$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft File: VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft (raw, json) Hash identifier: qyUHQ6Rr5YVDEGEmUE7yul1bZOLs1b9/LI3xuCRgIZo= Subject key identifier: F1:75:9C:26:03:9E:62:56:9F:C3:FB:50:39:CC:68:94:73:66:FA:28 Authority key identifier: 54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 Certificate issuer: /CN=A916DAC0/serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft Manifest number: F0 Signing time: Fri 13 Jun 2025 04:16:34 +0000 Manifest this update: Fri 13 Jun 2025 04:16:33 +0000 Manifest next update: Fri 20 Jun 2025 04:16:33 +0000 Files and hashes: 1: VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl (hash: TMDBswX1sznfHztToshphSh9xK8ARw6+y1UJxGntFR8=) 2: 2C06DFA22C4C11EFB6974530C4F9AE02.roa (hash: x0R7/aV5SAgSCY1aeBWFVSWK6YKsQh3+SMh4O+dO85w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DAC0, serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Validity Not Before: Jun 13 04:16:33 2025 GMT Not After : Jun 20 04:16:33 2025 GMT Subject: CN=684ba621-3c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9c:66:09:c5:1a:35:10:50:52:40:92:6b:78: f8:08:c9:8f:e6:75:36:19:5d:17:5a:e4:02:bd:39: 16:39:d7:db:d2:13:c1:51:1c:11:d0:99:5b:9f:b0: f1:f6:14:58:ec:95:a5:94:a3:07:69:49:7b:98:ac: 22:0a:e3:76:17:01:b5:8e:a0:67:36:05:45:b3:9c: 84:34:ca:fc:41:63:3f:75:17:1f:da:f0:23:13:2c: 68:6f:4f:46:e4:89:fb:44:a2:0b:dc:e6:8b:c5:f4: 2d:f2:f9:c4:ff:79:1c:86:e3:53:fe:df:0f:d6:3f: 2e:be:f0:14:65:31:16:e3:53:7a:1c:2b:e0:3b:d0: 32:1f:67:f1:cc:f2:37:21:e9:28:bd:03:18:60:0c: 2d:9c:e1:83:ee:20:1b:df:f6:79:cf:00:64:ea:1c: 8a:c0:17:8a:5d:1c:a6:1c:41:21:d2:75:47:ee:df: b6:01:3d:6b:e7:13:b9:2a:fd:31:68:bc:c9:ec:8c: 11:33:88:f2:4f:20:a4:ff:38:a0:88:ac:04:87:e3: 08:ac:5c:03:95:c1:6b:9c:26:dd:28:de:29:9b:66: a5:49:a6:b3:c2:fc:87:b7:4d:e6:45:97:d6:a7:3f: f6:1a:05:27:5f:d8:35:fc:03:1e:1b:44:97:17:d4: 2f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:75:9C:26:03:9E:62:56:9F:C3:FB:50:39:CC:68:94:73:66:FA:28 X509v3 Authority Key Identifier: keyid:54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c9:5e:75:15:85:36:36:53:a1:c2:ce:ae:9d:a4:38:b8:53: bb:05:4a:68:fb:31:d2:da:ac:90:8e:2c:27:1b:c4:06:7d:38: a1:62:a2:cc:21:8d:e1:a7:48:a1:fb:bd:d7:2a:e5:f6:61:72: a4:5d:62:2e:14:c0:cc:d0:05:cb:6c:6f:e9:34:7e:54:4c:2a: cb:2a:8f:90:45:a5:dc:d6:88:11:55:b3:d2:d2:ac:97:b4:32: ac:df:39:29:b6:3a:fa:e6:21:16:b9:36:99:4a:60:98:8f:24: 01:6e:e9:8a:30:b3:44:1f:e8:60:ee:ad:9f:08:76:4f:9c:e0: bb:36:39:3b:63:e7:22:46:6b:e7:ef:1a:8e:3f:4e:3c:b4:66: 90:68:0c:58:f5:56:93:72:1b:ca:5a:60:59:de:2e:89:0d:53: f2:93:da:f9:e4:a7:f7:29:ef:34:4d:82:70:ba:32:38:51:9d: 25:69:53:23:12:c3:4f:f5:72:b0:1c:b8:c8:46:14:18:5e:86: 5e:9c:f2:cf:89:d6:86:e3:eb:15:3c:da:03:b2:ac:c6:67:72: 86:a0:b1:cb:a0:d8:6d:fa:84:40:8b:4b:48:c5:79:9b:59:de: d5:46:43:8e:f4:14:37:50:3c:93:e9:3c:17:69:0b:86:86:a3: ff:1e:f1:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBQzAxMTAvBgNVBAUTKDU0Qjk2NkFEOEI1NzMxNjQxNjUyOTUwN0Y1QkNBOUMw MEUxMTgxQjkwHhcNMjUwNjEzMDQxNjMzWhcNMjUwNjIwMDQxNjMzWjAYMRYwFAYD VQQDEw02ODRiYTYyMS0zYzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZxmCcUaNRBQUkCSa3j4CMmP5nU2GV0XWuQCvTkWOdfb0hPBURwR0Jlbn7Dx 9hRY7JWllKMHaUl7mKwiCuN2FwG1jqBnNgVFs5yENMr8QWM/dRcf2vAjEyxob09G 5In7RKIL3OaLxfQt8vnE/3kchuNT/t8P1j8uvvAUZTEW41N6HCvgO9AyH2fxzPI3 IekovQMYYAwtnOGD7iAb3/Z5zwBk6hyKwBeKXRymHEEh0nVH7t+2AT1r5xO5Kv0x aLzJ7IwRM4jyTyCk/zigiKwEh+MIrFwDlcFrnCbdKN4pm2alSaazwvyHt03mRZfW pz/2GgUnX9g1/AMeG0SXF9QvWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPF1nCYD nmJWn8P7UDnMaJRzZvooMB8GA1UdIwQYMBaAFFS5Zq2LVzFkFlKVB/W8qcAOEYG5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REFDMC9FNzYzQUE4QURF ODgxMUVFOTNEOUE3NDRDNEY5QUUwMi9WTGxtcll0WE1XUVdVcFVIOWJ5cHdBNFJn YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZMbG1yWXRYTVdRV1VwVUg5Ynlwd0E0Umdiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REFDMC9FNzYzQUE4QURFODgxMUVFOTNEOUE3NDRDNEY5QUUwMi9WTGxtcll0WE1X UVdVcFVIOWJ5cHdBNFJnYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAryV51FYU2NlOhws6unaQ4uFO7BUpo+zHS2qyQjiwnG8QGfTihYqLM IY3hp0ih+73XKuX2YXKkXWIuFMDM0AXLbG/pNH5UTCrLKo+QRaXc1ogRVbPS0qyX tDKs3zkptjr65iEWuTaZSmCYjyQBbumKMLNEH+hg7q2fCHZPnOC7Njk7Y+ciRmvn 7xqOP048tGaQaAxY9VaTchvKWmBZ3i6JDVPyk9r55Kf3Ke80TYJwujI4UZ0laVMj EsNP9XKwHLjIRhQYXoZenPLPidaG4+sVPNoDsqzGZ3KGoLHLoNht+oRAi0tIxXmb Wd7VRkOO9BQ3UDyT6TwXaQuGhqP/HvHk -----END CERTIFICATE-----Generated at Sat Jun 14 18:59:26 2025 by rpki-client