$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft File: VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft (raw, json) Hash identifier: z7bzzj7NpkUJispdUrzw143T8Kggz+FKZIUcxfXAnvA= Subject key identifier: 18:8B:86:65:D6:8E:E8:87:FE:CE:8F:32:1E:C9:46:B1:39:31:92:A4 Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Certificate serial: 05F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft Manifest number: 0542 Signing time: Mon 21 Jul 2025 00:18:12 +0000 Manifest this update: Mon 21 Jul 2025 00:18:11 +0000 Manifest next update: Mon 28 Jul 2025 00:18:11 +0000 Files and hashes: 1: VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl (hash: AFq01oqT0O2pLVFq9/qrh6BNi66cbCmqO9iZyXXqQGs=) 2: 0BD4BBC2716911EDA03D4A50C4F9AE02.roa (hash: iCGYHqcapZ1DKt8RS4ox+PrMVLiDQPhQLsfb9ZqKn8Y=) 3: 48CB7422E27911ED88B5A641C4F9AE02.roa (hash: AVBCDstPuY5yPO2Ydm26gKhlgmx2X61R7QXZR/yk1Zo=) 4: D4FCF92C716B11ED9F349A49C4F9AE02.roa (hash: UuOQPjOHW3te4OiVFYw+HXL7r4q+xv2PoIFABxSLF70=) 5: B7342ECA555B11F0B35B1E0DC4F9AE02.roa (hash: ZCWgM50hKhmVlBN6caSNUYvrDT45U67mSi8JO40F7Hk=) 6: ECC41AD2748A11ED80EF3436C4F9AE02.roa (hash: sg221W/egXu0ZEIvG5/3NuaO+9JdsATAt/T48V/WxaU=) 7: 0C5EDCDA716911EDA03D4A50C4F9AE02.roa (hash: /udoJCuRJJiznFyAsVCyc0gM64uxhJqp5G9jTAQbZu4=) 8: 9A1D8B2E867D11ED856A8E54C4F9AE02.roa (hash: cieJSU2MctUg0O+GWn4XGuRsQ3vHkHefCudId57mspk=) 9: 8DEEDC96E6B511EF9FEF6436C4F9AE02.roa (hash: PXNaSMJ5YVKmgSX7D94F0YVFvnDTmRG8eGKKeg/Al70=) 10: 0D0517EE716911EDA03D4A50C4F9AE02.roa (hash: fhtBFY+6U1Q/NDrcrqBZE1BQCslriv3eFT6qN9HqyO4=) 11: D359E238716B11ED9F349A49C4F9AE02.roa (hash: aJuLqquEQyyIiKwXY41VQpBHPxNA/CIwMjOgaOCooJI=) 12: 1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa (hash: F6cMcszW3btFH4NtjFMkcGJMShjA1GIWoT3qHzp5ayU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:18:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1524 (0x5f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Validity Not Before: Jul 21 00:18:11 2025 GMT Not After : Jul 28 00:18:11 2025 GMT Subject: CN=687d8744-94b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:af:4b:a7:34:bb:e0:c3:19:3c:f0:41:c4:ee: db:88:52:e0:3b:6a:55:d3:7c:1e:27:64:a0:30:c2: 8a:0c:97:1c:b9:13:a3:73:1d:49:7a:05:95:4c:50: 89:ee:a0:31:65:d2:10:04:3a:9b:08:1a:de:83:42: d6:c9:5c:07:cc:e9:37:33:90:4e:99:1a:5f:86:aa: b5:bd:05:b6:31:36:f2:7c:35:65:2e:0b:2d:9c:87: 3f:55:3e:22:e1:df:17:ab:db:61:6f:82:63:35:42: 6f:36:38:53:e2:7e:35:68:45:16:2f:8f:54:fa:c7: 89:1a:a9:85:3c:ee:45:3a:73:28:a1:b8:09:3f:48: 5a:fa:c3:c2:2a:05:3e:b5:32:f9:b9:e3:d4:03:49: 