$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft File: VmpvNEQKySle2KAC1QSfV0zxbIg.mft (raw, json) Hash identifier: i1M44Ai9JLNJB2AuOqA1ITL1tzpUH1F85S1f3t4QFKM= Subject key identifier: 2C:CD:46:75:EB:A0:1B:1D:CA:96:D6:98:16:D3:19:BF:C9:98:F6:AB Authority key identifier: 56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88 Certificate issuer: /CN=A91FA64C/serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88 Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft Manifest number: 0195 Signing time: Sun 29 Jun 2025 02:38:41 +0000 Manifest this update: Sun 29 Jun 2025 02:38:41 +0000 Manifest next update: Sun 06 Jul 2025 02:38:41 +0000 Files and hashes: 1: VmpvNEQKySle2KAC1QSfV0zxbIg.crl (hash: J+8Z2VUNAZ+bILlp9uG2WKQu1M7oWcn0XjWz8hESbHs=) 2: FFCE072E2B8111EE9BDEC079C4F9AE02.roa (hash: NxTIAEmzVEkhnPtaZCQQUJAnARHilUKNCFgj1AKD+gg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA64C, serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88 Validity Not Before: Jun 29 02:38:41 2025 GMT Not After : Jul 6 02:38:41 2025 GMT Subject: CN=6860a731-38eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:46:57:29:84:61:fd:6a:52:24:ab:01:e7:26: 4a:e4:4e:8f:ca:8c:b6:c6:38:84:2e:8d:79:22:f4: e3:e6:5c:b9:91:b8:dc:2d:cc:0f:a4:c8:6c:22:1a: 8d:7c:02:99:1b:99:79:53:58:b7:b3:b2:cd:fa:fb: da:33:42:b0:c9:97:dd:ad:71:28:7d:29:48:bc:28: 31:34:b1:73:68:81:70:6e:ec:ec:3a:1c:00:d8:8b: 7c:96:8d:9f:fd:d1:77:c3:7c:21:05:d5:dc:27:73: 7f:83:ca:6b:22:87:30:cb:be:f3:5f:5c:db:b2:b2: 0a:59:b9:b7:3d:37:a8:46:c3:30:86:ed:55:74:1f: 1b:ec:a6:d5:14:6a:b8:75:1e:35:cc:f5:a3:9c:fa: 66:14:bc:d9:55:f0:a5:36:7b:d7:fe:1d:df:3d:f9: 81:85:08:90:7f:d7:08:3d:7c:e5:24:09:17:9d:92: 67:56:ea:d9:a9:7a:98:6c:12:14:a7:70:e1:26:61: e4:0a:b5:40:18:23:7e:85:5d:e8:9d:3a:47:06:ae: d3:20:3a:64:a5:0f:a9:8a:40:40:13:39:fe:8b:18: f7:8c:12:28:81:56:7d:0a:8b:86:99:ee:61:10:78: b3:30:31:c4:a1:71:3e:63:bb:46:ae:57:a5:cf:e3: 85:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CD:46:75:EB:A0:1B:1D:CA:96:D6:98:16:D3:19:BF:C9:98:F6:AB X509v3 Authority Key Identifier: keyid:56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:06:67:47:88:fe:ef:bd:46:78:ae:52:6d:d6:bf:29:45:27: 9d:68:68:08:eb:98:cf:62:c7:a6:1b:09:8f:f8:d4:79:df:a1: 2c:61:19:54:59:d8:4a:be:2e:8a:a9:64:5a:bf:a4:82:11:62: 78:9c:81:2d:fe:62:c8:80:e7:99:c4:48:93:2e:1d:6b:dc:65: fe:52:db:d6:cf:20:d4:c8:be:fa:aa:91:82:d0:3f:b1:d9:ff: 25:8a:a1:8f:6f:1a:bb:d1:a5:af:2c:4a:3e:63:0f:47:6f:87: 89:52:32:40:f3:a8:1c:fc:6e:58:53:d5:18:6a:e6:95:4e:87: 40:01:db:d6:78:09:47:4d:85:93:5d:5c:6f:e0:79:33:75:f2: 86:d3:dc:89:c2:fa:5b:f7:51:0f:0b:5e:d2:3a:40:f3:4f:87: 03:54:24:f5:c0:f7:72:77:68:d6:21:25:0f:6f:1d:8a:72:04: b8:ae:da:9a:a4:6e:f5:11:f5:2e:7a:8d:d5:83:50:fa:73:f7: a0:a3:e1:fe:24:8b:ba:29:66:06:61:1b:11:22:9e:94:68:1a: 75:ff:98:ba:f1:75:bd:37:fa:04:a2:bb:0e:ff:88:09:94:1d: 0c:8a:81:8e:56:87:3c:7a:16:3c:84:76:ce:69:00:a3:27:2a: c5:98:9a:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2NEMxMTAvBgNVBAUTKDU2NkE2RjM0NDQwQUM5Mjk1RUQ4QTAwMkQ1MDQ5RjU3 NENGMTZDODgwHhcNMjUwNjI5MDIzODQxWhcNMjUwNzA2MDIzODQxWjAYMRYwFAYD VQQDEw02ODYwYTczMS0zOGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2UZXKYRh/WpSJKsB5yZK5E6Pyoy2xjiELo15IvTj5ly5kbjcLcwPpMhsIhqN fAKZG5l5U1i3s7LN+vvaM0KwyZfdrXEofSlIvCgxNLFzaIFwbuzsOhwA2It8lo2f /dF3w3whBdXcJ3N/g8prIocwy77zX1zbsrIKWbm3PTeoRsMwhu1VdB8b7KbVFGq4 dR41zPWjnPpmFLzZVfClNnvX/h3fPfmBhQiQf9cIPXzlJAkXnZJnVurZqXqYbBIU p3DhJmHkCrVAGCN+hV3onTpHBq7TIDpkpQ+pikBAEzn+ixj3jBIogVZ9CouGme5h EHizMDHEoXE+Y7tGrlelz+OF0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzNRnXr oBsdypbWmBbTGb/JmParMB8GA1UdIwQYMBaAFFZqbzRECskpXtigAtUEn1dM8WyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY0Qy9FMUE1NDYyNkY3 OTgxMUVEOTY3NzcxMjRDNEY5QUUwMi9WbXB2TkVRS3lTbGUyS0FDMVFTZlYwenhi SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZtcHZORVFLeVNsZTJLQUMxUVNmVjB6eGJJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY0Qy9FMUE1NDYyNkY3OTgxMUVEOTY3NzcxMjRDNEY5QUUwMi9WbXB2TkVRS3lT bGUyS0FDMVFTZlYwenhiSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPBmdHiP7vvUZ4rlJt1r8pRSedaGgI65jPYsemGwmP+NR536EsYRlU WdhKvi6KqWRav6SCEWJ4nIEt/mLIgOeZxEiTLh1r3GX+UtvWzyDUyL76qpGC0D+x 2f8liqGPbxq70aWvLEo+Yw9Hb4eJUjJA86gc/G5YU9UYauaVTodAAdvWeAlHTYWT XVxv4HkzdfKG09yJwvpb91EPC17SOkDzT4cDVCT1wPdyd2jWISUPbx2KcgS4rtqa pG71EfUueo3Vg1D6c/ego+H+JIu6KWYGYRsRIp6UaBp1/5i68XW9N/oEorsO/4gJ lB0MioGOVoc8ehY8hHbOaQCjJyrFmJpz -----END CERTIFICATE-----Generated at Sun Jun 29 12:51:49 2025 by rpki-client