$ rpki-client -vvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft File: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft (raw, json) Hash identifier: npOt3gFLucNSNHRHD18aJcuzsFVikhCyDhX6Yb+JVWI= Subject key identifier: 78:85:FA:D5:91:57:17:99:38:39:CB:5D:F6:32:3C:CC:E8:83:85:8C Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 Certificate issuer: /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft Manifest number: 38 Signing time: Sun 15 Jun 2025 06:42:30 +0000 Manifest this update: Sun 15 Jun 2025 06:42:29 +0000 Manifest next update: Sun 22 Jun 2025 06:42:29 +0000 Files and hashes: 1: vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl (hash: L/zzLe2UUfNKD3JQHnOUvei3gxU7ENLiSYilnJegNa0=) 2: 3FCB43D2FB2911EF8A116D76C4F9AE02.roa (hash: CFjfwtbnARFkiBTSkHxcw566lVz+R0FjE0lSqqgVvOk=) 3: 563F3D581F3C11F09F3C7F40C4F9AE02.roa (hash: YKwfhn84elYu/Y8KsthWeHLfxYMDii6IqoqFACcb2JY=) 4: 362EF79CFB2911EF8C103876C4F9AE02.roa (hash: Ar+onOWOPH7xuawAkKNR4USGgISAZHmjzcJHYy39Fms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99 Validity Not Before: Jun 15 06:42:29 2025 GMT Not After : Jun 22 06:42:29 2025 GMT Subject: CN=684e6b55-ad88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:55:d0:48:27:1e:bd:2c:65:f8:09:5a:59:6f: da:57:d4:50:94:7e:08:d8:d9:75:d7:1f:4b:27:1b: 1c:8e:8f:dd:43:e5:59:a8:6b:22:11:80:a1:4f:30: f2:b2:45:45:37:ca:fe:fe:c2:11:d1:2b:4c:c8:65: a7:3e:bd:03:05:f1:92:d8:e5:f8:77:a9:02:42:f4: 1b:9b:b6:e5:c8:2b:e1:56:70:f9:13:97:20:14:f2: 48:0d:8b:ce:74:d1:02:80:a7:f2:25:13:48:33:62: 1e:5e:13:16:39:b0:1b:f3:89:d2:b1:cd:34:23:3a: 48:55:f8:6a:d7:86:a8:58:2d:bd:29:86:3c:2a:b4: 0b:c2:03:1e:37:2a:38:6b:ba:35:0b:5d:d3:a2:7d: df:29:a5:df:3e:90:65:de:a1:91:88:f9:e5:98:8f: d7:6c:65:c6:08:60:15:74:ff:f2:7d:00:7f:fb:11: cd:f1:40:86:be:29:49:8f:42:a4:65:1e:e6:d3:0d: 50:03:cd:e2:f1:2a:f5:88:76:12:80:e0:63:54:3a: 33:37:28:4e:ae:f3:83:54:62:5b:e6:c7:b8:a9:73: f4:dd:cd:74:6f:b4:fd:a1:dc:21:e3:3e:fe:b0:1b: 76:0d:c0:18:aa:36:e3:82:c7:bb:a6:0a:b4:fd:dd: 7a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:85:FA:D5:91:57:17:99:38:39:CB:5D:F6:32:3C:CC:E8:83:85:8C X509v3 Authority Key Identifier: keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e3:cf:76:3b:09:15:a6:a3:b2:c6:26:94:fb:48:5f:4e:2b: 