$ rpki-client -vvf rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft File: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft (raw, json) Hash identifier: quQ3dBc/W3UD27AdgA7nYLUx1F0FdQlNegY2Q/+vSIo= Subject key identifier: EE:9D:40:B2:55:45:2E:EB:0D:C8:46:4D:EB:EB:11:33:94:A5:78:57 Authority key identifier: BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2 Certificate issuer: /CN=A917B503/serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2 Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft Manifest number: B4 Signing time: Sat 21 Jun 2025 05:07:00 +0000 Manifest this update: Sat 21 Jun 2025 05:06:59 +0000 Manifest next update: Sat 28 Jun 2025 05:06:59 +0000 Files and hashes: 1: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl (hash: xdgNxGzBrgopZthoA18CC4704bgLIM/KkQtiEj77hgY=) 2: FF7048A08BB111EF8981B871C4F9AE02.roa (hash: 9uEwzB8ckH0lupP2vcJh2pZkJ61ZIv0842o4n0sbwyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 05:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B503, serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2 Validity Not Before: Jun 21 05:06:59 2025 GMT Not After : Jun 28 05:06:59 2025 GMT Subject: CN=68563df3-e1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b5:c8:8c:e9:4c:8b:5b:1b:be:46:b1:6e:c2: 28:a2:29:44:1f:2b:0c:17:99:55:a6:fc:ae:50:70: ff:6a:b0:9b:e3:09:d4:1b:28:5a:af:34:c0:ff:35: 56:58:90:95:b2:8f:2d:51:6c:47:b1:2f:96:a1:f6: 54:6c:2c:7c:cb:d8:cc:bd:8f:e4:42:32:ad:00:54: a6:87:1f:da:b0:2d:f4:f0:44:10:83:86:40:5f:15: a5:32:d9:9b:49:67:f6:e8:2b:29:cd:3c:61:97:c9: a3:6f:cf:d5:0f:a0:0a:65:85:65:c5:a4:e4:54:0a: d3:ec:eb:68:be:b5:9b:5b:7e:ad:d9:a7:ae:af:69: dc:b5:d0:b2:fa:ca:61:1c:f9:6a:5d:43:0d:c3:32: 24:ea:b8:8f:11:56:ef:f6:b1:4c:19:85:43:49:40: 89:22:db:d2:ce:9e:c1:66:03:81:14:9e:b2:01:8a: 57:5a:7b:c1:69:5b:2c:d4:52:10:d6:07:cd:10:f5: 4e:94:d6:90:2d:1b:dc:f6:2c:a0:16:6b:66:24:37: 89:42:54:ae:e0:21:30:36:7c:4c:4a:46:db:ea:c7: f8:98:fd:ef:e4:fd:92:52:a9:db:a7:aa:b5:52:64: 6a:7f:a7:de:53:14:d1:f6:59:45:6a:05:4c:11:50: bf:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9D:40:B2:55:45:2E:EB:0D:C8:46:4D:EB:EB:11:33:94:A5:78:57 X509v3 Authority Key Identifier: keyid:BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:5a:a7:89:c5:53:ca:ff:56:4f:8e:23:03:49:0d:9e:24:e7: b6:33:00:be:41:72:cc:74:7b:7d:0d:cd:e9:1f:4b:17:77:e3: 0f:34:c5:35:cc:bd:55:74:85:be:8d:73:ce:fd:02:20:38:0e: 02:50:20:ca:fe:ba:15:20:03:ab:9e:a2:32:5c:d4:cf:a9:41: 52:58:19:a3:08:73:67:83:7b:76:c5:07:34:cd:70:b7:82:2a: 26:fb:a6:40:6d:d0:f2:9c:c0:c6:a5:95:96:e6:40:bd:40:75: e5:01:91:a7:be:9b:a9:09:ee:aa:63:da:dc:9d:11:c4:22:e7: e7:11:85:7c:00:35:d7:38:62:da:1e:c5:91:2d:a4:cb:37:2c: a9:53:5e:8b:1c:ea:dd:d9:69:36:84:a4:ab:e7:2b:53:ab:62: bf:4b:73:b2:59:6b:8f:2e:cd:38:06:99:e2:59:0a:f5:b7:2f: 6b:5e:2e:f9:49:39:72:7f:84:bb:c7:92:2f:43:57:3e:92:ce: d2:51:bb:ea:4b:2b:55:6e:84:cc:09:65:da:72:74:af:9b:43: 6c:16:a2:c7:5a:0c:d2:c2:18:bd:74:ec:61:6a:83:1e:e7:c6: 9a:9d:2d:ff:3c:f5:a1:41:68:81:1e:a8:03:89:30:52:c8:23: 66:6c:00:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MDMxMTAvBgNVBAUTKEJENjNFMEREQ0I1Q0Q0MUIzNDUwMURGMkU4MUEyQTcy Q0VFMzZFRjIwHhcNMjUwNjIxMDUwNjU5WhcNMjUwNjI4MDUwNjU5WjAYMRYwFAYD VQQDEw02ODU2M2RmMy1lMWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7XIjOlMi1sbvkaxbsIooilEHysMF5lVpvyuUHD/arCb4wnUGyharzTA/zVW WJCVso8tUWxHsS+WofZUbCx8y9jMvY/kQjKtAFSmhx/asC308EQQg4ZAXxWlMtmb SWf26CspzTxhl8mjb8/VD6AKZYVlxaTkVArT7OtovrWbW36t2aeur2nctdCy+sph HPlqXUMNwzIk6riPEVbv9rFMGYVDSUCJItvSzp7BZgOBFJ6yAYpXWnvBaVss1FIQ 1gfNEPVOlNaQLRvc9iygFmtmJDeJQlSu4CEwNnxMSkbb6sf4mP3v5P2SUqnbp6q1 UmRqf6feUxTR9llFagVMEVC/UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6dQLJV RS7rDchGTevrETOUpXhXMB8GA1UdIwQYMBaAFL1j4N3LXNQbNFAd8ugaKnLO427y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUwMy83Qjg4NUZFNDQz MTAxMUVGODk0OEEzODFDNEY5QUUwMi92V1BnM2N0YzFCczBVQjN5NkJvcWNzN2pi dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZXUGczY3RjMUJzMFVCM3k2Qm9xY3M3amJ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUwMy83Qjg4NUZFNDQzMTAxMUVGODk0OEEzODFDNEY5QUUwMi92V1BnM2N0YzFC czBVQjN5NkJvcWNzN2pidkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWWqeJxVPK/1ZPjiMDSQ2eJOe2MwC+QXLMdHt9Dc3pH0sXd+MPNMU1 zL1VdIW+jXPO/QIgOA4CUCDK/roVIAOrnqIyXNTPqUFSWBmjCHNng3t2xQc0zXC3 giom+6ZAbdDynMDGpZWW5kC9QHXlAZGnvpupCe6qY9rcnRHEIufnEYV8ADXXOGLa HsWRLaTLNyypU16LHOrd2Wk2hKSr5ytTq2K/S3OyWWuPLs04BpniWQr1ty9rXi75 STlyf4S7x5IvQ1c+ks7SUbvqSytVboTMCWXacnSvm0NsFqLHWgzSwhi9dOxhaoMe 58aanS3/PPWhQWiBHqgDiTBSyCNmbAAW -----END CERTIFICATE-----Generated at Sat Jun 21 16:03:42 2025 by rpki-client