$ rpki-client -vvf rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft File: VZ9R7Isljn6QYp2FYuHblWvA_zc.mft (raw, json) Hash identifier: SbfpVVxIqLuW22Lodf/xCATe+qSvF0oMezuBi2Mc0CE= Subject key identifier: 98:77:2B:34:50:C1:2E:9A:C5:0B:4D:AA:C9:85:BA:C6:0E:65:40:D1 Authority key identifier: 55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37 Certificate issuer: /CN=A916FEAF/serialNumber=559F51EC8B258E7E90629D8562E1DB956BC0FF37 Certificate serial: 0965 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft Manifest number: 095F Signing time: Thu 12 Jun 2025 19:57:40 +0000 Manifest this update: Thu 12 Jun 2025 19:57:40 +0000 Manifest next update: Thu 19 Jun 2025 19:57:40 +0000 Files and hashes: 1: VZ9R7Isljn6QYp2FYuHblWvA_zc.crl (hash: hoJSgf7eiPjVvEDjU1Agn9zglMIm9oueE5YsENYIjsI=) 2: 8247E286967711EA81018623C4F9AE02.roa (hash: y10qCt7Fl6t2oez7PlUi3bvenEnmvPzgsBbQMTuv47I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.crl rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2405 (0x965) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FEAF, serialNumber=559F51EC8B258E7E90629D8562E1DB956BC0FF37 Validity Not Before: Jun 12 19:57:40 2025 GMT Not After : Jun 19 19:57:40 2025 GMT Subject: CN=684b3134-601c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:64:1a:fa:17:19:dd:00:6a:51:1b:d1:29: 54:60:50:c7:34:da:96:d3:18:cf:0b:3a:ac:80:d1: 2e:09:9d:48:55:45:39:b7:14:5a:5d:9b:64:8c:b7: 35:1f:cb:c3:f8:b6:d2:2c:1a:61:94:6d:39:19:1b: 39:30:bb:79:fd:53:15:a5:27:fe:e5:36:a8:4b:1f: 8b:d1:39:24:3a:9f:8e:de:48:4b:7b:19:f4:ba:11: 9b:ca:6b:21:06:c2:17:c7:d5:84:72:78:a8:e4:67: 41:9a:50:05:25:5c:66:e9:06:41:6b:b2:31:77:de: 69:3d:a5:3e:75:5f:c1:01:76:17:24:15:23:04:3c: 00:ac:b0:c4:f9:83:13:72:77:9c:d3:6b:a9:59:87: 46:b6:e3:22:cd:a5:e9:a0:46:7a:59:e6:58:80:73: f6:79:80:59:ff:9f:69:f0:84:f0:b6:7e:bd:a1:d8: 48:d7:f5:45:46:68:66:6e:48:db:69:79:75:dc:c4: d7:dc:13:ba:b6:e0:da:fd:f2:bd:5f:a4:17:40:fd: be:4c:e9:31:d8:2f:e7:ca:88:e9:73:24:9f:d6:73: 9a:8f:d5:86:c2:62:6c:ff:0e:ee:59:f2:eb:f4:0f: 1d:6c:ad:9a:8f:ca:47:9f:0c:be:79:55:56:09:1b: 08:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:77:2B:34:50:C1:2E:9A:C5:0B:4D:AA:C9:85:BA:C6:0E:65:40:D1 X509v3 Authority Key Identifier: keyid:55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:8e:ed:ed:ac:76:c7:60:fd:59:4a:a1:e4:6c:ef:0f:97:72: 