$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft File: T_VN6rrUlFWSUQEqpawiKVDLJh4.mft (raw, json) Hash identifier: YdswZGwq9AykzyRCLLA4IBwKdFEk9X+DmnVuvOJvwk8= Subject key identifier: 4C:01:03:53:1A:B5:B5:00:9D:0F:EA:A6:F9:9E:A7:0E:AE:8F:38:16 Authority key identifier: 4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E Certificate issuer: /CN=A91B38F5/serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft Manifest number: 42 Signing time: Mon 21 Jul 2025 07:39:55 +0000 Manifest this update: Mon 21 Jul 2025 07:39:54 +0000 Manifest next update: Mon 28 Jul 2025 07:39:54 +0000 Files and hashes: 1: T_VN6rrUlFWSUQEqpawiKVDLJh4.crl (hash: TtB5wyTDxyxylaT9z2oR6p6S9DF9T4k7j0zZBfwZW7A=) 2: B66603C6025C11F0BDF41912C4F9AE02.roa (hash: H2+Ddkh87XoYI/8vzCTZnxyRNxL5o9son0tiMIrsX2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B38F5, serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E Validity Not Before: Jul 21 07:39:54 2025 GMT Not After : Jul 28 07:39:54 2025 GMT Subject: CN=687deeca-51a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ef:90:57:20:6e:e6:e9:99:a3:78:39:8e:ec: 62:df:47:3a:16:59:39:dd:8b:d1:de:6c:76:ab:fb: 9a:4a:99:37:50:8f:f8:cd:84:a8:bd:57:96:1b:85: 22:c6:58:a9:68:bb:ee:eb:33:c8:ed:20:6b:92:e3: a9:ef:4c:ab:78:08:56:b9:25:bc:8f:1a:90:0b:29: 22:e5:f9:47:5a:ea:29:b1:47:ca:8f:53:db:6a:f4: d8:67:b8:67:72:4e:d0:cf:02:fd:bf:63:4e:b0:e8: e6:80:21:6e:99:35:41:3b:2f:3c:ae:a2:ab:cd:af: 14:51:d3:98:f9:72:22:81:1d:62:5a:84:47:25:5c: 56:6c:d2:fd:3d:bf:7f:ea:67:96:74:f1:c2:05:76: f2:89:ed:b5:e6:a4:3b:63:74:81:a0:f4:18:64:0b: 39:12:fa:90:2b:83:ea:c5:22:db:8f:95:e0:bb:fc: 32:4b:e5:69:11:81:fa:33:91:4c:40:e2:d9:f8:0b: 6a:4a:78:c3:1a:2d:e6:9b:e8:31:70:4d:04:13:03: 91:34:e9:a8:0c:1b:b2:c8:11:0b:38:bf:9f:e7:cb: d4:ab:5f:5e:18:8d:fa:8e:8d:76:25:c5:2a:0b:e1: 84:8e:92:f3:d1:14:ae:45:59:4f:00:a8:15:e2:75: e3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:01:03:53:1A:B5:B5:00:9D:0F:EA:A6:F9:9E:A7:0E:AE:8F:38:16 X509v3 Authority Key Identifier: keyid:4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:ea:62:fe:1a:6b:f3:14:aa:53:eb:d3:11:d9:e7:7f:16:7c: 81:d3:fd:f2:93:27:a9:26:44:1a:93:c7:60:d6:31:d9:ec:cf: 1d:00:60:f6:c1:87:32:a5:42:c7:23:7f:05:53:13:02:62:b3: 9a:06:b3:ef:96:6a:70:00:98:8c:f7:2b:06:d4:77:69:89:a3: b7:90:61:5a:31:a2:f0:19:1f:e0:c0:3b:39:5f:d5:8b:b9:15: 35:f2:97:53:6e:58:84:bb:c3:ed:f9:75:13:c8:84:55:ca:f8: 5d:77:74:5d:fd:02:50:d4:8e:69:87:25:7c:ac:ea:0b:67:f2: d2:30:80:a0:2d:fa:46:4b:82:1f:f8:66:4d:7a:2e:8e:5f:14: 0f:df:be:30:2b:ed:67:c1:9c:cb:27:da:93:3b:d2:fd:44:18: a6:0c:6f:15:48:23:56:de:11:de:9e:86:ad:ae:85:41:77:67: e4:45:84:b8:7c:55:21:f9:58:be:49:8b:9b:85:45:d6:2b:54: b1:54:87:41:90:89:ea:79:3a:57:d0:52:fd:77:0e:31:c8:f3: d8:ca:0a:e5:78:d5:1b:19:27:18:a8:a1:aa:74:5f:46:e9:57: e1:9f:96:a0:47:e4:49:e0:a5:c7:d9:a2:b2:9e:fc:c1:76:21: b2:a9:6f:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzhGNTExMC8GA1UEBRMoNEZGNTRERUFCQUQ0OTQ1NTkyNTEwMTJBQTVBQzIyMjk1 MENCMjYxRTAeFw0yNTA3MjEwNzM5NTRaFw0yNTA3MjgwNzM5NTRaMBgxFjAUBgNV BAMTDTY4N2RlZWNhLTUxYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDg75BXIG7m6ZmjeDmO7GLfRzoWWTndi9HebHar+5pKmTdQj/jNhKi9V5YbhSLG WKlou+7rM8jtIGuS46nvTKt4CFa5JbyPGpALKSLl+Uda6imxR8qPU9tq9NhnuGdy TtDPAv2/Y06w6OaAIW6ZNUE7LzyuoqvNrxRR05j5ciKBHWJahEclXFZs0v09v3/q Z5Z08cIFdvKJ7bXmpDtjdIGg9BhkCzkS+pArg+rFItuPleC7/DJL5WkRgfozkUxA 4tn4C2pKeMMaLeab6DFwTQQTA5E06agMG7LIEQs4v5/ny9SrX14YjfqOjXYlxSoL 4YSOkvPRFK5FWU8AqBXideMHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTAEDUxq1 tQCdD+qm+Z6nDq6POBYwHwYDVR0jBBgwFoAUT/VN6rrUlFWSUQEqpawiKVDLJh4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzOEY1L0YwMjYzRkYwMDI1 QjExRjA5QUNGRDkxMEM0RjlBRTAyL1RfVk42cnJVbEZXU1VRRXFwYXdpS1ZETEpo NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVF9WTjZyclVsRldTVVFFcXBhd2lLVkRMSmg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz OEY1L0YwMjYzRkYwMDI1QjExRjA5QUNGRDkxMEM0RjlBRTAyL1RfVk42cnJVbEZX U1VRRXFwYXdpS1ZETEpoNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL3qYv4aa/MUqlPr0xHZ538WfIHT/fKTJ6kmRBqTx2DWMdnszx0AYPbB hzKlQscjfwVTEwJis5oGs++WanAAmIz3KwbUd2mJo7eQYVoxovAZH+DAOzlf1Yu5 FTXyl1NuWIS7w+35dRPIhFXK+F13dF39AlDUjmmHJXys6gtn8tIwgKAt+kZLgh/4 Zk16Lo5fFA/fvjAr7WfBnMsn2pM70v1EGKYMbxVII1beEd6ehq2uhUF3Z+RFhLh8 VSH5WL5Ji5uFRdYrVLFUh0GQiep5OlfQUv13DjHI89jKCuV41RsZJxiooap0X0bp V+GflqBH5EngpcfZorKe/MF2IbKpb6w= -----END CERTIFICATE-----Generated at Mon Jul 21 12:24:19 2025 by rpki-client