$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft File: RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft (raw, json) Hash identifier: cYTU5aqwgQ71BzXbgoFq/AhCTeuoGvTJooNwWikD4iE= Subject key identifier: 50:7A:64:20:A6:33:DA:AB:89:F1:F4:03:78:D6:9E:70:13:21:47:EB Authority key identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D Certificate issuer: /CN=A91FF1CC/serialNumber=446FAF923BEBAF96357287FE250991C75491454D Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft Manifest number: 48 Signing time: Thu 03 Jul 2025 07:39:15 +0000 Manifest this update: Thu 03 Jul 2025 07:39:13 +0000 Manifest next update: Thu 10 Jul 2025 07:39:13 +0000 Files and hashes: 1: RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl (hash: Ad38DilfTWcP86q9R8fHQNCD/tPWZ1tTb//lBbpARls=) 2: CC37DC24024311F0B8CC3D64C4F9AE02.roa (hash: p8FHrwqthntaiCGXD1qfLj6KRbEBkZSs0aBfuIq0c5c=) 3: B7E221E4024311F0BD990F64C4F9AE02.roa (hash: d1zImNClufU6mQa0qsoJOx/6gPAzww6pSPXhwifVLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=446FAF923BEBAF96357287FE250991C75491454D Validity Not Before: Jul 3 07:39:13 2025 GMT Not After : Jul 10 07:39:13 2025 GMT Subject: CN=686633a2-cbc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d3:7b:52:ed:a9:49:76:1c:fc:6c:74:f2:03: 34:1b:86:70:9d:be:e5:05:31:9b:e0:8b:bd:b6:2b: d4:03:64:20:14:17:2f:08:d4:b6:9c:df:1d:78:e1: 0d:81:a0:7e:c7:56:c7:e0:40:ea:c2:29:a3:30:bb: 0e:2a:95:e7:30:da:55:eb:33:18:12:22:ab:83:87: 60:16:11:03:f7:3e:96:c7:bd:55:e0:fa:98:7a:aa: 7a:da:d1:33:8a:7c:ac:32:6d:86:eb:77:a6:c3:04: e0:5d:55:1d:60:bd:a1:ae:7f:fd:d3:5d:3c:ee:0d: f3:35:0f:95:27:62:13:9c:04:4a:9b:1c:e2:a1:28: 8c:cf:f7:55:a5:e4:56:24:c4:19:51:81:88:3e:c3: 31:12:9e:db:f6:e2:47:d5:67:77:38:33:6b:90:16: d9:b9:1a:ef:59:3a:1d:52:fe:01:83:5d:c6:1d:c4: 69:fe:c2:ad:30:d3:c7:d7:95:40:54:cc:ae:cf:67: 3b:28:ba:1e:e1:42:0a:17:65:f2:3b:b6:b4:07:88: 63:af:89:47:9c:dd:a9:27:c2:2a:c5:8b:43:da:f5: e9:62:38:52:42:4f:53:c6:80:d8:c4:cd:45:cb:17: 4b:8b:8f:3f:f3:9a:f4:1c:ab:6c:ac:e7:d5:36:ea: 94:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7A:64:20:A6:33:DA:AB:89:F1:F4:03:78:D6:9E:70:13:21:47:EB X509v3 Authority Key Identifier: keyid:44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d9:b9:35:88:55:b3:b9:4b:04:24:b5:3a:80:27:5c:bf:f9: 