$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft File: vIx594SRodWqRdvkEzwMEPaTZK0.mft (raw, json) Hash identifier: AdJwpanu6TZyXWcFSbAq6XCT3JsyPsGi6yl1ZmJRUiQ= Subject key identifier: 32:5E:AE:F8:7F:07:48:75:44:19:41:86:0C:17:7D:D1:D6:A7:DD:45 Authority key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD Certificate issuer: /CN=A911DB66/serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft Manifest number: 57 Signing time: Sat 19 Jul 2025 07:26:08 +0000 Manifest this update: Sat 19 Jul 2025 07:26:08 +0000 Manifest next update: Sat 26 Jul 2025 07:26:08 +0000 Files and hashes: 1: vIx594SRodWqRdvkEzwMEPaTZK0.crl (hash: c90qhxNYV60+Nj5FdXBjB+eP7vbPh/PWkjrMAVfMGTE=) 2: D973E6FEF51D11EFAD3D042EC4F9AE02.roa (hash: u93MIpjxF46V825wNe89adLBqBtdyI8rJgiDXDAPRbk=) 3: DA673610F51D11EFAD3D042EC4F9AE02.roa (hash: Ditm9jS3Zsy5UK/tSQ4fwIyFAaD9ya5NTIds4DVaHEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DB66, serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD Validity Not Before: Jul 19 07:26:08 2025 GMT Not After : Jul 26 07:26:08 2025 GMT Subject: CN=687b4890-056c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:12:73:0b:ef:7f:d6:e1:2c:39:3c:22:f2:75: 41:2f:f6:53:42:b0:5d:c0:5e:8e:40:d0:94:67:99: be:81:48:2d:74:77:04:c1:16:ee:94:44:4e:b0:c8: e4:16:c7:69:3b:fb:2a:5f:a8:c2:df:fc:37:dd:be: 86:b5:0c:e7:de:9b:cd:66:80:10:dd:30:2b:2e:f9: 44:bb:74:85:fb:ec:ef:b8:3e:eb:0f:4f:6f:77:b5: 52:99:ef:f9:98:a7:cb:93:fa:b7:0f:0b:8b:d2:84: b4:f2:1b:64:69:20:28:a4:7b:9f:0b:28:e8:89:ff: 77:8a:74:96:4a:d2:40:d0:83:e8:ed:a6:da:0f:77: 76:3b:c3:2e:e2:ab:37:9f:ef:b1:29:0f:5c:70:67: 1c:7c:8c:fa:da:31:93:ee:5c:1c:e9:45:1e:2b:fb: 5e:d3:2f:22:2b:e9:00:2d:a7:23:71:3e:56:81:68: 4f:a5:b7:ff:52:4e:1e:ed:ac:32:84:40:1b:fa:1a: f9:9f:2f:60:e7:91:0e:10:d2:07:58:be:b1:78:a2: 51:8b:59:f7:dc:7c:95:52:d8:da:7b:b4:94:a3:3d: 95:8c:b0:84:7d:e2:89:83:29:37:65:30:63:bf:5e: b0:f4:16:aa:36:8d:3a:76:2a:da:f8:84:75:26:68: 4d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5E:AE:F8:7F:07:48:75:44:19:41:86:0C:17:7D:D1:D6:A7:DD:45 X509v3 Authority Key Identifier: keyid:BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:07:84:09:06:a6:8a:5e:16:fe:d5:4b:cd:3d:63:23:86:46: a6:31:9f:26:85:28:8b:d7:b6:02:f8:a3:15:5c:e4:e7:c5:4b: 