$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft File: Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft (raw, json) Hash identifier: 3bHfWxBkOcJrIgko8sOylY5LkWeJEO4Vr+X45O+apDM= Subject key identifier: 22:8D:59:57:FF:55:12:4E:57:2B:B0:C4:1A:A3:AB:FD:84:08:71:FF Authority key identifier: 56:2F:B3:02:A8:76:78:3A:08:41:58:03:8B:D4:9E:F7:05:1A:60:3C Certificate issuer: /CN=A91EEB51/serialNumber=562FB302A876783A084158038BD49EF7051A603C Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft Manifest number: F9 Signing time: Mon 21 Jul 2025 05:21:42 +0000 Manifest this update: Mon 21 Jul 2025 05:21:41 +0000 Manifest next update: Mon 28 Jul 2025 05:21:41 +0000 Files and hashes: 1: Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl (hash: URAh26SZyqaf5oO0DJWZUSis2n8GpK20VRF5eyDuHq8=) 2: 748B00F4EA8A11EE9295672AC4F9AE02.roa (hash: ygDdUhDKlEYCgdYnkaYBpEgiP+SGTZxYs8Pi7efBQ5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEB51, serialNumber=562FB302A876783A084158038BD49EF7051A603C Validity Not Before: Jul 21 05:21:41 2025 GMT Not After : Jul 28 05:21:41 2025 GMT Subject: CN=687dce65-c24a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:3c:5a:18:b8:b6:81:73:df:d7:30:ad:6e: 54:e7:78:f5:b6:c8:bf:7d:8a:16:d9:af:ae:83:38: e3:d9:91:50:9e:bb:5f:6a:bb:3a:91:6f:c4:f5:5f: 2a:82:e4:ef:ca:ff:1f:39:13:3e:c4:08:fd:b8:62: 73:d0:28:c1:74:e3:52:1c:bf:b0:21:10:b8:2f:0d: b6:7d:25:a6:b9:c7:99:cd:db:b4:cb:ad:23:7b:8d: 2e:f1:fe:2d:de:43:9f:77:3b:9f:c7:bb:c6:56:8e: 33:1d:2a:ed:fc:f1:1e:68:ad:4b:47:3c:15:3a:24: ac:3c:e1:5a:b7:5a:f6:22:4b:ff:f5:43:ba:e8:10: c5:6f:4f:7b:20:8a:9a:c5:4b:7e:7a:25:23:96:9d: f3:cd:f7:d6:c8:08:b8:7f:63:90:ca:1f:bb:e4:23: da:da:1b:bc:a7:3c:21:85:2d:f5:0c:e4:25:a1:04: f8:6c:c2:77:74:00:12:e8:65:44:47:dc:52:88:fa: f1:83:71:57:11:b2:f2:7a:84:4c:fc:82:ef:4a:98: 37:8c:3d:b6:18:89:a3:35:04:77:3a:03:6c:af:62: ec:aa:5e:e8:f5:97:c1:a1:47:2b:8c:b1:3e:27:ff: 4a:f8:95:9a:f3:5b:8f:55:70:d1:95:66:25:23:bc: f1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8D:59:57:FF:55:12:4E:57:2B:B0:C4:1A:A3:AB:FD:84:08:71:FF X509v3 Authority Key Identifier: keyid:56:2F:B3:02:A8:76:78:3A:08:41:58:03:8B:D4:9E:F7:05:1A:60:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:af:22:c0:6c:37:c6:fe:4a:ce:59:59:99:ff:0b:06:8e:3b: 