76:6a:20:0e:b8:49:9b:18:44:3c:ed:93:5b:0e:21:dd:e7:94: 1f:df:bd:00:7c:b2:13:17:a5:48:7f:b6:03:05:74:75:4e:51: dc:a7:48:f1:68:35:78:7a:14:0e:72:82:82:8b:e2:ed:44:3c: 57:cb:18:5e:a1:0e:b9:ee:4a:e2:34:fa:5e:9d:82:77:47:27: 2f:c9:ed:12:1f:8a:52:c9:53:6e:f7:e6:50:7f:01:9a:a2:ef: 09:3a:6e:9d:f5:3a:34:35:2c:89:3e:47:6e:10:38:01:4c:5f: f1:da:cf:c6:0c:39:bd:64:89:b4:80:b2:72:d2:cf:7e:c2:e6: 1b:43:2c:69:17:e2:7f:a3:3e:6c:c7:8e:b0:65:8c:c8:f5:88: 25:48:68:f5:d2:37:fe:9e:83:c3:7e:3e:0e:f9:72:92:2e:16: 6a:76:4d:0f:eb:cf:88:3d:31:e8:af:78:f7:22:65:26:10:02: 53:4d:13:f1:fb:4c:c0:2c:ef:62:61:85:dc:19:3d:f8:b5:63: fb:5c:9e:ea:33:d6:cc:6f:7d:71:20:f1:d7:d3:5a:de:68:c1: 1e:31:ed:56:95:95:35:54:12:10:d5:50:b0:14:5b:36:fa:4e: b7:45:36:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RjAyNjExMC8GA1UEBRMoQkQ3OUFDNzY0MEM5NTVDNDM1QzhDRjU1QzI5MUYxMjJC NzBFMkY5OTAeFw0yNTA2MTUwNjQyMjlaFw0yNTA2MjIwNjQyMjlaMBgxFjAUBgNV BAMTDTY4NGU2YjU1LWFkODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMVdBIJx69LGX4CVpZb9pX1FCUfgjY2XXXH0snGxyOj91D5VmoayIRgKFPMPKy RUU3yv7+whHRK0zIZac+vQMF8ZLY5fh3qQJC9BubtuXIK+FWcPkTlyAU8kgNi850 0QKAp/IlE0gzYh5eExY5sBvzidKxzTQjOkhV+GrXhqhYLb0phjwqtAvCAx43Kjhr ujULXdOifd8ppd8+kGXeoZGI+eWYj9dsZcYIYBV0//J9AH/7Ec3xQIa+KUmPQqRl HubTDVADzeLxKvWIdhKA4GNUOjM3KE6u84NUYlvmx7ipc/TdzXRvtP2h3CHjPv6w G3YNwBiqNuOCx7umCrT93XrrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeIX61ZFX F5k4Octd9jI8zOiDhYwwHwYDVR0jBBgwFoAUvXmsdkDJVcQ1yM9VwpHxIrcOL5kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGMDI2LzNCQUFBQzQ0RkIy ODExRUY5NTlGQzc3NEM0RjlBRTAyL3ZYbXNka0RKVmNRMXlNOVZ3cEh4SXJjT0w1 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdlhtc2RrREpWY1ExeU05VndwSHhJcmNPTDVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG MDI2LzNCQUFBQzQ0RkIyODExRUY5NTlGQzc3NEM0RjlBRTAyL3ZYbXNka0RKVmNR MXlNOVZ3cEh4SXJjT0w1ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC7jz3Y7CRWmo7LGJpT7SF9OK3ZqIA64SZsYRDztk1sOId3nlB/fvQB8 shMXpUh/tgMFdHVOUdynSPFoNXh6FA5ygoKL4u1EPFfLGF6hDrnuSuI0+l6dgndH Jy/J7RIfilLJU2735lB/AZqi7wk6bp31OjQ1LIk+R24QOAFMX/Haz8YMOb1kibSA snLSz37C5htDLGkX4n+jPmzHjrBljMj1iCVIaPXSN/6eg8N+Pg75cpIuFmp2TQ/r z4g9MeivePciZSYQAlNNE/H7TMAs72JhhdwZPfi1Y/tcnuoz1sxvfXEg8dfTWt5o wR4x7VaVlTVUEhDVULAUWzb6TrdFNsc= -----END CERTIFICATE-----Generated at Sun Jun 15 09:55:05 2025 by rpki-client