26:fe:00:c3:79:57:cd:52:83:96:40:c5:15:86:86: 6c:82:91:15:d1:e8:86:e6:f3:46:48:fb:7d:0b:9d: be:ed:3a:0b:ee:fd:34:be:8b:0d:4d:b5:7f:99:0d: 84:ec:19:b0:79:b6:e7:5f:84:7b:1e:33:26:15:21: 9e:0d:cc:56:f5:61:64:e1:d0:ce:9d:de:53:70:30: e4:fc:bc:95:90:f8:2a:1e:0f:c7:eb:a1:67:ed:1a: fc:1b:92:3d:03:27:fe:67:a5:b4:b1:03:eb:eb:d7: 69:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8B:86:65:D6:8E:E8:87:FE:CE:8F:32:1E:C9:46:B1:39:31:92:A4 X509v3 Authority Key Identifier: keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:20:53:ea:52:f0:9e:fa:2f:b6:8c:5d:45:35:c8:6e:81:45: 03:fb:ac:cd:76:16:17:56:ba:3e:15:ad:98:94:a1:a4:de:d3: ff:fa:5b:ed:9c:3d:a7:f2:2b:95:48:40:06:21:46:e1:ad:8a: 35:a8:ac:2e:ef:20:f0:38:61:b4:ff:ef:d7:21:03:06:a1:b6: ab:20:2e:51:50:cf:03:b3:10:cb:dc:bb:c0:dc:93:7c:2b:15: 6b:a7:9c:97:50:c0:04:f8:9e:43:39:8c:02:4f:4d:19:0e:cc: a4:be:6a:d9:67:86:a2:21:16:68:f6:e5:b1:d1:46:b0:68:70: 2a:7d:23:d7:04:2b:8f:01:1e:90:a8:1d:46:b3:99:ff:ef:f2: e2:f5:66:f2:60:d9:c5:90:a0:77:53:e5:62:b1:b6:3e:73:ff: cc:81:e7:da:66:6d:51:86:e7:d4:85:7d:09:be:19:f9:c9:3a: 64:4a:b6:58:26:37:b2:87:51:25:e1:71:58:e9:80:2f:89:74: 93:d2:30:ec:4f:09:08:d1:17:98:40:23:93:09:02:5c:33:13: 96:99:9b:b5:68:e2:d4:a8:be:2d:5e:27:78:cb:e0:27:db:fe: 37:07:0f:fd:4a:03:64:bf:de:cd:4a:3c:10:79:63:ea:02:b6: da:fb:4a:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3 RDc0MTQ3RjMwHhcNMjUwNzIxMDAxODExWhcNMjUwNzI4MDAxODExWjAYMRYwFAYD VQQDEw02ODdkODc0NC05NGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsa9LpzS74MMZPPBBxO7biFLgO2pV03weJ2SgMMKKDJccuROjcx1JegWVTFCJ 7qAxZdIQBDqbCBreg0LWyVwHzOk3M5BOmRpfhqq1vQW2MTbyfDVlLgstnIc/VT4i 4d8Xq9thb4JjNUJvNjhT4n41aEUWL49U+seJGqmFPO5FOnMoobgJP0ha+sPCKgU+ tTL5uePUA0km/gDDeVfNUoOWQMUVhoZsgpEV0eiG5vNGSPt9C52+7ToL7v00vosN TbV/mQ2E7BmwebbnX4R7HjMmFSGeDcxW9WFk4dDOnd5TcDDk/LyVkPgqHg/H66Fn 7Rr8G5I9Ayf+Z6W0sQPr69dpVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiLhmXW juiH/s6PMh7JRrE5MZKkMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDM5RC9ERTdEMkY5NDRFNzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9S WF9JbVgtU1JrSng5ZEJSX00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmIFPqUvCe+i+2jF1FNchugUUD+6zNdhYXVro+Fa2YlKGk3tP/+lvt nD2n8iuVSEAGIUbhrYo1qKwu7yDwOGG0/+/XIQMGobarIC5RUM8DsxDL3LvA3JN8 KxVrp5yXUMAE+J5DOYwCT00ZDsykvmrZZ4aiIRZo9uWx0UawaHAqfSPXBCuPAR6Q qB1Gs5n/7/Li9WbyYNnFkKB3U+VisbY+c//MgefaZm1RhufUhX0Jvhn5yTpkSrZY Jjeyh1El4XFY6YAviXST0jDsTwkI0ReYQCOTCQJcMxOWmZu1aOLUqL4tXid4y+An 2/43Bw/9SgNkv97NSjwQeWPqArba+0rk -----END CERTIFICATE-----Generated at Mon Jul 21 08:44:02 2025 by rpki-client