$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.mft File: ViN5KFSLCC9bE8Fu3D5qfC-A_PE.mft (raw, json) Hash identifier: n0RzQnAOlIt+K/zdHBG+Z8POj+YJyRkYqx/X6SOJ9bc= Subject key identifier: DD:3C:76:43:5D:66:B5:22:2F:9A:A2:0A:53:EC:AE:2B:6A:0C:9C:94 Authority key identifier: 56:23:79:28:54:8B:08:2F:5B:13:C1:6E:DC:3E:6A:7C:2F:80:FC:F1 Certificate issuer: /CN=A91AEB42/serialNumber=56237928548B082F5B13C16EDC3E6A7C2F80FCF1 Certificate serial: 0222 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.mft Manifest number: 020B Signing time: Mon 21 Jul 2025 02:32:31 +0000 Manifest this update: Mon 21 Jul 2025 02:32:30 +0000 Manifest next update: Mon 28 Jul 2025 02:32:30 +0000 Files and hashes: 1: ViN5KFSLCC9bE8Fu3D5qfC-A_PE.crl (hash: vv9vhYmOVrOZocHiUS8gJKLpcKtSJWSNKz8EC6L07WQ=) 2: 7F12211CB57611EF8568F73EC4F9AE02.roa (hash: tE7lbrYSKWHXNwxQkI50sh8OrhEWZzAGOQjYNvq3v5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.crl rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEB42, serialNumber=56237928548B082F5B13C16EDC3E6A7C2F80FCF1 Validity Not Before: Jul 21 02:32:30 2025 GMT Not After : Jul 28 02:32:30 2025 GMT Subject: CN=687da6bf-a31c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ea:1b:7d:6e:71:4e:a1:c4:e3:4c:dd:36:d8: 87:27:19:f4:19:09:57:3d:78:dc:8f:5c:64:eb:53: c4:52:0b:42:00:1d:fa:22:96:60:ab:3c:b2:2a:b0: ac:2a:76:a0:4a:4c:2d:c3:32:1d:2a:1f:80:df:84: 0e:ff:bf:67:58:1e:0b:5b:06:4b:3b:b1:78:7b:6c: 63:2b:01:db:b9:b8:c5:08:8b:f7:18:d7:c1:94:68: 40:b5:b3:0e:bf:da:1f:f8:d6:d8:cd:44:89:05:78: 0c:ce:32:89:f2:4d:49:16:cf:b5:41:f0:a7:41:ff: 20:20:c5:13:7c:65:98:61:d3:29:0f:dd:3a:15:2d: fc:8b:6f:f5:4f:9f:36:05:05:57:f6:ef:1a:04:82: d2:e3:fe:64:5f:81:fa:82:a5:94:b8:a3:7e:2e:09: 36:26:a1:fb:27:69:e3:8a:e1:ef:9e:29:71:38:c7: 66:f8:e3:50:f9:26:ed:e7:70:ee:aa:d4:a3:4a:58: a0:40:f5:98:18:32:72:ef:a4:6a:6a:85:dc:25:d0: 85:9c:da:94:97:35:13:34:bf:9f:9d:9d:f4:9a:ab: 65:42:03:50:c2:3a:44:21:8e:8d:f9:9b:41:a2:79: d5:69:09:d2:88:bd:cb:de:e3:63:28:c2:54:dd:21: a1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3C:76:43:5D:66:B5:22:2F:9A:A2:0A:53:EC:AE:2B:6A:0C:9C:94 X509v3 Authority Key Identifier: keyid:56:23:79:28:54:8B:08:2F:5B:13:C1:6E:DC:3E:6A:7C:2F:80:FC:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:c4:91:bd:3d:3f:15:70:dc:63:33:b3:23:bd:dd:82:1b:0f: 