$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft File: VN6ZlQt_yVgf6KyWHze3iY81zcM.mft (raw, json) Hash identifier: G4yOGJTOuByAsozlklRUupsFniGTjCfVKGDb7yxzcxI= Subject key identifier: AD:C4:F7:20:C8:01:01:B5:BC:9D:A3:E6:D6:FC:F6:C3:D4:3C:49:F5 Authority key identifier: 54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3 Certificate issuer: /CN=A917E458/serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft Manifest number: 11 Signing time: Tue 17 Jun 2025 06:52:44 +0000 Manifest this update: Tue 17 Jun 2025 06:52:43 +0000 Manifest next update: Tue 24 Jun 2025 06:52:43 +0000 Files and hashes: 1: VN6ZlQt_yVgf6KyWHze3iY81zcM.crl (hash: +8mXdN5QCsHWM9b9Jtdlk5ABqkxn8+78iDlu3A46fdM=) 2: 9A014CF430D811F0A444B26EC4F9AE02.roa (hash: C8ptyGvwWlQzeSGOofAg4DZdLAMRxqC9y9f9rO1gP40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E458, serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3 Validity Not Before: Jun 17 06:52:43 2025 GMT Not After : Jun 24 06:52:43 2025 GMT Subject: CN=685110bc-3a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f2:87:21:45:8e:5e:d4:41:a7:70:02:6f:6d: 31:81:46:74:25:81:e9:3e:21:b3:26:1e:dd:65:93: a8:33:93:08:0f:aa:dd:2c:5b:98:a0:93:16:d6:47: e9:95:ee:2f:c5:9e:36:c4:7a:a7:96:21:52:78:c0: 59:53:34:1f:e9:ed:b4:d4:c9:b7:73:ab:8f:97:1e: d2:fc:b7:8d:3c:50:8e:e7:b9:d6:63:1b:b1:af:d9: 31:8b:fb:69:98:16:35:3a:1c:34:bd:16:19:0e:87: 5e:ef:c0:68:cf:0d:b2:f8:9d:ef:25:82:84:97:e8: 32:1b:09:a8:b6:12:e6:bc:26:88:66:49:fb:88:95: 1f:8b:1a:2a:f0:45:d1:c3:e2:5e:87:df:6f:b9:dd: 5f:46:cd:2b:1b:98:d4:9a:b6:75:9e:1a:2a:0a:7a: 0e:ca:44:b2:76:10:1c:a9:06:c9:c7:ca:73:47:54: 85:0c:76:a2:49:1f:bb:e3:5d:a2:f9:52:a9:9a:53: 76:26:29:e3:14:f3:ae:a8:66:30:e2:fb:07:d1:40: 99:8c:e8:22:13:93:0b:79:3a:be:f4:1b:67:09:a7: ba:1d:e0:99:55:f6:ac:c2:d0:22:4d:a3:e2:c9:1e: 43:1a:89:7b:2b:76:06:04:38:32:5c:c3:11:db:a4: bb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C4:F7:20:C8:01:01:B5:BC:9D:A3:E6:D6:FC:F6:C3:D4:3C:49:F5 X509v3 Authority Key Identifier: keyid:54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:a8:f1:f0:06:bd:74:c0:36:f0:5b:9d:47:15:90:55:53:a1: cb:4f:19:4b:3c:28:fb:48:3c:f3:3f:3c:95:11:6f:29:10:f1: b4:99:0c:99:d3:c0:6d:9d:0e:0d:2d:70:df:4b:d1:fb:74:9d: 30:5d:a3:d6:ed:9b:3f:c8:dc:ae:3e:a3:21:da:f5:32:72:7d: fc:a1:92:01:5c:f9:32:67:8a:bf:bf:04:6e:ad:bf:03:4d:bc: 9b:71:fd:b2:a1:26:1e:a3:8b:38:b1:d7:62:b4:f9:b5:99:4b: 98:d3:a5:f0:a5:1f:01:64:16:8e:06:27:d3:92:f0:63:a1:56: 72:42:a3:00:3d:c6:fe:82:3b:98:c2:95:f3:a6:52:c6:41:a2: 46:c0:31:09:db:ad:e2:ff:5b:03:d1:4c:d8:68:30:d9:75:aa: c0:fe:5f:f2:49:4e:dd:ab:51:d3:82:8b:dd:38:af:f5:2b:e1: b0:85:29:de:70:5a:6f:6b:53:c0:85:71:ad:8d:48:71:b9:ae: 69:7b:27:85:1a:0a:6b:03:93:af:57:ea:a3:5a:03:ad:a0:7f: 1c:bc:56:c5:02:80:37:a2:bc:c8:96:ef:4a:58:9f:0a:da:44: 36:82:fd:ef:67:ed:0d:79:21:7b:4e:db:ba:1b:1f:20:5e:ac: 7c:31:b6:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTQ1ODExMC8GA1UEBRMoNTRERTk5OTUwQjdGQzk1ODFGRThBQzk2MUYzN0I3ODk4 RjM1Q0RDMzAeFw0yNTA2MTcwNjUyNDNaFw0yNTA2MjQwNjUyNDNaMBgxFjAUBgNV BAMTDTY4NTExMGJjLTNhNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCq8ochRY5e1EGncAJvbTGBRnQlgek+IbMmHt1lk6gzkwgPqt0sW5igkxbWR+mV 7i/FnjbEeqeWIVJ4wFlTNB/p7bTUybdzq4+XHtL8t408UI7nudZjG7Gv2TGL+2mY FjU6HDS9FhkOh17vwGjPDbL4ne8lgoSX6DIbCai2Eua8JohmSfuIlR+LGirwRdHD 4l6H32+53V9GzSsbmNSatnWeGioKeg7KRLJ2EBypBsnHynNHVIUMdqJJH7vjXaL5 UqmaU3YmKeMU866oZjDi+wfRQJmM6CITkwt5Or70G2cJp7od4JlV9qzC0CJNo+LJ HkMaiXsrdgYEODJcwxHbpLu3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrcT3IMgB AbW8naPm1vz2w9Q8SfUwHwYDVR0jBBgwFoAUVN6ZlQt/yVgf6KyWHze3iY81zcMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNDU4LzFFQzcyRjIyMzBE ODExRjBBN0JFMkU0RkM0RjlBRTAyL1ZONlpsUXRfeVZnZjZLeVdIemUzaVk4MXpj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVk42WmxRdF95VmdmNkt5V0h6ZTNpWTgxemNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF NDU4LzFFQzcyRjIyMzBEODExRjBBN0JFMkU0RkM0RjlBRTAyL1ZONlpsUXRfeVZn ZjZLeVdIemUzaVk4MXpjTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABCo8fAGvXTANvBbnUcVkFVToctPGUs8KPtIPPM/PJURbykQ8bSZDJnT wG2dDg0tcN9L0ft0nTBdo9btmz/I3K4+oyHa9TJyffyhkgFc+TJnir+/BG6tvwNN vJtx/bKhJh6jizix12K0+bWZS5jTpfClHwFkFo4GJ9OS8GOhVnJCowA9xv6CO5jC lfOmUsZBokbAMQnbreL/WwPRTNhoMNl1qsD+X/JJTt2rUdOCi904r/Ur4bCFKd5w Wm9rU8CFca2NSHG5rml7J4UaCmsDk69X6qNaA62gfxy8VsUCgDeivMiW70pYnwra RDaC/e9n7Q15IXtO27obHyBerHwxtgU= -----END CERTIFICATE-----Generated at Thu Jun 19 00:25:32 2025 by rpki-client