$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft File: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft (raw, json) Hash identifier: 0gc7lA1lBEWxA0ENDenNQhNKPKVyin40rfpanRmQIAo= Subject key identifier: DA:AB:E8:6A:20:4F:77:45:BE:F1:D9:72:02:DA:E4:D3:92:88:B5:B6 Authority key identifier: 56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC Certificate issuer: /CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC Certificate serial: 0D98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft Manifest number: 0D87 Signing time: Sat 14 Jun 2025 17:52:00 +0000 Manifest this update: Sat 14 Jun 2025 17:52:00 +0000 Manifest next update: Sat 21 Jun 2025 17:52:00 +0000 Files and hashes: 1: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl (hash: Q4lM6n5bisukHcAKZQMnNTTKu/WoufBwd66LvrOQayw=) 2: 8DD1E6B6E6FE11EE90BD3C1FC4F9AE02.roa (hash: VdJNFDaYIS+GL9qtkVFNMbcche+I8od1o1L3BRBSv5A=) 3: E41A2BEE400A11F08117C986C4F9AE02.roa (hash: yGV6N9xK5v+jfaXF116EQ42M1CVDQnVhMAbJObBgr0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3480 (0xd98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203DF, serialNumber=56790B8C9507D9D4F3900950D329E275747767AC Validity Not Before: Jun 14 17:52:00 2025 GMT Not After : Jun 21 17:52:00 2025 GMT Subject: CN=684db6c0-cb1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:40:4d:79:a2:ad:e5:0a:59:2e:0f:09:3d: af:74:aa:73:bf:a7:bd:e1:89:02:41:c0:2c:4f:53: ed:42:b1:4b:fd:6f:53:53:b5:84:61:7e:08:9c:0b: 72:22:86:2a:7b:2f:c3:09:22:60:69:29:4e:a5:ce: bf:95:af:ba:e8:d9:82:8a:73:11:8a:af:7b:07:80: f7:54:1e:94:88:b9:5c:86:6b:e9:f9:9b:88:fa:64: e1:31:2f:6b:e0:05:db:97:4f:40:b1:b8:f8:c7:79: 41:7d:28:da:b2:9e:06:e2:b5:a4:1e:6b:3f:27:d0: b7:4f:19:3c:2b:9b:6d:cb:f1:30:0a:82:c8:cc:6a: 46:b8:81:4c:f4:ec:13:a6:f7:07:f9:9a:8c:05:5c: c6:50:c3:c1:d3:b1:02:09:f4:12:42:ed:4a:84:56: 6b:c6:3b:62:cf:f1:03:27:df:86:60:ff:9a:f7:ba: 30:90:76:8c:b2:1d:3b:57:21:e9:5c:21:9c:83:98: ce:e1:03:93:6a:b2:40:c2:b6:58:57:16:c9:35:07: e6:a5:28:7a:35:70:f1:82:2c:63:81:3b:7d:e4:ec: 9f:3e:89:d2:bb:e8:b8:7d:85:d0:65:5e:fc:e2:e2: cd:d6:9b:5c:93:1a:f0:3e:97:63:01:40:63:7e:61: 42:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AB:E8:6A:20:4F:77:45:BE:F1:D9:72:02:DA:E4:D3:92:88:B5:B6 X509v3 Authority Key Identifier: keyid:56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:22:74:bb:1c:06:31:81:88:1c:cb:35:87:90:9b:f5:46:1d: af:21:ab:d5:51:a3:8d:5f:fb:5a:46:fa:c5:e2:2d:64:52:0a: 15:c1:dc:8c:de:f0:b3:d4:6d:b5:2f:c4:89:70:14:10:6b:18: 08:cf:09:96:0b:1e:49:3e:70:28:e3:9f:26:ad:e0:fa:f6:54: ec:85:92:f1:a1:dd:9f:f5:65:d2:d4:fb:7b:97:b8:b1:3d:f6: 0f:85:76:87:9d:c6:3e:1e:e6:d9:58:48:db:ad:97:d2:d8:1b: cc:da:76:cd:26:7a:89:5a:53:46:8e:0c:36:12:f4:40:8c:b3: 1b:64:24:45:4e:8a:d2:58:76:dd:bd:69:99:5c:96:79:56:9b: e9:cd:0a:4b:0a:69:7e:bf:7b:c5:16:60:7c:25:4e:13:70:58: a2:18:3d:ba:b5:83:d7:f0:31:91:2d:9d:d6:31:07:60:c9:44: 3b:b0:88:dd:10:d7:a2:97:b8:9e:66:16:8d:1f:b3:90:9b:fa: 81:28:b3:32:5c:75:d9:d6:ba:43:ba:af:b2:34:f0:47:80:c4: e0:b6:df:de:f9:d9:b4:b1:10:f5:11:78:52:6a:bd:ba:16:2f: ba:f7:12:4b:e0:94:53:0f:53:80:e1:f3:4a:8f:4c:8a:77:52: 7d:39:52:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzREYxMTAvBgNVBAUTKDU2NzkwQjhDOTUwN0Q5RDRGMzkwMDk1MEQzMjlFMjc1 NzQ3NzY3QUMwHhcNMjUwNjE0MTc1MjAwWhcNMjUwNjIxMTc1MjAwWjAYMRYwFAYD VQQDEw02ODRkYjZjMC1jYjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFdATXmireUKWS4PCT2vdKpzv6e94YkCQcAsT1PtQrFL/W9TU7WEYX4InAty IoYqey/DCSJgaSlOpc6/la+66NmCinMRiq97B4D3VB6UiLlchmvp+ZuI+mThMS9r 4AXbl09Asbj4x3lBfSjasp4G4rWkHms/J9C3Txk8K5tty/EwCoLIzGpGuIFM9OwT pvcH+ZqMBVzGUMPB07ECCfQSQu1KhFZrxjtiz/EDJ9+GYP+a97owkHaMsh07VyHp XCGcg5jO4QOTarJAwrZYVxbJNQfmpSh6NXDxgixjgTt95OyfPonSu+i4fYXQZV78 4uLN1ptckxrwPpdjAUBjfmFCSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqr6Gog T3dFvvHZcgLa5NOSiLW2MB8GA1UdIwQYMBaAFFZ5C4yVB9nU85AJUNMp4nV0d2es MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNERi85MjczOTdCNENB MzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJkVHprQWxRMHluaWRYUjNa NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Zua0xqSlVIMmRUemtBbFEweW5pZFhSM1o2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNERi85MjczOTdCNENBMzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJk VHprQWxRMHluaWRYUjNaNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBInS7HAYxgYgcyzWHkJv1Rh2vIavVUaONX/taRvrF4i1kUgoVwdyM 3vCz1G21L8SJcBQQaxgIzwmWCx5JPnAo458mreD69lTshZLxod2f9WXS1Pt7l7ix PfYPhXaHncY+HubZWEjbrZfS2BvM2nbNJnqJWlNGjgw2EvRAjLMbZCRFTorSWHbd vWmZXJZ5VpvpzQpLCml+v3vFFmB8JU4TcFiiGD26tYPX8DGRLZ3WMQdgyUQ7sIjd ENeil7ieZhaNH7OQm/qBKLMyXHXZ1rpDuq+yNPBHgMTgtt/e+dm0sRD1EXhSar26 Fi+69xJL4JRTD1OA4fNKj0yKd1J9OVKU -----END CERTIFICATE-----Generated at Sun Jun 15 08:29:14 2025 by rpki-client