$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft File: vxobyMAsIDYtD9n5K8AGoolejIA.mft (raw, json) Hash identifier: Y1JTgZC+8E4T/vhMbcgWbxAseWYPE8FtEw2X0rKKyl4= Subject key identifier: 69:EC:93:71:3C:76:24:DB:12:CF:1F:A3:D6:F7:B4:0F:99:2D:82:B6 Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80 Certificate issuer: /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80 Certificate serial: 07A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft Manifest number: 07A1 Signing time: Mon 16 Jun 2025 21:02:01 +0000 Manifest this update: Mon 16 Jun 2025 21:02:01 +0000 Manifest next update: Mon 23 Jun 2025 21:02:01 +0000 Files and hashes: 1: vxobyMAsIDYtD9n5K8AGoolejIA.crl (hash: v6mYcOChIsueaWUKMDL2bh0UsmeRecK10yD4H0RGyls=) 2: ABD5003E079C11EBA7C04832C4F9AE02.roa (hash: 1LIqaLcLd8sIbPgwe6w2+ZfDiBIad4OGJXBnSw3QIfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1958 (0x7a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A423B, serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80 Validity Not Before: Jun 16 21:02:01 2025 GMT Not After : Jun 23 21:02:01 2025 GMT Subject: CN=68508649-6250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a0:9e:25:60:1e:89:00:f1:41:f9:9f:26:7f: 21:c2:b8:99:1f:b9:a8:1f:b1:05:10:ed:76:63:4b: e6:77:99:96:36:bb:c5:e3:2a:d8:7a:e0:02:37:2c: 0e:d7:0d:df:47:49:ba:ea:8b:94:3a:9f:2a:fc:06: 3e:96:63:0b:56:83:f9:f3:86:6f:73:f2:4c:a9:46: 9c:ed:59:90:13:26:2a:e6:8d:80:b1:02:df:e7:ee: 4d:82:e2:50:3a:bf:f1:1c:16:a0:11:cb:5d:3b:0b: 1f:ab:9c:e4:30:28:e7:02:7f:b2:d7:e4:74:96:72: 04:23:cd:3c:81:12:c9:f7:1b:f3:6f:22:82:72:ab: 7e:fe:f9:47:e9:44:9e:b5:10:74:a4:e3:2f:cd:27: 68:79:a2:4b:c7:10:1c:1c:6e:6d:85:39:eb:d1:04: 9d:ba:52:b4:43:a5:50:e8:d9:8f:fa:a3:20:77:b2: 6a:ce:71:88:79:14:3a:7e:53:35:5a:03:a7:f6:08: e6:6b:b5:1c:c8:47:cd:a4:2c:b1:21:3e:19:11:50: 8f:9c:a5:cc:ea:f1:9f:51:b6:9e:23:2a:4b:49:24: 2d:44:a5:6c:56:b8:a3:0c:93:7b:6c:82:c4:1a:bf: 32:a1:66:f4:59:b4:ac:98:89:9d:eb:95:07:10:ae: 01:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:EC:93:71:3C:76:24:DB:12:CF:1F:A3:D6:F7:B4:0F:99:2D:82:B6 X509v3 Authority Key Identifier: keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8a:f3:42:b1:a8:a3:3b:81:3d:ee:c4:6a:1b:e4:b7:e0:e5: ac:ec:b7:00:14:e5:76:4d:f2:98:35:00:40:63:85:b7:2c:68: 98:dd:43:bf:b0:23:17:91:60:4c:91:90:2a:76:26:56:e7:25: 1d:6e:ed:72:16:82:c6:8a:fb:5b:6d:c3:38:3a:91:06:28:ee: b4:21:c7:89:84:60:92:45:46:04:ce:71:62:99:f8:ca:55:6a: 2c:91:1c:fb:ad:8b:1e:21:78:b9:46:18:f8:74:5e:ff:cc:88: b3:6d:5e:3d:ba:b5:f2:f6:91:fa:5a:b3:0b:5e:84:0f:f1:e6: e9:ef:1b:b5:c7:dc:c6:8c:db:fa:02:19:84:fc:ec:74:f4:fc: 70:15:d9:ed:34:6a:96:1b:ba:b8:e6:41:95:ad:99:12:a5:e3: d7:00:b5:f8:94:e1:2f:51:74:24:be:ad:6b:c0:47:74:fe:da: 32:2a:13:5f:65:59:8b:a3:59:fd:16:7b:7e:97:de:a6:04:55: f3:d3:32:02:51:53:c4:d3:54:a6:2e:11:be:75:98:3d:3f:62: 15:6d:55:eb:64:d0:b8:bc:5e:ca:2f:e1:28:0e:11:26:4a:a8: 14:77:02:ef:d5:d6:10:dd:27:13:84:e4:c4:f1:a9:6e:02:73: ef:63:09:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyM0IxMTAvBgNVBAUTKEJGMUExQkM4QzAyQzIwMzYyRDBGRDlGOTJCQzAwNkEy ODk1RThDODAwHhcNMjUwNjE2MjEwMjAxWhcNMjUwNjIzMjEwMjAxWjAYMRYwFAYD VQQDEw02ODUwODY0OS02MjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KCeJWAeiQDxQfmfJn8hwriZH7moH7EFEO12Y0vmd5mWNrvF4yrYeuACNywO 1w3fR0m66ouUOp8q/AY+lmMLVoP584Zvc/JMqUac7VmQEyYq5o2AsQLf5+5NguJQ Or/xHBagEctdOwsfq5zkMCjnAn+y1+R0lnIEI808gRLJ9xvzbyKCcqt+/vlH6USe tRB0pOMvzSdoeaJLxxAcHG5thTnr0QSdulK0Q6VQ6NmP+qMgd7JqznGIeRQ6flM1 WgOn9gjma7UcyEfNpCyxIT4ZEVCPnKXM6vGfUbaeIypLSSQtRKVsVrijDJN7bILE Gr8yoWb0WbSsmImd65UHEK4BYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnsk3E8 diTbEs8fo9b3tA+ZLYK2MB8GA1UdIwQYMBaAFL8aG8jALCA2LQ/Z+SvABqKJXoyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDIzQi9BRjc1NkI5NDA3 OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lEWXREOW41SzhBR29vbGVq SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z4b2J5TUFzSURZdEQ5bjVLOEFHb29sZWpJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDIzQi9BRjc1NkI5NDA3OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lE WXREOW41SzhBR29vbGVqSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPivNCsaijO4E97sRqG+S34OWs7LcAFOV2TfKYNQBAY4W3LGiY3UO/ sCMXkWBMkZAqdiZW5yUdbu1yFoLGivtbbcM4OpEGKO60IceJhGCSRUYEznFimfjK VWoskRz7rYseIXi5Rhj4dF7/zIizbV49urXy9pH6WrMLXoQP8ebp7xu1x9zGjNv6 AhmE/Ox09PxwFdntNGqWG7q45kGVrZkSpePXALX4lOEvUXQkvq1rwEd0/toyKhNf ZVmLo1n9Fnt+l96mBFXz0zICUVPE01SmLhG+dZg9P2IVbVXrZNC4vF7KL+EoDhEm SqgUdwLv1dYQ3ScThOTE8aluAnPvYwm6 -----END CERTIFICATE-----Generated at Wed Jun 18 01:49:43 2025 by rpki-client