$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft File: vFNsAPhfWQQdnEwpYfciQr9g1R4.mft (raw, json) Hash identifier: WbvMwQK+t3CRNLKIjfnSra4gLyqhb7d2D7YdQOPW71Q= Subject key identifier: D9:1A:0B:E6:90:22:0E:A4:34:A1:5A:36:6E:0A:F8:8F:A3:4C:7D:AF Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Certificate serial: 1263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft Manifest number: 122E Signing time: Sat 14 Jun 2025 17:06:38 +0000 Manifest this update: Sat 14 Jun 2025 17:06:37 +0000 Manifest next update: Sat 21 Jun 2025 17:06:37 +0000 Files and hashes: 1: vFNsAPhfWQQdnEwpYfciQr9g1R4.crl (hash: ki9vbNEV6Dctsy/5Ww9wOyq0fXpyVqE4PrC8s1eq1ZM=) 2: DA505546B74C11ED916B5A6AC4F9AE02.roa (hash: 9RHwtONKgQdHSDennn4HM2Ikhdy+C6zf57qmecAxamQ=) 3: 3A9AD3CEDAD411EBB35DA50AC4F9AE02.roa (hash: EztUCIPqk3y/a6AcLfvax6DUhCHP6l9BEvQIvIo9iws=) 4: E0ACCAC4ECD211EFA6C15823C4F9AE02.roa (hash: /d3XQ565KopoANcg+pwgBZqGoqy8+pW8EGFbyyXXzys=) 5: 57A84138605911EE8ABC9318C4F9AE02.roa (hash: acU+THblHTmNuI3hvXPa2l7l+23XT3W88AntJDw2zgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4707 (0x1263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Validity Not Before: Jun 14 17:06:37 2025 GMT Not After : Jun 21 17:06:37 2025 GMT Subject: CN=684dac1d-bd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:41:53:eb:95:d5:ce:4d:5c:a3:c4:b3:1a: 7b:40:38:2b:1f:bc:85:3b:b2:dc:e9:b8:93:5b:ea: 7e:1b:cc:88:07:66:c5:bc:3b:64:45:a7:fc:48:ae: 4e:46:9c:13:1f:20:5b:b4:bc:6c:6e:73:a6:96:c2: ae:c3:33:9c:3a:38:88:4f:e3:5b:95:7d:e2:ce:a8: a1:09:9b:c6:7f:44:4e:d2:dc:b9:8c:7b:21:75:b0: 00:16:46:ad:7f:a3:37:a2:6b:d9:80:32:a8:90:f4: d4:13:47:9f:4a:d3:a2:3a:b0:f0:e0:b4:b9:4b:5e: 7d:76:e2:19:e8:54:d4:f5:00:cd:66:ea:ff:00:c7: 8b:2f:c4:18:e8:72:d3:16:35:10:ec:79:8e:df:c6: 41:e4:32:35:73:67:55:09:97:40:c5:d0:16:6d:1c: bd:6e:21:6b:53:21:d2:fe:31:60:79:17:06:be:a4: e1:ce:ec:25:6b:96:75:5a:1e:ae:ab:eb:21:58:b9: 5a:3c:94:3e:2f:ea:3e:00:aa:76:7e:77:a3:cc:b0: c3:55:82:58:0d:35:dd:d9:1b:56:83:dd:72:4d:67: 67:e5:b8:d4:82:2f:58:9d:d8:22:2e:a9:cf:12:fb: d8:6a:54:15:09:44:e8:72:b7:ed:75:f7:3a:d3:df: f0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1A:0B:E6:90:22:0E:A4:34:A1:5A:36:6E:0A:F8:8F:A3:4C:7D:AF X509v3 Authority Key Identifier: keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a5:7a:45:ac:1b:a5:3f:3c:f5:b0:27:a3:b8:a4:c3:6b:10: af:b4:46:61:23:15:21:fd:26:a9:61:e8:41:13:e9:3f:86:b1: ab:d8:5f:e2:1f:80:1b:52:26:f2:a7:65:fa:b0:30:77:3c:67: 93:ef:e8:98:32:bc:c9:80:3d:7b:9e:1e:aa:18:2e:d6:09:6f: 30:81:33:4d:d7:1b:0f:9c:09:56:3c:1a:ee:ba:2c:28:17:d0: de:51:45:99:71:33:cb:30:7b:7a:7a:b9:99:c1:4f:2a:f0:81: a9:e3:22:10:ea:58:ca:4e:23:7b:41:19:af:95:c1:7e:7f:de: 52:3c:18:fd:7d:60:92:6f:e8:c5:f3:b3:ca:f8:89:ed:63:19: 3a:a2:32:61:d8:83:68:dc:5b:be:56:3f:8f:3b:b4:e5:95:cd: 78:5f:4d:e9:82:c9:0a:d2:16:9c:33:85:c4:5f:2a:6d:d9:12: 15:ef:96:4e:dc:85:44:5f:ab:f3:f4:ca:0d:0c:dc:98:e0:04: 51:21:bb:39:98:ae:2d:50:54:61:07:0a:0d:00:f8:9e:ee:04: f5:f8:cb:00:c3:7d:06:c7:3d:51:c2:fa:fc:e5:97:6e:18:c9: 70:49:9a:8c:16:31:28:f1:85:b1:af:18:23:c9:9e:08:60:4a: e8:f4:05:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy QkY2MEQ1MUUwHhcNMjUwNjE0MTcwNjM3WhcNMjUwNjIxMTcwNjM3WjAYMRYwFAYD VQQDEw02ODRkYWMxZC1iZDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0dBU+uV1c5NXKPEsxp7QDgrH7yFO7Lc6biTW+p+G8yIB2bFvDtkRaf8SK5O RpwTHyBbtLxsbnOmlsKuwzOcOjiIT+NblX3izqihCZvGf0RO0ty5jHshdbAAFkat f6M3omvZgDKokPTUE0efStOiOrDw4LS5S159duIZ6FTU9QDNZur/AMeLL8QY6HLT FjUQ7HmO38ZB5DI1c2dVCZdAxdAWbRy9biFrUyHS/jFgeRcGvqThzuwla5Z1Wh6u q+shWLlaPJQ+L+o+AKp2fnejzLDDVYJYDTXd2RtWg91yTWdn5bjUgi9YndgiLqnP EvvYalQVCUTocrftdfc609/wIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkaC+aQ Ig6kNKFaNm4K+I+jTH2vMB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5 NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDg2MC9CNDAxQzk4MkU5NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldR UWRuRXdwWWZjaVFyOWcxUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcpXpFrBulPzz1sCejuKTDaxCvtEZhIxUh/SapYehBE+k/hrGr2F/i H4AbUibyp2X6sDB3PGeT7+iYMrzJgD17nh6qGC7WCW8wgTNN1xsPnAlWPBruuiwo F9DeUUWZcTPLMHt6ermZwU8q8IGp4yIQ6ljKTiN7QRmvlcF+f95SPBj9fWCSb+jF 87PK+IntYxk6ojJh2INo3Fu+Vj+PO7Tllc14X03pgskK0hacM4XEXypt2RIV75ZO 3IVEX6vz9MoNDNyY4ARRIbs5mK4tUFRhBwoNAPie7gT1+MsAw30Gxz1Rwvr85Zdu GMlwSZqMFjEo8YWxrxgjyZ4IYEro9AUs -----END CERTIFICATE-----Generated at Sun Jun 15 10:03:02 2025 by rpki-client