$ rpki-client -vvf rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft File: vUxEHwLHrdQvpiQugzHZP1nlGDo.mft (raw, json) Hash identifier: J75QQa1SPy3ZR2aUCu/+982RyVZDOjipl+hDYJpX360= Subject key identifier: 2B:92:C9:D5:74:07:21:1F:07:1E:92:6C:59:A6:4C:17:D1:93:57:0F Authority key identifier: BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A Certificate issuer: /CN=A91C67F9/serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft Manifest number: 01CF Signing time: Tue 17 Jun 2025 02:03:40 +0000 Manifest this update: Tue 17 Jun 2025 02:03:39 +0000 Manifest next update: Tue 24 Jun 2025 02:03:39 +0000 Files and hashes: 1: vUxEHwLHrdQvpiQugzHZP1nlGDo.crl (hash: VObfBW8QKdpJrIPeHy0E8ObNCXO+CQ/zHAOsNb5+sZg=) 2: 079523028DB211ED910C330CC4F9AE02.roa (hash: W9Hoie4kNxclHpEMWbcvds2qMQa9C1Hni+pmtAE5bWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 02:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C67F9, serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A Validity Not Before: Jun 17 02:03:39 2025 GMT Not After : Jun 24 02:03:39 2025 GMT Subject: CN=6850ccfb-92c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:18:2c:64:dc:31:dc:17:ed:01:e8:e2:c2:af: a3:4a:b0:df:ee:2c:90:7c:94:dc:59:ae:cf:60:5d: 86:a3:0b:9f:ba:06:f2:80:b9:1b:ab:e0:ae:cd:21: e3:76:25:a9:ec:e6:41:8b:c3:0e:84:4c:75:82:a2: a3:6e:21:6f:fd:90:e2:f4:9d:d8:c6:78:b1:5c:cf: 5e:71:47:9e:d9:eb:28:d6:b9:48:b1:a4:f8:73:41: d2:20:96:bc:38:c5:62:78:ed:d0:f3:03:cd:9e:3b: 8d:2b:32:57:01:a6:f9:0d:95:87:e3:b1:3b:c7:95: 81:f5:aa:33:f0:07:dc:c4:e8:af:dd:3f:9d:10:88: ad:74:c2:84:87:f5:de:9e:89:9d:3c:60:00:41:ad: ea:d5:94:a1:02:33:0d:45:d2:18:39:7b:a7:60:17: ad:a3:8a:fe:6e:70:ae:65:82:62:6b:9c:e3:3c:c9: f1:5d:f5:db:59:4d:11:71:88:96:f6:0b:94:ac:9d: 89:03:55:6e:04:b5:9e:e2:0f:13:41:e8:f9:95:c2: 22:7f:02:c1:d3:e8:0e:69:80:46:b8:88:ef:39:9c: 3f:15:fd:22:b5:29:ba:f6:a1:e4:b7:52:9d:e3:d8: 8a:98:f6:a5:59:05:7f:9c:d0:34:e7:46:59:64:dd: b8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:92:C9:D5:74:07:21:1F:07:1E:92:6C:59:A6:4C:17:D1:93:57:0F X509v3 Authority Key Identifier: keyid:BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:2e:19:d9:bf:bd:b5:d4:42:52:3d:ea:71:2a:99:c9:2d:e5: 78:a4:e8:84:73:bd:26:14:0f:e9:a7:00:bb:4e:fa:06:b2:e8: 34:d3:4c:33:23:a5:cc:a7:bb:4a:11:0d:32:ea:62:2f:b5:ff: 1e:17:a9:ee:58:f2:c8:d9:fe:70:74:f1:ba:07:f1:fe:ad:a1: c3:0c:0c:19:13:29:c4:47:e3:0b:d4:80:c6:2c:67:0b:8b:6a: 07:c9:01:55:04:35:98:d9:fc:10:09:61:77:8b:2f:58:6e:84: 56:96:ec:88:9a:4b:56:88:56:5f:a7:73:f6:2b:6b:b1:4a:ec: 01:4b:3a:fc:89:5c:4e:eb:21:49:26:0a:53:e3:bc:c6:54:92: ac:9e:43:3f:32:9a:29:b0:b8:7c:38:7b:11:58:35:a8:64:96: fe:ec:89:c6:32:75:43:74:8d:fd:a9:5b:4c:b4:2f:7c:72:0c: 0c:d8:45:71:ab:1c:5e:03:6a:7a:d6:7d:30:42:8f:55:95:28: ca:05:0b:8a:59:cb:8d:27:d0:0c:1e:34:7a:0e:d0:64:7d:b4: 8a:94:5e:75:11:a0:bf:a0:46:4c:59:68:1b:b5:69:f8:4a:73: 71:93:79:d6:a0:3e:e5:09:47:f8:c1:94:b9:bb:e0:10:4b:2b: c3:99:1f:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY3RjkxMTAvBgNVBAUTKEJENEM0NDFGMDJDN0FERDQyRkE2MjQyRTgzMzFEOTNG NTlFNTE4M0EwHhcNMjUwNjE3MDIwMzM5WhcNMjUwNjI0MDIwMzM5WjAYMRYwFAYD VQQDEw02ODUwY2NmYi05MmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5hgsZNwx3BftAejiwq+jSrDf7iyQfJTcWa7PYF2GowufugbygLkbq+CuzSHj diWp7OZBi8MOhEx1gqKjbiFv/ZDi9J3YxnixXM9ecUee2eso1rlIsaT4c0HSIJa8 OMVieO3Q8wPNnjuNKzJXAab5DZWH47E7x5WB9aoz8AfcxOiv3T+dEIitdMKEh/Xe nomdPGAAQa3q1ZShAjMNRdIYOXunYBeto4r+bnCuZYJia5zjPMnxXfXbWU0RcYiW 9guUrJ2JA1VuBLWe4g8TQej5lcIifwLB0+gOaYBGuIjvOZw/Ff0itSm69qHkt1Kd 49iKmPalWQV/nNA050ZZZN24MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuSydV0 ByEfBx6SbFmmTBfRk1cPMB8GA1UdIwQYMBaAFL1MRB8Cx63UL6YkLoMx2T9Z5Rg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjdGOS9FQUUxMkU0NDhE QUQxMUVEQjJEQ0M0ODdDNEY5QUUwMi92VXhFSHdMSHJkUXZwaVF1Z3pIWlAxbmxH RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZVeEVId0xIcmRRdnBpUXVnekhaUDFubEdEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjdGOS9FQUUxMkU0NDhEQUQxMUVEQjJEQ0M0ODdDNEY5QUUwMi92VXhFSHdMSHJk UXZwaVF1Z3pIWlAxbmxHRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7LhnZv7211EJSPepxKpnJLeV4pOiEc70mFA/ppwC7TvoGsug000wz I6XMp7tKEQ0y6mIvtf8eF6nuWPLI2f5wdPG6B/H+raHDDAwZEynER+ML1IDGLGcL i2oHyQFVBDWY2fwQCWF3iy9YboRWluyImktWiFZfp3P2K2uxSuwBSzr8iVxO6yFJ JgpT47zGVJKsnkM/MpopsLh8OHsRWDWoZJb+7InGMnVDdI39qVtMtC98cgwM2EVx qxxeA2p61n0wQo9VlSjKBQuKWcuNJ9AMHjR6DtBkfbSKlF51EaC/oEZMWWgbtWn4 SnNxk3nWoD7lCUf4wZS5u+AQSyvDmR8X -----END CERTIFICATE-----Generated at Tue Jun 17 09:27:02 2025 by rpki-client