$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft File: VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft (raw, json) Hash identifier: pm73M3P31CXJfZeLyKczM+Yr5HpeCD2FjeRk1bW9CzE= Subject key identifier: 30:BC:59:6A:C1:3E:A6:15:3D:C7:62:D0:8C:B8:4D:3D:90:AB:6C:39 Authority key identifier: 56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A Certificate issuer: /CN=A91D6F2B/serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A Certificate serial: 0361 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft Manifest number: 035C Signing time: Thu 19 Jun 2025 00:47:26 +0000 Manifest this update: Thu 19 Jun 2025 00:47:26 +0000 Manifest next update: Thu 26 Jun 2025 00:47:26 +0000 Files and hashes: 1: VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl (hash: 4skZ10d+s0IiiWdhc8Zn4Ux9vo5/FRCsocxWFywh6+M=) 2: 2A22D2FCB6CB11ECA43EEE87C4F9AE02.roa (hash: KlAC54soZmN85lgdd13wHGCcsR/XbE59aQyhJMVb4zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 00:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 865 (0x361) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6F2B, serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A Validity Not Before: Jun 19 00:47:26 2025 GMT Not After : Jun 26 00:47:26 2025 GMT Subject: CN=68535e1e-e3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d0:b4:72:15:d2:e2:7d:35:23:eb:bc:6c:01: ba:a9:15:7c:d8:ef:e6:24:7f:97:37:6c:10:78:77: a2:6f:f0:03:f9:9b:e0:58:24:0c:19:0e:71:24:ce: 77:08:c3:c5:07:12:a8:af:1b:f2:3c:9c:92:3c:74: d0:a7:c2:3c:c4:d4:58:a4:02:b4:0c:cf:73:7f:e6: 5c:81:0d:c3:ae:3d:a7:f1:43:ad:62:8a:96:ab:04: 1f:e1:69:2d:7d:5c:3d:b3:3b:be:6e:34:40:b7:1e: 1b:7b:10:b0:6f:93:74:ac:f6:ec:eb:3b:a6:08:46: af:72:7b:08:85:e1:35:8a:fd:c1:2f:83:46:65:4d: d1:52:b9:08:13:d1:45:99:80:89:b1:54:d8:e1:22: a0:6c:12:fa:f9:1d:08:37:61:13:4c:74:ff:ab:3d: e7:ea:a8:55:01:ea:83:aa:33:07:47:48:0c:b0:dc: a3:ec:c4:90:62:bc:53:94:32:c3:ef:c2:cb:5c:3d: 1e:d6:71:a0:f7:01:e3:39:ff:20:87:99:ab:fd:8c: fa:62:52:7e:e6:d7:7f:cc:c4:55:e5:80:8c:bd:f2: a9:d2:bf:5e:62:b3:12:1c:c4:a5:da:52:ba:1c:41: a6:db:d0:2a:bb:6b:32:c0:63:c2:c4:ec:6f:aa:e0: 00:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:BC:59:6A:C1:3E:A6:15:3D:C7:62:D0:8C:B8:4D:3D:90:AB:6C:39 X509v3 Authority Key Identifier: keyid:56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:46:82:7d:38:57:ca:77:61:4d:3a:a8:a8:85:f8:9a:14:06: 1d:2e:41:97:21:f7:c8:75:88:44:fe:d9:71:f2:77:19:e8:41: 3f:cc:d3:f3:c0:8e:0c:97:5f:24:5d:6b:8c:0b:4d:bb:3c:0a: 1f:f5:11:3c:4e:21:fe:87:bb:0d:63:51:cb:ed:c7:3a:26:9a: dd:c4:df:9c:f6:36:ca:e1:d7:71:22:0c:0a:51:36:70:1b:b5: c9:4d:ee:31:d6:fb:55:9d:5f:d5:2a:a2:3b:f1:10:78:88:e6: 58:4d:d0:78:c4:02:90:4f:bf:a4:a1:23:7e:c7:ee:0d:d7:6a: 30:61:f8:50:6e:3f:20:99:53:ad:0d:17:43:a9:9c:90:3f:99: 9a:1f:84:a1:f2:20:1f:c4:37:ad:94:b8:b2:ca:ac:8b:fc:60: 0c:df:bf:64:89:ed:bb:85:d3:33:c2:90:b9:53:a6:89:8f:dc: 93:d8:35:fe:ec:c4:3e:20:76:21:e2:8a:be:52:07:4f:69:00: b3:18:12:2b:56:b0:e3:22:a7:1a:6e:e1:3b:1c:83:00:9e:27: 29:c4:e8:db:d3:72:66:19:62:99:f1:a9:6e:c7:97:8a:5a:22: e0:d7:41:35:f2:15:6a:86:92:e5:e8:a0:7f:42:b0:e0:8c:da: 00:6b:72:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZGMkIxMTAvBgNVBAUTKDU2MzhDQjFFMjZEMTE5OURBQkU4QjhDN0VEMjJCMDND NENFOEM4MEEwHhcNMjUwNjE5MDA0NzI2WhcNMjUwNjI2MDA0NzI2WjAYMRYwFAYD VQQDEw02ODUzNWUxZS1lM2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9C0chXS4n01I+u8bAG6qRV82O/mJH+XN2wQeHeib/AD+ZvgWCQMGQ5xJM53 CMPFBxKorxvyPJySPHTQp8I8xNRYpAK0DM9zf+ZcgQ3Drj2n8UOtYoqWqwQf4Wkt fVw9szu+bjRAtx4bexCwb5N0rPbs6zumCEavcnsIheE1iv3BL4NGZU3RUrkIE9FF mYCJsVTY4SKgbBL6+R0IN2ETTHT/qz3n6qhVAeqDqjMHR0gMsNyj7MSQYrxTlDLD 78LLXD0e1nGg9wHjOf8gh5mr/Yz6YlJ+5td/zMRV5YCMvfKp0r9eYrMSHMSl2lK6 HEGm29Aqu2sywGPCxOxvquAAEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDC8WWrB PqYVPcdi0Iy4TT2Qq2w5MB8GA1UdIwQYMBaAFFY4yx4m0Rmdq+i4x+0isDxM6MgK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkYyQi8zMzg2Njc2NkI2 QzkxMUVDODlCREM2ODdDNEY5QUUwMi9WampMSGliUkdaMnI2TGpIN1NLd1BFem95 QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZqakxIaWJSR1oycjZMakg3U0t3UEV6b3lBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkYyQi8zMzg2Njc2NkI2QzkxMUVDODlCREM2ODdDNEY5QUUwMi9WampMSGliUkda MnI2TGpIN1NLd1BFem95QW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoRoJ9OFfKd2FNOqiohfiaFAYdLkGXIffIdYhE/tlx8ncZ6EE/zNPz wI4Ml18kXWuMC027PAof9RE8TiH+h7sNY1HL7cc6JprdxN+c9jbK4ddxIgwKUTZw G7XJTe4x1vtVnV/VKqI78RB4iOZYTdB4xAKQT7+koSN+x+4N12owYfhQbj8gmVOt DRdDqZyQP5maH4Sh8iAfxDetlLiyyqyL/GAM379kie27hdMzwpC5U6aJj9yT2DX+ 7MQ+IHYh4oq+UgdPaQCzGBIrVrDjIqcabuE7HIMAnicpxOjb03JmGWKZ8alux5eK WiLg10E18hVqhpLl6KB/QrDgjNoAa3KA -----END CERTIFICATE-----Generated at Thu Jun 19 12:47:37 2025 by rpki-client