$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft File: Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json) Hash identifier: gr5bKLtfHO16On/+WasCH5Jv51kLINUqB+X9R9kY/jE= Subject key identifier: AB:AD:80:D5:5A:CB:7D:8A:1B:5A:7D:24:F5:F2:85:57:D2:99:3D:2C Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Certificate serial: 13C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft Manifest number: 1391 Signing time: Fri 18 Jul 2025 17:08:52 +0000 Manifest this update: Fri 18 Jul 2025 17:08:52 +0000 Manifest next update: Fri 25 Jul 2025 17:08:52 +0000 Files and hashes: 1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: oNFjWiS3Rp0PoB4pyRU+5NKgJ8ZYPgWlNCF3YYEgzPI=) 2: E48C805A9A7D11EF99ECF636C4F9AE02.roa (hash: tr8nToqsnObMIX+d5q+59UsiBeZ737YgcOHmw4Nrttw=) 3: C19EC984774811EFB2DF8983C4F9AE02.roa (hash: cKH94jU8sLXPt8kaGwUS3gRcUMVka1p8X+BtBxcVQK8=) 4: BAAA44E0595211F0916CD979C4F9AE02.roa (hash: 1jCoy01o9WMOzZ/RiOMYbcS5Z71bqfiYIODRkQqJbF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5056 (0x13c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Validity Not Before: Jul 18 17:08:52 2025 GMT Not After : Jul 25 17:08:52 2025 GMT Subject: CN=687a7fa4-3aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:6f:e9:03:85:37:fe:73:55:2a:a0:3e:39: a3:13:6d:f4:d2:a3:73:8b:39:43:4b:67:9e:13:25: 5a:0c:53:02:fc:95:39:37:49:10:58:1f:51:f0:3f: e1:fd:f8:10:7e:bb:18:b1:75:c4:fb:0c:cd:c5:ce: e4:24:a2:dc:fe:bc:57:b5:2e:83:bd:f8:61:42:d1: 22:db:f2:13:55:d0:49:1c:88:0a:66:cb:15:a7:df: 01:c9:b3:06:5a:2c:64:21:d9:6d:9e:46:02:68:6c: cb:bf:d1:93:cd:10:54:fc:58:c1:88:43:78:9e:9d: eb:ee:fc:94:15:f6:13:0f:23:a8:ba:33:69:74:69: fa:8d:ee:9e:6f:af:26:16:5c:07:24:de:e1:59:6e: 85:81:c3:f1:2e:47:92:6c:63:19:0c:ba:19:91:75: 54:07:96:19:9d:7d:10:56:91:00:22:67:a9:f9:13: 00:d8:e2:4c:35:7e:27:46:09:06:ac:10:f4:ab:db: ac:f3:9e:d8:cd:10:45:6a:80:99:bc:cb:79:71:ce: 2d:d0:a8:10:db:9a:38:c8:ae:7a:8c:3d:d0:c1:40: 96:42:38:98:07:c1:2d:f9:30:71:bb:6a:55:35:4a: 0f:ac:37:b0:0f:6e:f4:ed:e1:f8:8a:ad:9a:22:1b: 3c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:AD:80:D5:5A:CB:7D:8A:1B:5A:7D:24:F5:F2:85:57:D2:99:3D:2C X509v3 Authority Key Identifier: keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:1d:7a:73:ac:68:cf:38:4b:e2:22:a8:f0:c2:89:16:10:67: 36:0b:75:53:aa:d9:9c:48:db:f9:c4:4a:aa:e4:72:4c:ec:00: 06:f2:01:54:60:54:45:2a:99:e4:05:31:25:e8:be:6f:5c:da: 94:99:e1:98:78:6f:cc:6e:3c:df:02:6b:cd:47:d7:6b:fb:05: 8c:cb:db:c0:ad:b6:c5:2d:14:a6:44:68:89:22:48:58:44:0d: bd:62:ce:d5:cd:79:af:fb:6e:9f:62:0b:b6:a4:4e:0e:7c:94: 97:61:d9:28:b4:b6:ca:61:91:f3:87:0e:cb:15:39:90:d9:02: 08:8a:a9:48:21:37:86:7c:5d:a8:ed:37:70:d2:e4:6c:a2:2f: e5:a3:0c:48:32:97:34:4f:7d:19:1a:cc:51:77:81:1f:92:da: 56:9a:0d:7c:8e:89:4d:86:da:45:f0:82:48:5a:1a:2a:7a:e8: 4e:92:eb:63:b4:75:25:5f:4e:69:47:0f:e9:8f:97:01:e7:48: ab:f4:e8:c9:e4:1b:ce:f5:43:17:29:91:86:8d:72:7c:a0:a3: cd:a4:d4:ec:66:ec:69:85:80:3e:ed:54:ed:bc:8c:b7:c7:8c: 2a:be:43:d4:0b:c0:80:2f:d9:6e:8f:57:f9:6d:9e:9d:ff:f0: 44:55:ff:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC MzVFODU5RjkwHhcNMjUwNzE4MTcwODUyWhcNMjUwNzI1MTcwODUyWjAYMRYwFAYD VQQDEw02ODdhN2ZhNC0zYWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslxv6QOFN/5zVSqgPjmjE2300qNzizlDS2eeEyVaDFMC/JU5N0kQWB9R8D/h /fgQfrsYsXXE+wzNxc7kJKLc/rxXtS6DvfhhQtEi2/ITVdBJHIgKZssVp98BybMG WixkIdltnkYCaGzLv9GTzRBU/FjBiEN4np3r7vyUFfYTDyOoujNpdGn6je6eb68m FlwHJN7hWW6FgcPxLkeSbGMZDLoZkXVUB5YZnX0QVpEAImep+RMA2OJMNX4nRgkG rBD0q9us857YzRBFaoCZvMt5cc4t0KgQ25o4yK56jD3QwUCWQjiYB8Et+TBxu2pV NUoPrDewD2707eH4iq2aIhs8QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKutgNVa y32KG1p9JPXyhVfSmT0sMB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEYwRC8wOEVDMkIwQ0EzNkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5 OS1jSGJGeHhXeWl6WG9XZmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHHXpzrGjPOEviIqjwwokWEGc2C3VTqtmcSNv5xEqq5HJM7AAG8gFU YFRFKpnkBTEl6L5vXNqUmeGYeG/MbjzfAmvNR9dr+wWMy9vArbbFLRSmRGiJIkhY RA29Ys7VzXmv+26fYgu2pE4OfJSXYdkotLbKYZHzhw7LFTmQ2QIIiqlIITeGfF2o 7Tdw0uRsoi/lowxIMpc0T30ZGsxRd4EfktpWmg18jolNhtpF8IJIWhoqeuhOkutj tHUlX05pRw/pj5cB50ir9OjJ5BvO9UMXKZGGjXJ8oKPNpNTsZuxphYA+7VTtvIy3 x4wqvkPUC8CAL9luj1f5bZ6d//BEVf/d -----END CERTIFICATE-----Generated at Sun Jul 20 03:43:17 2025 by rpki-client