$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft File: Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft (raw, json) Hash identifier: pNnBHx3v7dRqQ1fKxhnTKGc5GG7N70pmE10P17LSklw= Subject key identifier: C7:A1:D9:A9:EF:2B:CA:72:B1:E6:7B:E7:F4:3B:7D:02:CE:59:46:28 Authority key identifier: 56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71 Certificate issuer: /CN=A91203DC/serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071 Certificate serial: 218A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft Manifest number: 217F Signing time: Sat 14 Jun 2025 15:52:32 +0000 Manifest this update: Sat 14 Jun 2025 15:52:32 +0000 Manifest next update: Sat 21 Jun 2025 15:52:32 +0000 Files and hashes: 1: Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl (hash: KzPWqFjv1+s7x0nWqdv1hfLzeTtkUJIdvGuFig0H0Yk=) 2: 1D9DC82A652311EBA8CF3C4CC4F9AE02.roa (hash: lzXH47zwQqzR7U0IwcpEbq0QXTqtq0eXFrMFUkvM89M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8586 (0x218a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203DC, serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071 Validity Not Before: Jun 14 15:52:32 2025 GMT Not After : Jun 21 15:52:32 2025 GMT Subject: CN=684d9ac0-8cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1c:13:92:ec:2b:7a:18:01:4b:68:99:bb:65: d5:da:64:e9:00:ef:ec:54:da:8a:66:38:cc:08:3a: 34:c9:25:df:1f:da:67:d8:fd:1f:d2:f3:6d:ba:c7: 30:e9:4b:b4:4b:46:d5:9a:ab:37:33:97:a5:22:37: e2:ff:dc:b6:d9:b2:4b:8d:33:80:6d:0a:99:ab:7f: 39:8f:a1:a9:93:f0:e6:24:8f:34:cc:29:8e:52:88: 81:4d:5d:54:bb:54:b8:d8:f1:80:4e:7d:28:cc:41: e1:03:92:ce:3e:18:01:61:2e:a5:69:f8:89:27:14: d4:fd:16:c6:88:ed:04:8f:1c:fc:85:1f:d9:9f:f2: fe:72:d3:cd:71:79:7e:78:4e:94:a2:f5:0d:4d:48: 48:1b:98:00:80:44:bc:b1:dc:29:eb:2f:54:d1:e3: 64:6d:43:5b:f2:2b:7c:f0:fd:3c:02:42:0f:3e:bd: 23:f6:d7:78:0e:bb:03:42:1b:1c:96:29:c9:b3:6d: 8f:67:62:5d:da:9b:b9:3c:a9:3f:19:49:0f:e8:69: 61:08:5f:5d:f3:b8:c8:18:61:ef:06:c6:4a:e1:c2: b1:cd:e3:82:2f:9a:5e:24:07:14:6d:84:50:c0:0b: f8:a7:4d:37:c5:3b:6d:90:9c:02:e8:4f:65:7e:00: 25:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A1:D9:A9:EF:2B:CA:72:B1:E6:7B:E7:F4:3B:7D:02:CE:59:46:28 X509v3 Authority Key Identifier: keyid:56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:7c:23:41:d5:15:36:29:61:85:5c:cd:b6:05:f7:9f:51:56: 64:ab:79:b5:d9:60:fa:8a:16:0c:a8:85:30:3f:c0:45:6d:36: f7:b1:07:75:74:53:7b:c3:79:ce:09:00:78:20:b2:5f:ea:7f: 5f:20:2d:35:1f:75:c1:11:87:19:9a:b6:5a:81:ca:66:7f:db: d7:6b:ac:49:ba:eb:18:42:58:14:d7:85:7a:4a:6b:fd:a8:b7: f8:44:ff:18:27:d2:d0:32:30:49:9c:61:c7:51:b1:10:78:49: 00:19:03:d8:0d:bb:14:90:6c:af:fd:13:4b:14:a8:d1:e7:b5: fa:53:77:35:27:dc:85:6c:32:0e:e9:4b:31:55:22:47:65:50: ac:6e:2f:38:8b:38:22:70:a4:97:e2:64:ad:d8:77:50:6e:26: 82:27:a5:9c:f7:06:39:8f:a3:20:88:72:40:04:40:44:e9:4b: 3a:34:ff:7a:c1:2d:c6:cd:16:23:b6:ae:f2:44:92:d7:d7:88: ad:1e:60:dc:b4:c4:87:4a:a7:10:9b:97:e2:84:e2:b5:8d:d4: cb:c8:73:9e:ea:17:f0:44:0e:7a:05:1a:79:13:ff:bd:3e:8e: cc:95:c3:13:8f:14:2c:20:87:2e:0f:50:54:92:c6:95:55:bb: 3a:18:8c:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzREMxMTAvBgNVBAUTKDU2NDZFMDdBMEY2MDI1RjFFMjYwRjFDNDk5NkY5QTY4 MUIyOTIwNzEwHhcNMjUwNjE0MTU1MjMyWhcNMjUwNjIxMTU1MjMyWjAYMRYwFAYD VQQDEw02ODRkOWFjMC04Y2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhwTkuwrehgBS2iZu2XV2mTpAO/sVNqKZjjMCDo0ySXfH9pn2P0f0vNtuscw 6Uu0S0bVmqs3M5elIjfi/9y22bJLjTOAbQqZq385j6Gpk/DmJI80zCmOUoiBTV1U u1S42PGATn0ozEHhA5LOPhgBYS6lafiJJxTU/RbGiO0Ejxz8hR/Zn/L+ctPNcXl+ eE6UovUNTUhIG5gAgES8sdwp6y9U0eNkbUNb8it88P08AkIPPr0j9td4DrsDQhsc linJs22PZ2Jd2pu5PKk/GUkP6GlhCF9d87jIGGHvBsZK4cKxzeOCL5peJAcUbYRQ wAv4p003xTttkJwC6E9lfgAlUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMeh2anv K8pyseZ75/Q7fQLOWUYoMB8GA1UdIwQYMBaAFFZG4HoPYCXx4mDxxJlvmmgbKSBx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNEQy9GQUQzRDZGQ0RD NDkxMUU1QTA2MjVGODJDNEY5QUUwMi9Wa2JnZWc5Z0pmSGlZUEhFbVctYWFCc3BJ SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZrYmdlZzlnSmZIaVlQSEVtVy1hYUJzcElIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNEQy9GQUQzRDZGQ0RDNDkxMUU1QTA2MjVGODJDNEY5QUUwMi9Wa2JnZWc5Z0pm SGlZUEhFbVctYWFCc3BJSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3fCNB1RU2KWGFXM22BfefUVZkq3m12WD6ihYMqIUwP8BFbTb3sQd1 dFN7w3nOCQB4ILJf6n9fIC01H3XBEYcZmrZagcpmf9vXa6xJuusYQlgU14V6Smv9 qLf4RP8YJ9LQMjBJnGHHUbEQeEkAGQPYDbsUkGyv/RNLFKjR57X6U3c1J9yFbDIO 6UsxVSJHZVCsbi84izgicKSX4mSt2HdQbiaCJ6Wc9wY5j6MgiHJABEBE6Us6NP96 wS3GzRYjtq7yRJLX14itHmDctMSHSqcQm5fihOK1jdTLyHOe6hfwRA56BRp5E/+9 Po7MlcMTjxQsIIcuD1BUksaVVbs6GIxs -----END CERTIFICATE-----Generated at Mon Jun 16 09:41:31 2025 by rpki-client