7b:56:e5:34:f7:54:2f:e6:4b:2f:8f:5f:2e:5e:b7:89:6b:5f: ed:0a:19:b5:e5:f2:1c:c1:99:05:8a:30:1a:47:ff:e5:e1:28: 6f:d6:73:1b:92:8a:06:09:3b:25:77:2b:8a:74:c9:e0:17:33: c5:00:4d:7e:87:9e:77:be:5e:97:5e:32:f4:5a:42:d9:a7:f8: 44:ca:e2:b7:7e:06:5c:dd:66:f2:81:de:19:01:ce:f2:ac:5c: 31:57:e2:68:fa:e0:db:05:f9:38:b2:e7:4c:9d:c5:50:4f:f8: f0:26:39:4e:22:05:ba:ac:17:c3:ad:91:a4:e8:6b:46:25:b2: 42:ac:74:7a:aa:25:8b:8c:5a:69:2f:2e:42:2c:4d:9c:77:9c: 1b:a0:97:67:33:55:22:a4:90:8d:fe:11:31:88:e7:87:4d:8c: e2:77:90:49:78:28:7a:14:0e:25:d8:30:67:c2:85:05:1d:45: 49:ca:26:a4:d2:94:31:8f:b5:82:8e:80:b0:1a:25:80:09:75: 9c:74:68:97:09:94:33:e1:36:62:42:26:f9:ed:87:83:1b:3f: cd:ae:97:79:13:35:5a:af:2c:c4:94:8c:3c:1b:26:e4:b5:67: dd:dc:42:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjFDQzExMC8GA1UEBRMoNDQ2RkFGOTIzQkVCQUY5NjM1NzI4N0ZFMjUwOTkxQzc1 NDkxNDU0RDAeFw0yNTA3MDMwNzM5MTNaFw0yNTA3MTAwNzM5MTNaMBgxFjAUBgNV BAMTDTY4NjYzM2EyLWNiYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDN03tS7alJdhz8bHTyAzQbhnCdvuUFMZvgi722K9QDZCAUFy8I1Lac3x144Q2B oH7HVsfgQOrCKaMwuw4qlecw2lXrMxgSIquDh2AWEQP3PpbHvVXg+ph6qnra0TOK fKwybYbrd6bDBOBdVR1gvaGuf/3TXTzuDfM1D5UnYhOcBEqbHOKhKIzP91Wl5FYk xBlRgYg+wzESntv24kfVZ3c4M2uQFtm5Gu9ZOh1S/gGDXcYdxGn+wq0w08fXlUBU zK7PZzsouh7hQgoXZfI7trQHiGOviUec3aknwirFi0Pa9eliOFJCT1PGgNjEzUXL F0uLjz/zmvQcq2ys59U26pQzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUHpkIKYz 2quJ8fQDeNaecBMhR+swHwYDVR0jBBgwFoAURG+vkjvrr5Y1cof+JQmRx1SRRU0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMUNDLzNBRkMzM0UyRUY2 MzExRUZCRjY0QUI2QUM0RjlBRTAyL1JHLXZranZycjVZMWNvZi1KUW1SeDFTUlJV MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkctdmtqdnJyNVkxY29mLUpRbVJ4MVNSUlUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG MUNDLzNBRkMzM0UyRUY2MzExRUZCRjY0QUI2QUM0RjlBRTAyL1JHLXZranZycjVZ MWNvZi1KUW1SeDFTUlJVMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ3ZuTWIVbO5SwQktTqAJ1y/+XtW5TT3VC/mSy+PXy5et4lrX+0KGbXl 8hzBmQWKMBpH/+XhKG/WcxuSigYJOyV3K4p0yeAXM8UATX6Hnne+XpdeMvRaQtmn +ETK4rd+BlzdZvKB3hkBzvKsXDFX4mj64NsF+Tiy50ydxVBP+PAmOU4iBbqsF8Ot kaToa0YlskKsdHqqJYuMWmkvLkIsTZx3nBugl2czVSKkkI3+ETGI54dNjOJ3kEl4 KHoUDiXYMGfChQUdRUnKJqTSlDGPtYKOgLAaJYAJdZx0aJcJlDPhNmJCJvnth4Mb P82ul3kTNVqvLMSUjDwbJuS1Z93cQgI= -----END CERTIFICATE-----Generated at Thu Jul 3 23:47:01 2025 by rpki-client