$ rpki-client -vvf rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft File: vxurTPDVSTDgAbctJPMLPtaK4rM.mft (raw, json) Hash identifier: zWHfYbp5SWJhuaJXPnlTSWfDiDXcqIPBGENLeer/R6M= Subject key identifier: D5:0B:5C:A7:15:8C:EC:7A:5E:98:3A:26:57:0B:4A:DA:F4:5A:E1:63 Authority key identifier: BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3 Certificate issuer: /CN=A916F95E/serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3 Certificate serial: 10BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft Manifest number: 10B7 Signing time: Mon 16 Jun 2025 17:20:25 +0000 Manifest this update: Mon 16 Jun 2025 17:20:25 +0000 Manifest next update: Mon 23 Jun 2025 17:20:25 +0000 Files and hashes: 1: vxurTPDVSTDgAbctJPMLPtaK4rM.crl (hash: y4uwYlekcoISb55cxhUeMH5NnFOf/4r359nXeM3C0qA=) 2: 1BB160C225EB11E9ADD6867FC4F9AE02.roa (hash: lwN0HxFqk+P+paikgj5BShG8YqJ+QsducNmiygkfDAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 17:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4287 (0x10bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F95E, serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3 Validity Not Before: Jun 16 17:20:25 2025 GMT Not After : Jun 23 17:20:25 2025 GMT Subject: CN=68505259-805f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f9:81:a3:d5:6c:5b:7b:c4:d1:ea:dc:10:24: 34:47:6c:04:49:f9:3f:48:4c:3c:7e:4b:22:b1:db: 9f:91:bd:f8:0a:cb:a6:81:fa:a5:34:34:5e:9b:e7: 8d:69:24:e5:67:04:f4:b6:f0:49:a9:41:cd:73:4d: 11:06:c5:88:b8:a1:96:ed:fa:8c:8f:bb:83:75:6d: 2d:a7:82:be:e7:4a:10:f4:36:c5:de:8b:50:92:21: 6f:fa:c0:79:07:73:26:90:fd:12:00:49:8e:07:2a: 9d:07:d8:40:90:05:08:8b:71:4f:e4:f7:cd:0a:7d: b5:98:f7:82:37:df:ed:74:e6:8d:12:3a:fc:05:5c: 44:d0:a8:9a:3f:df:e6:8e:ac:a8:ce:2e:9b:c1:2a: 16:30:88:b1:70:1f:3c:61:8d:e7:43:04:ee:f0:50: 77:1f:07:1a:62:53:59:f6:0f:18:ab:d7:c4:80:34: d3:2d:05:8e:1a:5b:d1:fb:ae:64:80:70:88:f7:28: 68:b3:7b:d1:83:c3:89:88:20:a1:17:d6:ad:57:f5: f3:0f:d5:ba:63:46:b4:26:f0:2b:0f:d3:4d:3d:80: b6:04:41:79:1e:8d:6d:a4:5a:c5:1e:0e:1e:e4:16: 4b:b8:19:71:48:6a:5e:67:b8:68:77:5c:ee:f9:7a: be:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0B:5C:A7:15:8C:EC:7A:5E:98:3A:26:57:0B:4A:DA:F4:5A:E1:63 X509v3 Authority Key Identifier: keyid:BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b6:c9:46:3b:09:38:db:7a:76:9c:ee:dc:33:ce:51:00:bf: