$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft File: vTfx1AdHvmxfXGujMH32Vgq2gaM.mft (raw, json) Hash identifier: cbqhQJEX4fFZfbuoAFm8LIfMbLwjTbnxBy4ZYnhMjNI= Subject key identifier: A0:A5:44:B3:57:F1:E6:4F:B1:36:68:14:5E:6A:F5:FD:C2:DC:69:7B Authority key identifier: BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3 Certificate issuer: /CN=A91817E6/serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft Manifest number: 0A58 Signing time: Sat 14 Jun 2025 20:16:16 +0000 Manifest this update: Sat 14 Jun 2025 20:16:16 +0000 Manifest next update: Sat 21 Jun 2025 20:16:16 +0000 Files and hashes: 1: vTfx1AdHvmxfXGujMH32Vgq2gaM.crl (hash: XyBNfMp1VMUerAghVnqSf6VLNDbj4wA6m+Eg1vgpg6s=) 2: 28C454FCB41211EF8D2EC946C4F9AE02.roa (hash: C0N61U0YEOhXRTQRllW2NuUOi6qXdqTI0gAe9H3eVh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91817E6, serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3 Validity Not Before: Jun 14 20:16:16 2025 GMT Not After : Jun 21 20:16:16 2025 GMT Subject: CN=684dd890-64e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7f:28:d8:56:dd:71:9e:c4:02:6d:d1:ee:45: bb:64:9b:e1:b9:f8:21:20:4c:6b:08:5a:52:c5:38: 41:bf:94:f8:ef:85:67:36:dd:cf:69:c3:95:d7:32: ab:87:7f:49:0e:e5:5e:0e:20:01:da:9b:4d:f0:61: 2f:ef:92:ea:3d:a3:b9:5d:20:ba:4e:ef:7e:be:aa: 44:e7:79:d0:3e:2a:45:eb:2c:8e:7b:c3:62:65:b8: cc:c2:70:9d:46:b6:25:61:ae:ce:ab:a7:f7:a1:ee: b1:a9:fc:42:16:b1:ec:6b:63:66:75:67:40:e2:bd: 2f:f3:82:d2:05:88:7c:e0:4a:b7:0e:7e:61:ef:a8: e0:ab:ec:10:70:59:a7:6e:51:8b:b4:ba:19:5b:b7: 28:b9:e6:44:2d:f4:18:33:ba:b6:03:66:23:5a:a4: c8:b8:dc:03:53:7e:bb:e5:7d:91:12:1d:c1:f0:67: ee:30:5e:28:f9:e3:e1:d5:25:34:8d:b5:b3:e3:cf: e9:c0:8d:fb:0c:1d:a7:59:5b:a5:d7:04:c7:a8:08: 66:4f:24:e7:89:56:a1:16:33:dc:d3:d7:06:4a:db: 85:7a:c6:b5:b0:b0:7b:fd:c7:7d:95:90:50:e5:3e: 41:e0:56:e9:bd:c7:ea:5c:df:cf:d8:46:ed:dd:27: 7c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A5:44:B3:57:F1:E6:4F:B1:36:68:14:5E:6A:F5:FD:C2:DC:69:7B X509v3 Authority Key Identifier: keyid:BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:e6:a9:5e:f6:68:ec:9e:f0:7a:fd:aa:51:fc:7c:1b:7f:a1: d6:53:d9:22:2b:64:b1:72:fe:44:a5:84:3e:ca:3c:80:1d:4b: 27:8c:f3:46:90:61:3d:1b:de:23:67:26:2a:a2:11:37:ba:ef: e3:d4:17:37:7c:f3:82:e9:c3:1d:c8:9b:72:40:d9:7c:e2:d1: de:6a:f1:79:7c:44:de:b8:40:cc:79:d8:01:d9:a6:4d:05:6b: 67:aa:31:73:79:53:5c:5a:72:28:b2:5e:88:e2:88:d7:f9:df: f2:4a:2f:85:f3:a4:46:f9:e9:24:63:ed:64:dd:a2:fc:b9:8c: 8d:9b:9e:d0:96:e3:45:a6:a3:32:95:b9:b2:c0:96:3f:c1:83: 7b:a9:1b:84:96:7f:d0:af:1f:13:31:db:95:12:44:05:79:e7: 80:d5:1c:e1:c8:6c:85:da:4e:1b:8a:77:f8:78:b9:83:ad:18: 8a:db:6c:90:f6:21:7d:1d:66:db:e4:22:46:01:62:e5:db:04: 2e:b5:06:b9:fd:20:f6:6f:7e:2c:e0:97:a3:d6:d8:ca:45:00: 4d:bc:84:3a:eb:4c:db:0b:d7:c2:bf:e5:64:f1:fb:e5:59:64: 26:4a:b9:43:fb:d0:3b:a6:fb:41:75:04:64:cd:5a:8f:f9:c6: 01:7e:db:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MTdFNjExMC8GA1UEBRMoQkQzN0YxRDQwNzQ3QkU2QzVGNUM2QkEzMzA3REY2NTYw QUI2ODFBMzAeFw0yNTA2MTQyMDE2MTZaFw0yNTA2MjEyMDE2MTZaMBgxFjAUBgNV BAMTDTY4NGRkODkwLTY0ZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4fyjYVt1xnsQCbdHuRbtkm+G5+CEgTGsIWlLFOEG/lPjvhWc23c9pw5XXMquH f0kO5V4OIAHam03wYS/vkuo9o7ldILpO736+qkTnedA+KkXrLI57w2JluMzCcJ1G tiVhrs6rp/eh7rGp/EIWsexrY2Z1Z0DivS/zgtIFiHzgSrcOfmHvqOCr7BBwWadu UYu0uhlbtyi55kQt9BgzurYDZiNapMi43ANTfrvlfZESHcHwZ+4wXij54+HVJTSN tbPjz+nAjfsMHadZW6XXBMeoCGZPJOeJVqEWM9zT1wZK24V6xrWwsHv9x32VkFDl PkHgVum9x+pc38/YRu3dJ3zbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoKVEs1fx 5k+xNmgUXmr1/cLcaXswHwYDVR0jBBgwFoAUvTfx1AdHvmxfXGujMH32Vgq2gaMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxN0U2LzU1NzQwRTcwQjNC MzExRUFCMTk4Q0UwREM0RjlBRTAyL3ZUZngxQWRIdm14ZlhHdWpNSDMyVmdxMmdh TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdlRmeDFBZEh2bXhmWEd1ak1IMzJWZ3EyZ2FNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx N0U2LzU1NzQwRTcwQjNCMzExRUFCMTk4Q0UwREM0RjlBRTAyL3ZUZngxQWRIdm14 ZlhHdWpNSDMyVmdxMmdhTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKbmqV72aOye8Hr9qlH8fBt/odZT2SIrZLFy/kSlhD7KPIAdSyeM80aQ YT0b3iNnJiqiETe67+PUFzd884Lpwx3Im3JA2Xzi0d5q8Xl8RN64QMx52AHZpk0F a2eqMXN5U1xaciiyXojiiNf53/JKL4XzpEb56SRj7WTdovy5jI2bntCW40WmozKV ubLAlj/Bg3upG4SWf9CvHxMx25USRAV554DVHOHIbIXaThuKd/h4uYOtGIrbbJD2 IX0dZtvkIkYBYuXbBC61Brn9IPZvfizgl6PW2MpFAE28hDrrTNsL18K/5WTx++VZ ZCZKuUP70Dum+0F1BGTNWo/5xgF+2wc= -----END CERTIFICATE-----Generated at Sun Jun 15 09:44:45 2025 by rpki-client