$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft File: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft (raw, json) Hash identifier: x5FXAXRSymPNqbm4N+dkg73dMh+mGe8KU5gRRhFCWpI= Subject key identifier: 1A:25:97:F2:8A:59:AD:BE:4B:A4:D9:D1:69:92:D9:A2:98:52:F6:07 Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7 Certificate issuer: /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7 Certificate serial: 25F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft Manifest number: 25E5 Signing time: Fri 18 Jul 2025 15:49:14 +0000 Manifest this update: Fri 18 Jul 2025 15:49:14 +0000 Manifest next update: Fri 25 Jul 2025 15:49:14 +0000 Files and hashes: 1: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl (hash: /RyUMAWsx9ta0vOWlOptIoKM2z577vaZxk7D0jXLeD0=) 2: E2E360EEF3EE11ECBAE10054C4F9AE02.roa (hash: MwkxKey8SdTfX3rA2ndaHPVnUsJ97475p+Dzwmyl9SQ=) 3: E21E1C6CF3EE11ECBAE10054C4F9AE02.roa (hash: UiQJQcjiTKGUKZaMNBKg71L13IK59w5XS6QCL7nnWSE=) 4: E14BDC8EF3EE11ECBAE10054C4F9AE02.roa (hash: gP1rmRhgK5le3CICuUOYmVhhDItIyOhZ8RIHh+3gkE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9719 (0x25f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5B46, serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7 Validity Not Before: Jul 18 15:49:14 2025 GMT Not After : Jul 25 15:49:14 2025 GMT Subject: CN=687a6cfa-6002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:66:88:18:df:3d:96:31:40:26:fc:fb:93:34: 57:b7:3c:5b:04:4d:46:f4:54:be:e6:41:2b:82:de: 50:b2:a3:4b:fe:1e:78:1d:fc:fe:6e:ab:03:b4:88: 91:2e:84:cb:e6:13:fe:af:46:51:d1:93:67:ad:0c: 63:21:34:33:cf:a6:1b:3b:8f:f5:3b:99:6b:9d:cc: aa:35:ef:9e:de:67:ac:03:e6:2c:b5:75:f5:b0:d2: a4:db:05:2e:e2:97:76:5d:b9:20:0a:02:a8:ed:c0: 53:01:5d:2d:be:5e:6b:52:dc:d5:d9:e7:36:c0:a6: 96:27:4d:03:5d:77:68:45:cf:64:09:fa:f3:34:aa: 48:76:0e:1c:b0:14:42:8c:0e:68:f2:e5:04:a2:a8: ad:fa:a7:b5:4e:d4:42:38:46:28:e0:78:49:68:44: 72:32:52:ab:11:10:a2:c6:d7:4f:ff:25:a6:c2:25: ad:2b:53:d1:ad:5c:c6:96:5e:55:c7:d0:10:0c:c0: 43:d5:2b:86:65:4b:f9:2d:9e:d7:46:c1:8c:1b:db: 3c:5b:90:b3:99:4c:25:88:64:3e:8a:6c:ff:55:96: 70:8b:75:e7:84:97:48:ff:3b:5f:21:a5:67:a3:74: 9d:f2:be:86:12:d7:08:46:c1:24:5d:0f:2e:a3:66: 9b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:25:97:F2:8A:59:AD:BE:4B:A4:D9:D1:69:92:D9:A2:98:52:F6:07 X509v3 Authority Key Identifier: keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:b0:4a:b9:6b:3b:3b:8f:91:f0:b0:b8:97:89:8a:97:cb:87: 46:f2:64:4d:75:4d:05:31:b1:0a:ea:1e:38:e9:be:f5:dc:fe: d2:cf:f2:7b:b3:25:f2:35:38:f0:57:21:ec:00:54:b5:48:55: d9:67:fa:4d:c6:26:64:1f:a8:2c:e8:51:da:62:19:34:74:3f: 54:06:17:29:d0:54:7b:db:8a:5d:af:8f:55:cc:5e:ab:45:25: 3e:c8:39:59:35:f6:63:ba:a5:74:a7:b6:69:50:02:93:39:0d: a6:56:b4:93:c2:ee:3f:79:b1:8d:2b:94:37:9c:b0:8c:ca:f0: d1:98:af:53:51:3e:b3:4e:74:95:1b:de:ea:80:d6:7d:5e:9e: 04:31:5a:32:71:1c:cc:11:5a:03:9b:86:f6:b4:b8:0f:de:b3: f2:ef:08:7e:cb:68:05:2c:3d:c2:56:aa:f0:34:44:6e:a9:e9: 56:55:e3:20:4e:86:64:ce:ee:33:29:2b:c2:47:8a:b9:3d:27: d3:d6:25:ad:83:cb:ae:f4:23:1d:41:75:87:56:9d:e6:3b:4d: 4b:7c:53:54:ba:64:d2:f5:7b:dd:c7:11:45:80:4b:27:bc:20: c6:33:49:30:0a:b1:53:c6:1f:b7:b1:31:29:f3:e4:81:8a:75: b7:2d:fe:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVCNDYxMTAvBgNVBAUTKDU2Q0QzMkQxM0Y4Q0FFMUU5MkY5Qzk3RjM5NUYxQTIz QUJCOUM2RjcwHhcNMjUwNzE4MTU0OTE0WhcNMjUwNzI1MTU0OTE0WjAYMRYwFAYD VQQDEw02ODdhNmNmYS02MDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4WaIGN89ljFAJvz7kzRXtzxbBE1G9FS+5kErgt5QsqNL/h54Hfz+bqsDtIiR LoTL5hP+r0ZR0ZNnrQxjITQzz6YbO4/1O5lrncyqNe+e3mesA+YstXX1sNKk2wUu 4pd2XbkgCgKo7cBTAV0tvl5rUtzV2ec2wKaWJ00DXXdoRc9kCfrzNKpIdg4csBRC jA5o8uUEoqit+qe1TtRCOEYo4HhJaERyMlKrERCixtdP/yWmwiWtK1PRrVzGll5V x9AQDMBD1SuGZUv5LZ7XRsGMG9s8W5CzmUwliGQ+imz/VZZwi3XnhJdI/ztfIaVn o3Sd8r6GEtcIRsEkXQ8uo2ab3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoll/KK Wa2+S6TZ0WmS2aKYUvYHMB8GA1UdIwQYMBaAFFbNMtE/jK4ekvnJfzlfGiOrucb3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUI0Ni9CQTBCODQzMDAy ODgxMUU1QUUxRTQ3NjFDNEY5QUUwMi9WczB5MFQtTXJoNlMtY2xfT1Y4YUk2dTV4 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZzMHkwVC1Ncmg2Uy1jbF9PVjhhSTZ1NXh2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUI0Ni9CQTBCODQzMDAyODgxMUU1QUUxRTQ3NjFDNEY5QUUwMi9WczB5MFQtTXJo NlMtY2xfT1Y4YUk2dTV4dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXsEq5azs7j5HwsLiXiYqXy4dG8mRNdU0FMbEK6h446b713P7Sz/J7 syXyNTjwVyHsAFS1SFXZZ/pNxiZkH6gs6FHaYhk0dD9UBhcp0FR724pdr49VzF6r RSU+yDlZNfZjuqV0p7ZpUAKTOQ2mVrSTwu4/ebGNK5Q3nLCMyvDRmK9TUT6zTnSV G97qgNZ9Xp4EMVoycRzMEVoDm4b2tLgP3rPy7wh+y2gFLD3CVqrwNERuqelWVeMg ToZkzu4zKSvCR4q5PSfT1iWtg8uu9CMdQXWHVp3mO01LfFNUumTS9XvdxxFFgEsn vCDGM0kwCrFTxh+3sTEp8+SBinW3Lf7a -----END CERTIFICATE-----Generated at Sun Jul 20 14:36:26 2025 by rpki-client