$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft File: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft (raw, json) Hash identifier: 8M4aayfCZ99MDrRL8KmWzrKAlHBilCKBPz8goeWsBjA= Subject key identifier: 3E:EC:3B:4D:7F:63:4C:AC:50:05:E5:E4:DC:BE:14:D2:A3:FB:82:B2 Authority key identifier: BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B Certificate issuer: /CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft Manifest number: 012E Signing time: Sun 15 Jun 2025 03:45:20 +0000 Manifest this update: Sun 15 Jun 2025 03:45:20 +0000 Manifest next update: Sun 22 Jun 2025 03:45:19 +0000 Files and hashes: 1: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl (hash: 3mmCmNxhiJiRgmB1qp3s2FB8K8gCI/Cr5iw3u+w907o=) 2: CCAA0F667B8911EE9370D427C4F9AE02.roa (hash: +XCZ4i+FWnCX+GcmIpvSxAa3YM916ys/6BLu7thnPf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E9D, serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Validity Not Before: Jun 15 03:45:20 2025 GMT Not After : Jun 22 03:45:19 2025 GMT Subject: CN=684e41d0-15df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0e:33:8b:a8:68:c0:a6:bd:62:e0:c7:7c:98: a9:bf:e9:8c:46:aa:33:69:17:df:d7:70:49:1f:9f: 48:bf:66:d5:4e:44:ef:f1:e8:2e:6a:bb:59:31:8f: 30:74:fd:8d:16:b0:73:6d:eb:d7:24:36:e9:69:94: f5:c3:7a:80:61:9a:92:a6:90:5a:51:3a:ce:9a:2a: d6:d7:9f:b8:51:a3:71:ad:31:20:72:9d:d4:98:9f: 30:7a:ac:4d:39:9e:55:12:84:32:d0:ab:aa:a3:59: f2:99:98:3d:61:2f:47:31:bf:12:0a:55:1c:f8:f7: c0:70:c4:4b:2a:9f:9b:69:b9:49:46:ac:71:b8:17: 18:14:b4:c7:a7:a0:04:a9:29:33:22:42:89:75:3a: 80:de:d1:b3:60:1e:75:d4:d2:8d:fe:72:dc:47:3b: 3d:0a:65:78:66:72:49:10:ce:0d:98:0d:9c:92:90: e0:43:51:a0:2b:a9:04:34:32:f7:17:be:29:34:e6: 48:d8:93:9f:c1:42:81:ea:87:fe:15:f5:83:1f:3c: 2f:b5:d9:d1:aa:91:15:3c:21:4f:e3:77:c8:43:ce: d6:8d:c8:95:19:c5:69:32:64:e5:e1:fe:c3:28:0d: 60:e2:43:0e:73:c9:11:49:44:70:44:21:53:1c:58: 2d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EC:3B:4D:7F:63:4C:AC:50:05:E5:E4:DC:BE:14:D2:A3:FB:82:B2 X509v3 Authority Key Identifier: keyid:BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c8:12:37:78:53:0f:15:d7:8f:40:a0:36:db:b6:42:08:29: a6:85:0c:c3:87:16:9d:ca:89:55:ce:bb:b9:73:56:58:ab:7f: 27:bd:f3:4a:1d:2d:14:c4:66:df:ec:df:d4:86:dd:92:02:db: c6:27:7e:6f:1e:ef:fe:81:22:1b:5a:38:d0:4a:ee:71:9f:3b: 46:33:c0:d4:c6:84:52:c1:fe:f0:7f:f0:a8:4b:69:fa:fb:97: 24:84:2a:c8:0c:9c:5b:e1:f3:44:bb:a2:12:0d:9b:61:66:b1: a4:85:49:e2:55:a2:37:60:9a:cd:7e:45:ce:ea:7a:22:f4:ba: 17:4f:5a:62:f2:89:a5:2a:8d:77:eb:ed:83:6e:3a:b5:25:30: b9:58:0c:5d:e3:b5:fa:6d:db:c5:b0:6e:93:8c:06:c6:8f:5c: 14:36:77:ef:4b:62:60:9e:a9:a9:71:5b:1d:45:42:f4:8e:b6: ee:15:49:16:da:b7:fa:cc:6b:bf:72:62:e7:90:e5:4c:de:fe: cf:b5:ee:c2:36:3f:ba:dc:3d:64:5a:2b:12:06:e3:5d:14:33: cd:9f:95:93:51:70:39:4f:0f:4d:b7:19:1a:08:e6:8b:4d:10: 70:25:e5:05:e4:0c:ba:56:ce:f0:ef:96:06:8b:a3:6f:01:65: a9:e6:56:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFOUQxMTAvBgNVBAUTKEJFMDE5MTM3QTgxRDdFOUNEOUFGNTZDRDkxQzU4N0My RUYwNkU5M0IwHhcNMjUwNjE1MDM0NTIwWhcNMjUwNjIyMDM0NTE5WjAYMRYwFAYD VQQDEw02ODRlNDFkMC0xNWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApA4zi6howKa9YuDHfJipv+mMRqozaRff13BJH59Iv2bVTkTv8eguartZMY8w dP2NFrBzbevXJDbpaZT1w3qAYZqSppBaUTrOmirW15+4UaNxrTEgcp3UmJ8weqxN OZ5VEoQy0Kuqo1nymZg9YS9HMb8SClUc+PfAcMRLKp+bablJRqxxuBcYFLTHp6AE qSkzIkKJdTqA3tGzYB511NKN/nLcRzs9CmV4ZnJJEM4NmA2ckpDgQ1GgK6kENDL3 F74pNOZI2JOfwUKB6of+FfWDHzwvtdnRqpEVPCFP43fIQ87WjciVGcVpMmTl4f7D KA1g4kMOc8kRSURwRCFTHFgtYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7sO01/ Y0ysUAXl5Ny+FNKj+4KyMB8GA1UdIwQYMBaAFL4BkTeoHX6c2a9WzZHFh8LvBuk7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUU5RC81MjgyOEIyQTdC ODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZwelpyMWJOa2NXSHd1OEc2 VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnR1JONmdkZnB6WnIxYk5rY1dId3U4RzZUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUU5RC81MjgyOEIyQTdCODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZw elpyMWJOa2NXSHd1OEc2VHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqyBI3eFMPFdePQKA227ZCCCmmhQzDhxadyolVzru5c1ZYq38nvfNK HS0UxGbf7N/Uht2SAtvGJ35vHu/+gSIbWjjQSu5xnztGM8DUxoRSwf7wf/CoS2n6 +5ckhCrIDJxb4fNEu6ISDZthZrGkhUniVaI3YJrNfkXO6noi9LoXT1pi8omlKo13 6+2Dbjq1JTC5WAxd47X6bdvFsG6TjAbGj1wUNnfvS2JgnqmpcVsdRUL0jrbuFUkW 2rf6zGu/cmLnkOVM3v7Pte7CNj+63D1kWisSBuNdFDPNn5WTUXA5Tw9NtxkaCOaL TRBwJeUF5Ay6Vs7w75YGi6NvAWWp5lbl -----END CERTIFICATE-----Generated at Sun Jun 15 08:33:53 2025 by rpki-client