$ rpki-client -vvf rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft File: vYeFXLaB4jNZv-waNPGZK2ceXu4.mft (raw, json) Hash identifier: q/af7OnjpxhR2LJmbvhkxMLOUbikF9ccKf/CfiBknT0= Subject key identifier: 77:ED:FA:C0:3D:D6:31:AE:3B:A2:21:C8:42:AD:10:E9:2D:4E:41:95 Authority key identifier: BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE Certificate issuer: /CN=A9127726/serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE Certificate serial: 34F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft Manifest number: 34BF Signing time: Sat 14 Jun 2025 15:13:07 +0000 Manifest this update: Sat 14 Jun 2025 15:13:07 +0000 Manifest next update: Sat 21 Jun 2025 15:13:07 +0000 Files and hashes: 1: vYeFXLaB4jNZv-waNPGZK2ceXu4.crl (hash: nwwyH3oQx3fe2MAbgipjIEQfUoUQz1JCRNnlmry0l3Y=) 2: 264A19E27A3D11E99D212E62C4F9AE02.roa (hash: kaUlqr3b8A7no1oe3E82H4SD9C+VUB4JZZk+4clJWRg=) 3: AF976FA2023311ED945EBE12C4F9AE02.roa (hash: VG6uEFBAKDNWG5jrp+h5u5H00t+QV3JS7QeUIT589uA=) 4: 9D03023EA86E11EDABA1FA2AC4F9AE02.roa (hash: LAU2JxX8T47cr50yu6tjbJf0N73aEylHsaRmxgaBsa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13561 (0x34f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127726, serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE Validity Not Before: Jun 14 15:13:07 2025 GMT Not After : Jun 21 15:13:07 2025 GMT Subject: CN=684d9183-4397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:55:64:57:27:dd:ee:e2:a7:0a:21:8c:73:20: 01:c1:d4:aa:2e:39:cc:c1:43:0c:81:34:12:d5:74: 72:ea:5f:dd:c4:7f:45:a0:aa:92:c2:2d:87:87:95: 72:d6:0a:d2:4d:67:79:e5:4d:f2:0b:cf:9b:32:79: af:ad:1d:e5:92:4d:40:3e:80:bd:c2:42:8c:fd:66: 58:70:8b:fe:bf:21:5e:c3:e8:2e:50:c2:b9:09:d7: 24:d5:64:f9:94:92:03:f3:a7:9e:22:03:c5:72:6a: 6b:ae:a7:59:91:bc:28:1b:c1:ac:23:53:9b:8c:98: 7e:cc:cc:f1:43:ce:67:1a:3b:d1:92:95:e9:ca:42: 14:15:b6:85:82:c4:ff:77:e4:ab:93:ed:c0:cb:88: 62:c1:88:c3:9f:24:61:20:8d:42:87:c5:75:08:c2: 8b:89:af:4c:7e:72:75:8d:b3:cd:0c:1c:b8:8e:ab: ad:b8:85:af:56:8a:db:24:ac:86:3e:71:18:8d:fa: 7a:69:d6:73:d9:2f:c3:be:44:ce:48:c6:ce:61:94: 2a:ed:60:2b:c5:9e:03:da:76:6d:bc:4a:0a:e2:8e: 1b:b4:bd:da:b3:f7:e2:37:39:92:5c:76:46:b4:12: 51:fe:f3:db:43:c5:40:c3:e3:22:fb:ce:13:2a:1c: 6e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:ED:FA:C0:3D:D6:31:AE:3B:A2:21:C8:42:AD:10:E9:2D:4E:41:95 X509v3 Authority Key Identifier: