$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft File: Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft (raw, json) Hash identifier: Fd53u0jyHz3uJfPc8x1D1l8Dsg+SBzM+dGLL7BeyVd0= Subject key identifier: 30:41:8C:4D:3B:4A:98:AC:46:03:89:6C:7A:C4:E4:7E:FF:90:15:53 Authority key identifier: 55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6 Certificate issuer: /CN=A91127C1/serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6 Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft Manifest number: 01E4 Signing time: Wed 18 Jun 2025 19:50:47 +0000 Manifest this update: Wed 18 Jun 2025 19:50:47 +0000 Manifest next update: Wed 25 Jun 2025 19:50:47 +0000 Files and hashes: 1: Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl (hash: sEW0sGBU1dFKfAay7fdd+OMpSwYTIBXTbdcdr65sUho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 19:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127C1, serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6 Validity Not Before: Jun 18 19:50:47 2025 GMT Not After : Jun 25 19:50:47 2025 GMT Subject: CN=68531897-a6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f8:d7:01:69:14:6c:bc:47:da:e7:b7:87:66: 0f:e9:39:64:ac:3f:fb:f9:82:c1:79:50:e0:c9:6a: 1b:e6:84:46:91:41:a8:6c:91:f0:89:a3:c8:f0:c6: dd:ff:5c:37:f7:22:52:8e:e3:97:28:d8:75:93:f8: 7d:07:27:ea:aa:7f:71:90:db:2d:b5:22:ca:93:18: c2:03:38:dc:96:8c:55:ab:5d:35:c1:73:27:ff:25: 04:72:f0:22:35:cf:17:92:8d:13:3f:5b:aa:8f:1c: d8:88:a5:00:46:ff:54:3c:5e:99:d9:11:9f:55:03: 88:12:db:0a:4e:c2:2e:37:1d:e0:4a:ce:5b:ad:6d: 93:e3:03:e3:35:a5:a2:1f:da:3b:79:2e:c2:3d:61: 7f:3d:e0:1f:15:b0:80:f6:24:ec:5c:74:c7:1d:bc: 94:ac:3b:a8:d2:09:fc:1d:6f:1c:db:61:e6:49:f1: df:5f:b8:eb:f3:f8:99:88:87:f0:02:7a:c9:36:8c: ae:6f:ec:10:63:0c:6c:05:a5:db:08:49:6d:53:9d: 36:6f:e9:6e:57:57:ec:ee:36:a8:1a:a8:03:20:03: 78:9c:1a:aa:b2:32:17:88:47:e1:00:ba:30:64:23: 16:12:20:07:48:ab:f1:79:b9:f9:f6:12:c0:85:f8: 7d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:41:8C:4D:3B:4A:98:AC:46:03:89:6C:7A:C4:E4:7E:FF:90:15:53 X509v3 Authority Key Identifier: keyid:55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:86:ad:0c:29:95:8f:4c:2e:b2:e2:1c:5a:9d:55:3b:b3:8b: 4f:71:24:69:8e:68:5a:98:1e:85:30:4b:6c:42:a9:c2:c8:72: 85:d9:2b:a7:87:5a:93:8b:62:9f:67:3a:80:a1:42:11:11:bb: 1d:16:b3:1d:6f:bf:64:39:f4:67:6c:c7:d6:4e:c5:ca:e3:b2: 2e:52:e3:e8:a2:55:3b:a6:45:84:14:32:4f:a1:a3:39:07:63: 17:29:9c:19:2a:dc:1c:63:a6:a0:69:1c:09:5e:0d:7d:46:e4: 56:35:5c:24:37:df:d0:52:5a:fb:02:a1:56:08:c3:29:dd:ae: 1f:48:71:50:67:85:c2:fe:84:3b:42:ad:7c:2f:b6:76:d3:e2: 17:3c:1a:f8:13:98:df:e5:5f:1a:19:fb:4f:65:69:08:37:9a: ad:71:a2:90:45:57:70:34:22:ec:c1:13:70:0f:be:ce:74:89: 38:15:25:d6:86:0c:1e:fa:51:25:71:2e:24:41:92:69:cb:f3: 92:aa:0c:9c:73:06:db:17:90:ac:e7:b7:53:72:83:6e:b9:30: 6b:8c:86:a1:eb:96:3d:8c:09:ee:10:0e:f2:f5:c3:ab:65:bd: c0:6e:52:11:f6:33:54:e6:d9:b0:6a:af:ff:20:51:74:3c:bf: 84:cb:49:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QzExMTAvBgNVBAUTKDU1RkI3QkNDQTc0MDI4NUZDODFBQTM2MEYwMkNFMzJG OTU4MTZEQjYwHhcNMjUwNjE4MTk1MDQ3WhcNMjUwNjI1MTk1MDQ3WjAYMRYwFAYD VQQDEw02ODUzMTg5Ny1hNmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5/jXAWkUbLxH2ue3h2YP6TlkrD/7+YLBeVDgyWob5oRGkUGobJHwiaPI8Mbd /1w39yJSjuOXKNh1k/h9Byfqqn9xkNsttSLKkxjCAzjcloxVq101wXMn/yUEcvAi Nc8Xko0TP1uqjxzYiKUARv9UPF6Z2RGfVQOIEtsKTsIuNx3gSs5brW2T4wPjNaWi H9o7eS7CPWF/PeAfFbCA9iTsXHTHHbyUrDuo0gn8HW8c22HmSfHfX7jr8/iZiIfw AnrJNoyub+wQYwxsBaXbCEltU502b+luV1fs7jaoGqgDIAN4nBqqsjIXiEfhALow ZCMWEiAHSKvxebn59hLAhfh9gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBBjE07 SpisRgOJbHrE5H7/kBVTMB8GA1UdIwQYMBaAFFX7e8ynQChfyBqjYPAs4y+VgW22 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdDMS9EQ0Y5OEExNjc3 ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtGX0lHcU5nOEN6akw1V0Ji YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZmdDd6S2RBS0ZfSUdxTmc4Q3pqTDVXQmJiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdDMS9EQ0Y5OEExNjc3ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtG X0lHcU5nOEN6akw1V0JiYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIhq0MKZWPTC6y4hxanVU7s4tPcSRpjmhamB6FMEtsQqnCyHKF2Sun h1qTi2KfZzqAoUIREbsdFrMdb79kOfRnbMfWTsXK47IuUuPoolU7pkWEFDJPoaM5 B2MXKZwZKtwcY6agaRwJXg19RuRWNVwkN9/QUlr7AqFWCMMp3a4fSHFQZ4XC/oQ7 Qq18L7Z20+IXPBr4E5jf5V8aGftPZWkIN5qtcaKQRVdwNCLswRNwD77OdIk4FSXW hgwe+lElcS4kQZJpy/OSqgyccwbbF5Cs57dTcoNuuTBrjIah65Y9jAnuEA7y9cOr Zb3AblIR9jNU5tmwaq//IFF0PL+Ey0mY -----END CERTIFICATE-----Generated at Thu Jun 19 05:50:54 2025 by rpki-client