$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft File: VngmFidUtGDLWGbawxSIDHA1Rh0.mft (raw, json) Hash identifier: yLu+6JKbHYm7VLAiyCYnZPMGNfpnbmEMLKlmUXRnbCs= Subject key identifier: 83:88:62:DF:B7:C6:9A:F9:45:6A:21:69:D9:13:78:A5:AC:DF:6E:3F Authority key identifier: 56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D Certificate issuer: /CN=A917D9B8/serialNumber=567826162754B460CB5866DAC314880C7035461D Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft Manifest number: D4 Signing time: Fri 13 Jun 2025 04:36:35 +0000 Manifest this update: Fri 13 Jun 2025 04:36:35 +0000 Manifest next update: Fri 20 Jun 2025 04:36:35 +0000 Files and hashes: 1: VngmFidUtGDLWGbawxSIDHA1Rh0.crl (hash: N3dAHMm4gF+uUr+nzpYzhUaGzZ0FG+diAszCvKhhJtk=) 2: DFDEC4D007A411EFAB20A473C4F9AE02.roa (hash: hQsClVPo6k6KSQkrPXRux2ZE6YMvDs1XKFlnN0n+rhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.crl rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9B8, serialNumber=567826162754B460CB5866DAC314880C7035461D Validity Not Before: Jun 13 04:36:35 2025 GMT Not After : Jun 20 04:36:35 2025 GMT Subject: CN=684baad3-1e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:70:4f:0d:75:db:1f:bf:9c:14:30:42:98:d4: e7:f7:1b:23:50:a2:cc:fb:11:e2:0b:32:f5:ca:bf: f4:3e:1c:af:c7:3c:fd:03:0d:1b:ba:e8:7b:d7:16: 43:52:96:c4:b5:aa:b2:20:b2:fd:c3:24:cb:16:08: 84:d0:8c:09:bc:e4:27:0c:ee:73:89:c4:f7:07:68: 35:9d:b2:28:89:ce:8d:33:83:8d:9e:a3:94:c5:d4: 8d:88:d5:b4:e2:4d:c0:5a:35:23:f3:f4:48:11:ce: fb:19:fe:43:e7:2d:3f:53:b7:86:07:01:f2:4b:d2: 43:10:a1:57:e4:c2:86:0f:c2:c0:6f:36:48:59:14: a7:11:f8:6b:7e:e8:32:a8:77:c6:b2:c7:ca:ea:d7: 3c:de:d0:fe:e2:0b:6b:73:e2:13:5d:b3:64:ff:32: f9:37:dc:95:b2:51:ea:8a:b1:eb:11:bd:33:f1:2f: cc:d2:1d:94:89:35:de:9c:a4:5e:73:dc:d9:09:f5: ec:09:6e:c6:2c:21:7f:77:b3:96:5e:27:c2:5b:31: 5f:b8:fc:8a:ff:91:b0:21:15:86:94:f2:0b:0d:53: 42:bf:b3:9e:ef:1f:1f:6f:5a:ce:61:1c:9b:d6:23: 91:0f:59:6d:32:05:39:58:c3:4d:aa:15:e9:50:dd: 56:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:88:62:DF:B7:C6:9A:F9:45:6A:21:69:D9:13:78:A5:AC:DF:6E:3F X509v3 Authority Key Identifier: keyid:56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:55:ff:5d:fc:25:c8:10:5c:fa:b8:a3:c1:9f:ac:3f:ca:2d: e1:4e:0e:03:9d:aa:6c:67:62:ce:9c:39:27:df:6e:4d:54:45: 