$ rpki-client -vvf rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft File: vUxEHwLHrdQvpiQugzHZP1nlGDo.mft (raw, json) Hash identifier: Ys3Jg+Ff9MGPyCnGJ3+62WWCDhRPl7iYwF/Y82bPzp4= Subject key identifier: A8:63:A1:5F:4A:BF:C5:B3:23:6C:61:FC:BC:F0:CF:F2:54:71:3D:85 Authority key identifier: BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A Certificate issuer: /CN=A91C67F9/serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft Manifest number: 01DF Signing time: Sat 19 Jul 2025 02:56:40 +0000 Manifest this update: Sat 19 Jul 2025 02:56:39 +0000 Manifest next update: Sat 26 Jul 2025 02:56:39 +0000 Files and hashes: 1: vUxEHwLHrdQvpiQugzHZP1nlGDo.crl (hash: CRxNMi2n7W+Kgj6qoOxXQwfQyb60ZwvqK2dL7JTpvTc=) 2: 079523028DB211ED910C330CC4F9AE02.roa (hash: W9Hoie4kNxclHpEMWbcvds2qMQa9C1Hni+pmtAE5bWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C67F9, serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A Validity Not Before: Jul 19 02:56:39 2025 GMT Not After : Jul 26 02:56:39 2025 GMT Subject: CN=687b0967-a5c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6c:85:3b:7d:c1:f8:b9:67:3f:a7:7d:4b:8d: b3:c2:66:db:42:06:d6:1a:f2:75:c2:c0:ef:48:ca: 6c:aa:54:b4:d2:ec:5a:f9:f9:5a:76:19:04:9c:91: 95:63:c0:46:ff:2d:c7:22:28:3f:92:86:49:98:fd: ee:2b:b2:60:25:3f:df:ee:51:31:58:7c:fc:89:86: 4a:9c:65:a3:88:9c:de:cc:fa:9d:42:06:94:66:33: e6:2d:3d:0e:54:d6:8a:c9:34:58:7c:c8:b8:20:e5: ff:97:32:ae:9d:ef:e8:5c:42:60:41:64:7c:85:9c: 89:9d:ae:f7:fa:1a:35:fe:cd:8f:d8:90:7d:77:b5: 1e:4f:dd:31:de:65:36:4e:82:1a:f6:e2:b9:3a:9d: f0:b9:f1:6c:23:7f:fc:ec:12:8d:c9:44:9a:2c:97: 23:2c:8b:94:f8:bd:ac:bd:b5:2f:d0:36:d5:4c:38: d0:92:09:ce:fc:52:80:3d:b7:c0:71:9a:5f:7c:60: e8:9c:0a:d9:05:c0:1e:d2:6a:a1:ba:3a:35:ef:53: 9f:4b:6c:2a:30:ba:71:88:0b:73:59:de:48:d5:f5: ef:9c:4a:9c:96:e2:13:5a:61:6c:fb:8e:a5:96:f1: da:dc:c0:33:06:0b:64:08:9b:23:df:5d:57:a3:7e: 61:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:63:A1:5F:4A:BF:C5:B3:23:6C:61:FC:BC:F0:CF:F2:54:71:3D:85 X509v3 Authority Key Identifier: keyid:BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:14:c8:a0:c8:40:96:11:64:07:6e:4f:c0:1f:5f:e2:33:0f: 6f:a4:2f:04:a4:f2:77:2d:5a:75:5a:c5:e0:23:30:e3:f1:f6: 38:6a:7e:03:f2:c6:d4:8d:db:28:bc:52:46:29:68:24:eb:56: b0:a2:c3:3e:2a:8b:50:e6:1a:33:22:3c:a0:86:1b:89:fa:ca: f2:bf:a8:8e:b8:2d:81:9c:b7:e0:5a:82:79:96:d6:30:32:26: 99:ef:28:3f:13:b8:ee:39:76:4b:6a:37:8b:48:0d:4f:39:54: 96:b3:63:ab:9f:f8:b3:d6:2f:bf:41:e5:45:2d:40:75:82:9b: 2f:ee:af:7d:a6:fb:c9:11:e2:fb:6e:c8:e5:97:26:75:c8:a3: 77:47:7b:ac:c8:b6:0c:d9:9a:96:11:60:55:3f:1b:20:de:15: f1:02:8e:3e:69:a3:2e:83:94:e5:36:a8:8c:6c:b7:70:b1:23: 06:b3:a2:4f:99:da:89:28:7f:a6:23:ab:84:2e:3d:ac:b3:ae: 62:16:13:67:45:88:25:51:87:6a:0a:73:a9:11:5a:26:76:a8: 98:1f:59:0d:fc:8a:cb:13:13:19:67:dc:36:2b:83:5a:da:bb: 67:ae:ec:d1:6a:ce:6b:19:69:3f:bf:8e:9c:01:cb:08:ed:4d: b1:b2:b1:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY3RjkxMTAvBgNVBAUTKEJENEM0NDFGMDJDN0FERDQyRkE2MjQyRTgzMzFEOTNG NTlFNTE4M0EwHhcNMjUwNzE5MDI1NjM5WhcNMjUwNzI2MDI1NjM5WjAYMRYwFAYD VQQDEw02ODdiMDk2Ny1hNWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumyFO33B+LlnP6d9S42zwmbbQgbWGvJ1wsDvSMpsqlS00uxa+fladhkEnJGV Y8BG/y3HIig/koZJmP3uK7JgJT/f7lExWHz8iYZKnGWjiJzezPqdQgaUZjPmLT0O VNaKyTRYfMi4IOX/lzKune/oXEJgQWR8hZyJna73+ho1/s2P2JB9d7UeT90x3mU2 ToIa9uK5Op3wufFsI3/87BKNyUSaLJcjLIuU+L2svbUv0DbVTDjQkgnO/FKAPbfA cZpffGDonArZBcAe0mqhujo171OfS2wqMLpxiAtzWd5I1fXvnEqcluITWmFs+46l lvHa3MAzBgtkCJsj311Xo35howIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhjoV9K v8WzI2xh/Lzwz/JUcT2FMB8GA1UdIwQYMBaAFL1MRB8Cx63UL6YkLoMx2T9Z5Rg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjdGOS9FQUUxMkU0NDhE QUQxMUVEQjJEQ0M0ODdDNEY5QUUwMi92VXhFSHdMSHJkUXZwaVF1Z3pIWlAxbmxH RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZVeEVId0xIcmRRdnBpUXVnekhaUDFubEdEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjdGOS9FQUUxMkU0NDhEQUQxMUVEQjJEQ0M0ODdDNEY5QUUwMi92VXhFSHdMSHJk UXZwaVF1Z3pIWlAxbmxHRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGFMigyECWEWQHbk/AH1/iMw9vpC8EpPJ3LVp1WsXgIzDj8fY4an4D 8sbUjdsovFJGKWgk61awosM+KotQ5hozIjyghhuJ+sryv6iOuC2BnLfgWoJ5ltYw MiaZ7yg/E7juOXZLajeLSA1POVSWs2Orn/iz1i+/QeVFLUB1gpsv7q99pvvJEeL7 bsjllyZ1yKN3R3usyLYM2ZqWEWBVPxsg3hXxAo4+aaMug5TlNqiMbLdwsSMGs6JP mdqJKH+mI6uELj2ss65iFhNnRYglUYdqCnOpEVomdqiYH1kN/IrLExMZZ9w2K4Na 2rtnruzRas5rGWk/v46cAcsI7U2xsrH8 -----END CERTIFICATE-----Generated at Sun Jul 20 06:20:49 2025 by rpki-client