$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft File: VXcPY6DmX0wvyWrxmLxXhNznikY.mft (raw, json) Hash identifier: tsfzZ30LohxDEJBTwXkerVl8+9B2RsF5dgSD7YhESo0= Subject key identifier: 70:61:95:F6:F1:C1:6F:9B:38:48:59:8F:25:02:0D:90:7D:E5:9F:C6 Authority key identifier: 55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46 Certificate issuer: /CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft Manifest number: B4 Signing time: Sat 19 Jul 2025 06:16:09 +0000 Manifest this update: Sat 19 Jul 2025 06:16:08 +0000 Manifest next update: Sat 26 Jul 2025 06:16:08 +0000 Files and hashes: 1: VXcPY6DmX0wvyWrxmLxXhNznikY.crl (hash: V6GipCbOSvzCtx09o3Hk9wT2xqWOKge3Ti8Sf8lGscM=) 2: 3590B0F65B9B11EFB90EBF42C4F9AE02.roa (hash: JxyJ1mmGQ9IoO293w2tx2mXeRaPBNLf0zeXpdM0cN9g=) 3: 887E73265B9A11EF80F47C41C4F9AE02.roa (hash: Yay+SyFT5tfziX8uJKhZyhJXv1ePOGC0M822VW0/7oE=) 4: 8A54B9326F0C11EF866A7A83C4F9AE02.roa (hash: //q9Ixb8vsAdKNlqegTg4EF3x3ZRrnQzXIbZ1THsPp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B75A, serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46 Validity Not Before: Jul 19 06:16:08 2025 GMT Not After : Jul 26 06:16:08 2025 GMT Subject: CN=687b3828-bf35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:dc:68:72:00:15:9e:f9:b6:f5:88:3e:18:b7: b7:22:cf:4e:8d:96:4c:da:35:cc:1c:a6:e8:33:6e: 30:7d:6a:14:88:fc:01:76:db:bf:81:da:68:58:8a: 62:70:54:d8:3b:07:07:9f:e9:58:25:ab:4c:8b:61: e3:a8:de:60:9f:4f:84:71:b8:4b:60:53:0b:1a:a8: 92:4f:08:af:a1:d0:b4:ef:e2:22:aa:15:46:91:1b: e4:93:c7:54:15:3f:50:fb:72:97:7e:13:93:2c:69: c6:a0:52:04:e5:77:c7:3e:63:49:79:94:9b:60:ad: 30:75:3e:1d:99:2b:2b:28:63:5b:10:3b:32:e0:e8: 58:3b:1f:cd:4b:f6:0b:21:55:4f:da:8b:ac:24:52: dc:f0:7e:b1:ea:66:d5:7b:73:10:0f:a5:72:2f:a4: ea:ef:0e:26:b6:06:60:97:40:1e:84:80:be:a3:bf: ed:67:ec:dd:71:60:dc:e3:ea:3c:10:97:47:ed:c8: 03:3e:f4:a9:f5:5d:a8:56:de:6a:d9:1c:4f:18:61: 09:77:ef:e3:67:72:e8:24:a6:b5:77:19:a5:2c:1d: f6:34:c7:ad:c1:3b:53:21:09:89:e4:4c:04:66:57: 8b:43:da:4f:dd:d6:7d:61:6b:b2:1e:e8:4c:e8:3e: 7e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:61:95:F6:F1:C1:6F:9B:38:48:59:8F:25:02:0D:90:7D:E5:9F:C6 X509v3 Authority Key Identifier: keyid:55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:74:64:81:80:94:45:eb:0b:70:17:17:31:0e:83:92:55:cf: fd:76:46:fa:14:c6:88:b2:96:39:f3:61:54:fd:f9:2b:7a:6c: 8d:5a:a1:35:3d:a0:f0:e2:bd:2c:60:0f:1a:19:78:c1:a4:53: 17:4c:e6:35:16:e8:36:df:e6:a8:90:08:0f:73:34:c3:da:f1: c7:6f:2f:c4:38:0e:8a:06:aa:c2:e4:1f:ea:7f:37:c5:85:12: 7e:fa:76:83:c0:a9:ab:c7:22:3c:fe:93:4b:65:c6:0d:68:61: 71:74:39:5b:bd:b8:3f:a5:be:4d:95:49:19:e0:44:2b:cc:6d: b8:d8:28:e5:71:34:21:69:aa:7c:29:7c:f6:8e:36:10:f8:f3: b0:75:4d:51:7c:d9:8f:cf:90:bb:6d:fd:49:8a:7f:5a:52:5d: c4:de:e7:39:db:6b:a3:44:9c:bc:03:f6:f6:0d:6c:90:3a:fd: bf:2f:b9:6f:83:51:16:12:92:37:03:e2:78:f4:f8:e1:6d:a7: 05:aa:19:0a:ad:1c:96:de:54:d3:3b:e6:00:fc:a2:dc:3c:15: b9:29:fe:40:99:90:3e:f3:ea:ef:6e:1f:1e:7e:91:1d:ed:f4: 9a:01:b7:08:5e:15:df:3f:44:57:44:be:16:ee:8c:ce:db:6f: 7c:4c:bf:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI3NUExMTAvBgNVBAUTKDU1NzcwRjYzQTBFNjVGNEMyRkM5NkFGMTk4QkM1Nzg0 RENFNzhBNDYwHhcNMjUwNzE5MDYxNjA4WhcNMjUwNzI2MDYxNjA4WjAYMRYwFAYD VQQDEw02ODdiMzgyOC1iZjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl9xocgAVnvm29Yg+GLe3Is9OjZZM2jXMHKboM24wfWoUiPwBdtu/gdpoWIpi cFTYOwcHn+lYJatMi2HjqN5gn0+EcbhLYFMLGqiSTwivodC07+IiqhVGkRvkk8dU FT9Q+3KXfhOTLGnGoFIE5XfHPmNJeZSbYK0wdT4dmSsrKGNbEDsy4OhYOx/NS/YL IVVP2ousJFLc8H6x6mbVe3MQD6VyL6Tq7w4mtgZgl0AehIC+o7/tZ+zdcWDc4+o8 EJdH7cgDPvSp9V2oVt5q2RxPGGEJd+/jZ3LoJKa1dxmlLB32NMetwTtTIQmJ5EwE ZleLQ9pP3dZ9YWuyHuhM6D5+zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBhlfbx wW+bOEhZjyUCDZB95Z/GMB8GA1UdIwQYMBaAFFV3D2Og5l9ML8lq8Zi8V4Tc54pG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjc1QS8xMkQzMEZEODVC OUExMUVGODIwMjc2NDBDNEY5QUUwMi9WWGNQWTZEbVgwd3Z5V3J4bUx4WGhOem5p a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZYY1BZNkRtWDB3dnlXcnhtTHhYaE56bmlrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjc1QS8xMkQzMEZEODVCOUExMUVGODIwMjc2NDBDNEY5QUUwMi9WWGNQWTZEbVgw d3Z5V3J4bUx4WGhOem5pa1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJdGSBgJRF6wtwFxcxDoOSVc/9dkb6FMaIspY582FU/fkremyNWqE1 PaDw4r0sYA8aGXjBpFMXTOY1Fug23+aokAgPczTD2vHHby/EOA6KBqrC5B/qfzfF hRJ++naDwKmrxyI8/pNLZcYNaGFxdDlbvbg/pb5NlUkZ4EQrzG242CjlcTQhaap8 KXz2jjYQ+POwdU1RfNmPz5C7bf1Jin9aUl3E3uc522ujRJy8A/b2DWyQOv2/L7lv g1EWEpI3A+J49PjhbacFqhkKrRyW3lTTO+YA/KLcPBW5Kf5AmZA+8+rvbh8efpEd 7fSaAbcIXhXfP0RXRL4W7ozO2298TL8w -----END CERTIFICATE-----Generated at Sun Jul 20 14:27:27 2025 by rpki-client