$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft File: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft (raw, json) Hash identifier: 8rK2pnPxBDjl1MmlYnKwjppzdNwueRyCcqbiHHI+OPE= Subject key identifier: 8A:9B:4E:50:23:48:C5:B7:73:A0:80:FB:C7:BB:4C:C7:C5:4E:9D:64 Authority key identifier: 56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29 Certificate issuer: /CN=A9136BD7/serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829 Certificate serial: 0602 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft Manifest number: 05FD Signing time: Thu 12 Jun 2025 22:30:34 +0000 Manifest this update: Thu 12 Jun 2025 22:30:33 +0000 Manifest next update: Thu 19 Jun 2025 22:30:33 +0000 Files and hashes: 1: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl (hash: +YFEHU34TNz/vuoQlyhPUVWXdZjvSfpzCVQ0dLdWjS4=) 2: E22BD636AC5011EBA37CCA28C4F9AE02.roa (hash: fdFSt8Mu6WuYnLA2fbE3V7b+qZmpKdHiBdsuXljNq4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1538 (0x602) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BD7, serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829 Validity Not Before: Jun 12 22:30:33 2025 GMT Not After : Jun 19 22:30:33 2025 GMT Subject: CN=684b550a-fbf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:c8:89:46:dd:73:64:a7:97:76:66:9a:a2: 3e:90:78:dc:30:a7:75:9f:b0:f7:9f:51:db:54:67: a4:6a:2f:92:32:2f:68:3d:b3:b2:f6:73:b8:2b:8b: b7:05:03:25:e6:33:a3:77:c3:36:41:49:c8:37:80: 30:69:04:5b:81:44:42:4d:81:76:00:4d:08:d2:af: 4e:99:47:9f:af:9b:7c:bc:b5:de:9a:11:04:4f:70: 7d:f6:11:53:af:ff:2b:7a:c6:0e:77:74:51:6f:61: c9:d2:d3:7e:e8:01:d7:06:2d:56:20:2e:ac:84:b4: da:c5:02:ac:4a:db:64:ef:85:ab:e2:b6:53:30:84: 9a:dd:78:d7:64:7f:a5:ef:c9:5a:b0:42:5d:fa:4a: 9b:6f:88:32:ab:ab:b8:6b:ef:51:c5:09:f6:b4:fc: 1b:e2:f1:00:e7:2c:48:31:e9:4a:ea:a8:5a:c1:e1: 8c:17:1e:37:f4:64:ae:f7:5f:08:c5:0c:27:cc:23: c7:42:32:f7:6b:cb:a4:d9:79:9b:97:11:0c:34:37: 61:64:24:22:5e:b2:a0:01:6b:22:72:7d:cf:a0:2f: c5:41:c0:53:ca:c8:35:ad:46:41:52:32:f4:c6:12: 13:ee:b6:1a:f1:35:45:14:09:80:77:c9:77:f7:4d: 27:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9B:4E:50:23:48:C5:B7:73:A0:80:FB:C7:BB:4C:C7:C5:4E:9D:64 X509v3 Authority Key Identifier: keyid:56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:14:14:d6:b6:2b:95:c4:31:89:21:69:17:c4:22:55:f8:d2: 29:0d:90:da:5c:3c:4c:35:a9:c5:45:f0:68:ce:ae:22:bc:a7: d4:93:dd:5c:ab:41:7f:78:2a:5a:4e:f3:a1:67:55:7e:cb:4d: a4:39:76:04:c1:8b:3c:36:9c:7e:05:bf:84:92:57:64:f6:98: 3e:bb:f7:78:13:17:b5:ee:ce:77:f4:89:94:84:4a:b5:7c:07: 0e:b9:6b:5c:7c:01:69:27:fc:da:30:79:a7:48:ca:a8:92:4b: 21:e6:3a:8d:00:2b:92:33:68:31:90:2d:3f:72:10:07:97:88: af:7e:a4:2a:ca:8a:4f:8d:4c:89:8b:2a:47:1f:b9:4b:f9:40: 75:26:ac:32:9a:30:3c:1e:41:dc:71:2e:f9:90:74:1e:95:a9: 3b:a9:24:6d:94:fe:28:4b:6d:cf:ab:fc:77:84:34:28:65:84: 9c:29:af:e5:46:b0:2f:f4:a2:17:ce:bf:4f:93:8f:2d:d5:46: 60:ee:74:27:a2:cb:2a:02:47:4d:79:b6:e2:9e:56:00:6f:d7: 54:e4:8c:dc:bc:bf:fe:85:43:a9:75:96:89:92:f7:70:f9:f1: 6c:a7:be:1e:c9:4f:4b:19:c0:25:d7:3a:20:d3:cc:c5:c3:ef: 4c:57:4e:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRDcxMTAvBgNVBAUTKDU2QTAzMTY3RkFFMTJCMUJBMTRCQjg0NzRENDQyQjY3 NzBCQjk4MjkwHhcNMjUwNjEyMjIzMDMzWhcNMjUwNjE5MjIzMDMzWjAYMRYwFAYD VQQDEw02ODRiNTUwYS1mYmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuT3IiUbdc2Snl3ZmmqI+kHjcMKd1n7D3n1HbVGekai+SMi9oPbOy9nO4K4u3 BQMl5jOjd8M2QUnIN4AwaQRbgURCTYF2AE0I0q9OmUefr5t8vLXemhEET3B99hFT r/8resYOd3RRb2HJ0tN+6AHXBi1WIC6shLTaxQKsSttk74Wr4rZTMISa3XjXZH+l 78lasEJd+kqbb4gyq6u4a+9RxQn2tPwb4vEA5yxIMelK6qhaweGMFx439GSu918I xQwnzCPHQjL3a8uk2XmblxEMNDdhZCQiXrKgAWsicn3PoC/FQcBTysg1rUZBUjL0 xhIT7rYa8TVFFAmAd8l3900nnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqbTlAj SMW3c6CA+8e7TMfFTp1kMB8GA1UdIwQYMBaAFFagMWf64SsboUu4R01EK2dwu5gp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJENy9BNjUxQjQ3NEFD NEYxMUVCODNEMThFMjhDNEY5QUUwMi9WcUF4Wl9yaEt4dWhTN2hIVFVRclozQzdt Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZxQXhaX3JoS3h1aFM3aEhUVVFyWjNDN21Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkJENy9BNjUxQjQ3NEFDNEYxMUVCODNEMThFMjhDNEY5QUUwMi9WcUF4Wl9yaEt4 dWhTN2hIVFVRclozQzdtQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcFBTWtiuVxDGJIWkXxCJV+NIpDZDaXDxMNanFRfBozq4ivKfUk91c q0F/eCpaTvOhZ1V+y02kOXYEwYs8Npx+Bb+Ekldk9pg+u/d4Exe17s539ImUhEq1 fAcOuWtcfAFpJ/zaMHmnSMqokksh5jqNACuSM2gxkC0/chAHl4ivfqQqyopPjUyJ iypHH7lL+UB1JqwymjA8HkHccS75kHQelak7qSRtlP4oS23Pq/x3hDQoZYScKa/l RrAv9KIXzr9Pk48t1UZg7nQnossqAkdNebbinlYAb9dU5IzcvL/+hUOpdZaJkvdw +fFsp74eyU9LGcAl1zog08zFw+9MV07c -----END CERTIFICATE-----Generated at Sat Jun 14 17:28:29 2025 by rpki-client