$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft File: vz-8DaluLlE6qliBLGlLzQe43Xc.mft (raw, json) Hash identifier: jkdlw51b/G33GlBEYs0MJlkvAvbQYGLcPojR4iO0NdY= Subject key identifier: DB:1A:D3:C3:16:03:AF:34:75:D7:CD:65:8F:0E:78:90:53:A0:00:E1 Authority key identifier: BF:3F:BC:0D:A9:6E:2E:51:3A:AA:58:81:2C:69:4B:CD:07:B8:DD:77 Certificate issuer: /CN=A91C7AC5/serialNumber=BF3FBC0DA96E2E513AAA58812C694BCD07B8DD77 Certificate serial: 089B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft Manifest number: 088F Signing time: Thu 12 Jun 2025 20:21:19 +0000 Manifest this update: Thu 12 Jun 2025 20:21:19 +0000 Manifest next update: Thu 19 Jun 2025 20:21:19 +0000 Files and hashes: 1: vz-8DaluLlE6qliBLGlLzQe43Xc.crl (hash: Frfs+HFzIXZ1buT+rtHf33fQg5OupU0LI2AeoQ3k40A=) 2: 5BC42F286E9F11EC90A66E2BC4F9AE02.roa (hash: lBT7uRCySISPj1eQO8mZRZSLeeGbhioMqzJ80ai10hM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.crl rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2203 (0x89b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7AC5, serialNumber=BF3FBC0DA96E2E513AAA58812C694BCD07B8DD77 Validity Not Before: Jun 12 20:21:19 2025 GMT Not After : Jun 19 20:21:19 2025 GMT Subject: CN=684b36bf-c3a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b5:1c:8d:7c:72:33:1a:bf:83:77:32:0f:d5: bc:37:64:50:9e:f6:5d:75:2c:fc:b5:35:3b:3f:4b: c7:a5:b7:62:9f:3f:b6:50:56:d6:81:31:09:87:aa: df:d2:a6:74:a7:59:8c:91:45:d2:e9:f3:63:6f:46: ea:88:6a:7b:74:f1:e7:65:5c:65:2a:18:79:f7:0d: f6:d0:db:1b:90:7e:69:f3:0c:e5:92:69:45:c0:d3: 64:a6:28:ca:d1:77:b4:22:e9:a9:80:f9:e6:e2:08: a6:13:4b:83:0d:d2:09:e7:d9:26:ed:57:33:e3:03: 71:df:33:6c:df:d4:a0:e6:49:c8:03:f1:e5:d7:f7: 46:32:35:ca:ae:6e:2e:a0:c7:a8:e9:79:4b:92:5d: ed:55:3a:17:c7:d5:4d:f8:38:d9:3f:82:c7:b6:43: 4d:42:65:e3:70:4b:57:c6:60:c8:71:06:bf:35:c5: 44:76:34:d6:e7:ae:6d:26:15:c5:3b:ca:18:80:dd: 38:d3:73:2f:2f:04:a4:10:f0:86:c8:83:93:6b:29: eb:4a:c0:5e:35:19:01:7e:17:88:bd:9c:9f:ba:60: ff:18:4d:55:c4:ff:76:de:63:7a:06:9d:87:a4:c2: 82:b7:b6:1f:cf:5b:49:d5:ce:7c:ae:cf:3c:1a:27: 5b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1A:D3:C3:16:03:AF:34:75:D7:CD:65:8F:0E:78:90:53:A0:00:E1 X509v3 Authority Key Identifier: keyid:BF:3F:BC:0D:A9:6E:2E:51:3A:AA:58:81:2C:69:4B:CD:07:B8:DD:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c4:6b:fb:2c:c0:ca:33:e5:18:b8:4b:13:1d:2c:13:59:20: 