$ rpki-client -vvf rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft File: vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft (raw, json) Hash identifier: ojBfqqhKEdfc2wDQXn/4wZhj2KL4+88PILij+IdpeXA= Subject key identifier: 3A:66:84:9F:A1:CA:0C:E8:AB:F6:92:DB:E6:94:24:91:BE:6A:C3:3E Authority key identifier: BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37 Certificate issuer: /CN=A91943F0/serialNumber=BD92626B400BB14DE41A50539D960FC5DD61DC37 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft Manifest number: 8A Signing time: Fri 13 Jun 2025 05:26:26 +0000 Manifest this update: Fri 13 Jun 2025 05:26:26 +0000 Manifest next update: Fri 20 Jun 2025 05:26:25 +0000 Files and hashes: 1: vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl (hash: Shk/3yZrR8seNw8wLRfzO3/qGWfKHBtP9MsayLENNT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91943F0, serialNumber=BD92626B400BB14DE41A50539D960FC5DD61DC37 Validity Not Before: Jun 13 05:26:26 2025 GMT Not After : Jun 20 05:26:25 2025 GMT Subject: CN=684bb682-9fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c0:5a:f4:37:17:da:f7:07:46:26:65:bd:00: a2:7a:72:50:9b:c7:bc:cb:32:24:62:d0:85:3f:72: bb:c0:00:f4:b2:4a:61:6b:16:df:db:fd:64:bc:57: fa:02:6e:9c:22:f1:6f:55:7c:c7:9d:8f:fc:e9:fe: ca:14:e3:11:03:cc:45:33:44:8b:90:07:5b:84:f0: 3a:35:20:25:25:4f:1a:34:23:bb:c9:76:ad:5e:6b: d3:70:d2:5c:b0:b0:21:d6:a4:34:c9:84:a3:b3:24: 78:09:7c:44:0f:8d:74:67:1a:a0:5c:dc:c3:14:25: bd:b5:ba:7a:ba:2c:1a:8e:4e:6d:b3:5c:79:40:06: 33:c9:27:ef:22:d3:71:1a:f0:32:72:95:3b:cc:c1: 8e:84:66:b7:8b:8a:4d:e3:dc:ad:c7:24:9d:f1:39: 7b:4c:47:4e:8c:74:84:c9:81:24:ef:0d:c2:fb:0a: 58:94:61:3c:77:90:59:2c:43:d3:61:c3:df:09:ce: 40:80:c7:00:91:c7:57:dc:3d:f8:34:83:d0:e5:9f: ec:9f:c8:4d:ab:9f:0c:9e:b5:fb:c9:44:5f:fc:57: cc:93:7f:9d:c7:c3:67:1a:3d:e0:80:bf:13:e1:c5: f9:69:92:d8:04:21:71:3b:af:5a:fd:e5:96:48:fd: 6c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:66:84:9F:A1:CA:0C:E8:AB:F6:92:DB:E6:94:24:91:BE:6A:C3:3E X509v3 Authority Key Identifier: keyid:BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:6d:17:0c:78:73:55:99:69:fb:87:7e:bb:df:e4:7a:a9:1b: 94:81:f6:3c:e7:4b:ac:d8:b5:4d:e3:22:77:c3:45:8b:7b:3a: 94:25:97:ba:f2:26:f9:42:d8:73:91:71:b8:ec:b7:e7:93:bb: 11:5f:b4:4f:40:93:dc:4d:56:4c:40:f6:5e:e2:a7:51:9a:2d: e8:82:27:af:0a:2a:3d:7c:8d:f4:42:0f:42:4e:74:9c:5f:0c: 29:1e:65:f5:a9:af:8c:78:5e:48:95:16:a3:04:e1:6d:77:10: 99:41:2a:e4:88:05:7d:ea:c9:12:50:5e:17:44:f7:6c:5c:ff: 95:99:38:80:dd:26:8d:0d:b4:80:21:f8:88:f4:11:3b:5a:85: 16:ef:3b:e6:b8:d4:a1:07:65:db:2d:60:8e:24:a4:24:e0:98: e7:ed:7e:af:7d:47:18:6c:a4:a9:54:7d:13:28:a0:eb:39:c5: 79:30:27:d8:d3:5b:3b:80:2e:13:8f:a4:d6:88:78:8c:d6:3b: 44:51:fd:2b:59:49:2d:66:86:c7:07:97:75:f6:96:ca:08:58: 6b:77:59:db:d7:df:27:c4:69:97:81:92:93:b7:53:73:ae:44: ac:a6:be:16:b9:e0:ad:50:fc:1e:09:3e:77:0e:fe:77:1e:92: c9:1e:92:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQzRjAxMTAvBgNVBAUTKEJEOTI2MjZCNDAwQkIxNERFNDFBNTA1MzlEOTYwRkM1 REQ2MURDMzcwHhcNMjUwNjEzMDUyNjI2WhcNMjUwNjIwMDUyNjI1WjAYMRYwFAYD VQQDEw02ODRiYjY4Mi05ZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMBa9DcX2vcHRiZlvQCienJQm8e8yzIkYtCFP3K7wAD0skphaxbf2/1kvFf6 Am6cIvFvVXzHnY/86f7KFOMRA8xFM0SLkAdbhPA6NSAlJU8aNCO7yXatXmvTcNJc sLAh1qQ0yYSjsyR4CXxED410ZxqgXNzDFCW9tbp6uiwajk5ts1x5QAYzySfvItNx GvAycpU7zMGOhGa3i4pN49ytxySd8Tl7TEdOjHSEyYEk7w3C+wpYlGE8d5BZLEPT YcPfCc5AgMcAkcdX3D34NIPQ5Z/sn8hNq58MnrX7yURf/FfMk3+dx8NnGj3ggL8T 4cX5aZLYBCFxO69a/eWWSP1sjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpmhJ+h ygzoq/aS2+aUJJG+asM+MB8GA1UdIwQYMBaAFL2SYmtAC7FN5BpQU52WD8XdYdw3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDNGMC9DQTZCOTRDQzc0 RjgxMUVGQjM0Mjc5ODRDNEY5QUUwMi92WkppYTBBTHNVM2tHbEJUblpZUHhkMWgz RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZaSmlhMEFMc1Uza0dsQlRuWllQeGQxaDNEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDNGMC9DQTZCOTRDQzc0RjgxMUVGQjM0Mjc5ODRDNEY5QUUwMi92WkppYTBBTHNV M2tHbEJUblpZUHhkMWgzRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5bRcMeHNVmWn7h3673+R6qRuUgfY850us2LVN4yJ3w0WLezqUJZe6 8ib5QthzkXG47Lfnk7sRX7RPQJPcTVZMQPZe4qdRmi3ogievCio9fI30Qg9CTnSc XwwpHmX1qa+MeF5IlRajBOFtdxCZQSrkiAV96skSUF4XRPdsXP+VmTiA3SaNDbSA IfiI9BE7WoUW7zvmuNShB2XbLWCOJKQk4Jjn7X6vfUcYbKSpVH0TKKDrOcV5MCfY 01s7gC4Tj6TWiHiM1jtEUf0rWUktZobHB5d19pbKCFhrd1nb198nxGmXgZKTt1Nz rkSspr4WueCtUPweCT53Dv53HpLJHpIw -----END CERTIFICATE-----Generated at Sat Jun 14 18:02:35 2025 by rpki-client