$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft File: VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft (raw, json) Hash identifier: XyeH6OmH6hAy9UVp3u2XS5lOajCbmgFxNirh0pjsRIM= Subject key identifier: 38:66:48:04:14:6E:EE:02:0E:98:F1:27:46:99:AE:F4:A6:43:47:E3 Authority key identifier: 55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 Certificate issuer: /CN=A91C23DC/serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Certificate serial: 0C53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft Manifest number: 0C45 Signing time: Sun 20 Jul 2025 18:37:43 +0000 Manifest this update: Sun 20 Jul 2025 18:37:42 +0000 Manifest next update: Sun 27 Jul 2025 18:37:42 +0000 Files and hashes: 1: VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl (hash: 2W0Z6RcJ2KwBEiys7Obcz5JHwt4GO/DZHGTtR0YuPs0=) 2: 598BD2E268D111ED99477B87C4F9AE02.roa (hash: CC9X+3CcYjfvDOG+Jd491zfowlADhabzoyJw/gqJGUg=) 3: 5AA3FD0868D111ED99477B87C4F9AE02.roa (hash: erICH0cme0SAzh4DFMOpR5Ja+e0q51Z/KWddXql4mQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3155 (0xc53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23DC, serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Validity Not Before: Jul 20 18:37:42 2025 GMT Not After : Jul 27 18:37:42 2025 GMT Subject: CN=687d3777-e255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b6:14:c9:1e:ea:6d:38:56:81:87:3e:5e:75: a3:09:78:23:33:a0:b0:0d:59:6c:bc:21:3a:3a:c8: cf:77:28:e3:cd:b9:98:ce:a2:1b:16:be:ba:bb:9e: 20:39:b4:41:78:2f:82:59:35:9b:29:eb:af:a2:b4: 3a:cb:1c:42:80:6a:bb:82:5d:68:cf:90:bf:4c:5a: fb:65:3c:66:e0:ec:0f:18:9b:40:94:22:8d:e9:8a: 6f:8c:e4:c1:ba:1f:fe:0f:c5:4e:8e:0f:e8:67:42: 82:68:d0:7d:dc:82:2c:18:64:62:f1:e4:f0:5e:19: 31:91:b8:0a:a5:ad:72:7e:af:93:ec:5c:06:4e:fd: 4f:57:af:d1:fb:59:19:6b:19:81:88:05:dd:fd:d6: cd:d3:51:5d:38:1c:40:22:f3:d7:b5:cb:85:ab:e5: 0f:4f:93:d8:c3:1a:80:70:7c:af:4a:c3:d3:38:15: 91:87:cd:68:f5:2f:52:47:bf:d2:84:10:4d:97:d8: f7:d7:26:95:41:36:65:da:82:c1:b5:3b:d8:3b:2b: 69:43:a6:16:03:97:b8:28:86:80:49:03:8b:c9:f3: fb:c3:b3:19:a3:33:67:16:71:e3:34:ca:73:d0:1f: 9c:5b:ed:67:e6:f7:46:d9:cb:fb:34:d7:8e:60:35: 99:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:66:48:04:14:6E:EE:02:0E:98:F1:27:46:99:AE:F4:A6:43:47:E3 X509v3 Authority Key Identifier: keyid:55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:3f:bc:c9:a0:a9:b8:6e:a1:5a:55:fd:fd:1c:c0:c2:b7:1a: 38:2b:94:10:6f:62:6c:75:f0:3f:f3:24:ed:78:87:c0:71:c4: c0:4a:4b:75:94:dc:f5:3f:e0:f7:7a:7b:b3:5a:29:b5:59:81: fb:a3:86:6c:02:d7:ab:e7:46:c5:96:25:c0:5f:96:6d:8f:ad: 44:38:8b:43:3f:60:97:14:fd:d1:60:83:e9:14:4c:54:5c:95: 2d:4d:64:17:ea:6a:21:8a:ed:51:50:9b:8a:46:72:77:bf:0d: 23:20:5c:7f:d1:5d:d2:62:8c:4a:cc:66:66:fe:00:10:84:97: ef:21:18:03:e1:e3:df:29:31:03:45:ad:21:f3:0b:09:56:22: 79:d8:0e:4c:cf:5d:12:2f:ed:ec:4c:31:75:e6:35:32:1a:7a: ef:cd:2b:39:1a:76:97:72:94:6e:f2:13:76:4e:ea:a3:bf:35: c3:6f:48:06:3c:2a:94:87:84:c3:b2:62:dc:71:55:83:09:be: d6:b6:37:11:c5:d4:71:5c:49:64:9a:59:7a:3b:51:c7:77:3a: 51:b0:d8:09:71:8c:91:b0:cc:0f:db:0b:33:54:1e:bb:ed:f5: 40:cb:c4:fc:3e:1a:f1:71:fa:6a:27:93:37:6d:0a:23:bc:eb: 95:aa:ad:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzREMxMTAvBgNVBAUTKDU1RjJFNDg3NDAwNThFOEZDQzRGOTAxQTRBMzNFMUY0 MTc2MjAwRjgwHhcNMjUwNzIwMTgzNzQyWhcNMjUwNzI3MTgzNzQyWjAYMRYwFAYD VQQDEw02ODdkMzc3Ny1lMjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bYUyR7qbThWgYc+XnWjCXgjM6CwDVlsvCE6OsjPdyjjzbmYzqIbFr66u54g ObRBeC+CWTWbKeuvorQ6yxxCgGq7gl1oz5C/TFr7ZTxm4OwPGJtAlCKN6YpvjOTB uh/+D8VOjg/oZ0KCaNB93IIsGGRi8eTwXhkxkbgKpa1yfq+T7FwGTv1PV6/R+1kZ axmBiAXd/dbN01FdOBxAIvPXtcuFq+UPT5PYwxqAcHyvSsPTOBWRh81o9S9SR7/S hBBNl9j31yaVQTZl2oLBtTvYOytpQ6YWA5e4KIaASQOLyfP7w7MZozNnFnHjNMpz 0B+cW+1n5vdG2cv7NNeOYDWZZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhmSAQU bu4CDpjxJ0aZrvSmQ0fjMB8GA1UdIwQYMBaAFFXy5IdABY6PzE+QGkoz4fQXYgD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNEQy8wNjYzOUY4NjBB OTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpvX01UNUFhU2pQaDlCZGlB UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZmTGtoMEFGam9fTVQ1QWFTalBoOUJkaUFQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjNEQy8wNjYzOUY4NjBBOTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpv X01UNUFhU2pQaDlCZGlBUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQP7zJoKm4bqFaVf39HMDCtxo4K5QQb2JsdfA/8yTteIfAccTASkt1 lNz1P+D3enuzWim1WYH7o4ZsAter50bFliXAX5Ztj61EOItDP2CXFP3RYIPpFExU XJUtTWQX6mohiu1RUJuKRnJ3vw0jIFx/0V3SYoxKzGZm/gAQhJfvIRgD4ePfKTED Ra0h8wsJViJ52A5Mz10SL+3sTDF15jUyGnrvzSs5GnaXcpRu8hN2TuqjvzXDb0gG PCqUh4TDsmLccVWDCb7WtjcRxdRxXElkmll6O1HHdzpRsNgJcYyRsMwP2wszVB67 7fVAy8T8PhrxcfpqJ5M3bQojvOuVqq2M -----END CERTIFICATE-----Generated at Mon Jul 21 12:40:02 2025 by rpki-client