$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft File: M-VCXQNo-C_4W5uEf0EjitWNTlA.mft (raw, json) Hash identifier: fkRS8SNMOd8o2tIwH60pk8lnO/N6f0OJEpMNyuT0hPo= Subject key identifier: F9:88:51:31:EB:95:95:54:D0:78:33:E2:FF:A4:67:3C:06:5B:F7:5B Authority key identifier: 33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50 Certificate issuer: /CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft Manifest number: 010A Signing time: Thu 19 Jun 2025 04:24:21 +0000 Manifest this update: Thu 19 Jun 2025 04:24:20 +0000 Manifest next update: Thu 26 Jun 2025 04:24:20 +0000 Files and hashes: 1: M-VCXQNo-C_4W5uEf0EjitWNTlA.crl (hash: Eu4eHg2lXASzBqELMFIPCpc1j2oMCLvzlqdI6NKnEGA=) 2: D677E18AB9AF11EE97EEDB49C4F9AE02.roa (hash: LUJnGhbUriDz5PEXzwqHVqGRqenH5+Jp3evLId0QNQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD5A, serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50 Validity Not Before: Jun 19 04:24:20 2025 GMT Not After : Jun 26 04:24:20 2025 GMT Subject: CN=685390f5-0b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:23:e1:3b:ff:15:34:28:d9:a9:bc:65:33:83: fc:10:43:25:f6:f0:7c:1e:ac:27:38:af:47:ed:b5: 7d:f5:56:de:58:d7:29:92:60:d0:64:56:18:1e:fe: 78:fd:2e:3d:3d:3c:54:6a:f7:30:bf:d0:a2:27:79: d4:2c:98:b8:ff:44:0a:81:7d:a3:f6:12:77:31:f2: 3b:b8:e0:de:2e:96:24:4f:fc:ba:84:c2:a8:8f:e5: 00:8d:90:8c:70:f5:43:48:35:28:59:d8:e8:52:32: 24:d7:e1:c0:d5:d8:5c:3c:ac:9a:83:7c:58:0d:f9: b7:13:c2:be:22:eb:6a:19:95:ae:25:66:03:89:2a: 86:08:aa:1c:ca:ee:e4:dc:bd:9b:6b:7a:1e:43:d6: bb:84:9c:4b:b0:f9:8e:b4:7c:b7:51:dc:20:b0:c3: 70:3f:c7:89:80:a6:84:21:f8:42:b9:3a:72:d8:5a: b4:b3:18:0f:16:3f:f0:30:6c:68:a1:97:16:38:72: f0:53:26:d2:ed:a5:83:5b:f4:82:3d:b3:c9:1d:b5: 5d:75:de:ed:8b:0b:df:c2:2a:37:5e:64:4f:35:e8: 99:53:9e:66:47:59:c3:d6:53:ce:ba:fe:51:1b:3e: bd:99:f1:b0:77:54:32:fd:be:31:7f:c1:da:41:89: 39:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:88:51:31:EB:95:95:54:D0:78:33:E2:FF:A4:67:3C:06:5B:F7:5B X509v3 Authority Key Identifier: keyid:33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:89:d8:8a:d9:87:3c:4a:e1:8a:c9:b3:54:40:8d:0d:1f:95: f5:f2:79:15:bb:78:73:74:f7:28:16:05:ca:d6:59:84:50:88: ce:9f:b3:51:cc:3c:aa:72:d6:f4:1c:38:18:f2:c0:e5:01:0f: 7a:31:ea:d5:c7:09:a9:76:53:29:b9:93:41:b0:d2:98:ea:71: 20:6d:2b:b4:67:f4:b4:86:ff:d6:f2:6d:06:fc:ba:73:89:e7: ff:4c:2d:8c:4e:e0:2d:69:a2:96:d1:64:a8:da:d7:95:3f:81: 68:5c:17:8a:50:35:cd:e5:16:2f:e0:98:1f:32:e6:50:4e:ba: d4:af:cc:18:74:ab:e6:48:a3:1d:60:22:18:b2:b1:1d:8d:bd: 10:db:8b:8e:4f:b3:d6:c0:ed:21:b1:37:26:07:64:61:56:90: 57:b3:96:22:ce:36:97:5b:05:46:ca:d4:96:d5:b7:1d:46:7a: e4:25:db:10:9a:9b:c7:a8:37:2d:01:d6:5c:2c:7a:96:49:dc: ca:86:57:16:d3:37:8c:ba:7a:48:65:ce:a7:69:fb:e3:50:ab: 69:e6:19:ee:1d:47:fd:eb:a4:f0:4e:46:50:80:78:39:10:69: 4b:89:60:0e:e9:e6:6e:d7:36:d5:60:8d:0c:3d:0a:12:2d:7e: 39:70:f7:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENUExMTAvBgNVBAUTKDMzRTU0MjVEMDM2OEY4MkZGODVCOUI4NDdGNDEyMzhB RDU4RDRFNTAwHhcNMjUwNjE5MDQyNDIwWhcNMjUwNjI2MDQyNDIwWjAYMRYwFAYD VQQDEw02ODUzOTBmNS0wYjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCPhO/8VNCjZqbxlM4P8EEMl9vB8HqwnOK9H7bV99VbeWNcpkmDQZFYYHv54 /S49PTxUavcwv9CiJ3nULJi4/0QKgX2j9hJ3MfI7uODeLpYkT/y6hMKoj+UAjZCM cPVDSDUoWdjoUjIk1+HA1dhcPKyag3xYDfm3E8K+IutqGZWuJWYDiSqGCKocyu7k 3L2ba3oeQ9a7hJxLsPmOtHy3UdwgsMNwP8eJgKaEIfhCuTpy2Fq0sxgPFj/wMGxo oZcWOHLwUybS7aWDW/SCPbPJHbVddd7tiwvfwio3XmRPNeiZU55mR1nD1lPOuv5R Gz69mfGwd1Qy/b4xf8HaQYk5eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmIUTHr lZVU0Hgz4v+kZzwGW/dbMB8GA1UdIwQYMBaAFDPlQl0DaPgv+FubhH9BI4rVjU5Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ1QS81RkI3REMwOEI5 QUExMUVFQjBEQ0Q4MzRDNEY5QUUwMi9NLVZDWFFOby1DXzRXNXVFZjBFaml0V05U bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL00tVkNYUU5vLUNfNFc1dUVmMEVqaXRXTlRsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ1QS81RkI3REMwOEI5QUExMUVFQjBEQ0Q4MzRDNEY5QUUwMi9NLVZDWFFOby1D XzRXNXVFZjBFaml0V05UbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfidiK2Yc8SuGKybNUQI0NH5X18nkVu3hzdPcoFgXK1lmEUIjOn7NR zDyqctb0HDgY8sDlAQ96MerVxwmpdlMpuZNBsNKY6nEgbSu0Z/S0hv/W8m0G/Lpz ief/TC2MTuAtaaKW0WSo2teVP4FoXBeKUDXN5RYv4JgfMuZQTrrUr8wYdKvmSKMd YCIYsrEdjb0Q24uOT7PWwO0hsTcmB2RhVpBXs5YizjaXWwVGytSW1bcdRnrkJdsQ mpvHqDctAdZcLHqWSdzKhlcW0zeMunpIZc6nafvjUKtp5hnuHUf966TwTkZQgHg5 EGlLiWAO6eZu1zbVYI0MPQoSLX45cPcI -----END CERTIFICATE-----Generated at Thu Jun 19 07:25:31 2025 by rpki-client