$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft File: VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft (raw, json) Hash identifier: z0SENWNLnZPW8stvP/73jKbov/jmxslpOklBDZy8sE8= Subject key identifier: DD:07:36:7E:69:DE:33:B1:62:CA:6D:F7:D2:BF:A6:63:7D:21:55:52 Authority key identifier: 56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A Certificate issuer: /CN=A91D6F2B/serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A Certificate serial: 0371 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft Manifest number: 036C Signing time: Mon 21 Jul 2025 01:10:23 +0000 Manifest this update: Mon 21 Jul 2025 01:10:22 +0000 Manifest next update: Mon 28 Jul 2025 01:10:22 +0000 Files and hashes: 1: VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl (hash: AvFR+TCxhr1c9F3G53gCE5wQlZDf6F6SLfKgDt9u3Pc=) 2: 2A22D2FCB6CB11ECA43EEE87C4F9AE02.roa (hash: KlAC54soZmN85lgdd13wHGCcsR/XbE59aQyhJMVb4zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 881 (0x371) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6F2B, serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A Validity Not Before: Jul 21 01:10:22 2025 GMT Not After : Jul 28 01:10:22 2025 GMT Subject: CN=687d937f-cd3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b9:b8:29:d0:86:31:f0:07:65:56:77:06:68: c8:5c:24:54:ea:a7:cd:5e:00:3c:8b:3f:9b:89:6b: 0a:85:f9:38:35:7f:0b:3f:15:47:9f:4a:eb:56:9e: da:95:03:78:6a:16:d5:0b:07:eb:29:cd:1b:29:97: 0d:c2:0e:b6:ec:88:fd:fe:d9:c0:60:23:d9:4b:88: 07:63:67:20:1e:87:95:20:35:c9:76:3e:43:64:24: 54:59:0e:ee:ab:cf:4f:88:ae:0f:c6:7e:cc:83:a8: 36:24:9d:00:53:3d:89:8f:13:81:72:51:3b:ea:ed: 8e:62:d6:9b:6d:8d:22:68:1a:85:da:00:1d:43:37: d4:f8:31:5a:a9:28:12:91:bf:b6:26:5c:7e:e8:cc: a7:45:58:c3:85:94:b4:98:59:ee:21:5e:0c:f7:cb: 6a:85:24:7d:68:75:4f:52:c5:11:4a:b8:64:a1:77: 5c:12:0d:bd:09:2f:45:3c:a0:ed:75:34:1a:94:22: fd:88:2d:7e:d0:e3:2a:1e:6c:63:58:d7:4e:db:91: c9:3b:9b:0a:34:c4:ae:5b:5f:25:a6:8b:72:08:c6: c7:d6:29:7a:54:30:b4:07:df:5f:86:f0:cb:27:ec: c6:fa:43:f1:c0:09:bb:81:80:f7:89:d6:0d:6b:e0: 4d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:07:36:7E:69:DE:33:B1:62:CA:6D:F7:D2:BF:A6:63:7D:21:55:52 X509v3 Authority Key Identifier: keyid:56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:df:7a:7a:f7:12:89:a4:7b:c2:0a:17:1b:ab:4f:ab:4b:39: 7e:3d:3b:92:be:b2:85:07:87:cf:72:fd:65:54:f2:62:c5:fa: 87:2e:9a:a2:42:e2:a7:8d:c7:e9:77:9f:c7:b9:36:4a:9a:dc: 02:da:6a:03:91:47:fd:4f:c6:68:ee:d1:5b:0a:3f:06:e1:84: be:c7:f2:d7:91:1e:76:1f:7a:26:d5:d8:2d:0d:56:01:26:8c: 20:39:ce:11:10:d6:45:b4:1e:8f:dd:cb:44:32:56:d0:e2:ba: 34:92:b1:89:18:4a:4b:2a:c5:91:01:f4:ad:d3:6a:9e:af:72: 94:10:6f:5f:79:d5:30:6d:bc:b9:7f:dc:82:2e:e6:ed:0c:b3: 02:ce:1f:a9:32:df:c3:5f:cc:fa:fe:89:74:0b:63:e1:26:86: 17:94:2c:7e:65:a4:76:99:55:38:de:7c:3f:de:bd:66:b3:a1: a2:51:fc:8e:ff:2c:96:7c:34:08:e0:58:06:84:1c:b1:32:17: b3:4c:8b:47:07:ea:40:78:06:04:7e:d8:b1:06:22:8e:98:77: a1:04:45:dc:f8:85:19:39:a2:19:d0:bd:6c:2a:f4:97:e4:75: c7:c2:f4:a6:05:7b:2a:c9:5d:d5:eb:d2:71:23:3a:36:d7:9b: c5:61:ef:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZGMkIxMTAvBgNVBAUTKDU2MzhDQjFFMjZEMTE5OURBQkU4QjhDN0VEMjJCMDND NENFOEM4MEEwHhcNMjUwNzIxMDExMDIyWhcNMjUwNzI4MDExMDIyWjAYMRYwFAYD VQQDEw02ODdkOTM3Zi1jZDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbm4KdCGMfAHZVZ3BmjIXCRU6qfNXgA8iz+biWsKhfk4NX8LPxVHn0rrVp7a lQN4ahbVCwfrKc0bKZcNwg627Ij9/tnAYCPZS4gHY2cgHoeVIDXJdj5DZCRUWQ7u q89PiK4Pxn7Mg6g2JJ0AUz2JjxOBclE76u2OYtabbY0iaBqF2gAdQzfU+DFaqSgS kb+2Jlx+6MynRVjDhZS0mFnuIV4M98tqhSR9aHVPUsURSrhkoXdcEg29CS9FPKDt dTQalCL9iC1+0OMqHmxjWNdO25HJO5sKNMSuW18lpotyCMbH1il6VDC0B99fhvDL J+zG+kPxwAm7gYD3idYNa+BNIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0HNn5p 3jOxYspt99K/pmN9IVVSMB8GA1UdIwQYMBaAFFY4yx4m0Rmdq+i4x+0isDxM6MgK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkYyQi8zMzg2Njc2NkI2 QzkxMUVDODlCREM2ODdDNEY5QUUwMi9WampMSGliUkdaMnI2TGpIN1NLd1BFem95 QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZqakxIaWJSR1oycjZMakg3U0t3UEV6b3lBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkYyQi8zMzg2Njc2NkI2QzkxMUVDODlCREM2ODdDNEY5QUUwMi9WampMSGliUkda MnI2TGpIN1NLd1BFem95QW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA033p69xKJpHvCChcbq0+rSzl+PTuSvrKFB4fPcv1lVPJixfqHLpqi QuKnjcfpd5/HuTZKmtwC2moDkUf9T8Zo7tFbCj8G4YS+x/LXkR52H3om1dgtDVYB JowgOc4RENZFtB6P3ctEMlbQ4ro0krGJGEpLKsWRAfSt02qer3KUEG9fedUwbby5 f9yCLubtDLMCzh+pMt/DX8z6/ol0C2PhJoYXlCx+ZaR2mVU43nw/3r1ms6GiUfyO /yyWfDQI4FgGhByxMhezTItHB+pAeAYEftixBiKOmHehBEXc+IUZOaIZ0L1sKvSX 5HXHwvSmBXsqyV3V69JxIzo215vFYe8i -----END CERTIFICATE-----Generated at Mon Jul 21 06:53:27 2025 by rpki-client