22:c1:14:27:e7:03:d0:86:dc:51:e2:76:9f:c7:01:48:3f:b5: 44:82:1c:90:c2:ed:62:82:92:67:f4:8e:a8:a9:7e:85:eb:a9: 66:1b:3a:e5:47:c5:cd:57:cf:3b:d2:0e:4f:24:08:9d:00:c7: 0b:af:26:1e:f6:f7:6f:4f:58:f1:fd:93:63:dd:4b:5b:18:76: 5b:76:67:49:eb:20:1a:1e:67:13:7a:05:d6:d7:25:60:ce:02: d9:ec:d5:e1:41:1a:13:e3:db:53:ad:e5:d0:20:c3:81:c8:28: cc:df:78:a6:12:79:56:2f:bd:e3:76:e8:dc:c7:2e:9e:c9:67: 2a:ec:1a:8f:fe:c8:2b:05:07:85:85:4f:d0:85:45:66:86:c8: f8:f8:b8:f3:4d:c7:b8:11:51:4e:1e:1a:0d:07:d2:83:b9:15: c1:59:84:3c:8f:41:4f:fb:ce:8d:18:ef:8d:9d:77:d9:f7:6b: 09:e1:20:dc:2a:5d:8f:d6:f7:3d:0c:ab:15:b5:0c:28:ba:20: e4:5c:16:17:74:1e:96:cd:2f:0e:a3:3f:f9:48:e2:73:f6:e5: 87:0e:93:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5QjgxMTAvBgNVBAUTKDU2NzgyNjE2Mjc1NEI0NjBDQjU4NjZEQUMzMTQ4ODBD NzAzNTQ2MUQwHhcNMjUwNjEzMDQzNjM1WhcNMjUwNjIwMDQzNjM1WjAYMRYwFAYD VQQDEw02ODRiYWFkMy0xZTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3BPDXXbH7+cFDBCmNTn9xsjUKLM+xHiCzL1yr/0Phyvxzz9Aw0buuh71xZD UpbEtaqyILL9wyTLFgiE0IwJvOQnDO5zicT3B2g1nbIoic6NM4ONnqOUxdSNiNW0 4k3AWjUj8/RIEc77Gf5D5y0/U7eGBwHyS9JDEKFX5MKGD8LAbzZIWRSnEfhrfugy qHfGssfK6tc83tD+4gtrc+ITXbNk/zL5N9yVslHqirHrEb0z8S/M0h2UiTXenKRe c9zZCfXsCW7GLCF/d7OWXifCWzFfuPyK/5GwIRWGlPILDVNCv7Oe7x8fb1rOYRyb 1iORD1ltMgU5WMNNqhXpUN1WLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOIYt+3 xpr5RWohadkTeKWs324/MB8GA1UdIwQYMBaAFFZ4JhYnVLRgy1hm2sMUiAxwNUYd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlCOC9DOEIxRDQ0RTA3 QTExMUVGODRGM0QyNkFDNEY5QUUwMi9WbmdtRmlkVXRHRExXR2Jhd3hTSURIQTFS aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZuZ21GaWRVdEdETFdHYmF3eFNJREhBMVJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDlCOC9DOEIxRDQ0RTA3QTExMUVGODRGM0QyNkFDNEY5QUUwMi9WbmdtRmlkVXRH RExXR2Jhd3hTSURIQTFSaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5Vf9d/CXIEFz6uKPBn6w/yi3hTg4DnapsZ2LOnDkn325NVEUiwRQn 5wPQhtxR4nafxwFIP7VEghyQwu1igpJn9I6oqX6F66lmGzrlR8XNV8870g5PJAid AMcLryYe9vdvT1jx/ZNj3UtbGHZbdmdJ6yAaHmcTegXW1yVgzgLZ7NXhQRoT49tT reXQIMOByCjM33imEnlWL73jdujcxy6eyWcq7BqP/sgrBQeFhU/QhUVmhsj4+Ljz Tce4EVFOHhoNB9KDuRXBWYQ8j0FP+86NGO+NnXfZ92sJ4SDcKl2P1vc9DKsVtQwo uiDkXBYXdB6WzS8Ooz/5SOJz9uWHDpMb -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:09 2025 by rpki-client