$ rpki-client -vvf rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft File: VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft (raw, json) Hash identifier: l1cursFDCVfgEpU5d43kla2LA3WGAhahsOqpJyIshA8= Subject key identifier: D0:45:73:F3:E7:FB:70:28:40:EC:FA:84:08:36:B3:9D:1B:15:EF:4B Authority key identifier: 54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D Certificate issuer: /CN=A912F62D/serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft Manifest number: 38 Signing time: Sat 31 May 2025 07:08:57 +0000 Manifest this update: Sat 31 May 2025 07:08:56 +0000 Manifest next update: Sat 07 Jun 2025 07:08:56 +0000 Files and hashes: 1: VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl (hash: XX1FuYFAnc/h0EpWFHL54nwp21eounrJc6nVJFQGccY=) 2: 6DAFB1EAEA7E11EF93A91726C4F9AE02.roa (hash: odRzv1rTZxMhuETYW/aFCGmGEfOypP1WnK3dBBfEcvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F62D, serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D Validity Not Before: May 31 07:08:56 2025 GMT Not After : Jun 7 07:08:56 2025 GMT Subject: CN=683aab08-a66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:70:97:ba:d4:e8:02:b0:2b:fe:1e:79:4f:70: a2:65:8a:d0:0a:24:10:84:a9:05:37:ea:61:f2:f6: 90:d9:16:b1:1c:52:7e:e0:3f:cb:9a:a4:98:b4:fe: 0a:55:f2:af:42:e0:0d:f7:06:b6:50:45:2c:0a:ec: 9c:98:18:2d:a4:08:60:c5:ec:14:ed:46:18:ed:a1: bc:a4:5b:97:c7:fb:16:28:ca:4b:b4:7d:f7:ee:7e: 83:cc:43:96:a5:60:99:04:e5:28:b4:ef:a1:26:27: 3d:77:c3:f4:11:63:dc:15:94:1b:9e:78:52:48:e6: 46:ce:44:67:5b:bb:86:91:36:b8:8e:86:29:9b:6b: fd:c2:fa:b2:4c:7f:11:5d:2c:9d:d4:2a:b6:da:e3: 3c:27:a6:61:ae:28:b2:17:49:d3:55:26:ae:91:83: b6:5a:4c:91:0f:13:85:35:d9:57:9a:97:57:4b:61: 08:b1:d5:1b:bd:54:45:af:67:69:a5:94:9d:f1:09: dd:2f:dc:08:61:ed:93:9c:67:8e:bb:b8:e8:a1:64: 84:9c:d3:4c:c9:45:56:a1:6f:c7:76:d0:b4:6e:7b: 4f:58:1e:5e:9b:77:f8:f1:8d:bb:b7:87:2b:e2:64: 5d:83:ea:ce:19:3f:8a:c3:59:2f:df:50:d7:cc:35: a1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:45:73:F3:E7:FB:70:28:40:EC:FA:84:08:36:B3:9D:1B:15:EF:4B X509v3 Authority Key Identifier: keyid:54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:ac:f1:81:62:b4:05:ae:f8:09:83:e2:6b:6c:7c:b6:77:5e: 8a:fa:07:66:e3:3c:1b:9a:3f:9a:b9:a6:57:5f:1e:10:43:50: 98:5d:35:f3:e6:be:29:ad:ff:01:82:25:91:a2:17:14:bb:1c: bb:58:10:fc:90:b4:7f:ed:4a:40:26:7f:92:31:27:6e:a7:17: 6f:1e:2d:da:fa:19:41:39:58:83:3d:a2:be:cf:11:e4:4a:80: 38:6b:7c:49:cc:a6:b9:09:18:7e:bd:f2:ba:e2:14:b9:69:c8: 71:12:3c:dd:4b:97:62:f7:c1:fc:bc:25:4e:fa:32:1a:e0:0a: e1:98:9d:ce:56:40:77:36:0e:b7:bf:3f:02:d2:50:91:5d:91: 92:0f:db:88:2d:1b:b9:06:04:a8:13:28:fa:ef:b6:93:ad:3b: 31:cd:f2:e7:32:41:04:78:b3:9e:1a:6a:7a:83:fe:55:ac:cd: 10:1c:34:78:ef:5d:1e:df:45:c0:4f:c0:e8:8e:98:58:35:79: 2d:53:ab:be:f1:fe:99:09:52:28:92:db:dc:83:07:2c:d4:ba: 39:8d:a9:c4:c7:25:36:f4:34:19:e3:b8:f3:db:6e:7e:1f:45: 2a:24:4b:7f:b8:7d:3a:de:f1:3c:b1:86:45:7a:f1:bb:16:3f: 7b:96:77:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjYyRDExMC8GA1UEBRMoNTQ5MjQ2MjEwNUNFQjA1MkRCQTlEQUU4QkI2MzVGMDVG Nzc3MTYxRDAeFw0yNTA1MzEwNzA4NTZaFw0yNTA2MDcwNzA4NTZaMBgxFjAUBgNV BAMTDTY4M2FhYjA4LWE2NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDucJe61OgCsCv+HnlPcKJlitAKJBCEqQU36mHy9pDZFrEcUn7gP8uapJi0/gpV 8q9C4A33BrZQRSwK7JyYGC2kCGDF7BTtRhjtobykW5fH+xYoyku0fffufoPMQ5al YJkE5Si076EmJz13w/QRY9wVlBueeFJI5kbORGdbu4aRNriOhimba/3C+rJMfxFd LJ3UKrba4zwnpmGuKLIXSdNVJq6Rg7ZaTJEPE4U12Veal1dLYQix1Ru9VEWvZ2ml lJ3xCd0v3Ahh7ZOcZ467uOihZISc00zJRVahb8d20LRue09YHl6bd/jxjbu3hyvi ZF2D6s4ZP4rDWS/fUNfMNaH5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0EVz8+f7 cChA7PqECDaznRsV70swHwYDVR0jBBgwFoAUVJJGIQXOsFLbqdrou2NfBfd3Fh0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNjJELzJEQTU3QzNDRUE3 MDExRUY4MTU0QzM2QkM0RjlBRTAyL1ZKSkdJUVhPc0ZMYnFkcm91Mk5mQmZkM0Zo MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkpKR0lRWE9zRkxicWRyb3UyTmZCZmQzRmgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG NjJELzJEQTU3QzNDRUE3MDExRUY4MTU0QzM2QkM0RjlBRTAyL1ZKSkdJUVhPc0ZM YnFkcm91Mk5mQmZkM0ZoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAECs8YFitAWu+AmD4mtsfLZ3Xor6B2bjPBuaP5q5pldfHhBDUJhdNfPm vimt/wGCJZGiFxS7HLtYEPyQtH/tSkAmf5IxJ26nF28eLdr6GUE5WIM9or7PEeRK gDhrfEnMprkJGH698rriFLlpyHESPN1Ll2L3wfy8JU76MhrgCuGYnc5WQHc2Dre/ PwLSUJFdkZIP24gtG7kGBKgTKPrvtpOtOzHN8ucyQQR4s54aanqD/lWszRAcNHjv XR7fRcBPwOiOmFg1eS1Tq77x/pkJUiiS29yDByzUujmNqcTHJTb0NBnjuPPbbn4f RSokS3+4fTre8TyxhkV68bsWP3uWd8Q= -----END CERTIFICATE-----Generated at Sat May 31 17:32:03 2025 by rpki-client