$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft File: vK5XMu8hlzK0msgoTbGBTpLIaxE.mft (raw, json) Hash identifier: XuobpIGqNaC9TX8Q0dPv1Bq+AmuZhPCJHswHUagF5dE= Subject key identifier: 86:DA:B2:A7:60:00:E5:36:7B:57:A1:F7:5D:DC:A3:BE:53:05:25:A7 Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 Certificate issuer: /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Certificate serial: 0892 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft Manifest number: 0884 Signing time: Mon 16 Jun 2025 20:25:51 +0000 Manifest this update: Mon 16 Jun 2025 20:25:50 +0000 Manifest next update: Mon 23 Jun 2025 20:25:50 +0000 Files and hashes: 1: vK5XMu8hlzK0msgoTbGBTpLIaxE.crl (hash: y30p0BUPy4uw+D9N6KF2RAUEYqB6THAM8VRHvcThUCQ=) 2: 2015E6B2C66F11EAA0B1B019C4F9AE02.roa (hash: h3J4Tvd13De8oeu9y10qw5WhotHnj9E107WlmlhLTLE=) 3: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (hash: WRLRqvOq3SfDppm3IqDFX7iVTIlxw9qpmPcVf6+EH5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 20:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2194 (0x892) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Validity Not Before: Jun 16 20:25:50 2025 GMT Not After : Jun 23 20:25:50 2025 GMT Subject: CN=68507dce-80dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:72:1b:07:3b:cc:47:66:80:e7:4a:37:95:9e: fe:e3:b2:4d:ac:36:69:45:65:d4:27:e8:49:3a:01: 1a:06:8b:8c:91:54:88:4a:67:9f:f5:3f:44:b0:4e: 92:0f:bf:4a:62:91:bf:d8:e8:29:43:e9:58:71:54: 6f:77:8a:ad:ea:a3:8a:47:80:7c:55:eb:f7:c2:9b: 9f:2b:eb:8c:7c:e8:f1:bb:08:db:da:4a:f8:96:4e: d3:43:6c:8a:86:db:49:cb:b0:00:b7:98:0c:1b:1f: 9c:83:c9:b6:16:66:f5:7d:f9:0d:a5:a2:fb:cd:47: 2f:e8:09:ee:88:85:00:8c:80:2d:19:c2:f5:30:9b: be:b6:2e:c1:05:dc:bf:cc:ba:aa:1c:b7:70:49:c1: a1:e1:06:83:c2:66:2c:c1:81:7a:1d:43:ab:3b:81: d7:7c:e3:e6:42:ff:14:48:b7:50:ef:43:55:3f:75: 95:c3:28:3f:9a:30:ca:a2:cc:0f:60:bb:99:91:4e: fc:72:93:39:2b:f3:85:57:02:bc:73:f9:a3:04:e9: 28:72:a5:f8:90:3a:b8:5d:b9:99:15:2a:7a:8d:4f: 73:37:6a:6a:29:57:85:b5:9a:a0:20:a9:38:52:44: 97:ec:7a:37:03:c1:15:19:a4:d8:10:59:5a:b0:1e: 26:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DA:B2:A7:60:00:E5:36:7B:57:A1:F7:5D:DC:A3:BE:53:05:25:A7 X509v3 Authority Key Identifier: keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:43:e6:e8:0f:1d:ee:72:48:31:6b:70:cd:e2:d4:7e:7b:fe: 6f:8e:f9:cb:5b:1b:e1:9b:65:21:d0:4a:71:6e:8f:46:2c:e1: 66:54:20:f3:5b:e3:5b:fb:a1:b9:66:63:43:11:1b:de:2c:a5: 05:be:80:77:f2:ab:a5:ce:d6:98:ed:8a:ba:29:46:3f:c1:45: 63:96:ae:9e:8e:6a:49:cf:62:94:17:05:b4:6f:26:10:55:56: b0:d5:61:b2:51:50:ee:91:85:d3:cd:11:0a:c9:b3:5d:4d:d6: 57:9f:83:90:a6:f2:60:f4:7e:eb:91:1f:37:4b:eb:46:cc:ce: a5:57:ae:7a:31:39:67:50:80:54:f3:a2:6d:7a:2b:48:b7:5c: 65:fa:9a:98:0f:84:2f:f6:12:4a:9b:be:14:ae:6c:f7:a6:64: 8c:16:19:f9:b4:d3:7d:86:04:2d:59:13:15:08:5e:dd:b6:08: 6e:26:d1:63:3a:33:8f:b3:f1:9c:ee:2a:67:58:87:ef:2c:55: 94:16:59:0e:05:1e:9b:8f:33:3e:67:10:56:be:11:c2:1f:dc: 76:81:47:1e:a3:f7:cf:33:b7:5e:3b:73:bf:19:35:a1:cf:c0: 8f:9e:cb:85:d7:51:ee:10:06:2b:58:e5:0a:22:51:78:39:38: d7:56:5f:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1M0IxMTAvBgNVBAUTKEJDQUU1NzMyRUYyMTk3MzJCNDlBQzgyODREQjE4MTRF OTJDODZCMTEwHhcNMjUwNjE2MjAyNTUwWhcNMjUwNjIzMjAyNTUwWjAYMRYwFAYD VQQDEw02ODUwN2RjZS04MGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XIbBzvMR2aA50o3lZ7+47JNrDZpRWXUJ+hJOgEaBouMkVSISmef9T9EsE6S D79KYpG/2OgpQ+lYcVRvd4qt6qOKR4B8Vev3wpufK+uMfOjxuwjb2kr4lk7TQ2yK httJy7AAt5gMGx+cg8m2Fmb1ffkNpaL7zUcv6AnuiIUAjIAtGcL1MJu+ti7BBdy/ zLqqHLdwScGh4QaDwmYswYF6HUOrO4HXfOPmQv8USLdQ70NVP3WVwyg/mjDKoswP YLuZkU78cpM5K/OFVwK8c/mjBOkocqX4kDq4XbmZFSp6jU9zN2pqKVeFtZqgIKk4 UkSX7Ho3A8EVGaTYEFlasB4mLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbasqdg AOU2e1eh913co75TBSWnMB8GA1UdIwQYMBaAFLyuVzLvIZcytJrIKE2xgU6SyGsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjUzQi8yOTM4M0NERUMy MEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6SzBtc2dvVGJHQlRwTElh eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLNVhNdThobHpLMG1zZ29UYkdCVHBMSWF4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjUzQi8yOTM4M0NERUMyMEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6 SzBtc2dvVGJHQlRwTElheEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5Q+boDx3uckgxa3DN4tR+e/5vjvnLWxvhm2Uh0Epxbo9GLOFmVCDz W+Nb+6G5ZmNDERveLKUFvoB38qulztaY7Yq6KUY/wUVjlq6ejmpJz2KUFwW0byYQ VVaw1WGyUVDukYXTzREKybNdTdZXn4OQpvJg9H7rkR83S+tGzM6lV656MTlnUIBU 86JteitIt1xl+pqYD4Qv9hJKm74Urmz3pmSMFhn5tNN9hgQtWRMVCF7dtghuJtFj OjOPs/Gc7ipnWIfvLFWUFlkOBR6bjzM+ZxBWvhHCH9x2gUceo/fPM7deO3O/GTWh z8CPnsuF11HuEAYrWOUKIlF4OTjXVl9L -----END CERTIFICATE-----Generated at Tue Jun 17 05:00:16 2025 by rpki-client