$ rpki-client -vvf rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft File: VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft (raw, json) Hash identifier: llPQyLqIozOgcU4cAYBLuN3L4h5ZVwGqk3CVPUR8b9E= Subject key identifier: 96:FD:40:C4:2E:6B:13:A3:A2:6E:BA:79:19:32:1C:86:46:72:45:A4 Authority key identifier: 54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD Certificate issuer: /CN=A91790C3/serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD Certificate serial: 0694 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft Manifest number: 0681 Signing time: Sun 20 Jul 2025 22:31:37 +0000 Manifest this update: Sun 20 Jul 2025 22:31:37 +0000 Manifest next update: Sun 27 Jul 2025 22:31:37 +0000 Files and hashes: 1: VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl (hash: hu2hjpQ26eDNgEohhi5xPbg7J0Hl3zXOeJfJ0WVHjAI=) 2: C437B01282C211EBBB08B280C4F9AE02.roa (hash: jFt3e40+ALQhrJp6OJZEoPNCJM/tKBFq4PlGOIsp684=) 3: C3AD861C82C211EBBB08B280C4F9AE02.roa (hash: ExeORiGRCNK8jvuw56sySZxqK+GOSBQ3JY3+3QQDiXc=) 4: 9EA2D73236D311EF89295180C4F9AE02.roa (hash: f2ke3ZBYV1Ribvo8r5rmx6HoUBDp7E1lgqZwRkmtN9g=) 5: C310545082C211EBBB08B280C4F9AE02.roa (hash: +qteBc7xk/iNE1OmAmAugB8Y+ErzQcUywqF9mnDTvtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1684 (0x694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91790C3, serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD Validity Not Before: Jul 20 22:31:37 2025 GMT Not After : Jul 27 22:31:37 2025 GMT Subject: CN=687d6e49-a0fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:50:a6:15:3c:ed:48:4e:0e:ea:8e:f2:f9:68: 72:e7:82:fb:fe:46:c7:73:85:fc:90:a0:f3:63:d6: b6:c2:55:9f:58:1e:e6:f5:c2:63:7e:04:aa:ad:c4: a2:7f:c3:6b:fb:19:d1:61:c6:c3:30:69:e6:6b:a8: f8:bd:57:4d:bc:b4:cf:c9:0a:da:55:5b:6e:ba:45: 2a:b1:10:ef:38:7d:a5:f2:91:6d:01:c7:16:61:ff: f7:af:93:64:23:af:46:b7:ec:33:9a:a9:14:01:b1: dd:9c:c2:5d:46:4f:6b:d2:bb:22:60:31:eb:09:a3: aa:7b:82:43:d3:5e:04:b1:62:cb:39:b5:f1:26:1a: d4:4b:3d:de:37:54:c1:8f:64:fe:31:e9:cc:04:ce: 7b:4f:9f:a1:94:07:20:12:d9:43:69:d2:83:60:99: 6b:e3:16:bc:d2:0d:d7:0c:9a:c4:b3:7c:10:3f:0b: b9:07:bd:30:31:64:c8:82:c0:80:d3:c2:3f:14:b9: 88:01:19:fb:44:6f:2c:15:14:2e:fd:08:8d:e9:28: ab:9b:97:08:31:93:86:47:d3:2c:d8:cc:c7:f1:bf: 4e:67:4e:a4:c1:19:8c:f1:45:52:36:5d:1d:58:90: 86:40:80:32:7f:b4:e7:e4:0c:af:41:ac:fa:4c:11: b0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FD:40:C4:2E:6B:13:A3:A2:6E:BA:79:19:32:1C:86:46:72:45:A4 