92:9b:db:2b:cd:b0:5c:58:c8:b6:58:21:81:81:c1:b1:e1:a2: b6:a1:07:8c:1e:cd:98:dd:95:3c:ae:8c:b5:72:04:ee:d4:de: 67:35:86:41:2f:1d:4b:53:88:0a:f7:17:fd:31:b9:4c:94:b1: c3:f6:4e:40:1b:8f:22:be:17:31:b0:84:1b:24:08:5e:9b:65: 3d:d0:8b:80:1a:ad:eb:86:8b:99:0d:e0:cd:ac:5e:4c:ce:cf: 05:87:ab:8b:b3:45:97:5e:09:21:a3:64:e6:4f:d7:62:6b:bd: 32:48:66:03:ea:11:9a:41:26:1f:33:6b:d6:e2:1b:a7:65:0f: 9d:2b:2e:7f:8d:73:5c:0c:27:15:b5:ea:fb:20:96:9d:0c:6a: 63:fb:9d:21:a5:b7:d2:be:3a:ca:19:cc:51:60:b8:61:cf:b7: 50:7a:b3:b1:8f:4d:74:53:c9:95:c1:10:98:fd:c5:ee:2f:85: 0e:d9:d5:ba:66:7c:5d:1c:e5:33:21:ac:32:f9:7f:66:46:a2: 36:3a:e7:42:6f:36:b9:0c:49:16:9e:f6:7d:67:ba:26:c7:84: b2:b9:c7:c7:31:9f:5d:d3:0a:d3:ba:79:43:ab:ee:cd:48:51: 53:5f:fc:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVCNTExMTAvBgNVBAUTKDU2MkZCMzAyQTg3Njc4M0EwODQxNTgwMzhCRDQ5RUY3 MDUxQTYwM0MwHhcNMjUwNzIxMDUyMTQxWhcNMjUwNzI4MDUyMTQxWjAYMRYwFAYD VQQDEw02ODdkY2U2NS1jMjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwT08Whi4toFz39cwrW5U53j1tsi/fYoW2a+ugzjj2ZFQnrtfars6kW/E9V8q guTvyv8fORM+xAj9uGJz0CjBdONSHL+wIRC4Lw22fSWmuceZzdu0y60je40u8f4t 3kOfdzufx7vGVo4zHSrt/PEeaK1LRzwVOiSsPOFat1r2Ikv/9UO66BDFb097IIqa xUt+eiUjlp3zzffWyAi4f2OQyh+75CPa2hu8pzwhhS31DOQloQT4bMJ3dAAS6GVE R9xSiPrxg3FXEbLyeoRM/ILvSpg3jD22GImjNQR3OgNsr2Lsql7o9ZfBoUcrjLE+ J/9K+JWa81uPVXDRlWYlI7zxEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKNWVf/ VRJOVyuwxBqjq/2ECHH/MB8GA1UdIwQYMBaAFFYvswKodng6CEFYA4vUnvcFGmA8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUI1MS8zN0E1MzRCOEVB ODMxMUVFOTE4MDFBNzZDNEY5QUUwMi9WaS16QXFoMmVEb0lRVmdEaTlTZTl3VWFZ RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZpLXpBcWgyZURvSVFWZ0RpOVNlOXdVYVlEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUI1MS8zN0E1MzRCOEVBODMxMUVFOTE4MDFBNzZDNEY5QUUwMi9WaS16QXFoMmVE b0lRVmdEaTlTZTl3VWFZRHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpryLAbDfG/krOWVmZ/wsGjjuSm9srzbBcWMi2WCGBgcGx4aK2oQeM Hs2Y3ZU8roy1cgTu1N5nNYZBLx1LU4gK9xf9MblMlLHD9k5AG48ivhcxsIQbJAhe m2U90IuAGq3rhouZDeDNrF5Mzs8Fh6uLs0WXXgkho2TmT9dia70ySGYD6hGaQSYf M2vW4hunZQ+dKy5/jXNcDCcVter7IJadDGpj+50hpbfSvjrKGcxRYLhhz7dQerOx j010U8mVwRCY/cXuL4UO2dW6ZnxdHOUzIawy+X9mRqI2OudCbza5DEkWnvZ9Z7om x4SyucfHMZ9d0wrTunlDq+7NSFFTX/zI -----END CERTIFICATE-----Generated at Mon Jul 21 07:10:57 2025 by rpki-client