13:e3:f9:ae:2b:32:5c:06:79:97:3c:b1:1f:16:96:80:7a:51: 3f:67:da:47:c4:aa:92:dd:8f:50:70:75:95:ee:e5:a1:50:8e: 04:07:3b:d9:9b:43:33:90:08:ac:fa:69:76:14:38:1e:c6:ac: 7f:75:8b:b1:09:73:9c:4b:ea:81:ad:89:66:80:b1:d3:0f:d1: 46:14:0e:14:9c:30:f6:ae:f4:08:31:41:6d:43:39:3e:e5:43: c2:8a:d6:97:10:7e:fb:71:23:90:33:0a:8b:18:0a:59:01:a1: db:9f:03:b9:75:00:a9:48:e3:c5:ac:f2:d8:bd:61:c5:00:92: 49:90:1d:15:9f:ce:82:db:d1:3a:05:7d:10:5c:99:83:64:80: 4e:93:c6:b8:2d:0a:ff:87:ad:3e:a5:87:55:30:a1:f0:67:7b: 06:05:a3:39:b8:b7:52:a2:1f:58:15:8a:93:da:fd:11:b4:7a: 98:f3:d0:54:b3:37:07:f8:5a:be:79:3d:ce:7d:f4:2c:ec:3a: 8f:39:81:2f:c8:af:43:08:fb:96:ca:4a:8e:ed:57:ff:3e:3a: 83:d2:fd:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REI2NjExMC8GA1UEBRMoQkM4Qzc5Rjc4NDkxQTFENUFBNDVEQkU0MTMzQzBDMTBG NjkzNjRBRDAeFw0yNTA3MTkwNzI2MDhaFw0yNTA3MjYwNzI2MDhaMBgxFjAUBgNV BAMTDTY4N2I0ODkwLTA1NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUEnML73/W4Sw5PCLydUEv9lNCsF3AXo5A0JRnmb6BSC10dwTBFu6URE6wyOQW x2k7+ypfqMLf/Dfdvoa1DOfem81mgBDdMCsu+US7dIX77O+4PusPT293tVKZ7/mY p8uT+rcPC4vShLTyG2RpICike58LKOiJ/3eKdJZK0kDQg+jtptoPd3Y7wy7iqzef 77EpD1xwZxx8jPraMZPuXBzpRR4r+17TLyIr6QAtpyNxPlaBaE+lt/9STh7trDKE QBv6GvmfL2DnkQ4Q0gdYvrF4olGLWffcfJVS2Np7tJSjPZWMsIR94omDKTdlMGO/ XrD0Fqo2jTp2Ktr4hHUmaE2tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMl6u+H8H SHVEGUGGDBd90dan3UUwHwYDVR0jBBgwFoAUvIx594SRodWqRdvkEzwMEPaTZK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFEQjY2Lzc3QjYxOTlDRTA5 QTExRUZCNjNBODEzMEM0RjlBRTAyL3ZJeDU5NFNSb2RXcVJkdmtFendNRVBhVFpL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdkl4NTk0U1JvZFdxUmR2a0V6d01FUGFUWkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE QjY2Lzc3QjYxOTlDRTA5QTExRUZCNjNBODEzMEM0RjlBRTAyL3ZJeDU5NFNSb2RX cVJkdmtFendNRVBhVFpLMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKwHhAkGpopeFv7VS809YyOGRqYxnyaFKIvXtgL4oxVc5OfFSxPj+a4r MlwGeZc8sR8WloB6UT9n2kfEqpLdj1BwdZXu5aFQjgQHO9mbQzOQCKz6aXYUOB7G rH91i7EJc5xL6oGtiWaAsdMP0UYUDhScMPau9AgxQW1DOT7lQ8KK1pcQfvtxI5Az CosYClkBodufA7l1AKlI48Ws8ti9YcUAkkmQHRWfzoLb0ToFfRBcmYNkgE6Txrgt Cv+HrT6lh1UwofBnewYFozm4t1KiH1gVipPa/RG0epjz0FSzNwf4Wr55Pc599Czs Oo85gS/Ir0MI+5bKSo7tV/8+OoPS/eA= -----END CERTIFICATE-----Generated at Sun Jul 20 03:46:28 2025 by rpki-client