$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft File: vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft (raw, json) Hash identifier: uRGJloNheNbtHQmk0JWv5OuJv1ccNJlGPGM+WV9BFts= Subject key identifier: CF:29:A1:D8:75:D4:F1:65:2A:BE:C6:8D:96:47:4F:FB:A1:DE:FA:6F Authority key identifier: BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D Certificate issuer: /CN=A91CB816/serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D Certificate serial: 0723 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft Manifest number: 0719 Signing time: Wed 18 Jun 2025 21:41:13 +0000 Manifest this update: Wed 18 Jun 2025 21:41:12 +0000 Manifest next update: Wed 25 Jun 2025 21:41:12 +0000 Files and hashes: 1: vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl (hash: +QXI2+zE4aIGEGd4cQTEcjaT9mXB8mg9EARNkuAA5uA=) 2: 122052A03DD811EBAE99F45CC4F9AE02.roa (hash: QraXnZCET4DytM5/10lXcxYbwH8hmrtP3mDCaQ6jJXk=) 3: 7D8845C43DD911EB8DA0EE5FC4F9AE02.roa (hash: TJhxFRJSMHDZftvXajaD5yBRa7CxOx/OA+78HFtd2eM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 21:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1827 (0x723) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB816, serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D Validity Not Before: Jun 18 21:41:12 2025 GMT Not After : Jun 25 21:41:12 2025 GMT Subject: CN=68533279-c464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:09:3f:ac:66:98:8b:a8:25:be:6c:31:47:83: 39:7a:38:dc:b8:0a:4d:e1:d0:6d:ac:34:62:89:d8: da:ba:52:a3:52:8c:0d:11:49:50:87:d7:67:62:35: 4a:05:c2:1d:a6:9e:ae:d4:3b:b8:a4:81:84:05:4d: 09:46:d3:0f:c3:16:ab:8a:10:4a:4a:02:d6:19:eb: 42:fd:d0:fe:cb:10:f5:6e:94:65:16:63:54:03:ae: b0:90:12:4d:41:b0:ae:ca:73:b0:1b:6c:78:99:18: 46:e0:40:06:39:ac:73:56:6c:7f:4f:16:5f:af:53: 6f:41:6c:ff:65:d9:82:59:39:11:48:23:14:93:ae: 5a:cd:9a:05:8f:77:22:b7:94:85:b8:5e:8b:fb:9d: 5e:15:e2:f0:a1:15:3a:7c:dc:62:1a:4e:d2:6c:27: 14:f4:e3:b2:74:be:ab:e4:5a:54:ab:63:8d:23:37: 0c:ef:c6:a6:75:54:1b:35:54:80:11:20:ed:a1:09: 76:03:ab:94:f0:8c:3a:92:92:f3:0a:1e:b4:7f:dd: 1b:c4:67:37:f9:93:fd:64:a8:9f:b5:f3:2e:07:e0: d1:2b:7e:38:74:72:cb:dc:f4:0b:fd:9c:67:25:8e: 7b:44:3f:47:91:f0:fe:23:cd:51:d9:df:7f:b4:6d: 8a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:29:A1:D8:75:D4:F1:65:2A:BE:C6:8D:96:47:4F:FB:A1:DE:FA:6F X509v3 Authority Key Identifier: keyid:BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:24:d5:fd:d4:24:8a:16:3c:42:27:2e:3d:d8:9a:e0:1b:18: 3e:85:2a:ff:00:e7:9e:c6:90:1e:ab:e2:dc:9f:ad:84:34:1f: 5f:a6:37:d8:13:78:63:75:f8:dd:28:5b:47:74:43:cf:fc:50: f4:48:1f:07:f4:38:6d:ef:25:ad:e9:91:30:4e:38:ae:36:dd: af:65:35:eb:54:e5:e6:08:5a:40:21:82:d8:c3:ed:38:e0:e8: 99:6c:99:57:50:8e:75:96:a3:ad:36:2c:b0:97:b1:69:bb:50: 56:b9:d8:9f:bb:9e:34:98:36:e6:ad:50:6a:38:50:4b:f7:20: 72:66:d6:5b:dc:6b:7b:53:80:15:ba:68:e9:94:a0:70:a8:49: 0a:3e:93:06:65:95:65:e1:82:82:db:1a:4b:c8:d4:7c:4c:04: 65:03:17:34:b5:3a:3d:9b:1d:ae:e3:b1:e7:18:56:24:1a:45: af:14:d7:3e:af:dd:77:cf:8a:84:b9:b1:f3:ee:00:2d:74:d0: 43:bf:75:f6:f0:33:27:e3:96:88:4b:38:e6:05:2e:6b:1d:f5: ed:29:31:6e:06:d4:e0:f5:48:89:42:d8:a4:fe:f7:1d:9c:b0: 75:8e:84:f1:6d:de:2d:4d:30:d5:59:ca:6b:74:70:61:f6:86: 59:0f:b1:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4MTYxMTAvBgNVBAUTKEJEMDZCREJGOEIwRUVEQkM5RjA3Mzk1QTY1MjU0RkNC ODU4Mzk4OUQwHhcNMjUwNjE4MjE0MTEyWhcNMjUwNjI1MjE0MTEyWjAYMRYwFAYD VQQDEw02ODUzMzI3OS1jNDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmgk/rGaYi6glvmwxR4M5ejjcuApN4dBtrDRiidjaulKjUowNEUlQh9dnYjVK BcIdpp6u1Du4pIGEBU0JRtMPwxarihBKSgLWGetC/dD+yxD1bpRlFmNUA66wkBJN QbCuynOwG2x4mRhG4EAGOaxzVmx/TxZfr1NvQWz/ZdmCWTkRSCMUk65azZoFj3ci t5SFuF6L+51eFeLwoRU6fNxiGk7SbCcU9OOydL6r5FpUq2ONIzcM78amdVQbNVSA ESDtoQl2A6uU8Iw6kpLzCh60f90bxGc3+ZP9ZKiftfMuB+DRK344dHLL3PQL/Zxn JY57RD9HkfD+I81R2d9/tG2KNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8podh1 1PFlKr7GjZZHT/uh3vpvMB8GA1UdIwQYMBaAFL0Gvb+LDu28nwc5WmUlT8uFg5id MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjgxNi82MTA0NjYxMDNE RDYxMUVCQTA2MDJDNUJDNEY5QUUwMi92UWE5djRzTzdieWZCemxhWlNWUHk0V0Rt SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZRYTl2NHNPN2J5ZkJ6bGFaU1ZQeTRXRG1KMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjgxNi82MTA0NjYxMDNERDYxMUVCQTA2MDJDNUJDNEY5QUUwMi92UWE5djRzTzdi eWZCemxhWlNWUHk0V0RtSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhJNX91CSKFjxCJy492JrgGxg+hSr/AOeexpAeq+Lcn62ENB9fpjfY E3hjdfjdKFtHdEPP/FD0SB8H9Dht7yWt6ZEwTjiuNt2vZTXrVOXmCFpAIYLYw+04 4OiZbJlXUI51lqOtNiywl7Fpu1BWudifu540mDbmrVBqOFBL9yByZtZb3Gt7U4AV umjplKBwqEkKPpMGZZVl4YKC2xpLyNR8TARlAxc0tTo9mx2u47HnGFYkGkWvFNc+ r913z4qEubHz7gAtdNBDv3X28DMn45aISzjmBS5rHfXtKTFuBtTg9UiJQtik/vcd nLB1joTxbd4tTTDVWcprdHBh9oZZD7Ge -----END CERTIFICATE-----Generated at Thu Jun 19 16:00:29 2025 by rpki-client