:97:7e:a8:3c:fd:47:ac:f0: 16:34:91:54:f6:c9:4f:13:dc:ca:36:11:50:e5:ac: c3:8e:f6:4d:21:fc:7d:8d:d6:c2:62:cb:52:68:29: 07:c9:02:47:a1:64:dd:04:91:7d:0e:a5:c8:14:23: ac:22:3d:ca:54:e5:7a:ed:3f:d1:82:68:7d:b8:a8: a5:db:a1:94:0b:67:83:51:41:fa:d6:00:43:1c:0c: ab:8e:d0:8d:5b:67:f3:0d:94:8b:c9:4f:97:95:8b: c7:87:2f:cb:0f:06:f9:0b:03:c7:d4:87:6d:6f:80: e2:91:5d:ca:30:a5:23:ed:2d:a0:d9:cc:2e:1c:07: 4c:4b:69:3e:38:9c:41:0c:a0:dd:c6:6a:f1:4d:e4: f8:fa:52:fb:dc:ba:00:21:45:ca:23:c4:93:ee:23: c6:49:65:a9:d4:4e:94:65:a3:f5:a3:4a:08:08:25: fd:d6:f0:e5:75:1d:bb:a6:be:e6:87:c9:26:bf:bb: 5a:26:be:04:13:cd:ed:c9:08:8b:c2:49:77:ca:1d: 92:d8:6d:c3:78:fc:d1:74:eb:71:64:1b:30:ed:9f: 20:b8:40:c8:7b:0d:e5:e1:04:b0:3a:cc:11:78:19: f5:cb:57:cb:cc:38:54:bd:e0:ca:79:21:70:c9:ef: 67:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E1:20:CE:3B:C7:0D:42:D1:71:62:0E:57:4C:64:D5:17:D3:4F:3E X509v3 Authority Key Identifier: keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:f6:9c:e0:c7:61:49:1d:d2:41:5d:5a:aa:3e:f6:0b:f9:fe: 70:ac:a9:db:bd:20:47:bb:18:2e:6a:55:e3:0f:01:6a:b4:96: fd:18:f8:70:64:5d:cb:d2:8c:b1:84:27:23:c8:3c:fc:f4:ce: 81:78:fb:4e:44:33:1e:5d:89:aa:33:2b:33:59:20:e5:81:8e: cf:f7:25:d5:db:89:6a:c5:0f:76:b7:e9:67:0f:f6:9d:73:95: 42:e5:32:70:5d:42:57:5c:49:5a:e7:43:ad:da:10:78:52:e5: 23:d8:0e:5f:8b:92:c5:50:3f:40:9c:53:5d:f5:94:6c:d3:52: e8:17:e1:c4:d8:15:c3:9c:13:51:e5:fe:4a:a0:2a:59:5f:4e: 5f:ed:a6:9b:ed:cf:8e:e7:ad:a8:68:56:80:a6:a6:cf:c6:0e: e3:37:41:09:1f:5a:a7:fd:d1:3b:b8:5f:4e:c6:e4:36:4b:ef: c4:83:62:0c:a0:bd:a5:9d:8c:38:20:e1:c9:cb:0c:95:65:f5: 29:1a:95:b2:ce:6c:22:e8:0d:78:a3:07:35:99:d5:29:0c:5c: 63:98:2b:a0:41:38:dd:61:48:da:1d:8e:33:50:83:70:36:1a: ac:ff:3e:2b:70:0a:72:ea:02:e2:b1:51:03:56:20:c5:72:b5: 39:d4:01:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdDMjExMTAvBgNVBAUTKEJDMkRBMzVDQjU2NTEzQTk0QTY4QjU5MUREMkM3NkM1 MUQ4MTExMzQwHhcNMjUwNzAyMjM0MzM2WhcNMjUwNzA5MjM0MzM2WjAYMRYwFAYD VQQDEw02ODY1YzQyOC02ZjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGv+I7r/l36oPP1HrPAWNJFU9slPE9zKNhFQ5azDjvZNIfx9jdbCYstSaCkH yQJHoWTdBJF9DqXIFCOsIj3KVOV67T/Rgmh9uKil26GUC2eDUUH61gBDHAyrjtCN W2fzDZSLyU+XlYvHhy/LDwb5CwPH1Idtb4DikV3KMKUj7S2g2cwuHAdMS2k+OJxB DKDdxmrxTeT4+lL73LoAIUXKI8ST7iPGSWWp1E6UZaP1o0oICCX91vDldR27pr7m h8kmv7taJr4EE83tyQiLwkl3yh2S2G3DePzRdOtxZBsw7Z8guEDIew3l4QSwOswR eBn1y1fLzDhUveDKeSFwye9nGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDhIM47 xw1C0XFiDldMZNUX008+MB8GA1UdIwQYMBaAFLwto1y1ZROpSmi1kd0sdsUdgRE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0MyMS8zQkNEMDA3NEY1 QUUxMUVCOEUzRUZCMzNDNEY5QUUwMi92QzJqWExWbEU2bEthTFdSM1N4MnhSMkJF VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZDMmpYTFZsRTZsS2FMV1IzU3gyeFIyQkVUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0MyMS8zQkNEMDA3NEY1QUUxMUVCOEUzRUZCMzNDNEY5QUUwMi92QzJqWExWbEU2 bEthTFdSM1N4MnhSMkJFVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF9pzgx2FJHdJBXVqqPvYL+f5wrKnbvSBHuxgualXjDwFqtJb9GPhw ZF3L0oyxhCcjyDz89M6BePtORDMeXYmqMyszWSDlgY7P9yXV24lqxQ92t+lnD/ad c5VC5TJwXUJXXEla50Ot2hB4UuUj2A5fi5LFUD9AnFNd9ZRs01LoF+HE2BXDnBNR 5f5KoCpZX05f7aab7c+O562oaFaApqbPxg7jN0EJH1qn/dE7uF9OxuQ2S+/Eg2IM oL2lnYw4IOHJywyVZfUpGpWyzmwi6A14owc1mdUpDFxjmCugQTjdYUjaHY4zUINw Nhqs/z4rcApy6gLisVEDViDFcrU51AEO -----END CERTIFICATE-----Generated at Thu Jul 3 11:21:57 2025 by rpki-client