$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft File: Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft (raw, json) Hash identifier: hVl2qc3ujiBMoIxHtWsLZRwjE08pcykLulcsxkEJ89A= Subject key identifier: 9A:CC:48:10:82:FB:4B:FD:51:45:CB:FF:2B:5B:41:5D:C8:16:A9:51 Authority key identifier: 55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6 Certificate issuer: /CN=A91127C1/serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6 Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft Manifest number: 01F3 Signing time: Fri 18 Jul 2025 20:11:19 +0000 Manifest this update: Fri 18 Jul 2025 20:11:18 +0000 Manifest next update: Fri 25 Jul 2025 20:11:18 +0000 Files and hashes: 1: Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl (hash: pMtGCItxe3y5hs3WSlXVZZSelJY2PRe6WOMJic673PY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127C1, serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6 Validity Not Before: Jul 18 20:11:18 2025 GMT Not After : Jul 25 20:11:18 2025 GMT Subject: CN=687aaa67-fb37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:56:56:21:ae:37:da:99:c2:ea:68:71:c3:0b: a4:d4:2e:82:34:bb:89:5d:1d:96:0b:64:28:0d:e2: c4:5f:58:13:13:0b:29:b4:db:8e:a0:f9:0b:18:a8: 65:14:ab:53:95:92:04:94:30:5a:45:7b:91:24:be: c0:c1:bf:ea:42:d3:c2:76:15:79:64:8f:70:c5:e9: 09:42:3e:e7:d7:6d:d6:22:8e:77:83:c9:42:03:b4: c9:86:78:dc:96:4f:36:47:b2:aa:b9:58:f6:38:d6: de:a0:58:aa:07:83:ee:ba:b0:39:7e:5e:48:1c:ed: 92:50:e5:a8:fa:1b:b6:8b:47:30:c4:b5:ca:fc:6d: 97:35:6f:a2:cf:50:49:00:42:34:ff:d3:27:bb:6a: f7:a4:ed:50:35:40:d5:08:4d:c7:75:a0:f6:1d:c0: 28:94:27:83:b2:56:7c:aa:82:d8:0a:a1:b3:bc:bf: 5b:9e:54:5e:dc:b0:12:10:ac:f5:cb:94:df:48:13: 83:3b:6c:bc:a7:fb:95:44:1a:fe:30:a6:e9:9f:4a: 35:b8:12:41:85:49:8d:5d:12:42:24:76:7b:f4:d9: 59:ea:24:f2:bc:33:09:b1:f3:73:98:bd:d2:29:36: 91:eb:5e:b2:e6:93:b4:f2:b8:f1:e7:ea:86:2c:32: 4d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CC:48:10:82:FB:4B:FD:51:45:CB:FF:2B:5B:41:5D:C8:16:A9:51 X509v3 Authority Key Identifier: keyid:55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:4e:c4:44:84:e2:c8:68:30:b9:5b:d0:80:09:ad:69:08:ec: ad:8b:69:0d:98:19:cd:9e:9f:62:13:72:ad:e0:e9:89:d5:46: 6b:b7:58:7a:91:dc:0d:a0:7c:c3:89:02:e1:c4:a3:85:fe:ac: a0:34:c6:07:9d:af:d0:22:a7:61:b2:33:87:d2:84:3d:83:8d: 4f:da:11:3e:ef:7e:c5:ce:b9:f6:e2:50:fb:f7:a9:57:28:ac: f7:63:4d:fb:52:5c:2d:70:18:b7:88:96:30:7b:6a:21:cb:ff: 34:7d:5c:76:40:75:1e:d4:54:62:fb:58:78:09:a6:7c:ee:89: 29:7b:2a:2b:09:56:7e:fa:58:8e:fd:67:67:92:ae:48:cb:02: 4b:14:4d:0e:6f:29:c2:ff:e4:11:e1:8c:b5:81:cf:5f:43:26: 1f:1c:b0:65:bf:cd:76:cd:a0:93:1e:b8:cb:33:02:f9:d5:02: 44:06:7e:62:37:22:af:21:ae:17:d9:1c:ab:e6:b3:d8:b3:93: d7:0f:79:f6:3f:a5:75:01:38:14:05:97:e9:a4:af:34:c0:36: 14:3d:49:de:c1:64:06:19:9b:83:d7:6a:28:19:49:fc:16:88: db:5c:fe:0a:dc:a8:53:07:25:77:60:44:39:5a:5f:91:63:cb: bf:9f:e3:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QzExMTAvBgNVBAUTKDU1RkI3QkNDQTc0MDI4NUZDODFBQTM2MEYwMkNFMzJG OTU4MTZEQjYwHhcNMjUwNzE4MjAxMTE4WhcNMjUwNzI1MjAxMTE4WjAYMRYwFAYD VQQDEw02ODdhYWE2Ny1mYjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnlZWIa432pnC6mhxwwuk1C6CNLuJXR2WC2QoDeLEX1gTEwsptNuOoPkLGKhl FKtTlZIElDBaRXuRJL7Awb/qQtPCdhV5ZI9wxekJQj7n123WIo53g8lCA7TJhnjc lk82R7KquVj2ONbeoFiqB4PuurA5fl5IHO2SUOWo+hu2i0cwxLXK/G2XNW+iz1BJ AEI0/9Mnu2r3pO1QNUDVCE3HdaD2HcAolCeDslZ8qoLYCqGzvL9bnlRe3LASEKz1 y5TfSBODO2y8p/uVRBr+MKbpn0o1uBJBhUmNXRJCJHZ79NlZ6iTyvDMJsfNzmL3S KTaR616y5pO08rjx5+qGLDJNQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrMSBCC +0v9UUXL/ytbQV3IFqlRMB8GA1UdIwQYMBaAFFX7e8ynQChfyBqjYPAs4y+VgW22 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdDMS9EQ0Y5OEExNjc3 ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtGX0lHcU5nOEN6akw1V0Ji YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZmdDd6S2RBS0ZfSUdxTmc4Q3pqTDVXQmJiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdDMS9EQ0Y5OEExNjc3ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtG X0lHcU5nOEN6akw1V0JiYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNTsREhOLIaDC5W9CACa1pCOyti2kNmBnNnp9iE3Kt4OmJ1UZrt1h6 kdwNoHzDiQLhxKOF/qygNMYHna/QIqdhsjOH0oQ9g41P2hE+737Fzrn24lD796lX KKz3Y037UlwtcBi3iJYwe2ohy/80fVx2QHUe1FRi+1h4CaZ87okpeyorCVZ++liO /Wdnkq5IywJLFE0ObynC/+QR4Yy1gc9fQyYfHLBlv812zaCTHrjLMwL51QJEBn5i NyKvIa4X2Ryr5rPYs5PXD3n2P6V1ATgUBZfppK80wDYUPUnewWQGGZuD12ooGUn8 FojbXP4K3KhTByV3YEQ5Wl+RY8u/n+O8 -----END CERTIFICATE-----Generated at Sun Jul 20 06:50:03 2025 by rpki-client