$ rpki-client -vvf rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft File: vNvXHXuijevFk59cynZuyp91YxA.mft (raw, json) Hash identifier: LFw8kpeoL/78sfHUAB2Y3vGZS9Cd/CoRX8wWnGhRoak= Subject key identifier: 67:EA:72:A4:88:A9:E4:8A:98:0B:D0:51:08:45:7C:46:65:2E:CB:7F Authority key identifier: BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10 Certificate issuer: /CN=A9126285/serialNumber=BCDBD71D7BA28DEBC5939F5CCA766ECA9F756310 Certificate serial: 2741 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft Manifest number: 2729 Signing time: Sat 14 Jun 2025 15:38:08 +0000 Manifest this update: Sat 14 Jun 2025 15:38:08 +0000 Manifest next update: Sat 21 Jun 2025 15:38:08 +0000 Files and hashes: 1: vNvXHXuijevFk59cynZuyp91YxA.crl (hash: orRSVY+0CRtIZ3lCfsRTtpSTFbxNtynFiGRPTWe9AZ8=) 2: 962B0D98B14111E5A3B46B15C4F9AE02.roa (hash: yQHlkxuzz99/7kQgioJqP7ffoLiy5kq1xOtP6xkgYXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.crl rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10049 (0x2741) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126285, serialNumber=BCDBD71D7BA28DEBC5939F5CCA766ECA9F756310 Validity Not Before: Jun 14 15:38:08 2025 GMT Not After : Jun 21 15:38:08 2025 GMT Subject: CN=684d9760-f890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f7:9d:23:1f:0f:ec:94:4b:45:ca:f1:37:55: 74:ac:20:af:75:64:bc:f4:40:7e:53:0d:60:eb:2b: 17:04:2a:e2:85:73:68:2b:ed:cd:3a:86:84:ed:1d: f3:d7:d6:22:19:ad:7c:68:fd:90:0f:21:01:f6:3f: 70:bb:ba:8c:b8:2b:16:75:e8:0a:0f:46:76:99:84: 51:77:e1:80:fb:68:e7:15:a3:8b:3f:7d:bb:dc:2d: 81:3f:de:87:c5:2f:c7:96:65:80:81:c6:dc:90:24: 93:91:12:94:f3:57:95:70:5f:e7:6a:5f:91:93:40: 09:e1:8b:df:48:59:8e:d6:6c:67:ac:44:7f:41:95: 42:86:b8:cf:7a:7e:fd:b3:5e:35:73:74:d3:3d:1b: e8:f2:2d:89:86:d6:b7:5d:6f:e9:d7:3d:bb:8b:0e: ab:78:4d:14:5a:10:31:90:f8:90:4a:ed:5f:04:f0: e7:36:11:6e:63:66:a9:70:4b:06:18:16:30:87:70: d9:ab:32:64:b5:54:12:1f:51:16:e2:7a:19:a5:bc: 45:c1:13:66:8f:fb:f1:19:38:40:28:c5:cd:ba:fa: 6b:0b:8e:89:9b:cc:2f:14:f9:3d:47:77:cc:70:8a: df:2d:05:28:1f:e2:4d:ac:58:c0:55:0c:59:ba:02: be:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EA:72:A4:88:A9:E4:8A:98:0B:D0:51:08:45:7C:46:65:2E:CB:7F X509v3 Authority Key Identifier: keyid:BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:c1:f0:53:b3:62:67:e2:1a:d5:5f:17:41:af:15:fb:b1:c2: 