$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft File: vrUOQRzD4sQGA7FqkWCepNQGZJU.mft (raw, json) Hash identifier: qNkM8MS8FGxqLLGw9j1p3NQWX3xZVBCZjhX7hE6JNR0= Subject key identifier: 82:22:61:B7:28:0D:BC:B2:15:FB:FD:87:12:86:9A:C0:C2:66:61:D0 Authority key identifier: BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 Certificate issuer: /CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Certificate serial: 0DD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft Manifest number: 0DCD Signing time: Sat 14 Jun 2025 17:48:42 +0000 Manifest this update: Sat 14 Jun 2025 17:48:41 +0000 Manifest next update: Sat 21 Jun 2025 17:48:41 +0000 Files and hashes: 1: vrUOQRzD4sQGA7FqkWCepNQGZJU.crl (hash: U4TU9kE1r12ibJl3hGme0MH4q2zfypJUPzt088Z2qxY=) 2: 4BECBAFCB99811E98000600AC4F9AE02.roa (hash: rqASzwwK7FbCaVAYTK88nCqRcfP1vi7cp+uLy8ucquU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3541 (0xdd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B2F8, serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Validity Not Before: Jun 14 17:48:41 2025 GMT Not After : Jun 21 17:48:41 2025 GMT Subject: CN=684db5fa-a42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1b:08:10:91:3e:ed:22:f3:d5:87:ac:48:af: 95:be:5f:5e:dd:e1:7a:cf:c0:4d:93:5e:1c:61:4c: be:49:c3:d4:91:f1:5f:d3:0c:dd:eb:8e:2e:c8:08: d9:22:18:43:b7:15:72:57:55:73:f6:2d:1a:34:99: 2c:bd:b5:8d:6e:23:00:0a:d9:e3:e9:41:1d:9a:77: 4e:77:82:36:fd:6c:a0:9a:c2:5d:10:be:e2:ac:bd: 14:68:fd:4e:32:ac:c6:35:2d:9f:1b:6b:5a:fc:37: 90:cb:6a:c9:e7:7e:6d:90:f9:0a:0a:5a:d2:6a:d2: 59:19:54:df:86:66:c7:43:10:51:bb:33:f2:c7:8d: ec:a2:0c:58:c2:cb:fd:5b:07:1d:e4:d7:d4:20:24: 2a:64:65:89:c4:48:38:15:d0:b2:f3:0d:7d:76:32: 42:a4:a9:b1:b5:78:93:e0:19:f9:f5:33:ac:9d:fc: 67:61:98:5b:cd:3d:1c:0f:3e:a1:05:2e:be:d8:1f: 6c:db:e0:86:07:60:c7:06:9e:ad:a8:a7:fc:76:13: ae:37:3c:17:25:b0:64:04:1e:ad:9b:e5:09:d0:4a: 87:f0:b4:31:c2:42:54:c0:51:90:dc:a3:3d:3a:a0: bd:f1:f2:42:f2:4a:37:08:ac:e5:99:e4:30:87:f9: f0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:22:61:B7:28:0D:BC:B2:15:FB:FD:87:12:86:9A:C0:C2:66:61:D0 X509v3 Authority Key Identifier: keyid:BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:47:76:8b:83:8d:17:ca:83:b6:e0:6f:2e:06:4b:04:e1:24: 25:86:17:98:32:b6:5a:d7:db:c8:d5:d5:b8:77:de:c6:84:a1: 7f:9b:77:e1:20:7a:a0:7e:f2:c9:b3:5e:ac:1d:73:cc:9c:c7: e2:8a:74:a2:c2:7f:4c:ea:fa:91:2c:c5:fc:a1:8b:4a:6f:38: c6:0b:fa:43:9c:07:02:bd:1d:77:dd:f1:63:41:f2:f9:d5:5e: c8:82:81:98:88:c6:fe:86:96:4e:8d:16:e4:2d:22:45:06:53: 1a:ba:03:22:8d:b7:e0:63:c8:bb:8c:bf:35:12:a6:b6:e7:29: 1a:a8:00:a1:51:95:af:c5:58:b9:80:d9:44:94:7d:96:40:63: 12:38:d3:01:ee:08:9f:15:ae:8e:30:2d:a5:6a:7d:61:cb:0c: df:5b:70:0b:2f:1a:70:dd:02:8b:32:3c:47:46:4c:95:de:25: e8:9e:70:82:15:d8:85:66:73:e9:4d:8c:71:0f:d3:d4:b3:5a: ca:9c:14:d6:76:0d:a8:ff:10:07:76:f8:4c:1c:c5:75:7c:a1: 34:51:45:91:37:14:95:8d:43:13:d7:a5:99:af:5b:11:37:c0: 09:7b:0d:7e:8d:e2:9d:8a:78:bf:4b:1d:26:0f:e7:47:20:95: 58:05:c9:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyRjgxMTAvBgNVBAUTKEJFQjUwRTQxMUNDM0UyQzQwNjAzQjE2QTkxNjA5RUE0 RDQwNjY0OTUwHhcNMjUwNjE0MTc0ODQxWhcNMjUwNjIxMTc0ODQxWjAYMRYwFAYD VQQDEw02ODRkYjVmYS1hNDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxsIEJE+7SLz1YesSK+Vvl9e3eF6z8BNk14cYUy+ScPUkfFf0wzd644uyAjZ IhhDtxVyV1Vz9i0aNJksvbWNbiMACtnj6UEdmndOd4I2/WygmsJdEL7irL0UaP1O MqzGNS2fG2ta/DeQy2rJ535tkPkKClrSatJZGVTfhmbHQxBRuzPyx43sogxYwsv9 Wwcd5NfUICQqZGWJxEg4FdCy8w19djJCpKmxtXiT4Bn59TOsnfxnYZhbzT0cDz6h BS6+2B9s2+CGB2DHBp6tqKf8dhOuNzwXJbBkBB6tm+UJ0EqH8LQxwkJUwFGQ3KM9 OqC98fJC8ko3CKzlmeQwh/nwTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIIiYbco DbyyFfv9hxKGmsDCZmHQMB8GA1UdIwQYMBaAFL61DkEcw+LEBgOxapFgnqTUBmSV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjJGOC9ERkVFNjFERUI5 OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRzUUdBN0Zxa1dDZXBOUUda SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyVU9RUnpENHNRR0E3RnFrV0NlcE5RR1pKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjJGOC9ERkVFNjFERUI5OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRz UUdBN0Zxa1dDZXBOUUdaSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdR3aLg40XyoO24G8uBksE4SQlhheYMrZa19vI1dW4d97GhKF/m3fh IHqgfvLJs16sHXPMnMfiinSiwn9M6vqRLMX8oYtKbzjGC/pDnAcCvR133fFjQfL5 1V7IgoGYiMb+hpZOjRbkLSJFBlMaugMijbfgY8i7jL81Eqa25ykaqAChUZWvxVi5 gNlElH2WQGMSONMB7gifFa6OMC2lan1hywzfW3ALLxpw3QKLMjxHRkyV3iXonnCC FdiFZnPpTYxxD9PUs1rKnBTWdg2o/xAHdvhMHMV1fKE0UUWRNxSVjUMT16WZr1sR N8AJew1+jeKdini/Sx0mD+dHIJVYBclb -----END CERTIFICATE-----Generated at Sun Jun 15 08:51:22 2025 by rpki-client