$ rpki-client -vvf rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft File: vGOOV8p7khRPunE61ttk5tCtSZE.mft (raw, json) Hash identifier: wQ/+odbTxBtWf/zdRIKig3a4sKdy00XaE2uQC1d+IJg= Subject key identifier: B7:F7:A6:28:76:57:97:36:C7:09:21:4A:D2:F9:7E:DF:79:D8:8B:04 Authority key identifier: BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 Certificate issuer: /CN=A91D31B0/serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Certificate serial: 02B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft Manifest number: 02B2 Signing time: Mon 21 Jul 2025 01:44:48 +0000 Manifest this update: Mon 21 Jul 2025 01:44:47 +0000 Manifest next update: Mon 28 Jul 2025 01:44:47 +0000 Files and hashes: 1: vGOOV8p7khRPunE61ttk5tCtSZE.crl (hash: S124C+ptr2pcMLo2cL1VmNoX2HG6Rumg6AUCJE7QtTE=) 2: 7BB181E201BA11EDA4103D0DC4F9AE02.roa (hash: lORLBE7+FfhOwINAGtcBHyopu2FbSYXSTs4IIjqvS/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 695 (0x2b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D31B0, serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Validity Not Before: Jul 21 01:44:47 2025 GMT Not After : Jul 28 01:44:47 2025 GMT Subject: CN=687d9b90-9b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4e:93:22:bb:00:cc:af:55:d7:07:a1:f3:cf: 05:f7:c9:d9:11:cd:f8:42:88:9b:08:56:80:ff:66: 00:bd:76:b1:c9:b4:66:05:63:c8:07:3a:88:01:26: 7b:9a:70:5b:11:cc:88:f6:06:4b:80:e4:55:a9:f3: 9e:50:02:67:95:ce:c5:90:af:6e:48:6c:16:96:db: 95:fd:21:3d:21:79:e9:1f:6e:47:10:41:29:3d:ba: b8:04:c7:b4:bd:c0:bd:0d:08:30:b2:b9:46:29:5e: d1:56:a8:16:6f:f2:2f:69:7e:bb:29:84:c3:ed:ab: 1a:f9:cf:77:bb:28:2f:a0:c7:f8:ba:39:31:e1:ee: 72:6d:c6:cd:f1:f5:e1:ec:c2:69:4f:af:96:dd:c9: d6:5d:6a:49:41:76:67:ab:9f:85:ce:99:0c:54:2e: 14:30:21:b2:6e:19:da:40:32:f3:6f:37:d2:8a:de: cb:db:46:18:a6:4a:8a:27:6f:da:78:9c:d8:a7:4d: 17:91:a2:6c:a8:af:62:cd:a5:06:68:01:27:49:19: a4:bf:4c:5e:3e:33:91:8d:a2:b8:cb:df:55:d3:d7: ea:95:e4:5f:8b:4f:9b:23:51:8c:1b:6f:4d:8c:9f: 8d:38:bc:95:28:c4:42:a7:e6:20:88:50:fe:0d:3d: 6e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F7:A6:28:76:57:97:36:C7:09:21:4A:D2:F9:7E:DF:79:D8:8B:04 X509v3 Authority Key Identifier: keyid:BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:3e:4f:a7:84:c9:6d:cf:72:6e:96:7b:f7:14:47:1e:41:6a: 7b:f3:5c:3c:dc:85:fb:02:c6:02:99:5b:20:af:bb:b7:19:cb: 64:2a:bd:09:e6:f1:a0:db:52:ee:f5:70:d1:3c:75:81:1e:94: 14:22:0c:11:0b:81:d6:5a:48:01:d9:82:30:0f:65:9a:7f:7c: 4b:19:9c:15:87:8a:0e:98:6d:13:1d:0f:b6:66:0b:b3:93:1c: 65:49:8b:33:13:58:e4:52:a8:be:3a:62:35:7d:dd:51:14:c1: 66:68:ba:ab:dd:0e:2a:22:36:01:46:20:7d:d9:55:ab:1c:9a: c4:2e:ff:ce:e2:24:05:cc:96:f0:96:a3:fb:fd:e5:6d:27:77: a7:43:74:89:0c:ab:1f:13:6f:30:bd:aa:eb:d5:17:2b:88:2d: 7d:e7:89:3b:26:84:43:29:98:6a:47:77:91:a4:89:84:88:4b: 1e:5c:dd:e5:ca:16:17:32:91:ad:93:6e:d9:29:09:c1:ae:20: 63:08:64:de:d3:92:71:0a:6f:89:3b:21:50:fe:63:0a:f2:46: 23:fa:9b:60:96:b9:33:fd:3a:eb:df:bb:9c:8b:0d:ea:38:50: ba:dd:b6:42:ed:ac:be:9c:3a:6f:ae:52:c2:73:db:e7:ee:1d: 17:20:2a:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxQjAxMTAvBgNVBAUTKEJDNjM4RTU3Q0E3QjkyMTQ0RkJBNzEzQUQ2REI2NEU2 RDBBRDQ5OTEwHhcNMjUwNzIxMDE0NDQ3WhcNMjUwNzI4MDE0NDQ3WjAYMRYwFAYD VQQDEw02ODdkOWI5MC05YjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqU6TIrsAzK9V1weh888F98nZEc34QoibCFaA/2YAvXaxybRmBWPIBzqIASZ7 mnBbEcyI9gZLgORVqfOeUAJnlc7FkK9uSGwWltuV/SE9IXnpH25HEEEpPbq4BMe0 vcC9DQgwsrlGKV7RVqgWb/IvaX67KYTD7asa+c93uygvoMf4ujkx4e5ybcbN8fXh 7MJpT6+W3cnWXWpJQXZnq5+FzpkMVC4UMCGybhnaQDLzbzfSit7L20YYpkqKJ2/a eJzYp00XkaJsqK9izaUGaAEnSRmkv0xePjORjaK4y99V09fqleRfi0+bI1GMG29N jJ+NOLyVKMRCp+YgiFD+DT1uIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLf3pih2 V5c2xwkhStL5ft952IsEMB8GA1UdIwQYMBaAFLxjjlfKe5IUT7pxOtbbZObQrUmR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzFCMC8xNUNGNUE4ODAx QjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2toUlB1bkU2MXR0azV0Q3RT WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZHT09WOHA3a2hSUHVuRTYxdHRrNXRDdFNaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzFCMC8xNUNGNUE4ODAxQjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2to UlB1bkU2MXR0azV0Q3RTWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDYPk+nhMltz3Julnv3FEceQWp781w83IX7AsYCmVsgr7u3GctkKr0J 5vGg21Lu9XDRPHWBHpQUIgwRC4HWWkgB2YIwD2Waf3xLGZwVh4oOmG0THQ+2Zguz kxxlSYszE1jkUqi+OmI1fd1RFMFmaLqr3Q4qIjYBRiB92VWrHJrELv/O4iQFzJbw lqP7/eVtJ3enQ3SJDKsfE28wvarr1RcriC1954k7JoRDKZhqR3eRpImEiEseXN3l yhYXMpGtk27ZKQnBriBjCGTe05JxCm+JOyFQ/mMK8kYj+ptglrkz/Trr37uciw3q OFC63bZC7ay+nDpvrlLCc9vn7h0XICrv -----END CERTIFICATE-----Generated at Mon Jul 21 13:11:44 2025 by rpki-client