$ rpki-client -vvf rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft File: vpKrpKAUQxnubUWrkJDYjV2vN_4.mft (raw, json) Hash identifier: DYspQbLSVQffsnnOsyrp3itMun2w+ob13yI/XeeCdPI= Subject key identifier: 13:9A:2E:DD:DA:26:EE:F4:15:95:40:9A:83:97:19:40:27:54:9E:85 Authority key identifier: BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE Certificate issuer: /CN=A9151F3B/serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE Certificate serial: 0605 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft Manifest number: 05F1 Signing time: Fri 20 Jun 2025 22:44:47 +0000 Manifest this update: Fri 20 Jun 2025 22:44:46 +0000 Manifest next update: Fri 27 Jun 2025 22:44:46 +0000 Files and hashes: 1: vpKrpKAUQxnubUWrkJDYjV2vN_4.crl (hash: SBx5FAUbrh7bqGXVUpPECQuOOB6mm0ArIyO0GlKYHZQ=) 2: 21F42C4EFE5511EC9A3F6F31C4F9AE02.roa (hash: xc/k3wBL9PbMVeZ6NnzVVYqpCqcpVpMHNoEeu9dWgdo=) 3: 76DDA85AFE5211EC8F4A4F16C4F9AE02.roa (hash: 3m2SQFBv5Jj9U4DJ7yaxwWUfUobTKq/igN4z5bbj3Hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 22:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1541 (0x605) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151F3B, serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE Validity Not Before: Jun 20 22:44:46 2025 GMT Not After : Jun 27 22:44:46 2025 GMT Subject: CN=6855e45f-b991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a9:fa:2b:0d:c0:67:33:4a:0b:aa:79:6e:cb: 02:99:8c:74:73:63:38:80:90:fe:bd:3b:d2:b1:33: 5c:f4:76:1d:a3:70:ec:39:89:60:a5:6f:8e:8e:5e: d3:1e:fb:07:ca:36:1f:4c:77:3e:29:da:cf:47:0e: fd:98:e6:c0:0c:f8:64:b3:fc:4f:5b:84:d9:de:66: 86:5c:0b:8d:f7:2b:02:7b:9b:ea:5a:52:c6:90:a3: 4e:c5:d8:5f:07:d2:bd:e9:18:6b:13:72:23:8c:af: 0e:4e:71:1d:e8:fc:f1:f2:2d:93:7d:6a:53:58:46: 80:c0:b9:fa:dd:8d:32:22:9e:f6:c3:88:31:85:1e: a4:92:04:f1:48:c5:c9:2b:14:29:47:c9:92:98:b0: 55:23:bb:79:89:0e:96:c0:e0:81:83:3b:e0:5e:16: f9:ff:be:69:f7:5c:04:2f:18:86:0d:3c:19:c9:70: 9f:7f:cb:67:f1:9f:59:f0:23:d1:79:d1:30:b3:d3: 41:c8:5c:a3:85:99:3e:f2:87:1e:7e:45:2a:e5:2c: f9:24:79:19:de:ad:04:dd:dd:d2:30:10:e6:d4:e4: da:29:42:f0:78:02:d6:60:74:39:f5:3b:ef:2d:6c: 9f:ab:88:9f:9d:09:87:3b:af:52:6a:99:f5:89:5d: 52:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9A:2E:DD:DA:26:EE:F4:15:95:40:9A:83:97:19:40:27:54:9E:85 X509v3 Authority Key Identifier: