$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json) Hash identifier: WDTKDkRAMY8UBpPQrC7Cr8DJzU6Mn7qX6rcTt2abRoM= Subject key identifier: D2:4E:97:21:88:7D:5B:F1:F3:52:B8:7A:2E:4B:AB:E0:84:7C:2C:FB Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 34DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft Manifest number: 34B7 Signing time: Sat 14 Jun 2025 14:37:07 +0000 Manifest this update: Sat 14 Jun 2025 14:37:07 +0000 Manifest next update: Sat 21 Jun 2025 14:37:07 +0000 Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: XmWlsENhe1zg4DKLEnwL0vgm/qu1eCzh2fSQIZZkUjM=) 2: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: B6iIcDp1e+xSTCgDaU39YslsY3oYKHC1G8nj3LY3fyg=) 3: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: 3yE7jzzRRf/nsUpYCxz901DViCqtx9fcvzcGq8i3VT0=) 4: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: iBQaFzR8EsNKfOhQyR2WaqwTnXNt65iEA7xvcPEERlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13530 (0x34da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: Jun 14 14:37:07 2025 GMT Not After : Jun 21 14:37:07 2025 GMT Subject: CN=684d8913-bcb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:75:20:65:c0:dc:5f:55:c7:6b:4f:8d:ab:99: 48:a5:2f:33:ea:fe:7e:a4:44:31:7e:e1:6e:5a:66: a3:c5:cd:41:ec:ac:d8:43:d6:b8:35:4e:74:06:66: 24:5e:98:a0:aa:22:f3:05:e2:38:b4:ad:7a:b7:7d: e9:b8:0b:b9:2c:ac:92:3e:7d:e3:f1:79:36:65:4a: 76:34:7c:3c:ea:3e:19:16:dd:b4:c9:06:ed:d2:95: 7c:32:49:43:2a:e2:c0:1e:aa:38:ba:4a:44:d4:cd: d9:45:41:69:e5:a5:fa:4e:fd:b5:ff:3c:f2:57:cc: f4:a9:b1:7d:68:b7:2c:70:e6:b4:0f:42:44:ab:c5: bb:4b:88:c9:e6:b9:71:6a:86:58:4f:13:ed:04:5e: 44:a8:b2:67:f4:d3:ca:f3:8a:36:e5:80:65:e2:8a: d9:d3:5a:f0:4d:03:46:e2:10:12:a7:0c:c3:fd:36: 8a:8c:51:91:09:04:b0:6c:b7:82:fb:6d:c0:5f:47: f5:72:5d:a9:fe:0d:3e:59:af:a7:36:6b:04:b4:e1: 16:cd:83:39:f3:2b:c5:c0:d6:54:df:69:ff:97:90: 25:d6:c6:ce:13:7d:b2:06:de:35:9d:4f:61:f0:68: 91:b5:cf:60:cd:99:19:6a:42:f3:7e:26:0c:73:fa: 0e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4E:97:21:88:7D:5B:F1:F3:52:B8:7A:2E:4B:AB:E0:84:7C:2C:FB X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:be:7a:a1:f5:a5:3c:55:c2:81:7b:b7:51:32:b1:2e:e3:3a: cd:14:74:48:85:f5:cd:f7:b9:2b:0e:21:f8:29:28:56:6f:dd: c6:7a:10:8c:1c:de:31:90:f7:a8:f7:7e:4a:fc:bf:05:bb:fb: 1a:2d:08:fa:3f:6e:cf:c5:7b:91:5a:37:56:5e:bd:5d:fc:51: b0:1c:74:27:b7:14:51:e8:51:c2:60:bf:3e:f1:ea:03:e9:59: 1a:65:70:cf:88:79:5d:25:94:55:5a:63:72:36:8d:03:72:c3: 7c:8e:9c:ff:32:22:e9:39:71:1e:fe:a5:4d:f3:95:d2:85:00: 6c:43:e2:93:07:a7:d0:b3:20:4a:2f:8d:25:b7:76:91:5d:69: 45:4c:c2:3b:2a:38:e8:c3:ab:f3:4c:ea:d2:9b:c1:b3:7c:a9: 39:5e:af:5c:dc:27:54:bc:3c:86:c3:9d:0a:25:f9:f3:05:99: b8:f7:38:30:02:16:81:a3:87:13:fc:7f:d0:bb:3f:d4:a0:0f: f5:af:6f:a9:d0:a5:fd:e9:7d:a7:13:a0:45:35:4b:75:34:bb: 93:5b:ce:d2:05:6a:e8:52:1e:aa:47:94:3e:c0:8a:c7:44:42: c2:19:fd:9d:91:55:18:96:65:0a:1e:1d:67:e0:91:74:c7:77: de:e7:64:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjUwNjE0MTQzNzA3WhcNMjUwNjIxMTQzNzA3WjAYMRYwFAYD VQQDEw02ODRkODkxMy1iY2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXUgZcDcX1XHa0+Nq5lIpS8z6v5+pEQxfuFuWmajxc1B7KzYQ9a4NU50BmYk XpigqiLzBeI4tK16t33puAu5LKySPn3j8Xk2ZUp2NHw86j4ZFt20yQbt0pV8MklD KuLAHqo4ukpE1M3ZRUFp5aX6Tv21/zzyV8z0qbF9aLcscOa0D0JEq8W7S4jJ5rlx aoZYTxPtBF5EqLJn9NPK84o25YBl4orZ01rwTQNG4hASpwzD/TaKjFGRCQSwbLeC +23AX0f1cl2p/g0+Wa+nNmsEtOEWzYM58yvFwNZU32n/l5Al1sbOE32yBt41nU9h 8GiRtc9gzZkZakLzfiYMc/oOUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJOlyGI fVvx81K4ei5Lq+CEfCz7MB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ4Ri84QzgxQTg1NjFEOEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdj WlVZeTZMNkE2Ny1mLTFaUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcvnqh9aU8VcKBe7dRMrEu4zrNFHRIhfXN97krDiH4KShWb93GehCM HN4xkPeo935K/L8Fu/saLQj6P27PxXuRWjdWXr1d/FGwHHQntxRR6FHCYL8+8eoD 6VkaZXDPiHldJZRVWmNyNo0DcsN8jpz/MiLpOXEe/qVN85XShQBsQ+KTB6fQsyBK L40lt3aRXWlFTMI7Kjjow6vzTOrSm8GzfKk5Xq9c3CdUvDyGw50KJfnzBZm49zgw AhaBo4cT/H/Quz/UoA/1r2+p0KX96X2nE6BFNUt1NLuTW87SBWroUh6qR5Q+wIrH RELCGf2dkVUYlmUKHh1n4JF0x3fe52Sv -----END CERTIFICATE-----Generated at Sun Jun 15 07:06:32 2025 by rpki-client