$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft File: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json) Hash identifier: roO9wrD9JvcjGDMeFuH9/ss6LiaEEryBWLPpewcfd7E= Subject key identifier: ED:0D:AE:32:08:BD:CE:AC:FE:5F:D3:36:E8:96:D6:FE:F7:C9:33:AB Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D Certificate issuer: /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft Manifest number: 015D Signing time: Sun 15 Jun 2025 03:16:30 +0000 Manifest this update: Sun 15 Jun 2025 03:16:29 +0000 Manifest next update: Sun 22 Jun 2025 03:16:29 +0000 Files and hashes: 1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: jgL4t3WlP2pZwDO4XFHVhHpCBAbIElDcJG8U6q8UrKE=) 2: 804B8FA6E91511EE8B622417C4F9AE02.roa (hash: ss8VIOhJqFqdKONVWR6vq+iPEbbcFBwiChhI9XQ77bk=) 3: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: P3RI+iahMSOMEtdBfrZDu8ZMcvFxJp6/7cmLyR0Owr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Validity Not Before: Jun 15 03:16:29 2025 GMT Not After : Jun 22 03:16:29 2025 GMT Subject: CN=684e3b0d-d5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dd:11:2c:7d:bc:de:5f:50:af:af:69:a3:d5: 00:cb:eb:14:4a:19:56:52:7a:14:bd:f9:ec:33:90: 96:39:cd:ff:f9:a0:0d:88:47:d5:b7:a1:75:e4:b8: 0d:44:c1:ef:26:5c:5a:3c:fe:16:8f:42:f7:37:89: 7c:ff:53:cd:4b:8f:40:e1:ef:7e:59:6f:5c:a3:8d: f6:48:34:44:49:c1:4c:ed:25:ab:59:01:8e:3c:18: 9d:36:e8:6b:ce:f6:13:98:68:cb:82:ca:56:4d:13: af:8d:cc:e6:87:c0:4f:2b:d7:0c:07:16:8f:ac:80: 2c:32:8c:c4:aa:2c:11:e7:cb:36:eb:62:bc:5f:e6: ef:75:c1:96:74:06:ce:6a:e7:98:35:b8:dd:49:17: 3b:af:7d:f6:eb:7f:ce:17:ea:ce:c8:82:5e:01:1c: 29:2c:46:3b:72:cb:2f:3a:c9:2f:97:18:e6:83:8d: 47:80:03:ec:54:9c:8f:88:c6:d2:62:2d:5b:11:7e: 51:95:33:72:dd:dc:28:a0:3a:bc:69:9f:78:99:5a: 9e:ba:46:17:1d:75:49:78:ee:f0:3c:51:b9:c9:73: 14:67:6e:d8:db:c8:39:ee:2b:2b:15:14:9f:64:7a: c1:9b:9a:0f:07:87:2b:80:04:26:12:7e:94:07:f4: 6e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0D:AE:32:08:BD:CE:AC:FE:5F:D3:36:E8:96:D6:FE:F7:C9:33:AB X509v3 Authority Key Identifier: keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:b9:4c:68:f4:0d:a0:30:89:19:6a:61:6e:eb:c9:54:ba:74: 17:93:48:29:e8:b9:5d:8b:e3:03:bf:2c:61:04:62:31:2e:8a: d1:79:52:1f:4e:65:a7:cb:fa:63:dc:d2:57:14:1d:f0:b7:bc: 56:5f:a8:9c:78:b1:d0:18:31:2b:0a:a7:71:c5:f3:69:d3:1b: e0:6c:95:95:bd:3e:d5:3c:44:20:40:59:8b:e7:95:7f:4b:39: 37:1d:e7:3d:bf:43:c1:70:bb:4b:26:df:6f:64:6c:6d:7c:fd: 9a:ff:66:1d:65:70:b6:a8:83:db:11:63:64:aa:93:dd:eb:80: 6f:a0:84:cc:ff:c1:12:11:1c:b4:2e:f6:41:a1:73:f9:2b:2d: 6d:00:5b:57:08:1c:46:7a:b6:f9:c8:28:4f:7d:18:42:8e:57: a8:45:d1:47:01:25:a7:53:a0:37:bf:63:5e:c4:ba:0b:9a:9d: d4:b1:c8:ac:53:9c:43:91:5d:ce:5a:5b:df:d0:5b:f4:2c:6e: bb:0f:fd:53:50:26:ff:3d:3c:64:73:0c:0b:08:05:d9:e5:39: 40:3f:fa:a0:e2:4d:95:0c:bf:e6:02:91:2a:96:b6:80:ed:9a: b5:17:2e:d2:1a:70:3f:b5:22:49:6d:da:6a:6e:e9:9d:30:18: 45:60:99:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjkxMTAvBgNVBAUTKEJFNjM0MUE3Q0MwQ0EwRjZDMUExNUUwNDY2RUM3MTU1 QjgyODNDOUQwHhcNMjUwNjE1MDMxNjI5WhcNMjUwNjIyMDMxNjI5WjAYMRYwFAYD VQQDEw02ODRlM2IwZC1kNWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzt0RLH283l9Qr69po9UAy+sUShlWUnoUvfnsM5CWOc3/+aANiEfVt6F15LgN RMHvJlxaPP4Wj0L3N4l8/1PNS49A4e9+WW9co432SDREScFM7SWrWQGOPBidNuhr zvYTmGjLgspWTROvjczmh8BPK9cMBxaPrIAsMozEqiwR58s262K8X+bvdcGWdAbO aueYNbjdSRc7r33263/OF+rOyIJeARwpLEY7cssvOskvlxjmg41HgAPsVJyPiMbS Yi1bEX5RlTNy3dwooDq8aZ94mVqeukYXHXVJeO7wPFG5yXMUZ27Y28g57isrFRSf ZHrBm5oPB4crgAQmEn6UB/RunQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0NrjII vc6s/l/TNuiW1v73yTOrMB8GA1UdIwQYMBaAFL5jQafMDKD2waFeBGbscVW4KDyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGOS80RTYwOUE3MjNC N0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9QYkJvVjRFWnV4eFZiZ29Q SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtTkJwOHdNb1BiQm9WNEVadXh4VmJnb1BKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGOS80RTYwOUE3MjNCN0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9Q YkJvVjRFWnV4eFZiZ29QSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARuUxo9A2gMIkZamFu68lUunQXk0gp6Lldi+MDvyxhBGIxLorReVIf TmWny/pj3NJXFB3wt7xWX6iceLHQGDErCqdxxfNp0xvgbJWVvT7VPEQgQFmL55V/ Szk3Hec9v0PBcLtLJt9vZGxtfP2a/2YdZXC2qIPbEWNkqpPd64BvoITM/8ESERy0 LvZBoXP5Ky1tAFtXCBxGerb5yChPfRhCjleoRdFHASWnU6A3v2NexLoLmp3Uscis U5xDkV3OWlvf0Fv0LG67D/1TUCb/PTxkcwwLCAXZ5TlAP/qg4k2VDL/mApEqlraA 7Zq1Fy7SGnA/tSJJbdpqbumdMBhFYJlH -----END CERTIFICATE-----Generated at Sun Jun 15 09:51:31 2025 by rpki-client