c5:28:2e:7c:2f:ce:03:12:59:bc:66:18:8a:cb:82:05:29:7f: 84:ff:b7:e8:36:6e:d6:33:8c:79:7c:db:9b:79:99:3c:86:59: 77:82:e5:36:c3:a0:ae:ed:b2:33:d4:d5:b1:a2:a9:af:4e:fa: 0a:23:b2:c1:d3:6e:1d:20:2a:0e:ad:45:5c:b7:d4:ed:a9:7b: 06:cc:85:82:44:2a:a2:46:3b:f9:00:82:4c:6e:6b:4e:71:c3: 34:73:6e:78:2d:7b:aa:85:90:ac:20:dd:f0:90:81:9d:64:1f: b3:52:f1:36:b9:ce:85:06:23:1a:3b:e4:16:37:d0:79:54:db: c7:7c:32:6f:dd:b4:87:da:fd:4e:3d:cc:da:ff:9a:8b:97:e2: d8:40:11:22:bb:69:ab:4d:39:97:91:a9:db:2e:87:0d:0d:62: fb:11:75:79:87:8c:b2:e1:b2:a8:db:57:41:dc:1e:50:f9:58: 2d:fd:15:c1:3d:fc:11:d2:d2:a8:24:a4:44:31:87:90:50:82: 47:3a:14:ac:b3:b5:d5:72:d3:f3:d4:1a:e0:c2:b7:38:83:d2: 29:2d:3f:d6:94:19:8c:9a:d3:0e:f1:e3:ae:3a:7b:9f:bc:13: bd:90:61:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY5NUUxMTAvBgNVBAUTKEJGMUJBQjRDRjBENTQ5MzBFMDAxQjcyRDI0RjMwQjNF RDY4QUUyQjMwHhcNMjUwNjE2MTcyMDI1WhcNMjUwNjIzMTcyMDI1WjAYMRYwFAYD VQQDEw02ODUwNTI1OS04MDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fmBo9VsW3vE0ercECQ0R2wESfk/SEw8fksisdufkb34CsumgfqlNDRem+eN aSTlZwT0tvBJqUHNc00RBsWIuKGW7fqMj7uDdW0tp4K+50oQ9DbF3otQkiFv+sB5 B3MmkP0SAEmOByqdB9hAkAUIi3FP5PfNCn21mPeCN9/tdOaNEjr8BVxE0KiaP9/m jqyozi6bwSoWMIixcB88YY3nQwTu8FB3HwcaYlNZ9g8Yq9fEgDTTLQWOGlvR+65k gHCI9yhos3vRg8OJiCChF9atV/XzD9W6Y0a0JvArD9NNPYC2BEF5Ho1tpFrFHg4e 5BZLuBlxSGpeZ7hod1zu+Xq+fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNULXKcV jOx6Xpg6JlcLStr0WuFjMB8GA1UdIwQYMBaAFL8bq0zw1Ukw4AG3LSTzCz7WiuKz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Rjk1RS9CNzA4Nzk2ODI1 RTkxMUU5QkUzMUQ0N0RDNEY5QUUwMi92eHVyVFBEVlNURGdBYmN0SlBNTFB0YUs0 ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z4dXJUUERWU1REZ0FiY3RKUE1MUHRhSzRyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Rjk1RS9CNzA4Nzk2ODI1RTkxMUU5QkUzMUQ0N0RDNEY5QUUwMi92eHVyVFBEVlNU RGdBYmN0SlBNTFB0YUs0ck0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPtslGOwk423p2nO7cM85RAL/FKC58L84DElm8ZhiKy4IFKX+E/7fo Nm7WM4x5fNubeZk8hll3guU2w6Cu7bIz1NWxoqmvTvoKI7LB024dICoOrUVct9Tt qXsGzIWCRCqiRjv5AIJMbmtOccM0c254LXuqhZCsIN3wkIGdZB+zUvE2uc6FBiMa O+QWN9B5VNvHfDJv3bSH2v1OPcza/5qLl+LYQBEiu2mrTTmXkanbLocNDWL7EXV5 h4yy4bKo21dB3B5Q+Vgt/RXBPfwR0tKoJKREMYeQUIJHOhSss7XVctPz1Brgwrc4 g9IpLT/WlBmMmtMO8eOuOnufvBO9kGEG -----END CERTIFICATE-----Generated at Wed Jun 18 06:38:49 2025 by rpki-client