$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft File: Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft (raw, json) Hash identifier: q4CAXr9AnEAn3pviR6NhsgQVNYMIlhcZ8gic3+A4DN8= Subject key identifier: 47:CA:D2:A6:BE:D1:AF:5A:A3:65:8E:94:D6:DB:C7:1A:78:B0:EA:33 Authority key identifier: 56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71 Certificate issuer: /CN=A91203DC/serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071 Certificate serial: 219B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft Manifest number: 2190 Signing time: Fri 18 Jul 2025 16:00:35 +0000 Manifest this update: Fri 18 Jul 2025 16:00:35 +0000 Manifest next update: Fri 25 Jul 2025 16:00:35 +0000 Files and hashes: 1: Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl (hash: piagoRZvJONq8nPa3JF0IMF558934G1T62G9W2xFVaE=) 2: 1D9DC82A652311EBA8CF3C4CC4F9AE02.roa (hash: lzXH47zwQqzR7U0IwcpEbq0QXTqtq0eXFrMFUkvM89M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8603 (0x219b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203DC, serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071 Validity Not Before: Jul 18 16:00:35 2025 GMT Not After : Jul 25 16:00:35 2025 GMT Subject: CN=687a6fa3-b2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c4:6d:2d:68:31:f9:9c:c8:64:c9:39:47:e3: 14:22:ea:31:a7:ea:42:ea:3b:10:29:50:b2:07:72: d3:cc:dd:ac:cc:98:5e:cf:59:78:fb:9a:3c:12:61: 5c:22:32:9b:1e:ac:c7:64:9f:5a:26:76:9b:01:b8: ed:7b:8d:d5:b0:4b:3f:19:eb:37:9e:18:bf:a5:c9: e7:89:5c:1e:39:0b:44:e6:e1:97:ef:2e:9c:07:63: f7:0b:74:56:74:7f:ff:5a:9a:9d:8e:30:63:86:89: d7:aa:61:af:a2:dd:b5:b4:dc:86:ec:e4:14:49:83: e4:c8:67:a5:9f:a7:69:28:7a:79:21:79:60:a3:62: 9a:75:d1:44:34:9c:d9:ad:f7:c2:40:81:2a:bc:5c: 69:f7:f6:60:72:d3:39:cc:b7:6b:dd:c4:b4:fd:ec: ad:dd:9f:d2:ff:f9:12:51:b8:de:d9:8e:30:14:cb: e8:f8:5a:1d:e3:77:75:62:6c:33:77:ee:ff:11:3c: a1:97:17:3a:c7:ae:7e:7a:f7:cd:90:53:8c:f6:46: fc:2c:02:26:75:f7:ed:fa:99:7e:d2:57:24:f1:28: 01:ac:52:bc:40:70:e0:1e:48:88:a3:0a:86:71:44: d8:28:57:aa:f5:24:de:4d:40:5d:f9:25:8d:92:38: d7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CA:D2:A6:BE:D1:AF:5A:A3:65:8E:94:D6:DB:C7:1A:78:B0:EA:33 X509v3 Authority Key Identifier: keyid:56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:0e:18:1b:d1:22:b7:48:3e:b4:5a:e6:d8:4b:82:de:00:ca: 4a:0e:29:3e:bc:1c:c4:2d:ac:e7:0e:07:87:0d:b5:74:e1:e7: c7:db:8c:af:f7:18:cf:dc:a3:c2:19:54:e3:68:21:cd:10:29: 0a:6d:22:95:b3:81:a4:c6:41:4f:cb:de:a3:09:2e:56:ff:68: 46:17:34:0d:3e:90:d0:2b:c2:ff:65:65:66:9b:b5:b7:0a:f8: 51:91:47:60:51:7c:58:3a:03:b3:1a:e4:c9:84:7d:09:02:63: fb:40:1b:b4:da:04:dd:f0:f9:28:a7:2a:d4:46:e8:8f:2c:45: f7:fb:a1:cb:19:4a:da:9a:fb:66:52:bc:9c:6d:c5:b8:5f:a9: c9:4d:bf:d5:59:93:89:20:80:eb:4d:c1:58:21:29:ef:59:d3: e7:4d:21:d7:44:f3:ea:4a:d7:8f:53:ca:ac:bf:fe:ca:86:82: 6d:f9:dd:7a:da:2f:a1:6d:32:52:8a:1e:a5:c0:62:56:85:b3: 19:b9:92:74:8a:e7:6d:14:df:19:f4:4f:a8:c6:42:c9:6a:31: 7c:04:07:40:7b:6d:00:f3:46:44:36:41:2a:df:0e:2a:c3:73: 75:ac:2e:f3:23:f6:44:73:1e:2a:d5:aa:73:31:04:1f:95:1a: e4:00:25:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzREMxMTAvBgNVBAUTKDU2NDZFMDdBMEY2MDI1RjFFMjYwRjFDNDk5NkY5QTY4 MUIyOTIwNzEwHhcNMjUwNzE4MTYwMDM1WhcNMjUwNzI1MTYwMDM1WjAYMRYwFAYD VQQDEw02ODdhNmZhMy1iMmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8sRtLWgx+ZzIZMk5R+MUIuoxp+pC6jsQKVCyB3LTzN2szJhez1l4+5o8EmFc IjKbHqzHZJ9aJnabAbjte43VsEs/Ges3nhi/pcnniVweOQtE5uGX7y6cB2P3C3RW dH//WpqdjjBjhonXqmGvot21tNyG7OQUSYPkyGeln6dpKHp5IXlgo2KaddFENJzZ rffCQIEqvFxp9/ZgctM5zLdr3cS0/eyt3Z/S//kSUbje2Y4wFMvo+Fod43d1Ymwz d+7/ETyhlxc6x65+evfNkFOM9kb8LAImdfft+pl+0lck8SgBrFK8QHDgHkiIowqG cUTYKFeq9STeTUBd+SWNkjjX7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfK0qa+ 0a9ao2WOlNbbxxp4sOozMB8GA1UdIwQYMBaAFFZG4HoPYCXx4mDxxJlvmmgbKSBx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNEQy9GQUQzRDZGQ0RD NDkxMUU1QTA2MjVGODJDNEY5QUUwMi9Wa2JnZWc5Z0pmSGlZUEhFbVctYWFCc3BJ SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZrYmdlZzlnSmZIaVlQSEVtVy1hYUJzcElIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNEQy9GQUQzRDZGQ0RDNDkxMUU1QTA2MjVGODJDNEY5QUUwMi9Wa2JnZWc5Z0pm SGlZUEhFbVctYWFCc3BJSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClDhgb0SK3SD60WubYS4LeAMpKDik+vBzELaznDgeHDbV04efH24yv 9xjP3KPCGVTjaCHNECkKbSKVs4GkxkFPy96jCS5W/2hGFzQNPpDQK8L/ZWVmm7W3 CvhRkUdgUXxYOgOzGuTJhH0JAmP7QBu02gTd8PkopyrURuiPLEX3+6HLGUramvtm UrycbcW4X6nJTb/VWZOJIIDrTcFYISnvWdPnTSHXRPPqStePU8qsv/7KhoJt+d16 2i+hbTJSih6lwGJWhbMZuZJ0iudtFN8Z9E+oxkLJajF8BAdAe20A80ZENkEq3w4q w3N1rC7zI/ZEcx4q1apzMQQflRrkACXA -----END CERTIFICATE-----Generated at Sun Jul 20 16:25:56 2025 by rpki-client