$ rpki-client -vvf rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft File: VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft (raw, json) Hash identifier: VrHBzzAxvQgiblBT/qu+/fQtEX2EpTacCVPTd1L1t50= Subject key identifier: 8E:D4:1D:56:A5:25:7A:EA:52:E3:55:FB:5E:17:47:07:C3:57:3D:F1 Authority key identifier: 54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D Certificate issuer: /CN=A912F62D/serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft Manifest number: 40 Signing time: Sun 15 Jun 2025 06:34:32 +0000 Manifest this update: Sun 15 Jun 2025 06:34:31 +0000 Manifest next update: Sun 22 Jun 2025 06:34:31 +0000 Files and hashes: 1: VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl (hash: 9ikbxE3v8SWQvwbQuxSAZjgKdzhNUQ7ahg0JSYd3XGM=) 2: 6DAFB1EAEA7E11EF93A91726C4F9AE02.roa (hash: odRzv1rTZxMhuETYW/aFCGmGEfOypP1WnK3dBBfEcvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F62D, serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D Validity Not Before: Jun 15 06:34:31 2025 GMT Not After : Jun 22 06:34:31 2025 GMT Subject: CN=684e6977-856f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7c:f1:9c:bf:08:da:63:1d:22:d9:0f:38:ed: 1a:60:dd:fd:62:c4:29:3d:44:de:12:4f:92:81:c8: 69:b9:48:6c:94:5a:04:b3:9b:c1:d1:c3:fc:da:10: 60:89:59:03:06:41:3e:ff:bc:ee:ed:c3:08:1b:05: e6:3d:65:41:aa:2c:80:3d:d3:f0:25:46:bc:da:03: 6f:ed:43:23:3f:e4:c4:cb:02:6d:70:8c:48:70:a8: 67:9f:d6:73:02:d5:30:9a:e7:57:b9:7b:f6:93:73: 97:ad:06:32:2a:ef:22:c7:5c:fe:62:db:32:6a:04: 3f:85:6c:c2:2b:8d:05:ed:5d:64:ea:83:c0:89:8c: 52:d0:59:83:05:4e:06:d4:01:8d:f3:6d:09:fd:db: 0c:a0:0b:8f:84:6f:bf:ab:24:2c:fe:9c:14:7c:7e: d4:07:da:f8:65:40:61:7d:ad:fd:bc:73:b1:5a:28: d5:e0:94:86:5b:7b:8b:c9:88:bb:00:94:0c:fb:bf: ac:9d:26:23:5c:8d:33:e2:c5:b8:c1:ae:18:08:5d: 7a:e5:ff:80:c0:80:8b:13:7e:fe:f0:77:5b:30:ac: d2:3d:67:05:9c:30:4e:fb:41:15:34:14:7a:3e:4a: 31:74:1e:57:b8:95:c1:83:b6:ad:72:1d:53:f2:13: 52:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D4:1D:56:A5:25:7A:EA:52:E3:55:FB:5E:17:47:07:C3:57:3D:F1 X509v3 Authority Key Identifier: keyid:54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:17:60:51:ea:ca:8f:bc:1b:32:61:50:cd:00:72:5c:05:5b: 1c:05:ef:5e:45:84:f5:f7:24:90:e7:7b:79:06:82:ea:72:f1: 92:8a:33:c4:66:79:20:ef:21:84:e3:c8:e0:9b:43:41:2a:d2: e8:23:8f:3c:df:ab:00:26:15:0e:00:b2:d3:60:d2:b6:0d:44: fc:d6:3e:7e:44:ab:ca:ea:d8:2c:67:41:14:be:ff:52:21:ee: ba:fc:f3:28:a8:e0:60:f1:6a:7b:57:a9:13:1b:9e:61:1a:49: 9c:4c:53:bc:48:37:d6:40:5d:ec:7f:34:c9:5a:e7:ae:c8:e3: e8:5d:06:46:2f:df:7f:cc:38:0a:b0:d1:64:b8:af:ce:68:18: ce:b6:87:b9:97:16:9f:bf:c6:fe:98:14:85:d5:3d:77:47:10: 9d:bb:28:3e:62:de:d1:6c:86:d1:6b:f4:4f:e4:33:c5:8f:e3: 94:57:4b:19:d9:38:02:fc:a1:96:d2:86:8e:87:46:6e:86:b4: cf:88:bf:7b:08:1e:f7:89:51:4d:05:16:d9:34:a6:c2:9b:f7: ba:4d:5d:93:8d:5f:c6:f6:a6:ff:1e:18:8a:ee:47:1c:7e:8c: 18:33:48:aa:a2:b0:dd:dc:94:f9:4a:0e:f8:a1:e8:db:17:2c: 0b:ca:eb:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjYyRDExMC8GA1UEBRMoNTQ5MjQ2MjEwNUNFQjA1MkRCQTlEQUU4QkI2MzVGMDVG Nzc3MTYxRDAeFw0yNTA2MTUwNjM0MzFaFw0yNTA2MjIwNjM0MzFaMBgxFjAUBgNV BAMTDTY4NGU2OTc3LTg1NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmfPGcvwjaYx0i2Q847Rpg3f1ixCk9RN4ST5KByGm5SGyUWgSzm8HRw/zaEGCJ WQMGQT7/vO7twwgbBeY9ZUGqLIA90/AlRrzaA2/tQyM/5MTLAm1wjEhwqGef1nMC 1TCa51e5e/aTc5etBjIq7yLHXP5i2zJqBD+FbMIrjQXtXWTqg8CJjFLQWYMFTgbU AY3zbQn92wygC4+Eb7+rJCz+nBR8ftQH2vhlQGF9rf28c7FaKNXglIZbe4vJiLsA lAz7v6ydJiNcjTPixbjBrhgIXXrl/4DAgIsTfv7wd1swrNI9ZwWcME77QRU0FHo+ SjF0Hle4lcGDtq1yHVPyE1IFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjtQdVqUl eupS41X7XhdHB8NXPfEwHwYDVR0jBBgwFoAUVJJGIQXOsFLbqdrou2NfBfd3Fh0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNjJELzJEQTU3QzNDRUE3 MDExRUY4MTU0QzM2QkM0RjlBRTAyL1ZKSkdJUVhPc0ZMYnFkcm91Mk5mQmZkM0Zo MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkpKR0lRWE9zRkxicWRyb3UyTmZCZmQzRmgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG NjJELzJEQTU3QzNDRUE3MDExRUY4MTU0QzM2QkM0RjlBRTAyL1ZKSkdJUVhPc0ZM YnFkcm91Mk5mQmZkM0ZoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADAXYFHqyo+8GzJhUM0AclwFWxwF715FhPX3JJDne3kGgupy8ZKKM8Rm eSDvIYTjyOCbQ0Eq0ugjjzzfqwAmFQ4AstNg0rYNRPzWPn5Eq8rq2CxnQRS+/1Ih 7rr88yio4GDxantXqRMbnmEaSZxMU7xIN9ZAXex/NMla567I4+hdBkYv33/MOAqw 0WS4r85oGM62h7mXFp+/xv6YFIXVPXdHEJ27KD5i3tFshtFr9E/kM8WP45RXSxnZ OAL8oZbSho6HRm6GtM+Iv3sIHveJUU0FFtk0psKb97pNXZONX8b2pv8eGIruRxx+ jBgzSKqisN3clPlKDvih6NsXLAvK65M= -----END CERTIFICATE-----Generated at Sun Jun 15 10:07:34 2025 by rpki-client