6a:32:cb:20:b5:28:1f:ff:82:cc:8c:90:aa:3b:59:d7:65:0d: fa:70:91:59:a3:d6:47:a1:4d:92:08:a8:b6:ac:f0:2b:b8:7d: 07:ff:a9:a8:0e:3e:2b:15:2d:f9:b8:2e:b9:2d:e1:0a:d8:c5: 0c:36:77:f2:e6:26:15:8d:78:0f:a5:b5:b0:80:d0:1e:f8:87: 58:ee:67:19:0e:61:51:b4:0d:93:b0:33:e1:f2:02:2b:f5:06: b4:20:d4:99:b8:66:05:4a:f0:7e:db:f9:6c:78:b5:22:82:77: ba:20:5c:13:7f:a6:40:70:c1:01:ba:d6:d8:99:cb:20:74:2d: 1d:61:56:51:0a:1e:a8:0e:7a:0d:69:22:27:34:c8:26:04:5d: 06:56:43:d9:e6:85:05:9e:09:2f:98:ef:d5:99:ff:30:c4:6d: 03:76:9e:22:21:f3:0e:ec:8a:ef:85:03:52:19:00:af:96:c8: af:2c:a0:e2:83:f8:aa:78:54:b3:f2:25:4c:e6:f2:98:cc:6b: a2:39:5f:69:74:a3:56:e8:82:7c:2f:c3:88:eb:5a:3c:66:91: 7d:49:58:74:69:90:b5:23:1b:62:d2:bf:10:99:40:c6:ee:8e: bb:cf:1c:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyODUxMTAvBgNVBAUTKEJDREJENzFEN0JBMjhERUJDNTkzOUY1Q0NBNzY2RUNB OUY3NTYzMTAwHhcNMjUwNjE0MTUzODA4WhcNMjUwNjIxMTUzODA4WjAYMRYwFAYD VQQDEw02ODRkOTc2MC1mODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPedIx8P7JRLRcrxN1V0rCCvdWS89EB+Uw1g6ysXBCrihXNoK+3NOoaE7R3z 19YiGa18aP2QDyEB9j9wu7qMuCsWdegKD0Z2mYRRd+GA+2jnFaOLP3273C2BP96H xS/HlmWAgcbckCSTkRKU81eVcF/nal+Rk0AJ4YvfSFmO1mxnrER/QZVChrjPen79 s141c3TTPRvo8i2Jhta3XW/p1z27iw6reE0UWhAxkPiQSu1fBPDnNhFuY2apcEsG GBYwh3DZqzJktVQSH1EW4noZpbxFwRNmj/vxGThAKMXNuvprC46Jm8wvFPk9R3fM cIrfLQUoH+JNrFjAVQxZugK+FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfqcqSI qeSKmAvQUQhFfEZlLst/MB8GA1UdIwQYMBaAFLzb1x17oo3rxZOfXMp2bsqfdWMQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI4NS9CMjYxMEI1OEMz RjIxMUU0Qjk2NTc1MTRDNEY5QUUwMi92TnZYSFh1aWpldkZrNTljeW5adXlwOTFZ eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZOdlhIWHVpamV2Rms1OWN5blp1eXA5MVl4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjI4NS9CMjYxMEI1OEMzRjIxMUU0Qjk2NTc1MTRDNEY5QUUwMi92TnZYSFh1aWpl dkZrNTljeW5adXlwOTFZeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnwfBTs2Jn4hrVXxdBrxX7scJqMssgtSgf/4LMjJCqO1nXZQ36cJFZ o9ZHoU2SCKi2rPAruH0H/6moDj4rFS35uC65LeEK2MUMNnfy5iYVjXgPpbWwgNAe +IdY7mcZDmFRtA2TsDPh8gIr9Qa0INSZuGYFSvB+2/lseLUigne6IFwTf6ZAcMEB utbYmcsgdC0dYVZRCh6oDnoNaSInNMgmBF0GVkPZ5oUFngkvmO/Vmf8wxG0Ddp4i IfMO7IrvhQNSGQCvlsivLKDig/iqeFSz8iVM5vKYzGuiOV9pdKNW6IJ8L8OI61o8 ZpF9SVh0aZC1Ixti0r8QmUDG7o67zxx7 -----END CERTIFICATE-----Generated at Sat Jun 14 19:34:02 2025 by rpki-client