$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft File: vZ1mh32GbnyQQVa-CMtDcargAb0.mft (raw, json) Hash identifier: 6Y8r3tYi+8ruIL8HNdYuzE+RDZb/FbbTiB3tDKfSEAk= Subject key identifier: 37:25:9E:71:1F:98:A1:17:DB:58:84:29:D1:11:C7:BB:E7:9F:46:D0 Authority key identifier: BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD Certificate issuer: /CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft Manifest number: 016E Signing time: Mon 21 Jul 2025 04:10:45 +0000 Manifest this update: Mon 21 Jul 2025 04:10:45 +0000 Manifest next update: Mon 28 Jul 2025 04:10:45 +0000 Files and hashes: 1: vZ1mh32GbnyQQVa-CMtDcargAb0.crl (hash: Xlvfo8G/ZxtuBO1r7VCGUKyCuBsYOUIW0r+vG2t/N3Y=) 2: AC9A49A6B79811EF9C8DF330C4F9AE02.roa (hash: x42cPOY42/ihAcwEOhbusv08pDLFkf2E5Qjxerl5aIk=) 3: 975A513293B011EF9203EA6BC4F9AE02.roa (hash: LAC2JzlZ9Cqk3BSRvYxm4bLahu0/0Fv8k3EO+q7V5PY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5E8B, serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Validity Not Before: Jul 21 04:10:45 2025 GMT Not After : Jul 28 04:10:45 2025 GMT Subject: CN=687dbdc5-4ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:71:d9:c4:b0:fa:5c:44:72:35:54:c7:22:02: ef:05:29:b7:14:f2:4a:f7:74:d2:f6:02:16:21:43: b1:f9:fb:b6:24:47:dc:a1:70:9a:bd:32:59:0a:c3: 81:c9:d9:94:d1:f3:ea:d1:df:81:51:5e:17:3d:87: ac:ce:8b:0e:1b:2d:b8:53:6d:0c:9f:85:18:1e:3e: 5e:75:fa:94:d4:a9:d2:58:e6:38:b1:07:7c:d5:8d: 0f:db:12:dd:e4:9a:36:e3:fa:cb:d8:13:36:f1:39: d2:2c:33:27:7a:d6:04:f3:8a:9a:a0:b7:81:74:8f: 05:d4:69:ce:98:14:bc:f9:3c:75:7b:08:86:50:bc: 17:f9:12:f1:17:1d:ef:2c:12:12:56:5a:4e:f5:ae: e7:6b:6e:ee:fa:5a:ea:3e:3a:16:a2:e7:c4:0f:d8: 57:e8:ce:0f:67:47:4a:0f:76:f1:e7:bc:46:b8:1f: 79:6d:60:32:c4:2e:12:9a:6c:fe:59:91:25:70:99: ff:f2:07:42:5b:24:ee:84:f2:28:1f:7a:c6:15:7d: a2:bb:f3:48:73:73:da:ec:5a:b6:24:67:2b:22:6b: 36:2d:4d:fc:9e:20:bd:0a:08:c6:f7:9b:ad:da:52: 09:05:08:67:dc:6d:95:32:37:9d:fb:0d:ec:08:83: 3b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:25:9E:71:1F:98:A1:17:DB:58:84:29:D1:11:C7:BB:E7:9F:46:D0 X509v3 Authority Key Identifier: keyid:BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:15:2c:53:69:08:11:0d:b1:86:79:7d:3f:5f:7a:13:cc:63: 95:65:4d:69:a3:0f:17:ae:6a:5d:a7:b3:f9:38:cd:f6:95:0c: b0:61:56:90:57:54:c4:e4:dd:57:80:b6:98:ac:a1:26:e0:b7: 97:61:8e:cc:ef:50:30:ae:28:42:17:da:1b:ad:49:0d:da:48: 3d:6b:64:b6:57:5e:19:99:04:9c:7d:6d:e6:64:d2:75:73:f1: 0c:25:46:1a:be:c3:44:c4:04:10:ab:5c:3d:fb:91:a7:9c:9b: a3:de:f4:c7:46:e5:85:4d:ab:2c:a3:be:a3:70:4f:48:00:9d: 67:58:f9:55:b8:0e:c7:b3:d9:4b:33:6e:7b:a0:5c:eb:34:5e: e9:1b:b8:84:44:7b:a8:2f:8d:9c:25:09:92:a3:58:1f:9e:93: b3:14:34:51:ab:62:02:b8:a1:e7:2b:e3:9f:da:00:80:0e:01: 92:6b:9a:26:f8:af:62:63:fd:de:8a:7a:cb:ff:6b:92:c8:65: e3:16:64:cf:b5:d2:94:8a:b9:b2:ed:83:7c:ee:f0:f1:7b:92: c7:08:e9:d5:e0:08:88:80:77:69:2d:0e:57:d5:8c:49:b0:40: e6:10:54:12:9b:76:96:ee:da:89:51:ca:d4:69:05:7a:5a:7f: bd:e4:dd:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVFOEIxMTAvBgNVBAUTKEJEOUQ2Njg3N0Q4NjZFN0M5MDQxNTZCRTA4Q0I0Mzcx QUFFMDAxQkQwHhcNMjUwNzIxMDQxMDQ1WhcNMjUwNzI4MDQxMDQ1WjAYMRYwFAYD VQQDEw02ODdkYmRjNS00ZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXHZxLD6XERyNVTHIgLvBSm3FPJK93TS9gIWIUOx+fu2JEfcoXCavTJZCsOB ydmU0fPq0d+BUV4XPYeszosOGy24U20Mn4UYHj5edfqU1KnSWOY4sQd81Y0P2xLd 5Jo24/rL2BM28TnSLDMnetYE84qaoLeBdI8F1GnOmBS8+Tx1ewiGULwX+RLxFx3v LBISVlpO9a7na27u+lrqPjoWoufED9hX6M4PZ0dKD3bx57xGuB95bWAyxC4Smmz+ WZElcJn/8gdCWyTuhPIoH3rGFX2iu/NIc3Pa7Fq2JGcrIms2LU38niC9CgjG95ut 2lIJBQhn3G2VMjed+w3sCIM7hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDclnnEf mKEX21iEKdERx7vnn0bQMB8GA1UdIwQYMBaAFL2dZod9hm58kEFWvgjLQ3Gq4AG9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUU4Qi9ERUMzQkQ3QzVB RDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2JueVFRVmEtQ010RGNhcmdB YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZaMW1oMzJHYm55UVFWYS1DTXREY2FyZ0FiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUU4Qi9ERUMzQkQ3QzVBRDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2Ju eVFRVmEtQ010RGNhcmdBYjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqFSxTaQgRDbGGeX0/X3oTzGOVZU1pow8Xrmpdp7P5OM32lQywYVaQ V1TE5N1XgLaYrKEm4LeXYY7M71AwrihCF9obrUkN2kg9a2S2V14ZmQScfW3mZNJ1 c/EMJUYavsNExAQQq1w9+5GnnJuj3vTHRuWFTasso76jcE9IAJ1nWPlVuA7Hs9lL M257oFzrNF7pG7iERHuoL42cJQmSo1gfnpOzFDRRq2ICuKHnK+Of2gCADgGSa5om +K9iY/3einrL/2uSyGXjFmTPtdKUirmy7YN87vDxe5LHCOnV4AiIgHdpLQ5X1YxJ sEDmEFQSm3aW7tqJUcrUaQV6Wn+95N0X -----END CERTIFICATE-----Generated at Mon Jul 21 06:56:14 2025 by rpki-client