$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft File: VXcPY6DmX0wvyWrxmLxXhNznikY.mft (raw, json) Hash identifier: SOqnULlU0IrTFtIouYZjOT5te9KIVhcjzQwDE77fDIs= Subject key identifier: 33:7C:46:57:13:B0:D5:9C:D5:29:C4:A4:CC:B9:F0:CE:0D:FB:8E:96 Authority key identifier: 55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46 Certificate issuer: /CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft Manifest number: A2 Signing time: Tue 17 Jun 2025 05:11:08 +0000 Manifest this update: Tue 17 Jun 2025 05:11:08 +0000 Manifest next update: Tue 24 Jun 2025 05:11:08 +0000 Files and hashes: 1: VXcPY6DmX0wvyWrxmLxXhNznikY.crl (hash: kP9PvpoXeT5u4y/Qy24kffafYGsFKb2E2E2SFAjBHwc=) 2: 3590B0F65B9B11EFB90EBF42C4F9AE02.roa (hash: 969jdHyGdAb1flnXmcu6oMyF0jGTp5cUzC4c61xE+18=) 3: 887E73265B9A11EF80F47C41C4F9AE02.roa (hash: CexljjC7wRSe/lloivtx612T1a6cjKsaqz6uhDTMArU=) 4: 8A54B9326F0C11EF866A7A83C4F9AE02.roa (hash: 4E2LrZlO3ISS0nbt57DW68xHKT/RNp0hNVMadZS9u+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B75A, serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46 Validity Not Before: Jun 17 05:11:08 2025 GMT Not After : Jun 24 05:11:08 2025 GMT Subject: CN=6850f8ec-551a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e8:68:5c:9b:93:ae:f9:fa:c2:b8:23:d0:d6: 1f:98:32:ee:42:3e:d5:b9:3f:c5:36:54:00:58:47: e7:b0:ba:9e:4b:80:80:bb:20:6a:b0:26:67:d7:21: 04:29:fe:44:fb:62:e2:aa:58:26:21:57:08:1d:81: 8f:b3:c5:a4:28:c0:ec:68:eb:06:e2:d7:90:dc:46: e3:14:a3:5a:c4:52:f8:97:4e:84:d9:5f:f2:55:41: 6d:6e:1f:e7:30:48:7c:05:f1:86:68:43:31:85:45: 89:ed:7a:c4:85:c9:01:c0:37:1f:9b:7d:8a:0b:d1: 8c:cf:51:5c:e7:1f:cb:e0:85:c3:af:5d:48:04:2e: 9d:d0:10:db:1e:f5:2f:5e:74:b1:60:60:d4:28:89: 5d:41:26:94:6c:c6:8d:7f:58:b8:a2:48:7e:49:ea: b3:71:45:b0:bc:a8:6c:a9:01:e0:19:7a:38:7b:df: ff:06:c7:3b:1f:86:50:21:e9:ae:d8:98:d0:7f:b2: 9c:76:0c:04:14:38:34:bf:0f:14:1a:55:a8:12:fc: 1e:90:93:a7:ee:06:6a:2a:48:36:08:12:7a:fb:cf: e7:40:f2:0f:1a:d2:ee:7e:ac:91:d1:37:83:95:b8: 36:f4:f2:c5:8f:b7:9e:fb:f1:ea:51:25:da:23:c6: ca:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7C:46:57:13:B0:D5:9C:D5:29:C4:A4:CC:B9:F0:CE:0D:FB:8E:96 X509v3 Authority Key Identifier: keyid:55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:6a:99:2a:9d:bc:9f:f2:50:f4:95:8b:af:50:08:c1:7c:63: b0:48:2d:4b:de:6d:82:e2:e2:37:58:bf:c7:d7:3d:fa:96:ff: f7:3c:e8:ee:e4:11:d5:c9:ce:0b:f9:e4:97:a5:ce:44:ee:ef: 0e:bf:5e:99:1a:40:7f:34:24:e9:c3:07:75:8a:02:d0:eb:c5: da:17:84:0b:04:12:cb:14:4d:79:88:ed:b9:84:72:bb:77:8a: 75:1f:91:19:a8:4c:0b:80:bc:4e:4f:95:58:33:c6:fa:b2:e8: c4:b1:5f:ef:e3:21:3e:5e:68:7c:8c:67:0e:61:ad:a0:d3:5d: 27:32:ee:45:d1:85:1d:28:9d:4e:17:6b:88:6d:e0:19:45:e0: d0:05:1a:51:aa:10:e7:4b:1b:d2:97:f6:c7:2c:9d:8a:6f:3e: 53:63:8d:9f:2b:61:24:fc:dc:73:24:13:c5:4b:70:41:ea:0e: f4:47:4a:74:8a:60:42:18:0a:e5:f5:ec:df:d7:47:86:7d:59: 85:73:f8:43:02:ec:13:7f:ad:14:68:20:5b:2f:bd:9d:32:9c: 31:19:9e:4b:83:87:02:35:c7:c9:fb:11:48:76:06:d2:87:5b: 26:a7:98:d2:2d:2a:96:75:c2:a1:f2:18:76:e8:0c:b2:44:62: b3:49:86:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI3NUExMTAvBgNVBAUTKDU1NzcwRjYzQTBFNjVGNEMyRkM5NkFGMTk4QkM1Nzg0 RENFNzhBNDYwHhcNMjUwNjE3MDUxMTA4WhcNMjUwNjI0MDUxMTA4WjAYMRYwFAYD VQQDEw02ODUwZjhlYy01NTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+hoXJuTrvn6wrgj0NYfmDLuQj7VuT/FNlQAWEfnsLqeS4CAuyBqsCZn1yEE Kf5E+2LiqlgmIVcIHYGPs8WkKMDsaOsG4teQ3EbjFKNaxFL4l06E2V/yVUFtbh/n MEh8BfGGaEMxhUWJ7XrEhckBwDcfm32KC9GMz1Fc5x/L4IXDr11IBC6d0BDbHvUv XnSxYGDUKIldQSaUbMaNf1i4okh+SeqzcUWwvKhsqQHgGXo4e9//Bsc7H4ZQIemu 2JjQf7KcdgwEFDg0vw8UGlWoEvwekJOn7gZqKkg2CBJ6+8/nQPIPGtLufqyR0TeD lbg29PLFj7ee+/HqUSXaI8bKLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDN8RlcT sNWc1SnEpMy58M4N+46WMB8GA1UdIwQYMBaAFFV3D2Og5l9ML8lq8Zi8V4Tc54pG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjc1QS8xMkQzMEZEODVC OUExMUVGODIwMjc2NDBDNEY5QUUwMi9WWGNQWTZEbVgwd3Z5V3J4bUx4WGhOem5p a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZYY1BZNkRtWDB3dnlXcnhtTHhYaE56bmlrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjc1QS8xMkQzMEZEODVCOUExMUVGODIwMjc2NDBDNEY5QUUwMi9WWGNQWTZEbVgw d3Z5V3J4bUx4WGhOem5pa1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJapkqnbyf8lD0lYuvUAjBfGOwSC1L3m2C4uI3WL/H1z36lv/3POju 5BHVyc4L+eSXpc5E7u8Ov16ZGkB/NCTpwwd1igLQ68XaF4QLBBLLFE15iO25hHK7 d4p1H5EZqEwLgLxOT5VYM8b6sujEsV/v4yE+Xmh8jGcOYa2g010nMu5F0YUdKJ1O F2uIbeAZReDQBRpRqhDnSxvSl/bHLJ2Kbz5TY42fK2Ek/NxzJBPFS3BB6g70R0p0 imBCGArl9ezf10eGfVmFc/hDAuwTf60UaCBbL72dMpwxGZ5Lg4cCNcfJ+xFIdgbS h1smp5jSLSqWdcKh8hh26AyyRGKzSYaB -----END CERTIFICATE-----Generated at Wed Jun 18 06:38:02 2025 by rpki-client