4d:47:d9:76:ca:e8:d3:a1:4f:b3:21:e1:8f:54:db:51:c0:72: e1:0a:e5:07:8e:ca:cb:40:d4:39:45:94:25:c0:4f:07:33:7a: c9:1e:3d:b9:cd:a6:34:e1:ec:b8:73:75:db:90:ad:88:43:63: f8:4c:9e:ef:7d:8f:95:93:59:67:ca:92:d5:82:d5:ef:31:a8: 74:ff:fd:41:c1:41:54:02:5a:dc:9b:fc:97:e1:33:b0:3e:81: 0e:40:c4:cb:e7:46:25:9e:68:72:9f:2b:8c:f1:92:95:5d:af: 56:1a:ee:22:f3:b6:17:9a:74:95:4b:19:96:61:36:a0:c9:0b: 43:04:9d:0c:c2:b7:1b:33:39:62:23:cf:d2:5a:93:68:f1:15: 13:37:f7:01:f5:d1:79:9a:72:ed:0c:09:eb:72:6d:ff:97:2e: 75:92:cb:36:9e:61:ec:23:b4:45:97:13:98:1e:e6:26:d8:60: 80:98:5d:10:6d:f2:5b:6b:81:6a:ec:7d:f1:17:e3:5f:a1:39: f5:4e:c2:31:7c:da:01:a1:a4:62:f0:96:1d:cd:37:e7:9f:9f: c4:a9:0c:26:ea:40:54:3c:b6:80:e4:1d:16:fe:ab:6c:76:39: c1:5d:cd:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZFQUYxMTAvBgNVBAUTKDU1OUY1MUVDOEIyNThFN0U5MDYyOUQ4NTYyRTFEQjk1 NkJDMEZGMzcwHhcNMjUwNjEyMTk1NzQwWhcNMjUwNjE5MTk1NzQwWjAYMRYwFAYD VQQDEw02ODRiMzEzNC02MDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvN1kGvoXGd0AalEb0SlUYFDHNNqW0xjPCzqsgNEuCZ1IVUU5txRaXZtkjLc1 H8vD+LbSLBphlG05GRs5MLt5/VMVpSf+5TaoSx+L0TkkOp+O3khLexn0uhGbymsh BsIXx9WEcnio5GdBmlAFJVxm6QZBa7Ixd95pPaU+dV/BAXYXJBUjBDwArLDE+YMT cnec02upWYdGtuMizaXpoEZ6WeZYgHP2eYBZ/59p8ITwtn69odhI1/VFRmhmbkjb aXl13MTX3BO6tuDa/fK9X6QXQP2+TOkx2C/nyojpcySf1nOaj9WGwmJs/w7uWfLr 9A8dbK2aj8pHnwy+eVVWCRsIPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJh3KzRQ wS6axQtNqsmFusYOZUDRMB8GA1UdIwQYMBaAFFWfUeyLJY5+kGKdhWLh25VrwP83 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkVBRi9ERDYwRDRBNDk2 NzUxMUVBODYwMjJBMUVDNEY5QUUwMi9WWjlSN0lzbGpuNlFZcDJGWXVIYmxXdkFf emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZaOVI3SXNsam42UVlwMkZZdUhibFd2QV96Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkVBRi9ERDYwRDRBNDk2NzUxMUVBODYwMjJBMUVDNEY5QUUwMi9WWjlSN0lzbGpu NlFZcDJGWXVIYmxXdkFfemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEju3trHbHYP1ZSqHkbO8Pl3JNR9l2yujToU+zIeGPVNtRwHLhCuUH jsrLQNQ5RZQlwE8HM3rJHj25zaY04ey4c3XbkK2IQ2P4TJ7vfY+Vk1lnypLVgtXv Mah0//1BwUFUAlrcm/yX4TOwPoEOQMTL50YlnmhynyuM8ZKVXa9WGu4i87YXmnSV SxmWYTagyQtDBJ0MwrcbMzliI8/SWpNo8RUTN/cB9dF5mnLtDAnrcm3/ly51kss2 nmHsI7RFlxOYHuYm2GCAmF0QbfJba4Fq7H3xF+NfoTn1TsIxfNoBoaRi8JYdzTfn n5/EqQwm6kBUPLaA5B0W/qtsdjnBXc2c -----END CERTIFICATE-----Generated at Sat Jun 14 18:46:21 2025 by rpki-client