$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json) Hash identifier: TgVVb6IE2d6ShLNrYGViNxYAag38pkgzo4zKHk3y+h8= Subject key identifier: 63:3A:0E:CB:1E:CA:64:74:8C:CF:E0:25:4F:BE:D9:94:E5:A0:3C:77 Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 34EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft Manifest number: 34C8 Signing time: Fri 18 Jul 2025 14:39:22 +0000 Manifest this update: Fri 18 Jul 2025 14:39:21 +0000 Manifest next update: Fri 25 Jul 2025 14:39:21 +0000 Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: pGx9zq+Bp0pgYg05SXYex6qsLV2Z9pAj9eRG/F0MhME=) 2: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: B6iIcDp1e+xSTCgDaU39YslsY3oYKHC1G8nj3LY3fyg=) 3: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: 3yE7jzzRRf/nsUpYCxz901DViCqtx9fcvzcGq8i3VT0=) 4: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: iBQaFzR8EsNKfOhQyR2WaqwTnXNt65iEA7xvcPEERlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13547 (0x34eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: Jul 18 14:39:21 2025 GMT Not After : Jul 25 14:39:21 2025 GMT Subject: CN=687a5c9a-e60f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e5:28:ba:57:2d:5d:91:20:45:df:04:a8:bd: 91:8d:5d:0e:a6:4c:19:ff:b8:1e:b6:62:d1:75:20: d7:a7:18:b2:65:1e:63:cb:0f:6d:57:36:c8:29:64: c6:2a:bf:cc:37:ff:c1:7e:7d:a5:46:20:42:92:8f: 63:02:5e:72:ec:fd:b6:c7:e0:46:68:b6:7b:b0:48: 75:c5:a0:ec:c0:0d:3b:69:e5:1d:bc:c0:2b:65:f0: d4:01:f0:a6:6b:8e:ae:e5:c9:ff:f9:e6:a2:26:b5: 6f:26:f4:b9:3a:88:b8:21:db:cb:ef:b5:fa:c8:a3: ea:47:57:9d:b4:63:f8:e6:52:4d:7b:de:b3:c1:02: a6:36:4c:1d:41:46:19:50:5e:73:02:de:ae:fd:6f: 55:fa:8b:35:74:ba:0a:93:e6:c6:70:fd:f7:ea:5c: 24:b6:f3:8a:3e:67:29:85:6a:ea:0b:84:ad:63:53: 76:b2:93:f6:bf:27:7c:3c:f8:69:0d:90:cc:51:aa: 8a:3d:ed:44:d1:8d:08:09:84:6c:84:bf:49:b2:27: 82:f6:3f:7e:60:98:61:8c:31:77:46:50:57:56:3b: a9:7a:be:5a:d6:40:eb:c7:99:87:19:30:e6:4a:e0: be:cd:e4:40:91:a7:8c:94:ff:f2:32:92:3d:23:97: 80:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3A:0E:CB:1E:CA:64:74:8C:CF:E0:25:4F:BE:D9:94:E5:A0:3C:77 X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:da:17:99:fb:a0:47:fa:99:86:f4:f9:1f:73:17:b8:0c:b6: 32:12:25:84:3a:b2:e7:fa:3e:ed:97:25:9b:7a:b6:5d:78:62: 3c:71:68:e1:ee:52:8b:df:a5:01:19:9f:28:b3:c8:39:f6:20: b2:37:4d:30:f5:c0:b2:17:b1:83:67:80:ec:78:de:33:4c:d8: 3e:ca:18:7b:67:25:45:f8:62:eb:55:e7:57:28:10:41:bd:e9: 34:f2:cd:5b:eb:83:07:dd:22:7f:15:25:7f:af:5e:24:fb:37: e7:a5:48:94:c4:0b:2a:60:d6:73:e9:25:e1:6e:03:4f:3e:f4: c0:f4:9a:b4:31:61:b2:f1:0a:ad:5f:50:2e:a4:d4:28:85:28: 63:fd:dc:4f:10:ea:b5:f6:98:30:eb:e5:db:64:d6:f6:45:9b: ce:fd:6e:04:3e:a3:5b:05:4c:64:ee:64:a5:83:a2:00:25:07: 12:bf:4c:3b:40:72:28:c1:ed:15:4c:ac:f5:ac:19:0f:7f:96: 94:be:33:47:24:95:2a:94:61:f8:49:a7:9b:e2:dd:d6:1b:34: e4:88:16:ef:82:df:54:2d:06:9b:0a:df:a1:fe:3b:20:e0:8e: dc:e7:3a:50:4d:7b:4f:46:c2:28:fe:bb:d9:71:ea:1b:a2:94: 7d:15:b6:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjUwNzE4MTQzOTIxWhcNMjUwNzI1MTQzOTIxWjAYMRYwFAYD VQQDEw02ODdhNWM5YS1lNjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eUoulctXZEgRd8EqL2RjV0OpkwZ/7getmLRdSDXpxiyZR5jyw9tVzbIKWTG Kr/MN//Bfn2lRiBCko9jAl5y7P22x+BGaLZ7sEh1xaDswA07aeUdvMArZfDUAfCm a46u5cn/+eaiJrVvJvS5Ooi4IdvL77X6yKPqR1edtGP45lJNe96zwQKmNkwdQUYZ UF5zAt6u/W9V+os1dLoKk+bGcP336lwktvOKPmcphWrqC4StY1N2spP2vyd8PPhp DZDMUaqKPe1E0Y0ICYRshL9JsieC9j9+YJhhjDF3RlBXVjuper5a1kDrx5mHGTDm SuC+zeRAkaeMlP/yMpI9I5eAIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGM6Dsse ymR0jM/gJU++2ZTloDx3MB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ4Ri84QzgxQTg1NjFEOEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdj WlVZeTZMNkE2Ny1mLTFaUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs2heZ+6BH+pmG9Pkfcxe4DLYyEiWEOrLn+j7tlyWberZdeGI8cWjh 7lKL36UBGZ8os8g59iCyN00w9cCyF7GDZ4DseN4zTNg+yhh7ZyVF+GLrVedXKBBB vek08s1b64MH3SJ/FSV/r14k+zfnpUiUxAsqYNZz6SXhbgNPPvTA9Jq0MWGy8Qqt X1AupNQohShj/dxPEOq19pgw6+XbZNb2RZvO/W4EPqNbBUxk7mSlg6IAJQcSv0w7 QHIowe0VTKz1rBkPf5aUvjNHJJUqlGH4Saeb4t3WGzTkiBbvgt9ULQabCt+h/jsg 4I7c5zpQTXtPRsIo/rvZceobopR9FbaK -----END CERTIFICATE-----Generated at Sun Jul 20 14:22:55 2025 by rpki-client