$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft File: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft (raw, json) Hash identifier: rcT9ytSJmIcEB7dXIkhW/OosBUIP2Dhjctn2/fD5vS8= Subject key identifier: FF:7B:88:AA:A3:77:89:0E:DB:10:63:5E:6F:50:9F:24:D4:29:7B:66 Authority key identifier: BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B Certificate issuer: /CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft Manifest number: 0137 Signing time: Thu 03 Jul 2025 04:34:26 +0000 Manifest this update: Thu 03 Jul 2025 04:34:26 +0000 Manifest next update: Thu 10 Jul 2025 04:34:26 +0000 Files and hashes: 1: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl (hash: FjK1gnKEpK1S1dkF5cW21P9CgAPc9vjv9nEPwVDcmZM=) 2: CCAA0F667B8911EE9370D427C4F9AE02.roa (hash: +XCZ4i+FWnCX+GcmIpvSxAa3YM916ys/6BLu7thnPf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E9D, serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Validity Not Before: Jul 3 04:34:26 2025 GMT Not After : Jul 10 04:34:26 2025 GMT Subject: CN=68660852-ccca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:84:8f:1d:d3:a2:01:a3:70:26:1c:f0:f7: 72:fc:cd:05:5e:1d:f8:f0:f2:f0:89:7f:dd:52:57: 7d:2f:a7:0c:11:50:af:61:35:82:b6:27:b7:f7:90: 22:94:1a:8c:0e:2e:8b:bf:d6:c7:2b:0f:2a:f4:ee: f7:0d:7e:79:e3:32:c3:26:78:fe:96:76:e3:f2:d4: 47:f5:77:d8:85:69:29:e9:ff:b6:33:58:72:50:7a: ab:4c:87:6a:58:b4:3b:d5:df:13:9f:89:23:8e:fc: 69:1b:50:df:ce:31:b0:a7:66:53:4d:07:3f:5b:6d: 3e:45:35:68:5d:ab:b4:cf:c9:eb:61:85:34:07:e5: c5:9f:c4:0d:ed:46:46:96:a6:72:00:14:1a:2a:12: e2:ea:1f:12:80:ae:35:8e:78:b0:6a:63:e6:92:de: d4:c9:02:a8:7b:c7:ab:71:4c:4e:23:a3:a5:48:47: c3:73:80:90:b8:3f:7c:4a:d9:86:81:c7:a9:f7:04: da:3c:10:22:55:68:1c:f6:5a:65:da:b9:17:e4:81: c7:d7:5f:a2:72:a8:a3:5c:91:32:61:84:3d:53:c9: 1b:3f:45:6d:f4:09:f9:89:04:b8:c8:a7:14:0e:f7: d6:52:f9:be:04:11:e5:c8:79:ff:3d:bc:78:b1:68: bf:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:7B:88:AA:A3:77:89:0E:DB:10:63:5E:6F:50:9F:24:D4:29:7B:66 X509v3 Authority Key Identifier: keyid:BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:45:4e:ca:b9:7f:5b:ef:42:c7:88:1c:e8:35:1f:00:bb:92: 9d:ee:a0:f2:fc:14:17:a4:9b:db:3e:a5:4d:1f:84:f1:4f:90: 83:10:b0:05:9a:1f:f8:08:29:87:73:38:d1:53:53:95:ac:5a: ab:6b:85:fa:a4:96:f6:86:45:5c:4f:d1:d3:dd:0a:87:27:34: 59:10:b0:70:85:fb:3b:64:97:95:42:5f:36:4e:9d:a4:fb:c5: 5a:af:bb:25:4f:c0:10:25:85:32:4e:7d:4b:d5:bc:d3:bd:cd: c5:25:49:ae:24:8d:57:0e:74:23:98:41:20:61:a2:ce:a0:00: b7:35:f6:0d:95:42:2f:24:3f:4c:f1:45:b7:41:b0:3a:db:b3: 80:16:6e:81:dc:54:f4:8c:cf:8e:c8:0b:52:3a:be:1f:45:1f: 8d:40:07:7e:e6:be:15:dc:ff:bb:8e:b9:ee:56:a9:0f:55:45: 7f:9b:82:d5:5e:45:b4:f1:fa:a6:dd:98:b2:94:0f:12:f1:b5: 3b:92:22:16:d3:2b:53:20:fa:62:8e:56:1d:60:df:cb:f0:19: 3a:ac:b5:a4:21:10:5d:1f:ec:ca:e7:37:96:cb:5c:3b:29:83: d2:2c:e5:c1:c8:bb:96:24:8d:fc:94:e6:50:ec:49:c0:3f:49: bb:21:3b:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFOUQxMTAvBgNVBAUTKEJFMDE5MTM3QTgxRDdFOUNEOUFGNTZDRDkxQzU4N0My RUYwNkU5M0IwHhcNMjUwNzAzMDQzNDI2WhcNMjUwNzEwMDQzNDI2WjAYMRYwFAYD VQQDEw02ODY2MDg1Mi1jY2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlqEjx3TogGjcCYc8Pdy/M0FXh348PLwiX/dUld9L6cMEVCvYTWCtie395Ai lBqMDi6Lv9bHKw8q9O73DX554zLDJnj+lnbj8tRH9XfYhWkp6f+2M1hyUHqrTIdq WLQ71d8Tn4kjjvxpG1DfzjGwp2ZTTQc/W20+RTVoXau0z8nrYYU0B+XFn8QN7UZG lqZyABQaKhLi6h8SgK41jniwamPmkt7UyQKoe8ercUxOI6OlSEfDc4CQuD98StmG gcep9wTaPBAiVWgc9lpl2rkX5IHH11+icqijXJEyYYQ9U8kbP0Vt9An5iQS4yKcU DvfWUvm+BBHlyHn/Pbx4sWi/rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP97iKqj d4kO2xBjXm9QnyTUKXtmMB8GA1UdIwQYMBaAFL4BkTeoHX6c2a9WzZHFh8LvBuk7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUU5RC81MjgyOEIyQTdC ODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZwelpyMWJOa2NXSHd1OEc2 VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnR1JONmdkZnB6WnIxYk5rY1dId3U4RzZUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUU5RC81MjgyOEIyQTdCODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZw elpyMWJOa2NXSHd1OEc2VHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmRU7KuX9b70LHiBzoNR8Au5Kd7qDy/BQXpJvbPqVNH4TxT5CDELAF mh/4CCmHczjRU1OVrFqra4X6pJb2hkVcT9HT3QqHJzRZELBwhfs7ZJeVQl82Tp2k +8Var7slT8AQJYUyTn1L1bzTvc3FJUmuJI1XDnQjmEEgYaLOoAC3NfYNlUIvJD9M 8UW3QbA627OAFm6B3FT0jM+OyAtSOr4fRR+NQAd+5r4V3P+7jrnuVqkPVUV/m4LV XkW08fqm3ZiylA8S8bU7kiIW0ytTIPpijlYdYN/L8Bk6rLWkIRBdH+zK5zeWy1w7 KYPSLOXByLuWJI38lOZQ7EnAP0m7ITu0 -----END CERTIFICATE-----Generated at Thu Jul 3 07:36:53 2025 by rpki-client