5d:5f:68:ea:61:65:bd:ec:34:fa:80:37:95:3d:23:f4:20:36: 78:e0:d2:d9:f7:9d:a0:00:c6:65:88:69:34:24:e2:f9:2f:c0: 84:ff:5a:2c:5c:3c:b5:d9:34:74:09:8f:9f:77:d6:bc:16:3f: cc:98:6f:c7:8f:cd:cc:a3:92:93:2e:ef:8f:dc:1d:5a:f8:6e: 91:a2:e8:b6:3f:86:e3:be:bd:97:51:af:da:7c:df:6f:d4:4f: 9f:b2:0b:b2:41:3f:c4:50:8a:0a:b1:21:74:d5:91:88:d5:3f: 83:c1:47:5c:49:52:c3:78:10:83:47:c9:84:1e:5d:cd:76:4c: 51:d4:00:c4:a7:62:45:e7:9b:f7:66:e5:e2:b9:57:08:3c:af: 3f:dc:16:1c:4e:28:a8:25:13:9d:a9:9d:45:ea:e6:3b:08:66: ea:f3:8b:92:6b:c4:58:48:16:66:bf:7b:60:53:bc:bb:01:72: 27:13:73:40:2a:9e:fb:58:08:25:ea:04:da:39:14:3e:bf:8c: 1a:21:26:14:f0:1a:45:ae:0d:29:27:29:b2:87:65:a0:ec:9b: fb:63:06:28:a3:50:7c:6f:8f:54:23:4a:59:db:0c:1d:1c:52: 6b:5c:41:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVCNDIxMTAvBgNVBAUTKDU2MjM3OTI4NTQ4QjA4MkY1QjEzQzE2RURDM0U2QTdD MkY4MEZDRjEwHhcNMjUwNzIxMDIzMjMwWhcNMjUwNzI4MDIzMjMwWjAYMRYwFAYD VQQDEw02ODdkYTZiZi1hMzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+obfW5xTqHE40zdNtiHJxn0GQlXPXjcj1xk61PEUgtCAB36IpZgqzyyKrCs KnagSkwtwzIdKh+A34QO/79nWB4LWwZLO7F4e2xjKwHbubjFCIv3GNfBlGhAtbMO v9of+NbYzUSJBXgMzjKJ8k1JFs+1QfCnQf8gIMUTfGWYYdMpD906FS38i2/1T582 BQVX9u8aBILS4/5kX4H6gqWUuKN+Lgk2JqH7J2njiuHvnilxOMdm+ONQ+Sbt53Du qtSjSligQPWYGDJy76RqaoXcJdCFnNqUlzUTNL+fnZ30mqtlQgNQwjpEIY6N+ZtB onnVaQnSiL3L3uNjKMJU3SGhmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN08dkNd ZrUiL5qiClPsritqDJyUMB8GA1UdIwQYMBaAFFYjeShUiwgvWxPBbtw+anwvgPzx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUI0Mi8xQUQ5N0I2NDZB NkUxMUVEQkI5OTAzNjNDNEY5QUUwMi9WaU41S0ZTTENDOWJFOEZ1M0Q1cWZDLUFf UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZpTjVLRlNMQ0M5YkU4RnUzRDVxZkMtQV9QRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUI0Mi8xQUQ5N0I2NDZBNkUxMUVEQkI5OTAzNjNDNEY5QUUwMi9WaU41S0ZTTEND OWJFOEZ1M0Q1cWZDLUFfUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSxJG9PT8VcNxjM7Mjvd2CGw9dX2jqYWW97DT6gDeVPSP0IDZ44NLZ 952gAMZliGk0JOL5L8CE/1osXDy12TR0CY+fd9a8Fj/MmG/Hj83Mo5KTLu+P3B1a +G6Roui2P4bjvr2XUa/afN9v1E+fsguyQT/EUIoKsSF01ZGI1T+DwUdcSVLDeBCD R8mEHl3NdkxR1ADEp2JF55v3ZuXiuVcIPK8/3BYcTiioJROdqZ1F6uY7CGbq84uS a8RYSBZmv3tgU7y7AXInE3NAKp77WAgl6gTaORQ+v4waISYU8BpFrg0pJymyh2Wg 7Jv7YwYoo1B8b49UI0pZ2wwdHFJrXEH+ -----END CERTIFICATE-----Generated at Mon Jul 21 12:30:07 2025 by rpki-client