$ rpki-client -vvf rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft File: vIlHKy_1NJ5Maoqwmc745o3XuZU.mft (raw, json) Hash identifier: V97kO/L6OI8KsfKPdU2sdYYbXBpavgm/TiGTApYWC50= Subject key identifier: 30:93:EF:B1:00:53:9E:8C:14:2E:35:3B:DD:65:87:7C:95:CB:FA:DD Authority key identifier: BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 Certificate issuer: /CN=A91495CF/serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Certificate serial: 07FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft Manifest number: 07F9 Signing time: Fri 18 Jul 2025 21:10:38 +0000 Manifest this update: Fri 18 Jul 2025 21:10:37 +0000 Manifest next update: Fri 25 Jul 2025 21:10:37 +0000 Files and hashes: 1: vIlHKy_1NJ5Maoqwmc745o3XuZU.crl (hash: jgbB4oF0fsYNj+B/iePODrfXL4w3HbX4sUZ9r24lqJc=) 2: 27DCF5D6EBAC11EAA7A0FB1FC4F9AE02.roa (hash: 4fzem4ahEMq6xHsoRwyaVn0YkdRGg0st3UIcj7ppJ2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2046 (0x7fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91495CF, serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Validity Not Before: Jul 18 21:10:37 2025 GMT Not After : Jul 25 21:10:37 2025 GMT Subject: CN=687ab84e-271f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2a:31:a6:bf:4a:cd:b9:dc:fa:34:4c:49:a0: ee:5c:a7:34:5a:04:3c:b2:b2:14:8e:91:12:63:a6: 9a:05:f2:10:86:01:5b:f9:f0:e9:ed:23:f6:3b:b5: 1d:e3:5d:7b:e6:6f:73:ea:bf:ec:2d:bc:ef:4d:75: 13:ad:c8:78:8d:0b:e7:96:ad:dc:d0:1f:9e:87:45: d8:fd:15:6a:1f:98:08:3c:5d:8f:47:16:8b:6b:d1: f4:6e:4c:8f:64:8b:a6:bb:7f:77:4b:ff:8a:1b:02: 76:3d:b5:cb:c3:00:9a:a1:c9:f0:bc:c7:cc:9d:b8: 7b:98:c0:1d:a7:0f:03:a5:c7:2c:0b:e4:f7:a1:48: 6d:45:90:ce:d3:4a:27:f6:cc:52:5d:44:d2:88:d0: b4:a3:21:a6:b2:7e:47:fc:16:1f:dd:96:70:8c:fc: a4:42:09:b1:25:ef:24:b6:71:3d:59:d7:34:9d:c7: ee:da:81:25:6a:72:9c:1f:e4:8f:8c:15:26:44:88: f9:71:7a:34:3e:d4:99:92:80:12:1e:58:ed:89:cf: 1f:8e:00:e7:72:be:d6:5f:0d:71:72:80:bb:51:a8: 4d:07:ca:81:26:8a:df:81:07:27:fe:1c:07:22:97: e1:c7:90:b6:fc:80:2b:ae:cf:ae:ec:8a:ea:54:6e: d6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:93:EF:B1:00:53:9E:8C:14:2E:35:3B:DD:65:87:7C:95:CB:FA:DD X509v3 Authority Key Identifier: keyid:BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:b6:87:7f:35:48:7b:20:51:35:f0:4c:c1:fd:87:4c:8f:3d: e7:1b:f7:10:aa:92:89:0e:34:bc:ed:f2:11:4c:91:49:a2:6f: 91:93:0e:08:d1:bb:9c:97:78:77:d7:91:8a:6f:33:63:f8:f3: e2:c1:de:42:b8:64:26:7d:fb:9c:9f:f4:62:d5:7d:12:c4:75: cc:26:fc:69:e6:c3:91:26:46:81:32:78:9b:b1:dd:da:a8:b6: e2:f9:55:58:9b:a1:08:b0:50:65:0b:b3:a2:92:37:14:3d:28: a3:ea:8a:2b:5e:26:53:ab:fb:54:c1:f2:15:ae:25:3e:66:87: 04:fe:d0:4f:6e:d2:85:01:b2:97:a2:e0:f7:49:dc:a2:e3:0a: 16:e7:fc:08:0c:ef:8f:e3:ac:00:18:74:ab:4c:f6:8d:7b:94: f4:1c:f3:25:06:0f:b2:fa:67:46:af:0c:cb:dc:13:37:5d:ff: c1:57:c3:18:2f:7d:b0:bd:fd:98:59:7b:21:85:63:7b:40:56: 52:d0:bb:30:07:de:8e:9a:fc:99:76:0b:7f:91:75:af:a3:e5: 12:36:0d:18:c9:b3:3e:c7:95:3b:94:6b:e1:61:5c:a1:f4:79: 8a:d3:f4:44:4b:b3:65:1e:b7:d5:21:1b:4b:64:f8:3f:e4:ae: 06:37:f8:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk1Q0YxMTAvBgNVBAUTKEJDODk0NzJCMkZGNTM0OUU0QzZBOEFCMDk5Q0VGOEU2 OEREN0I5OTUwHhcNMjUwNzE4MjExMDM3WhcNMjUwNzI1MjExMDM3WjAYMRYwFAYD VQQDEw02ODdhYjg0ZS0yNzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoyoxpr9Kzbnc+jRMSaDuXKc0WgQ8srIUjpESY6aaBfIQhgFb+fDp7SP2O7Ud 41175m9z6r/sLbzvTXUTrch4jQvnlq3c0B+eh0XY/RVqH5gIPF2PRxaLa9H0bkyP ZIumu393S/+KGwJ2PbXLwwCaocnwvMfMnbh7mMAdpw8DpccsC+T3oUhtRZDO00on 9sxSXUTSiNC0oyGmsn5H/BYf3ZZwjPykQgmxJe8ktnE9Wdc0ncfu2oElanKcH+SP jBUmRIj5cXo0PtSZkoASHljtic8fjgDncr7WXw1xcoC7UahNB8qBJorfgQcn/hwH Ipfhx5C2/IArrs+u7IrqVG7W7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCT77EA U56MFC41O91lh3yVy/rdMB8GA1UdIwQYMBaAFLyJRysv9TSeTGqKsJnO+OaN17mV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTVDRi8yQTUxMDY5Q0VC QUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5KNU1hb3F3bWM3NDVvM1h1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJbEhLeV8xTko1TWFvcXdtYzc0NW8zWHVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTVDRi8yQTUxMDY5Q0VCQUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5K NU1hb3F3bWM3NDVvM1h1WlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChtod/NUh7IFE18EzB/YdMjz3nG/cQqpKJDjS87fIRTJFJom+Rkw4I 0bucl3h315GKbzNj+PPiwd5CuGQmffucn/Ri1X0SxHXMJvxp5sORJkaBMnibsd3a qLbi+VVYm6EIsFBlC7OikjcUPSij6oorXiZTq/tUwfIVriU+ZocE/tBPbtKFAbKX ouD3Sdyi4woW5/wIDO+P46wAGHSrTPaNe5T0HPMlBg+y+mdGrwzL3BM3Xf/BV8MY L32wvf2YWXshhWN7QFZS0LswB96OmvyZdgt/kXWvo+USNg0YybM+x5U7lGvhYVyh 9HmK0/RES7NlHrfVIRtLZPg/5K4GN/gz -----END CERTIFICATE-----Generated at Sun Jul 20 11:24:00 2025 by rpki-client