$ rpki-client -vvf rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft File: vmOANw9kBuY_dG-vUrxQHsTQvVI.mft (raw, json) Hash identifier: f6vVyWcWozEVSFFsKVtcFMy/o1/tAbG3lYTYeMHaUqw= Subject key identifier: 5F:FD:91:DA:BB:F9:7F:17:39:56:EA:C4:7A:84:CB:BA:E0:49:53:9C Authority key identifier: BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52 Certificate issuer: /CN=A9171B8D/serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft Manifest number: 40 Signing time: Sat 19 Jul 2025 07:44:39 +0000 Manifest this update: Sat 19 Jul 2025 07:44:39 +0000 Manifest next update: Sat 26 Jul 2025 07:44:38 +0000 Files and hashes: 1: vmOANw9kBuY_dG-vUrxQHsTQvVI.crl (hash: 9nyLQhBmZ4fX+ZFYNOGyWVTUGHyZHhtf7HZxlOUq0jY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171B8D, serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52 Validity Not Before: Jul 19 07:44:39 2025 GMT Not After : Jul 26 07:44:38 2025 GMT Subject: CN=687b4ce7-4577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ab:9f:ce:2a:b3:fc:b9:00:21:29:98:7c:1d: bf:1c:fa:5b:71:86:ac:cb:c5:21:f9:e1:42:2b:d2: c4:ac:46:97:ad:f7:38:fc:b8:24:ed:6e:25:7b:e6: 8a:b6:62:49:70:47:42:83:1a:b8:9d:bc:f7:ee:ae: 71:8a:88:99:c9:15:34:c9:b7:f9:3e:0f:61:7a:be: 17:eb:0a:4c:79:db:4f:7b:99:e9:fe:96:f1:6f:d6: e0:b3:24:89:ca:33:32:cd:2e:51:56:b1:57:48:73: ad:c9:aa:4e:96:99:0c:32:40:03:dc:b5:0b:d6:ab: 1f:c6:21:c7:87:c3:b7:ce:9e:a7:f7:ef:8b:01:70: 98:60:e7:04:ca:e5:34:47:80:dc:bc:d4:2f:ae:34: 5c:00:33:4d:ca:9d:4b:54:0d:0f:81:4a:f5:0e:f2: 9f:24:c0:54:72:d4:a1:51:79:da:bd:e4:54:b7:5a: 73:57:01:bf:6e:1f:df:e7:0b:81:02:c7:5b:73:1b: 16:de:5f:97:69:08:63:3b:d1:f6:fd:6b:1c:61:7e: 9d:59:fc:2f:8e:70:ac:cb:6d:62:74:8c:56:17:27: 1f:38:10:21:72:77:91:68:13:07:46:58:0d:ba:26: 25:23:72:d6:ab:d4:62:89:7f:5a:82:3b:90:34:95: 24:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FD:91:DA:BB:F9:7F:17:39:56:EA:C4:7A:84:CB:BA:E0:49:53:9C X509v3 Authority Key Identifier: keyid:BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:f6:74:ed:fd:f4:44:31:2c:40:ed:42:2d:97:0a:fa:e4:28: 12:23:d8:09:74:39:bb:01:52:c8:46:c8:4c:cc:46:c3:2f:01: 2f:bf:ec:ef:13:36:02:83:4e:c0:ce:48:8d:61:94:84:0b:6a: 9f:1a:d5:cb:fc:65:01:81:e2:0a:7d:6f:dc:b7:36:79:e5:21: 94:5c:7f:06:7d:15:c4:d1:1d:e5:5d:69:bb:cd:9a:47:de:78: 0a:63:ce:0b:7f:3b:0b:34:4f:20:cd:2d:61:ff:2a:1b:d6:6b: ca:18:4b:4b:7d:2c:19:b2:9b:73:48:95:01:11:b5:6c:6d:cd: 15:91:e7:17:5d:98:49:b7:2a:7f:9b:92:99:98:65:7b:c6:ef: a8:d4:bb:89:91:6a:33:43:2b:ba:98:98:8a:2f:da:be:85:ad: 07:07:07:82:08:92:59:ca:20:af:2c:ed:94:5f:f3:87:68:1f: e0:96:61:bc:52:d7:11:c4:11:83:15:3b:d9:5f:5c:67:4a:3e: ca:01:17:98:86:aa:8b:81:bc:b6:e4:3b:ae:49:9e:c4:2f:9c: fc:f9:65:f3:a7:6a:94:e1:9a:6c:dc:5f:7e:3e:95:dd:cc:90: c8:fb:57:fb:6a:6a:b2:5c:6b:3a:37:6e:76:21:9d:40:46:ce: 55:42:d5:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MUI4RDExMC8GA1UEBRMoQkU2MzgwMzcwRjY0MDZFNjNGNzQ2RkFGNTJCQzUwMUVD NEQwQkQ1MjAeFw0yNTA3MTkwNzQ0MzlaFw0yNTA3MjYwNzQ0MzhaMBgxFjAUBgNV BAMTDTY4N2I0Y2U3LTQ1NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCq5/OKrP8uQAhKZh8Hb8c+ltxhqzLxSH54UIr0sSsRpet9zj8uCTtbiV75oq2 YklwR0KDGridvPfurnGKiJnJFTTJt/k+D2F6vhfrCkx52097men+lvFv1uCzJInK MzLNLlFWsVdIc63Jqk6WmQwyQAPctQvWqx/GIceHw7fOnqf374sBcJhg5wTK5TRH gNy81C+uNFwAM03KnUtUDQ+BSvUO8p8kwFRy1KFRedq95FS3WnNXAb9uH9/nC4EC x1tzGxbeX5dpCGM70fb9axxhfp1Z/C+OcKzLbWJ0jFYXJx84ECFyd5FoEwdGWA26 JiUjctar1GKJf1qCO5A0lSQJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX/2R2rv5 fxc5VurEeoTLuuBJU5wwHwYDVR0jBBgwFoAUvmOANw9kBuY/dG+vUrxQHsTQvVIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxQjhELzFDRjlBODdBMDNE MTExRjBCMjM0QkMxNUM0RjlBRTAyL3ZtT0FOdzlrQnVZX2RHLXZVcnhRSHNUUXZW SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdm1PQU53OWtCdVlfZEctdlVyeFFIc1RRdlZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx QjhELzFDRjlBODdBMDNEMTExRjBCMjM0QkMxNUM0RjlBRTAyL3ZtT0FOdzlrQnVZ X2RHLXZVcnhRSHNUUXZWSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKH2dO399EQxLEDtQi2XCvrkKBIj2Al0ObsBUshGyEzMRsMvAS+/7O8T NgKDTsDOSI1hlIQLap8a1cv8ZQGB4gp9b9y3NnnlIZRcfwZ9FcTRHeVdabvNmkfe eApjzgt/Ows0TyDNLWH/KhvWa8oYS0t9LBmym3NIlQERtWxtzRWR5xddmEm3Kn+b kpmYZXvG76jUu4mRajNDK7qYmIov2r6FrQcHB4IIklnKIK8s7ZRf84doH+CWYbxS 1xHEEYMVO9lfXGdKPsoBF5iGqouBvLbkO65JnsQvnPz5ZfOnapThmmzcX34+ld3M kMj7V/tqarJcazo3bnYhnUBGzlVC1dY= -----END CERTIFICATE-----Generated at Sat Jul 19 18:44:41 2025 by rpki-client