$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft File: VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft (raw, json) Hash identifier: AIt/JiZdI0SVk2IK+QrsFbEzwD5RYxmeLaw6CLYAzVw= Subject key identifier: 27:4E:42:13:06:ED:7F:FC:8E:EE:BD:8C:33:9C:EE:4A:E5:2B:64:BE Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Certificate serial: 05DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft Manifest number: 052F Signing time: Wed 18 Jun 2025 23:57:51 +0000 Manifest this update: Wed 18 Jun 2025 23:57:51 +0000 Manifest next update: Wed 25 Jun 2025 23:57:51 +0000 Files and hashes: 1: VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl (hash: 0cImtkU8l/vkyYPjXjmWgctBo+w8NoE73FJ4Wg6vzFU=) 2: 0BD4BBC2716911EDA03D4A50C4F9AE02.roa (hash: iCGYHqcapZ1DKt8RS4ox+PrMVLiDQPhQLsfb9ZqKn8Y=) 3: 48CB7422E27911ED88B5A641C4F9AE02.roa (hash: AVBCDstPuY5yPO2Ydm26gKhlgmx2X61R7QXZR/yk1Zo=) 4: D4FCF92C716B11ED9F349A49C4F9AE02.roa (hash: UuOQPjOHW3te4OiVFYw+HXL7r4q+xv2PoIFABxSLF70=) 5: ECC41AD2748A11ED80EF3436C4F9AE02.roa (hash: sg221W/egXu0ZEIvG5/3NuaO+9JdsATAt/T48V/WxaU=) 6: 0C5EDCDA716911EDA03D4A50C4F9AE02.roa (hash: /udoJCuRJJiznFyAsVCyc0gM64uxhJqp5G9jTAQbZu4=) 7: 9A1D8B2E867D11ED856A8E54C4F9AE02.roa (hash: cieJSU2MctUg0O+GWn4XGuRsQ3vHkHefCudId57mspk=) 8: 401B1A7036C411F0A4FB0A28C4F9AE02.roa (hash: lxdYF3sh/rAzy6QFFkatsVLjjc0Pr4TkSfIvcs/OIUI=) 9: 8DEEDC96E6B511EF9FEF6436C4F9AE02.roa (hash: PXNaSMJ5YVKmgSX7D94F0YVFvnDTmRG8eGKKeg/Al70=) 10: 0D0517EE716911EDA03D4A50C4F9AE02.roa (hash: fhtBFY+6U1Q/NDrcrqBZE1BQCslriv3eFT6qN9HqyO4=) 11: D359E238716B11ED9F349A49C4F9AE02.roa (hash: aJuLqquEQyyIiKwXY41VQpBHPxNA/CIwMjOgaOCooJI=) 12: 1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa (hash: F6cMcszW3btFH4NtjFMkcGJMShjA1GIWoT3qHzp5ayU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 23:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1503 (0x5df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Validity Not Before: Jun 18 23:57:51 2025 GMT Not After : Jun 25 23:57:51 2025 GMT Subject: CN=6853527f-a4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:17:6f:f7:7a:df:d4:76:f2:b8:a6:34:79:34: 32:cb:45:c0:05:e6:eb:46:0e:bb:ba:70:f2:ce:2b: fe:55:cc:10:8a:a4:90:57:93:78:0f:d5:85:5b:9a: 34:1f:e6:c4:77:9c:92:fd:67:75:07:4b:62:d5:82: 10:f3:61:2f:cb:04:8a:76:32:e1:80:a0:3e:bf:89: 99:9a:24:2d:56:63:7a:23:3a:72:17:d4:67:fd:45: dd:99:08:0a:3c:15:98:5f:24:39:05:1f:f9:2e:31: 95:53:dc:2d:50:67:92:db:85:23:18:cc:f5:ef:45: 70:03:78:79:78:46:4e:c3:b7:27:b3:2e:7e:c8:ed: a0:4f:e7:c0:c9:2e:04:e7:c7:ac:43:00:0d:f3:f9: