$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft File: vdXpp28axMjlF5fs6Z49zuzudJM.mft (raw, json) Hash identifier: 3QNuEhl0GZLnc0hjYDw054qVTSkGM5ycwuMR+nqVzOo= Subject key identifier: EC:49:1E:42:DF:49:61:25:0A:69:79:64:9C:93:56:F8:47:1D:FF:E7 Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 Certificate issuer: /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Certificate serial: 07A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft Manifest number: 0779 Signing time: Wed 18 Jun 2025 21:32:39 +0000 Manifest this update: Wed 18 Jun 2025 21:32:39 +0000 Manifest next update: Wed 25 Jun 2025 21:32:39 +0000 Files and hashes: 1: vdXpp28axMjlF5fs6Z49zuzudJM.crl (hash: xsQjmkqms+JltGlbNLdqhYmo9ehPyuWfSBw8OlnCtmw=) 2: B95187FC2FB811EBBF9A864BC4F9AE02.roa (hash: 7LNQOsT6W5YF7PbwLpdxc+PNq2qTTKmlTXDNMzrKzkc=) 3: 934050F4CE1F11ED9C66DB60C4F9AE02.roa (hash: baTkvqYLLObVVgzBHPInngFn1RI2tT6fsgLIq4Wf1Yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 21:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1957 (0x7a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Validity Not Before: Jun 18 21:32:39 2025 GMT Not After : Jun 25 21:32:39 2025 GMT Subject: CN=68533077-d27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fc:01:9c:a7:83:0b:4a:ee:35:cb:c6:d3:66: 3b:24:d4:36:d0:14:58:4e:d8:92:84:ec:8f:78:ac: 49:bd:72:68:30:23:10:fb:fc:e9:07:4b:c3:04:a8: cb:97:c4:85:58:26:18:5e:06:f3:7d:fb:0c:74:a4: 61:5f:d0:d1:38:ca:6a:1c:d7:15:af:a0:fd:e3:f8: 94:de:60:83:16:74:85:2a:ed:45:21:44:9e:bc:fe: 16:d8:2a:87:22:c3:6f:75:90:b8:9b:a7:48:82:70: b5:f7:b9:d5:c3:43:2d:c2:e7:9d:cb:dc:90:56:60: c6:a8:5b:ce:85:14:ed:51:be:71:2d:06:2e:98:6e: f3:d9:90:e7:f5:8a:53:66:1f:06:d7:33:cf:88:7b: 87:53:31:47:b2:d3:f4:97:79:91:bd:af:98:03:13: 94:75:4b:8d:b4:3f:f9:a6:64:22:4e:ba:76:ab:87: 46:86:b6:e5:31:77:8e:4b:04:e5:73:d2:10:e6:08: 41:b2:d0:2b:f8:fb:6b:c7:d2:c4:d4:4f:88:b4:27: 5b:9b:b5:1c:24:b0:d8:e4:9f:94:cd:01:bc:11:61: 36:5f:f1:ca:b5:e9:a5:8e:ca:36:80:6d:04:02:eb: da:8f:2e:5f:fe:6a:e6:ab:cd:0a:e7:ee:9d:6f:18: 29:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:49:1E:42:DF:49:61:25:0A:69:79:64:9C:93:56:F8:47:1D:FF:E7 X509v3 Authority Key Identifier: keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:69:ad:43:ea:a6:74:f9:c8:00:d3:f1:ab:9e:df:09:da:c4: f0:45:d0:b6:7f:24:11:bd:5f:58:68:6a:b2:19:15:f4:39:e3: 3e:9f:93:8b:70:94:5f:ee:f1:26:b5:19:23:28:9e:20:c5:12: 68:25:8f:59:b6:6f:9a:02:c1:68:f6:1d:4d:82:f4:92:31:a7: f1:46:59:61:de:be:9b:cc:ed:25:9e:1e:b8:13:40:1b:83:10: 8e:21:17:91:7e:90:40:45:1a:eb:5f:b4:2e:8a:41:8e:43:d2: 71:67:9d:20:99:11:27:8b:34:b5:05:45:d9:e6:35:31:7a:81: 13:aa:f2:09:b9:3e:08:ed:0a:16:30:52:2a:e5:0c:57:19:86: 35:a1:34:a7:b7:9d:33:57:c9:00:18:82:4a:8a:6a:40:54:5b: 0a:82:76:9d:b6:d6:ba:ff:e4:cb:0e:f0:13:53:a0:0e:11:9d: 0c:cd:38:78:7b:3d:c4:45:6f:74:9a:ee:79:ea:bd:0b:23:c4: c1:6b:e6:ba:3c:dc:c2:d6:24:e1:81:a6:3c:11:44:b1:19:d3: 88:13:be:0a:0d:bb:30:a2:7e:82:9a:2d:a7:18:10:63:e4:c9: 34:d7:f7:b8:78:57:1a:a5:6d:99:71:1a:23:cb:6b:5f:2d:50: e9:9f:c4:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEJERDVFOUE3NkYxQUM0QzhFNTE3OTdFQ0U5OUUzRENF RUNFRTc0OTMwHhcNMjUwNjE4MjEzMjM5WhcNMjUwNjI1MjEzMjM5WjAYMRYwFAYD VQQDEw02ODUzMzA3Ny1kMjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfwBnKeDC0ruNcvG02Y7JNQ20BRYTtiShOyPeKxJvXJoMCMQ+/zpB0vDBKjL l8SFWCYYXgbzffsMdKRhX9DROMpqHNcVr6D94/iU3mCDFnSFKu1FIUSevP4W2CqH IsNvdZC4m6dIgnC197nVw0Mtwuedy9yQVmDGqFvOhRTtUb5xLQYumG7z2ZDn9YpT Zh8G1zPPiHuHUzFHstP0l3mRva+YAxOUdUuNtD/5pmQiTrp2q4dGhrblMXeOSwTl c9IQ5ghBstAr+Ptrx9LE1E+ItCdbm7UcJLDY5J+UzQG8EWE2X/HKtemljso2gG0E Auvajy5f/mrmq80K5+6dbxgp9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxJHkLf SWElCml5ZJyTVvhHHf/nMB8GA1UdIwQYMBaAFL3V6advGsTI5ReX7OmePc7s7nST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zMTQ4REM5RTJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhNamxGNWZzNlo0OXp1enVk Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZkWHBwMjhheE1qbEY1ZnM2WjQ5enV6dWRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zMTQ4REM5RTJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhN amxGNWZzNlo0OXp1enVkSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcaa1D6qZ0+cgA0/Grnt8J2sTwRdC2fyQRvV9YaGqyGRX0OeM+n5OL cJRf7vEmtRkjKJ4gxRJoJY9Ztm+aAsFo9h1NgvSSMafxRllh3r6bzO0lnh64E0Ab gxCOIReRfpBARRrrX7QuikGOQ9JxZ50gmREnizS1BUXZ5jUxeoETqvIJuT4I7QoW MFIq5QxXGYY1oTSnt50zV8kAGIJKimpAVFsKgnadtta6/+TLDvATU6AOEZ0MzTh4 ez3ERW90mu556r0LI8TBa+a6PNzC1iThgaY8EUSxGdOIE74KDbswon6Cmi2nGBBj 5Mk01/e4eFcapW2ZcRojy2tfLVDpn8QY -----END CERTIFICATE-----Generated at Fri Jun 20 05:05:00 2025 by rpki-client