$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft File: VN6ZlQt_yVgf6KyWHze3iY81zcM.mft (raw, json) Hash identifier: HZRTlX5FL+nAdQ0x4egzIE2NsmjoRwEzJ/YXwPrKcBM= Subject key identifier: F9:BD:C8:0A:97:C3:F8:FA:FA:CC:1F:51:B3:44:77:18:43:BB:ED:77 Authority key identifier: 54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3 Certificate issuer: /CN=A917E458/serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft Manifest number: 23 Signing time: Sat 19 Jul 2025 08:05:46 +0000 Manifest this update: Sat 19 Jul 2025 08:05:45 +0000 Manifest next update: Sat 26 Jul 2025 08:05:45 +0000 Files and hashes: 1: VN6ZlQt_yVgf6KyWHze3iY81zcM.crl (hash: SrkhEUUcXCXgPu2PSpZscIfIgERTX9Se4Oj3ULE8ok4=) 2: 8F8A915C590C11F0AC0A3639C4F9AE02.roa (hash: 65bo4JvkKG1LiWSEJwhJil93bHGvwvvTBpuZe2kaGMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E458, serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3 Validity Not Before: Jul 19 08:05:45 2025 GMT Not After : Jul 26 08:05:45 2025 GMT Subject: CN=687b51da-e848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b6:47:e0:62:b6:76:c3:13:a8:02:a0:e2:91: 77:8d:f4:bd:88:cc:5f:ab:d7:65:20:3b:c0:f7:ee: 89:3d:6b:01:6a:88:5f:8f:8e:ce:79:18:f5:f3:ae: 5d:2c:d5:7d:1e:2b:74:91:8b:d5:19:55:c6:ed:1a: e6:68:74:b7:9d:08:e8:ec:15:9d:8f:6d:d5:db:a1: 73:66:c9:c8:d9:c8:94:ba:dc:38:8e:26:3c:64:37: 0f:e4:1b:b6:f4:c1:c7:58:d0:26:a1:55:06:05:ce: a1:c1:94:45:57:0a:51:a6:16:f7:f8:07:d8:68:5e: a0:ee:94:93:39:7d:cf:52:c9:08:95:5b:d1:d1:33: 38:73:7f:69:88:ed:15:2c:56:45:27:ca:0b:fc:8a: 46:35:1c:d1:d5:c3:fc:fa:49:32:a0:07:c6:48:0a: e8:d9:06:09:be:59:76:ba:0d:4b:b2:c7:b3:40:18: 31:46:10:fc:b0:07:0d:80:2e:2c:18:02:d0:2e:1d: 64:b6:6d:e4:15:c0:94:4e:31:d7:0f:5d:25:25:e9: 3e:2b:73:29:b5:7f:84:84:a1:d4:d2:fb:0f:74:68: ee:5e:e7:0e:69:7a:4b:1e:81:6b:57:24:ce:e6:3c: 9c:32:65:a3:63:66:c4:09:6c:ea:ad:d8:b9:7f:64: 62:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BD:C8:0A:97:C3:F8:FA:FA:CC:1F:51:B3:44:77:18:43:BB:ED:77 X509v3 Authority Key Identifier: keyid:54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:72:17:80:a5:6a:c4:ae:0b:23:1a:0c:3b:79:fc:02:1c:ee: d6:0c:0f:04:74:59:c4:50:61:36:9c:25:a1:ea:01:74:f0:e4: 6b:d7:84:b6:9e:92:f0:f3:29:81:6c:c6:7d:5a:e2:ab:a7:ae: e5:3d:60:4a:51:67:13:19:22:5a:32:de:8c:6f:a4:47:d2:e8: ac:a9:46:37:46:b8:e1:72:e5:f9:e6:16:b8:26:ff:61:d4:87: 54:78:9f:e8:c8:0c:04:f0:8d:dc:bd:26:49:60:cf:4d:ef:79: 62:14:fe:94:59:a3:42:bc:df:24:55:36:25:37:ac:d5:98:a2: dd:b9:09:5f:7b:15:b5:87:c6:28:66:f7:8c:30:85:d2:ba:0e: 09:50:58:46:9a:fc:35:e2:dc:64:e8:15:fa:e7:72:d6:30:bc: 8f:c3:b3:27:22:8c:b2:4c:2c:ae:34:48:1a:46:27:f2:67:4b: 73:71:17:18:14:3c:46:38:d3:19:9b:b9:c9:8f:e1:c3:11:23: 58:ea:03:1f:76:ec:29:fb:56:41:55:ae:4b:e9:f7:f3:ee:02: 85:ef:87:97:b1:b8:a7:3f:a7:3e:86:b3:42:5e:f4:e6:34:72: 92:30:64:ed:04:47:0a:bd:e2:25:17:4a:ca:d2:67:98:6b:71: 0e:26:ed:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTQ1ODExMC8GA1UEBRMoNTRERTk5OTUwQjdGQzk1ODFGRThBQzk2MUYzN0I3ODk4 RjM1Q0RDMzAeFw0yNTA3MTkwODA1NDVaFw0yNTA3MjYwODA1NDVaMBgxFjAUBgNV BAMTDTY4N2I1MWRhLWU4NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVtkfgYrZ2wxOoAqDikXeN9L2IzF+r12UgO8D37ok9awFqiF+Pjs55GPXzrl0s 1X0eK3SRi9UZVcbtGuZodLedCOjsFZ2PbdXboXNmycjZyJS63DiOJjxkNw/kG7b0 wcdY0CahVQYFzqHBlEVXClGmFvf4B9hoXqDulJM5fc9SyQiVW9HRMzhzf2mI7RUs VkUnygv8ikY1HNHVw/z6STKgB8ZICujZBgm+WXa6DUuyx7NAGDFGEPywBw2ALiwY AtAuHWS2beQVwJROMdcPXSUl6T4rcym1f4SEodTS+w90aO5e5w5peksegWtXJM7m PJwyZaNjZsQJbOqt2Ll/ZGKxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+b3ICpfD +Pr6zB9Rs0R3GEO77XcwHwYDVR0jBBgwFoAUVN6ZlQt/yVgf6KyWHze3iY81zcMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNDU4LzFFQzcyRjIyMzBE ODExRjBBN0JFMkU0RkM0RjlBRTAyL1ZONlpsUXRfeVZnZjZLeVdIemUzaVk4MXpj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVk42WmxRdF95VmdmNkt5V0h6ZTNpWTgxemNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF NDU4LzFFQzcyRjIyMzBEODExRjBBN0JFMkU0RkM0RjlBRTAyL1ZONlpsUXRfeVZn ZjZLeVdIemUzaVk4MXpjTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHVyF4ClasSuCyMaDDt5/AIc7tYMDwR0WcRQYTacJaHqAXTw5GvXhLae kvDzKYFsxn1a4qunruU9YEpRZxMZIloy3oxvpEfS6KypRjdGuOFy5fnmFrgm/2HU h1R4n+jIDATwjdy9Jklgz03veWIU/pRZo0K83yRVNiU3rNWYot25CV97FbWHxihm 94wwhdK6DglQWEaa/DXi3GToFfrnctYwvI/DsycijLJMLK40SBpGJ/JnS3NxFxgU PEY40xmbucmP4cMRI1jqAx927Cn7VkFVrkvp9/PuAoXvh5exuKc/pz6Gs0Je9OY0 cpIwZO0ERwq94iUXSsrSZ5hrcQ4m7ZM= -----END CERTIFICATE-----Generated at Sun Jul 20 11:29:04 2025 by rpki-client