c2:5e:1f:81:6e:ca:af:e8:23:a0:a7:3b:e5:5e:5b: 0f:42:d4:5c:78:65:0f:43:6c:65:9e:e8:da:8d:51: 22:32:78:05:3f:66:07:a1:15:3f:72:db:68:52:a7: 75:09:ed:aa:72:c2:69:30:9b:3e:54:dc:84:11:78: 42:c4:d2:09:fa:1c:b7:52:35:8c:37:db:d4:a6:2d: 80:18:e8:bf:b5:a3:40:37:a9:27:32:1a:9e:1a:bf: 8a:bb:31:47:17:51:04:2f:e4:50:61:a3:80:fc:43: 2b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4E:42:13:06:ED:7F:FC:8E:EE:BD:8C:33:9C:EE:4A:E5:2B:64:BE X509v3 Authority Key Identifier: keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:21:08:bc:f2:ce:7a:8c:ca:db:c1:d1:43:eb:db:30:05:98: d9:9b:31:f4:3e:1a:d9:0b:74:97:5c:26:e1:e4:fe:70:63:d8: 7c:d1:a8:b2:1d:75:a4:93:05:22:fd:dd:01:b2:4f:59:4f:1d: e5:03:1b:5a:e5:33:f5:d7:3e:bc:f2:25:fa:1f:b7:c9:17:24: 9f:47:f8:06:70:07:d2:b6:67:34:d6:9c:31:7e:f8:4d:38:81: 61:c6:21:f9:e2:d2:43:9b:50:fe:58:65:84:b8:b9:eb:4c:6f: a5:82:29:99:3c:64:ee:0a:76:a4:66:30:89:85:56:00:f3:6a: 42:25:db:49:a2:c4:db:48:a3:c1:92:12:71:3a:f3:79:17:f1: a7:b8:5d:8d:e3:fb:8e:c5:40:75:b9:31:19:51:e9:4a:fc:dc: 6c:55:39:51:d9:4d:70:db:f1:12:a1:eb:05:09:3b:cf:9a:45: e7:25:4a:17:0b:be:a9:79:53:8f:a7:37:a7:5e:7d:4b:9e:08: 96:4d:b0:91:df:7b:75:49:78:a8:3d:cd:84:08:a3:5d:87:83: 0b:51:ff:de:6c:de:29:7d:98:ef:ff:91:60:64:af:d3:ac:7a: 1e:ab:8e:02:24:73:f9:69:a2:76:cc:a5:f8:97:c6:d0:d8:de: 90:de:1b:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3 RDc0MTQ3RjMwHhcNMjUwNjE4MjM1NzUxWhcNMjUwNjI1MjM1NzUxWjAYMRYwFAYD VQQDEw02ODUzNTI3Zi1hNGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxdv93rf1HbyuKY0eTQyy0XABebrRg67unDyziv+VcwQiqSQV5N4D9WFW5o0 H+bEd5yS/Wd1B0ti1YIQ82EvywSKdjLhgKA+v4mZmiQtVmN6IzpyF9Rn/UXdmQgK PBWYXyQ5BR/5LjGVU9wtUGeS24UjGMz170VwA3h5eEZOw7cnsy5+yO2gT+fAyS4E 58esQwAN8/nCXh+Bbsqv6COgpzvlXlsPQtRceGUPQ2xlnujajVEiMngFP2YHoRU/ cttoUqd1Ce2qcsJpMJs+VNyEEXhCxNIJ+hy3UjWMN9vUpi2AGOi/taNAN6knMhqe Gr+KuzFHF1EEL+RQYaOA/EMrdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdOQhMG 7X/8ju69jDOc7krlK2S+MB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDM5RC9ERTdEMkY5NDRFNzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9S WF9JbVgtU1JrSng5ZEJSX00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWIQi88s56jMrbwdFD69swBZjZmzH0PhrZC3SXXCbh5P5wY9h80aiy HXWkkwUi/d0Bsk9ZTx3lAxta5TP11z688iX6H7fJFySfR/gGcAfStmc01pwxfvhN OIFhxiH54tJDm1D+WGWEuLnrTG+lgimZPGTuCnakZjCJhVYA82pCJdtJosTbSKPB khJxOvN5F/GnuF2N4/uOxUB1uTEZUelK/NxsVTlR2U1w2/ESoesFCTvPmkXnJUoX C76peVOPpzenXn1LngiWTbCR33t1SXioPc2ECKNdh4MLUf/ebN4pfZjv/5FgZK/T rHoeq44CJHP5aaJ2zKX4l8bQ2N6Q3htl -----END CERTIFICATE-----Generated at Thu Jun 19 16:41:53 2025 by rpki-client