keyid:BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:d8:e4:4c:ed:f3:ad:18:06:56:74:b3:b1:30:c3:77:70:8c: 29:ae:5a:73:35:f4:0d:59:b6:4a:c5:ae:d3:66:90:d3:9f:e1: 9c:06:9c:eb:18:64:02:aa:16:10:f8:0a:a8:94:e6:ed:6c:ee: 7e:db:be:ec:dd:51:68:c2:99:53:42:ea:f0:8b:c3:f6:8a:e8: 2e:72:a0:a6:7d:72:13:af:7d:f1:95:3c:84:14:02:d1:d9:b6: 71:19:c3:b4:f2:c5:ab:c3:41:26:6d:97:a9:43:0a:02:b9:30: 69:cb:b7:57:50:9c:da:1d:a6:43:32:36:ec:a2:b8:96:1e:a0: e4:b1:87:35:bf:1d:03:85:cc:21:30:ae:5d:b5:55:bb:9d:67: 42:4d:70:87:e9:78:e2:a1:36:54:f4:da:58:62:30:c7:9d:49: 78:f3:65:8e:d3:58:e8:f6:a3:e7:b9:59:7e:56:ee:dd:5c:01: 53:de:bc:6f:ff:c3:11:bd:a6:0d:d9:22:0d:f3:63:10:b6:a4: dd:b5:cb:f3:0d:2d:70:85:cd:10:4b:a7:23:46:f3:0b:85:54: 84:13:2f:aa:9d:60:d5:a6:4a:b0:db:72:44:e3:c4:db:a6:18: b0:9a:d3:fb:52:fc:65:ea:65:42:c9:71:99:0d:cf:33:e2:07: b8:6c:85:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFGM0IxMTAvBgNVBAUTKEJFOTJBQkE0QTAxNDQzMTlFRTZENDVBQjkwOTBEODhE NURBRjM3RkUwHhcNMjUwNjIwMjI0NDQ2WhcNMjUwNjI3MjI0NDQ2WjAYMRYwFAYD VQQDEw02ODU1ZTQ1Zi1iOTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6n6Kw3AZzNKC6p5bssCmYx0c2M4gJD+vTvSsTNc9HYdo3DsOYlgpW+Ojl7T HvsHyjYfTHc+KdrPRw79mObADPhks/xPW4TZ3maGXAuN9ysCe5vqWlLGkKNOxdhf B9K96RhrE3IjjK8OTnEd6Pzx8i2TfWpTWEaAwLn63Y0yIp72w4gxhR6kkgTxSMXJ KxQpR8mSmLBVI7t5iQ6WwOCBgzvgXhb5/75p91wELxiGDTwZyXCff8tn8Z9Z8CPR edEws9NByFyjhZk+8ocefkUq5Sz5JHkZ3q0E3d3SMBDm1OTaKULweALWYHQ59Tvv LWyfq4ifnQmHO69Sapn1iV1SQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOaLt3a Ju70FZVAmoOXGUAnVJ6FMB8GA1UdIwQYMBaAFL6Sq6SgFEMZ7m1Fq5CQ2I1drzf+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUYzQi80RjhCOTFCOEI5 QjYxMUVCQjQxMUU5MkVDNEY5QUUwMi92cEtycEtBVVF4bnViVVdya0pEWWpWMnZO XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZwS3JwS0FVUXhudWJVV3JrSkRZalYydk5fNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUYzQi80RjhCOTFCOEI5QjYxMUVCQjQxMUU5MkVDNEY5QUUwMi92cEtycEtBVVF4 bnViVVdya0pEWWpWMnZOXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr2ORM7fOtGAZWdLOxMMN3cIwprlpzNfQNWbZKxa7TZpDTn+GcBpzr GGQCqhYQ+AqolObtbO5+277s3VFowplTQurwi8P2iugucqCmfXITr33xlTyEFALR 2bZxGcO08sWrw0EmbZepQwoCuTBpy7dXUJzaHaZDMjbsoriWHqDksYc1vx0Dhcwh MK5dtVW7nWdCTXCH6XjioTZU9NpYYjDHnUl482WO01jo9qPnuVl+Vu7dXAFT3rxv /8MRvaYN2SIN82MQtqTdtcvzDS1whc0QS6cjRvMLhVSEEy+qnWDVpkqw23JE48Tb phiwmtP7Uvxl6mVCyXGZDc8z4ge4bIVC -----END CERTIFICATE-----Generated at Sat Jun 21 20:58:49 2025 by rpki-client