X509v3 Authority Key Identifier: keyid:54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:a9:55:47:9e:fd:e3:b3:72:05:e1:da:a2:17:ff:69:2e:ca: 23:56:4b:82:b4:d9:48:a7:3e:fc:2a:d6:5a:63:96:99:92:80: 61:7a:40:3d:e2:da:30:7d:fc:54:ad:ef:a7:35:0d:7a:1a:9e: af:70:41:cb:8d:3c:ac:cb:27:96:86:58:74:81:cb:0f:8e:ed: a5:19:ba:2a:34:f2:f0:34:55:07:ae:d6:f1:43:e0:28:40:69: 33:25:1e:b9:df:73:c2:31:fb:a2:81:27:d3:e7:64:f6:37:73: 5d:5a:b5:cb:5c:44:cf:32:de:36:c9:da:92:48:9d:b6:19:d0: 4d:eb:03:ae:4c:59:92:c4:d5:32:02:37:2b:88:91:e9:50:62: c4:9d:d4:37:23:9b:70:3e:32:2b:99:89:53:07:a6:11:15:ff: b9:f9:04:8b:b8:c7:f1:de:b7:ac:50:46:96:df:f5:2a:d5:3f: 09:95:09:f5:f7:d0:b7:47:43:39:70:0b:51:e7:2e:a0:65:58: 34:0f:f2:7a:18:a7:01:34:75:6a:35:89:d5:ed:5b:24:62:e1: d8:5f:04:1b:fb:e0:a1:c3:d0:81:56:a8:59:2b:b4:b1:bd:41: 55:c3:0d:8f:5e:e0:e2:ed:95:c1:d4:61:69:63:08:81:8f:8e: e7:ea:cc:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzkwQzMxMTAvBgNVBAUTKDU0ODdCNjNGNDRENjkxRDQzNTY4OEFGRTNDOEFDMjdC RkQ5MTEyQUQwHhcNMjUwNzIwMjIzMTM3WhcNMjUwNzI3MjIzMTM3WjAYMRYwFAYD VQQDEw02ODdkNmU0OS1hMGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1CmFTztSE4O6o7y+Why54L7/kbHc4X8kKDzY9a2wlWfWB7m9cJjfgSqrcSi f8Nr+xnRYcbDMGnma6j4vVdNvLTPyQraVVtuukUqsRDvOH2l8pFtAccWYf/3r5Nk I69Gt+wzmqkUAbHdnMJdRk9r0rsiYDHrCaOqe4JD014EsWLLObXxJhrUSz3eN1TB j2T+MenMBM57T5+hlAcgEtlDadKDYJlr4xa80g3XDJrEs3wQPwu5B70wMWTIgsCA 08I/FLmIARn7RG8sFRQu/QiN6Sirm5cIMZOGR9Ms2MzH8b9OZ06kwRmM8UVSNl0d WJCGQIAyf7Tn5AyvQaz6TBGwJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJb9QMQu axOjom66eRkyHIZGckWkMB8GA1UdIwQYMBaAFFSHtj9E1pHUNWiK/jyKwnv9kRKt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTBDMy84NTUzMDVFMjgy QzAxMUVCQkFDRTJBN0JDNEY5QUUwMi9WSWUyUDBUV2tkUTFhSXItUElyQ2VfMlJF cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJZTJQMFRXa2RRMWFJci1QSXJDZV8yUkVxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTBDMy84NTUzMDVFMjgyQzAxMUVCQkFDRTJBN0JDNEY5QUUwMi9WSWUyUDBUV2tk UTFhSXItUElyQ2VfMlJFcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkqVVHnv3js3IF4dqiF/9pLsojVkuCtNlIpz78KtZaY5aZkoBhekA9 4towffxUre+nNQ16Gp6vcEHLjTysyyeWhlh0gcsPju2lGboqNPLwNFUHrtbxQ+Ao QGkzJR6533PCMfuigSfT52T2N3NdWrXLXETPMt42ydqSSJ22GdBN6wOuTFmSxNUy AjcriJHpUGLEndQ3I5twPjIrmYlTB6YRFf+5+QSLuMfx3resUEaW3/Uq1T8JlQn1 99C3R0M5cAtR5y6gZVg0D/J6GKcBNHVqNYnV7VskYuHYXwQb++Chw9CBVqhZK7Sx vUFVww2PXuDi7ZXB1GFpYwiBj47n6sxX -----END CERTIFICATE-----Generated at Mon Jul 21 12:49:55 2025 by rpki-client