keyid:BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:eb:00:9c:c4:56:2a:e2:f0:06:23:c4:37:08:3a:58:dc:3a: 7d:9e:2e:13:8c:d8:8a:ab:a8:f7:7b:38:3a:07:51:0a:dc:5b: b3:8e:e0:0b:53:6b:f2:92:3f:e0:a3:10:aa:b8:72:9d:12:7c: 56:16:b8:ce:1d:bc:3d:f1:9d:0b:f5:cf:a8:2e:bd:9a:39:31: f5:14:5d:92:75:13:96:8c:02:90:4f:10:99:da:ba:58:7c:cd: 17:98:40:11:43:10:7c:87:8e:32:9c:36:ce:3b:7b:3a:02:f7: 60:2e:56:b8:0f:b7:aa:a5:96:a5:d8:ae:31:81:32:fe:77:ea: f8:19:a9:85:87:76:ee:3f:0b:39:78:5c:9b:d7:99:e5:1f:14: 33:2d:53:07:09:ec:97:77:a9:3a:15:53:f4:81:a9:36:a3:7a: 86:ff:e1:fd:09:cc:78:96:20:23:5c:4a:e6:02:c1:84:b0:47: 7a:78:99:71:0b:f2:11:e1:2c:4c:1e:62:62:61:59:0b:db:f5: 4a:05:b5:6f:e5:d9:c7:c2:f7:8b:3b:15:67:bb:a9:e8:0e:aa: 21:31:8d:48:ad:2f:f0:86:3c:b2:33:73:10:be:c6:3a:75:6f: 8d:69:3c:9a:e0:c6:b4:d5:77:a8:8b:e6:33:bd:cd:e4:78:04: 21:21:80:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc3MjYxMTAvBgNVBAUTKEJEODc4NTVDQjY4MUUyMzM1OUJGRUMxQTM0RjE5OTJC NjcxRTVFRUUwHhcNMjUwNjE0MTUxMzA3WhcNMjUwNjIxMTUxMzA3WjAYMRYwFAYD VQQDEw02ODRkOTE4My00Mzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FVkVyfd7uKnCiGMcyABwdSqLjnMwUMMgTQS1XRy6l/dxH9FoKqSwi2Hh5Vy 1grSTWd55U3yC8+bMnmvrR3lkk1APoC9wkKM/WZYcIv+vyFew+guUMK5Cdck1WT5 lJID86eeIgPFcmprrqdZkbwoG8GsI1ObjJh+zMzxQ85nGjvRkpXpykIUFbaFgsT/ d+Srk+3Ay4hiwYjDnyRhII1Ch8V1CMKLia9MfnJ1jbPNDBy4jqutuIWvVorbJKyG PnEYjfp6adZz2S/DvkTOSMbOYZQq7WArxZ4D2nZtvEoK4o4btL3as/fiNzmSXHZG tBJR/vPbQ8VAw+Mi+84TKhxuqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHft+sA9 1jGuO6IhyEKtEOktTkGVMB8GA1UdIwQYMBaAFL2HhVy2geIzWb/sGjTxmStnHl7u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzcyNi9GOUZGRjZBQzFE QTcxMUUyOTYzQUZBQTEwOEIwMkNEMi92WWVGWExhQjRqTlp2LXdhTlBHWksyY2VY dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZZZUZYTGFCNGpOWnYtd2FOUEdaSzJjZVh1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzcyNi9GOUZGRjZBQzFEQTcxMUUyOTYzQUZBQTEwOEIwMkNEMi92WWVGWExhQjRq Tlp2LXdhTlBHWksyY2VYdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa6wCcxFYq4vAGI8Q3CDpY3Dp9ni4TjNiKq6j3ezg6B1EK3FuzjuAL U2vykj/goxCquHKdEnxWFrjOHbw98Z0L9c+oLr2aOTH1FF2SdROWjAKQTxCZ2rpY fM0XmEARQxB8h44ynDbOO3s6AvdgLla4D7eqpZal2K4xgTL+d+r4GamFh3buPws5 eFyb15nlHxQzLVMHCeyXd6k6FVP0gak2o3qG/+H9Ccx4liAjXErmAsGEsEd6eJlx C/IR4SxMHmJiYVkL2/VKBbVv5dnHwveLOxVnu6noDqohMY1IrS/whjyyM3MQvsY6 dW+NaTya4Ma01Xeoi+Yzvc3keAQhIYDZ -----END CERTIFICATE-----Generated at Sun Jun 15 09:44:17 2025 by rpki-client