$ rpki-client -vvf rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft File: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft (raw, json) Hash identifier: PVfLPUfufo8O+qXejJNpJZOZzw0N+1O0p35j5sBWjr4= Subject key identifier: 5C:EB:00:DD:95:3D:B5:D8:DE:F4:8D:C0:69:EF:BC:77:EB:10:55:87 Authority key identifier: BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2 Certificate issuer: /CN=A917B503/serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft Manifest number: C3 Signing time: Mon 21 Jul 2025 06:00:31 +0000 Manifest this update: Mon 21 Jul 2025 06:00:31 +0000 Manifest next update: Mon 28 Jul 2025 06:00:31 +0000 Files and hashes: 1: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl (hash: ad3nkEj3uvU7wBFA+S/LPQoX3Qt78R+Nf4TEsjZ1U0s=) 2: FF7048A08BB111EF8981B871C4F9AE02.roa (hash: 9uEwzB8ckH0lupP2vcJh2pZkJ61ZIv0842o4n0sbwyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B503, serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2 Validity Not Before: Jul 21 06:00:31 2025 GMT Not After : Jul 28 06:00:31 2025 GMT Subject: CN=687dd77f-1218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:36:7f:f0:87:12:ca:56:7f:40:d9:27:c6:76: 4a:0b:c8:a2:69:8f:6c:26:67:b7:c3:f6:a6:a0:70: 51:eb:25:f7:d2:93:5f:9a:ed:79:0f:2c:90:f4:34: 5f:4b:79:af:2a:ec:0f:f0:cc:d9:fa:74:6e:8b:ec: 92:27:56:1d:07:0b:e2:71:10:e4:f3:dc:ce:30:3d: 0d:6e:56:5d:83:61:21:5f:be:3a:5e:b7:92:41:d3: 4b:5b:1d:5d:58:a4:b7:dc:f3:32:62:62:c2:e4:3c: b6:10:1d:35:3c:bd:d0:5d:bf:ec:f6:41:f5:2a:77: 5f:6c:42:60:19:0f:57:6e:78:0d:d9:a6:a7:65:6a: e0:cb:ad:70:0c:ff:23:a1:94:e0:a5:92:79:c8:4b: b8:5f:e0:e9:d1:29:d5:50:0f:1f:8f:69:d9:01:c5: 91:16:c3:76:29:67:bb:6a:b0:b1:1b:af:fd:a7:b1: 12:ee:03:2e:51:ee:05:2e:60:23:97:d0:3c:88:6f: e5:a7:c9:a4:47:29:67:fd:f8:ca:bc:9c:14:c8:d6: 7f:d6:f7:27:12:3d:67:36:c9:6d:29:fb:e0:b8:23: da:69:f1:06:63:cb:75:5d:68:35:3f:a1:e2:99:68: d0:3f:67:d3:15:48:b7:49:41:c0:1e:cd:9b:b1:7b: 60:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EB:00:DD:95:3D:B5:D8:DE:F4:8D:C0:69:EF:BC:77:EB:10:55:87 X509v3 Authority Key Identifier: keyid:BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:5f:3d:d9:12:22:9e:26:9b:db:85:8c:aa:a8:35:ab:cc:ef: 97:4d:dc:36:ff:7e:b6:89:72:c4:79:8f:99:bc:ab:bc:31:b7: 1f:06:83:43:6f:b3:48:18:2a:31:e1:23:e4:b3:6f:3a:9b:7f: dc:eb:e6:db:19:e5:59:f0:ff:05:fe:c1:ce:dc:f8:9c:fc:b8: de:c4:25:0b:30:8a:5b:b3:05:62:e9:91:ea:3d:30:a2:cb:ca: 4d:d5:9b:cc:d4:f8:75:98:5d:bc:65:1e:44:98:af:dc:a9:73: aa:15:36:46:31:ef:e3:8c:2d:9c:fb:ce:fb:32:0e:c0:e2:4a: 0e:b8:94:a8:c5:f1:91:8a:82:f7:72:c9:41:08:73:05:03:37: 71:15:dd:23:a8:bf:0e:8a:a5:30:e1:9c:2c:45:cb:5f:d0:ba: 5c:0b:2c:88:b3:5c:15:1f:b3:27:41:49:39:15:28:87:ae:6d: ed:a4:7e:fa:c6:46:fe:4a:65:11:e8:1b:98:2f:85:43:a8:37: 85:dd:64:57:9d:45:70:56:b3:73:45:79:42:96:b2:78:8d:86: 01:17:24:7d:84:bc:ad:3c:b6:75:a7:6c:dc:72:a4:b7:5e:28: cb:88:4e:f6:ca:ae:4e:6c:fb:b5:18:4a:b9:77:f7:0d:31:cb: f6:85:43:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MDMxMTAvBgNVBAUTKEJENjNFMEREQ0I1Q0Q0MUIzNDUwMURGMkU4MUEyQTcy Q0VFMzZFRjIwHhcNMjUwNzIxMDYwMDMxWhcNMjUwNzI4MDYwMDMxWjAYMRYwFAYD VQQDEw02ODdkZDc3Zi0xMjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7TZ/8IcSylZ/QNknxnZKC8iiaY9sJme3w/amoHBR6yX30pNfmu15DyyQ9DRf S3mvKuwP8MzZ+nRui+ySJ1YdBwvicRDk89zOMD0NblZdg2EhX746XreSQdNLWx1d WKS33PMyYmLC5Dy2EB01PL3QXb/s9kH1KndfbEJgGQ9XbngN2aanZWrgy61wDP8j oZTgpZJ5yEu4X+Dp0SnVUA8fj2nZAcWRFsN2KWe7arCxG6/9p7ES7gMuUe4FLmAj l9A8iG/lp8mkRyln/fjKvJwUyNZ/1vcnEj1nNsltKfvguCPaafEGY8t1XWg1P6Hi mWjQP2fTFUi3SUHAHs2bsXtguwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzrAN2V PbXY3vSNwGnvvHfrEFWHMB8GA1UdIwQYMBaAFL1j4N3LXNQbNFAd8ugaKnLO427y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUwMy83Qjg4NUZFNDQz MTAxMUVGODk0OEEzODFDNEY5QUUwMi92V1BnM2N0YzFCczBVQjN5NkJvcWNzN2pi dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZXUGczY3RjMUJzMFVCM3k2Qm9xY3M3amJ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUwMy83Qjg4NUZFNDQzMTAxMUVGODk0OEEzODFDNEY5QUUwMi92V1BnM2N0YzFC czBVQjN5NkJvcWNzN2pidkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhXz3ZEiKeJpvbhYyqqDWrzO+XTdw2/362iXLEeY+ZvKu8MbcfBoND b7NIGCox4SPks286m3/c6+bbGeVZ8P8F/sHO3Pic/LjexCULMIpbswVi6ZHqPTCi y8pN1ZvM1Ph1mF28ZR5EmK/cqXOqFTZGMe/jjC2c+877Mg7A4koOuJSoxfGRioL3 cslBCHMFAzdxFd0jqL8OiqUw4ZwsRctf0LpcCyyIs1wVH7MnQUk5FSiHrm3tpH76 xkb+SmUR6BuYL4VDqDeF3WRXnUVwVrNzRXlClrJ4jYYBFyR9hLytPLZ1p2zccqS3 XijLiE72yq5ObPu1GEq5d/cNMcv2hUOD -----END CERTIFICATE-----Generated at Mon Jul 21 18:34:42 2025 by rpki-client