$ rpki-client -vvf rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft File: vIlHKy_1NJ5Maoqwmc745o3XuZU.mft (raw, json) Hash identifier: yGdKwwOwf0XLdhMSBBZxV8b2mhT/haVtWy26tzfqEC0= Subject key identifier: 06:C1:7C:34:FA:B6:5F:09:C5:B8:0D:C1:54:C9:3F:B9:F6:69:36:F3 Authority key identifier: BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 Certificate issuer: /CN=A91495CF/serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Certificate serial: 07EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft Manifest number: 07EA Signing time: Wed 18 Jun 2025 20:48:29 +0000 Manifest this update: Wed 18 Jun 2025 20:48:29 +0000 Manifest next update: Wed 25 Jun 2025 20:48:29 +0000 Files and hashes: 1: vIlHKy_1NJ5Maoqwmc745o3XuZU.crl (hash: fn83tpslI03SImY4KmGX0jR3QjnGPLjhy5PoGFmDQDU=) 2: 27DCF5D6EBAC11EAA7A0FB1FC4F9AE02.roa (hash: 4fzem4ahEMq6xHsoRwyaVn0YkdRGg0st3UIcj7ppJ2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 20:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2031 (0x7ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91495CF, serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Validity Not Before: Jun 18 20:48:29 2025 GMT Not After : Jun 25 20:48:29 2025 GMT Subject: CN=6853261d-c215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2a:01:d9:d3:65:4e:62:96:13:b5:18:e1:17: 54:ea:b9:52:c2:71:e0:c4:09:30:1c:b0:14:66:80: a6:f6:00:69:74:a8:f4:43:db:30:49:fa:d5:54:9c: 16:6a:03:0d:19:b1:09:d7:be:e5:87:32:92:2f:fd: 53:38:00:29:94:a6:3d:c5:ac:e1:cf:45:0c:6d:c2: 07:63:f7:74:b1:d2:5d:64:59:49:fa:66:c7:a5:81: ad:49:04:d4:01:16:a3:31:e7:80:54:8e:d5:9a:f3: d7:8d:50:c6:ca:c6:96:2c:a3:06:bb:9f:bf:c7:00: 15:de:06:fd:60:4f:be:f7:64:7b:82:b2:03:ce:c3: bc:24:81:5f:c9:3d:be:68:da:9c:b2:80:4d:96:7e: fe:7d:55:34:90:a2:1d:fe:33:39:8b:38:af:f3:28: f4:a2:e5:9c:8a:89:2c:8a:19:5c:57:aa:1c:da:8d: b1:45:a7:8f:c8:49:c7:20:db:a4:cc:17:61:d6:0f: ab:0e:37:e7:68:1d:83:5f:b5:84:7f:5f:eb:35:fd: 94:37:a6:e4:a8:b3:f6:9a:cd:51:15:17:63:6f:3c: de:78:de:67:e4:89:66:41:1f:7a:e4:45:ec:42:d4: d0:3d:7e:37:d0:ba:35:22:95:ff:21:b8:40:c7:4b: 08:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C1:7C:34:FA:B6:5F:09:C5:B8:0D:C1:54:C9:3F:B9:F6:69:36:F3 X509v3 Authority Key Identifier: keyid:BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:0f:1c:e5:e2:1f:54:84:f8:fa:57:1d:32:13:40:b0:b4:bd: d0:a7:ab:2e:b7:19:00:39:26:7b:8a:c4:eb:2d:3c:4c:aa:4c: 6c:04:e9:dc:dc:30:cb:ca:be:bd:6b:4b:bd:3d:fe:87:cf:11: ec:3b:90:b7:81:fe:ba:3b:a6:0e:85:f7:c4:7b:53:1d:40:de: 4b:35:dc:02:0b:24:31:b9:ea:fc:c3:e8:89:3b:ca:d7:63:34: e5:b0:73:bb:be:50:01:00:a7:f2:63:e6:f3:a3:ee:54:92:69: dd:0c:0c:4b:ad:83:3b:58:fa:3d:f0:a8:ac:26:b3:b2:b7:45: 74:88:ba:b8:76:ef:53:b6:01:60:96:04:50:b9:b9:8d:b1:09: df:e7:6c:31:00:3a:77:f0:71:47:06:51:75:04:d2:4e:32:3f: 3d:b7:35:b5:cb:fc:7f:b0:ab:79:6f:09:30:26:f4:23:5a:ca: 6b:e4:ab:4b:14:d1:18:8e:b4:24:8b:ee:4e:60:35:5c:56:fc: 6a:08:a0:12:b5:fc:9b:47:17:b0:f9:af:97:4e:c3:20:40:30: af:e8:e1:46:fa:93:e9:69:d9:57:75:07:3f:b1:18:4d:5f:b1: 02:27:93:bd:bc:15:e3:7d:1a:30:8e:12:54:13:f3:b8:b0:0a: 4e:c8:2b:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk1Q0YxMTAvBgNVBAUTKEJDODk0NzJCMkZGNTM0OUU0QzZBOEFCMDk5Q0VGOEU2 OEREN0I5OTUwHhcNMjUwNjE4MjA0ODI5WhcNMjUwNjI1MjA0ODI5WjAYMRYwFAYD VQQDEw02ODUzMjYxZC1jMjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ioB2dNlTmKWE7UY4RdU6rlSwnHgxAkwHLAUZoCm9gBpdKj0Q9swSfrVVJwW agMNGbEJ177lhzKSL/1TOAAplKY9xazhz0UMbcIHY/d0sdJdZFlJ+mbHpYGtSQTU ARajMeeAVI7VmvPXjVDGysaWLKMGu5+/xwAV3gb9YE++92R7grIDzsO8JIFfyT2+ aNqcsoBNln7+fVU0kKId/jM5iziv8yj0ouWcioksihlcV6oc2o2xRaePyEnHINuk zBdh1g+rDjfnaB2DX7WEf1/rNf2UN6bkqLP2ms1RFRdjbzzeeN5n5IlmQR965EXs QtTQPX430Lo1IpX/IbhAx0sIawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbBfDT6 tl8JxbgNwVTJP7n2aTbzMB8GA1UdIwQYMBaAFLyJRysv9TSeTGqKsJnO+OaN17mV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTVDRi8yQTUxMDY5Q0VC QUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5KNU1hb3F3bWM3NDVvM1h1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJbEhLeV8xTko1TWFvcXdtYzc0NW8zWHVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTVDRi8yQTUxMDY5Q0VCQUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5K NU1hb3F3bWM3NDVvM1h1WlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiDxzl4h9UhPj6Vx0yE0CwtL3Qp6sutxkAOSZ7isTrLTxMqkxsBOnc 3DDLyr69a0u9Pf6HzxHsO5C3gf66O6YOhffEe1MdQN5LNdwCCyQxuer8w+iJO8rX YzTlsHO7vlABAKfyY+bzo+5UkmndDAxLrYM7WPo98KisJrOyt0V0iLq4du9TtgFg lgRQubmNsQnf52wxADp38HFHBlF1BNJOMj89tzW1y/x/sKt5bwkwJvQjWspr5KtL FNEYjrQki+5OYDVcVvxqCKAStfybRxew+a+XTsMgQDCv6OFG+pPpadlXdQc/sRhN X7ECJ5O9vBXjfRowjhJUE/O4sApOyCtY -----END CERTIFICATE-----Generated at Thu Jun 19 07:57:57 2025 by rpki-client