$ rpki-client -vvf rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft File: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft (raw, json) Hash identifier: +FnKoGVP7H5UV8sC3/aWWAZ77my4W1nIw7WK3XoAlH4= Subject key identifier: E0:FD:7E:6C:E1:66:51:EB:BE:C5:6D:A4:D1:B9:5F:D3:2E:7E:D9:9C Authority key identifier: 56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA Certificate issuer: /CN=A914F22A/serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA Certificate serial: 137B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft Manifest number: 1374 Signing time: Sat 14 Jun 2025 16:55:57 +0000 Manifest this update: Sat 14 Jun 2025 16:55:57 +0000 Manifest next update: Sat 21 Jun 2025 16:55:57 +0000 Files and hashes: 1: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl (hash: Ttv1l6xFAuBwZVb+CVq1l1cCM0lcqItcpZf6dR9J6vY=) 2: 8B2E3BA270BD11ED970C535FC4F9AE02.roa (hash: zF4nygNChVvUs9Ge82/WKpjyi9YwONpMsx8hvCjTDOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4987 (0x137b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F22A, serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA Validity Not Before: Jun 14 16:55:57 2025 GMT Not After : Jun 21 16:55:57 2025 GMT Subject: CN=684da99d-4dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:dd:a8:0e:22:df:5b:82:2f:97:e0:05:f6:d6: 8e:9b:40:65:68:ab:78:b6:e1:e0:54:45:50:0a:f7: a2:c1:dc:43:7e:fb:6b:d8:d6:70:26:0c:2e:21:b3: 81:46:62:60:48:95:2f:52:db:77:95:04:ca:fc:56: a7:13:d6:0e:d1:e9:01:80:bb:4c:ac:63:73:67:d1: e5:1b:d5:2f:a8:21:ef:43:9e:ed:17:e5:f6:64:91: 1e:e4:58:51:7a:b9:f6:b0:fd:62:c0:08:3c:2b:39: a2:36:09:16:63:d7:8d:24:1c:2c:fd:a3:6d:22:07: 41:39:ca:4d:30:58:ad:50:c4:ab:d5:6e:cd:01:c8: 29:51:dd:52:24:c4:e9:96:53:f4:f7:c7:5c:39:ac: 49:92:d2:ea:4c:94:7e:97:49:bc:2a:82:8f:f1:de: d1:c2:e0:bc:68:99:59:3d:40:ee:eb:56:74:ad:8c: 28:f4:ed:6b:4d:e4:62:28:22:98:8a:4c:d0:88:db: 9e:bf:0a:b6:92:92:54:c9:9b:ae:cc:01:04:fd:e4: 68:19:ec:43:80:85:62:b3:e1:b4:7a:8a:dd:4a:b4: 0b:f7:ec:dd:c4:05:a4:b2:67:7e:ec:a7:d2:f8:13: 3a:0c:3c:f3:ea:57:d3:f6:bc:e7:f3:bd:57:90:e5: 64:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:FD:7E:6C:E1:66:51:EB:BE:C5:6D:A4:D1:B9:5F:D3:2E:7E:D9:9C X509v3 Authority Key Identifier: keyid:56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:32:c8:fb:3d:9e:d4:35:2f:42:af:1e:f2:ca:1e:28:c8:38: 68:9a:b0:44:1b:72:74:e4:76:ef:8f:b5:8a:f1:f3:4c:96:f8: e6:c3:90:cc:e5:ab:b7:69:b3:4a:fa:70:41:7b:1e:8b:43:0a: 8e:f1:0a:8d:d3:b6:6f:fa:50:41:aa:fd:86:1c:23:2a:fc:2c: 77:9a:ff:8f:c6:37:d5:6a:5e:41:ea:90:1d:07:0a:a9:a0:5f: 6c:59:0f:22:f4:32:8c:0b:41:4c:76:fc:49:1f:a3:0b:3f:e8: 56:38:fb:d5:fa:a5:36:be:46:58:ea:c6:1f:2d:ce:f6:72:01: 24:c4:0c:85:13:8d:04:f4:fe:17:6d:07:35:7e:8a:fa:f5:53: 31:92:ad:0d:eb:4b:70:e4:b0:87:39:90:6e:5e:a9:b7:ab:c0: 9b:1e:4b:a2:c7:1d:4d:06:ab:f3:05:db:f9:56:cc:aa:af:08: a9:f2:39:ee:48:0f:8f:97:9f:0f:88:85:e0:fe:bd:f7:7e:03: 61:38:01:2c:b8:be:19:39:a0:0f:8f:ff:aa:9b:af:9c:e1:08: 21:e0:63:92:40:47:fb:b8:55:dc:73:a5:54:15:07:d0:82:22: 81:e9:65:55:6d:1e:2b:a3:44:9d:21:65:3e:07:11:4c:da:5c: 64:6e:cd:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYyMkExMTAvBgNVBAUTKDU2QUYxQ0QwQjRFMDdEMDAwQzY0QUIwMTZDMzNGNzg2 QTBERDkwRkEwHhcNMjUwNjE0MTY1NTU3WhcNMjUwNjIxMTY1NTU3WjAYMRYwFAYD VQQDEw02ODRkYTk5ZC00ZGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4d2oDiLfW4Ivl+AF9taOm0BlaKt4tuHgVEVQCveiwdxDfvtr2NZwJgwuIbOB RmJgSJUvUtt3lQTK/FanE9YO0ekBgLtMrGNzZ9HlG9UvqCHvQ57tF+X2ZJEe5FhR ern2sP1iwAg8KzmiNgkWY9eNJBws/aNtIgdBOcpNMFitUMSr1W7NAcgpUd1SJMTp llP098dcOaxJktLqTJR+l0m8KoKP8d7RwuC8aJlZPUDu61Z0rYwo9O1rTeRiKCKY ikzQiNuevwq2kpJUyZuuzAEE/eRoGexDgIVis+G0eordSrQL9+zdxAWksmd+7KfS +BM6DDzz6lfT9rzn871XkOVkoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOD9fmzh ZlHrvsVtpNG5X9MuftmcMB8GA1UdIwQYMBaAFFavHNC04H0ADGSrAWwz94ag3ZD6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjIyQS83RUVDMUU0QzlD RDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZRQU1aS3NCYkRQM2hxRGRr UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZxOGMwTFRnZlFBTVpLc0JiRFAzaHFEZGtQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjIyQS83RUVDMUU0QzlDRDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZR QU1aS3NCYkRQM2hxRGRrUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaMsj7PZ7UNS9Crx7yyh4oyDhomrBEG3J05Hbvj7WK8fNMlvjmw5DM 5au3abNK+nBBex6LQwqO8QqN07Zv+lBBqv2GHCMq/Cx3mv+PxjfVal5B6pAdBwqp oF9sWQ8i9DKMC0FMdvxJH6MLP+hWOPvV+qU2vkZY6sYfLc72cgEkxAyFE40E9P4X bQc1for69VMxkq0N60tw5LCHOZBuXqm3q8CbHkuixx1NBqvzBdv5Vsyqrwip8jnu SA+Pl58PiIXg/r33fgNhOAEsuL4ZOaAPj/+qm6+c4Qgh4GOSQEf7uFXcc6VUFQfQ giKB6WVVbR4ro0SdIWU+BxFM2lxkbs0R -----END CERTIFICATE-----Generated at Sun Jun 15 05:11:14 2025 by rpki-client