$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft File: VNOpVcw0GoQYFajN6hkK6lEC384.mft (raw, json) Hash identifier: M/jNicmhGUlYyJMupT54OKsX1RXA0CSabME5f30WNS8= Subject key identifier: E4:54:94:54:E8:45:99:B4:26:30:72:31:11:E0:76:35:15:25:2A:AE Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE Certificate issuer: /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Certificate serial: 0C4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft Manifest number: 0C46 Signing time: Wed 18 Jun 2025 18:21:37 +0000 Manifest this update: Wed 18 Jun 2025 18:21:37 +0000 Manifest next update: Wed 25 Jun 2025 18:21:37 +0000 Files and hashes: 1: VNOpVcw0GoQYFajN6hkK6lEC384.crl (hash: kxOA6CxJ6OlMSxj8ON1k0TyOgJuTqQwWMPdWzA8vlkk=) 2: 86B7FE9005FF11EAB499A845C4F9AE02.roa (hash: zdVWhh1fLYpRD960eUnMlAOzWPZg7F1+V76js4O1Hfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 18:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3148 (0xc4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FAC, serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Validity Not Before: Jun 18 18:21:37 2025 GMT Not After : Jun 25 18:21:37 2025 GMT Subject: CN=685303b1-1d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:91:08:7a:b4:d1:20:9e:60:29:6d:4b:36:a0: 3e:46:45:d0:ec:ac:da:a5:dd:3a:a4:83:81:33:93: 3a:d8:2f:b8:5b:97:2f:e5:92:b2:51:75:96:c6:94: 42:62:5c:7e:06:ca:a1:2c:f7:9c:55:5e:81:70:f2: e5:6f:ca:1b:ed:fc:bb:07:74:f9:72:0f:b2:26:64: c0:a1:4e:67:aa:68:3b:44:47:ef:b8:95:ed:1b:04: f0:c6:e9:de:e3:4f:30:c6:0d:61:7f:d0:81:75:67: 7c:98:2a:fd:16:7c:76:af:b9:dd:1f:15:0e:75:81: 79:bf:bd:89:7b:bc:44:4c:8b:ef:de:7c:8a:15:b4: 08:91:10:ba:95:bf:56:9b:dd:e7:86:0e:b8:20:d2: 34:29:f7:27:74:ae:c0:57:04:09:61:58:9d:8c:5e: b4:2f:f5:78:99:98:86:37:95:41:76:70:e9:7b:45: 06:8e:8e:ee:9c:6e:3a:58:13:a8:a8:63:9c:97:72: 47:a6:ac:97:00:03:c8:c6:bb:9e:93:31:7f:b7:34: 8e:7a:cb:88:91:81:c9:e9:8f:74:98:c1:e2:97:d4: c1:d8:f3:5d:21:2d:af:e9:c5:14:8a:ab:ab:67:82: 45:c1:94:6b:61:b2:0d:74:6c:39:c7:6e:15:06:22: 6a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:54:94:54:E8:45:99:B4:26:30:72:31:11:E0:76:35:15:25:2A:AE X509v3 Authority Key Identifier: keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:df:e8:1e:09:e8:b0:3c:09:7c:5b:1b:de:14:10:60:77:b1: 74:73:0c:4f:0f:f3:1f:ea:4b:b9:92:51:98:a3:f8:50:af:99: 4a:3a:ac:e4:de:d6:8d:00:12:de:a4:2d:8e:5a:7f:62:45:ad: 36:c9:26:d2:05:85:31:ed:8d:a5:20:80:27:19:29:35:c5:67: ed:b8:95:f8:b2:3a:be:2b:e1:91:d2:af:a1:87:8a:6c:5e:b6: 57:4f:0c:a7:f9:6e:31:53:ae:ab:4a:e7:a0:a9:ed:4f:1b:ee: d2:81:ac:2e:ee:f1:76:1f:21:cf:ae:ce:7b:73:2c:7e:c6:a5: 21:97:98:df:0a:16:ce:a5:11:80:04:c3:28:88:f5:1b:6e:06: 02:3b:88:06:f9:63:31:3c:f2:4b:d8:97:35:39:23:d8:8f:cb: 7f:9e:5b:d6:2b:03:9c:60:c9:db:a0:75:53:e4:72:7f:65:49: 07:ca:1f:0d:ac:db:64:08:be:25:dd:31:4a:ab:14:5d:95:bd: a5:d4:b5:e0:fa:9b:2a:9c:d5:e2:03:ba:15:df:fb:25:56:4c: c0:06:01:78:f9:ff:02:3b:40:18:fe:18:8b:19:35:69:5c:e0: 32:99:ce:ce:d6:0f:be:1c:1d:27:ba:db:9f:b0:4f:0b:77:20: 35:f4:41:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQUMxMTAvBgNVBAUTKDU0RDNBOTU1Q0MzNDFBODQxODE1QThDREVBMTkwQUVB NTEwMkRGQ0UwHhcNMjUwNjE4MTgyMTM3WhcNMjUwNjI1MTgyMTM3WjAYMRYwFAYD VQQDEw02ODUzMDNiMS0xZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5EIerTRIJ5gKW1LNqA+RkXQ7Kzapd06pIOBM5M62C+4W5cv5ZKyUXWWxpRC Ylx+BsqhLPecVV6BcPLlb8ob7fy7B3T5cg+yJmTAoU5nqmg7REfvuJXtGwTwxune 408wxg1hf9CBdWd8mCr9Fnx2r7ndHxUOdYF5v72Je7xETIvv3nyKFbQIkRC6lb9W m93nhg64INI0KfcndK7AVwQJYVidjF60L/V4mZiGN5VBdnDpe0UGjo7unG46WBOo qGOcl3JHpqyXAAPIxruekzF/tzSOesuIkYHJ6Y90mMHil9TB2PNdIS2v6cUUiqur Z4JFwZRrYbINdGw5x24VBiJqswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORUlFTo RZm0JjByMRHgdjUVJSquMB8GA1UdIwQYMBaAFFTTqVXMNBqEGBWozeoZCupRAt/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBQy82ODE5QkY0MjA1 RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdvUVlGYWpONmhrSzZsRUMz ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZOT3BWY3cwR29RWUZhak42aGtLNmxFQzM4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZBQy82ODE5QkY0MjA1RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdv UVlGYWpONmhrSzZsRUMzODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa3+geCeiwPAl8WxveFBBgd7F0cwxPD/Mf6ku5klGYo/hQr5lKOqzk 3taNABLepC2OWn9iRa02ySbSBYUx7Y2lIIAnGSk1xWftuJX4sjq+K+GR0q+hh4ps XrZXTwyn+W4xU66rSuegqe1PG+7Sgawu7vF2HyHPrs57cyx+xqUhl5jfChbOpRGA BMMoiPUbbgYCO4gG+WMxPPJL2Jc1OSPYj8t/nlvWKwOcYMnboHVT5HJ/ZUkHyh8N rNtkCL4l3TFKqxRdlb2l1LXg+psqnNXiA7oV3/slVkzABgF4+f8CO0AY/hiLGTVp XOAymc7O1g++HB0nutufsE8LdyA19EH1 -----END CERTIFICATE-----Generated at Thu Jun 19 09:37:31 2025 by rpki-client