88:d0:37:68:5c:15:4a:2a:88:50:b3:44:cf:8e:60:d5:1f:55: ba:e9:0a:13:34:29:62:cb:38:7d:e7:ac:3d:5a:5d:ae:0c:d9: 42:39:2d:c6:f6:ff:8b:9d:a8:7d:b7:bb:d2:d5:33:cc:fc:9b: 4d:97:ba:5e:32:89:e8:40:bc:29:6d:f3:35:30:f8:d6:d9:8c: 9d:b8:3f:a2:2b:b5:f2:75:8f:90:ac:dc:f8:ce:aa:bd:31:a1: fd:d7:dd:ab:5a:2f:35:f2:40:3e:56:3a:04:7a:bc:df:32:ef: 3e:78:cf:4e:35:80:15:12:9d:3e:e8:f7:e7:09:42:ca:0d:02: b4:a9:4d:9f:ea:e2:d7:81:fc:6a:93:41:04:e4:33:cb:8b:37: d0:ff:f6:2c:a3:c7:79:05:24:cb:5c:6f:75:01:42:c5:53:2b: 4b:dd:ff:42:5d:46:a2:6a:81:e4:6a:7e:c8:5b:e6:b1:2b:81: 1f:62:b5:03:61:e9:4b:05:18:a5:43:f0:e1:4a:30:77:d6:0e: a4:1b:4e:4a:5d:85:ec:49:dd:b6:8b:12:5d:5c:08:47:0f:50: 17:93:12:f1:c8:74:5f:d6:e7:c9:13:80:cc:2f:04:5c:a7:5d: 60:05:f6:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBQzUxMTAvBgNVBAUTKEJGM0ZCQzBEQTk2RTJFNTEzQUFBNTg4MTJDNjk0QkNE MDdCOERENzcwHhcNMjUwNjEyMjAyMTE5WhcNMjUwNjE5MjAyMTE5WjAYMRYwFAYD VQQDEw02ODRiMzZiZi1jM2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LUcjXxyMxq/g3cyD9W8N2RQnvZddSz8tTU7P0vHpbdinz+2UFbWgTEJh6rf 0qZ0p1mMkUXS6fNjb0bqiGp7dPHnZVxlKhh59w320NsbkH5p8wzlkmlFwNNkpijK 0Xe0IumpgPnm4gimE0uDDdIJ59km7Vcz4wNx3zNs39Sg5knIA/Hl1/dGMjXKrm4u oMeo6XlLkl3tVToXx9VN+DjZP4LHtkNNQmXjcEtXxmDIcQa/NcVEdjTW565tJhXF O8oYgN0403MvLwSkEPCGyIOTaynrSsBeNRkBfheIvZyfumD/GE1VxP923mN6Bp2H pMKCt7Yfz1tJ1c58rs88GidbcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsa08MW A680ddfNZY8OeJBToADhMB8GA1UdIwQYMBaAFL8/vA2pbi5ROqpYgSxpS80HuN13 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0FDNS9BM0VCNUMwMEMw RDUxMUVBOTA4QzAxNzhDNEY5QUUwMi92ei04RGFsdUxsRTZxbGlCTEdsTHpRZTQz WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z6LThEYWx1TGxFNnFsaUJMR2xMelFlNDNYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0FDNS9BM0VCNUMwMEMwRDUxMUVBOTA4QzAxNzhDNEY5QUUwMi92ei04RGFsdUxs RTZxbGlCTEdsTHpRZTQzWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPxGv7LMDKM+UYuEsTHSwTWSCI0DdoXBVKKohQs0TPjmDVH1W66QoT NCliyzh956w9Wl2uDNlCOS3G9v+Lnah9t7vS1TPM/JtNl7peMonoQLwpbfM1MPjW 2YyduD+iK7XydY+QrNz4zqq9MaH9192rWi818kA+VjoEerzfMu8+eM9ONYAVEp0+ 6PfnCULKDQK0qU2f6uLXgfxqk0EE5DPLizfQ//Yso8d5BSTLXG91AULFUytL3f9C XUaiaoHkan7IW+axK4EfYrUDYelLBRilQ/DhSjB31g6kG05KXYXsSd22ixJdXAhH D1AXkxLxyHRf1ufJE4DMLwRcp11gBfaS -----END CERTIFICATE-----Generated at Sat Jun 14 18:53:25 2025 by rpki-client