$ rpki-client -vvf rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft File: vQyzxI8wwfOrPzAa7N5qzAIutV8.mft (raw, json) Hash identifier: V1EyT+sy1pER2i9KQcEMV62OI93tmXtlsH/kBlzG2PE= Subject key identifier: 9E:0D:BD:2A:B1:CC:FA:7B:83:33:64:FE:1F:A9:3C:E6:B3:50:4D:B3 Authority key identifier: BD:0C:B3:C4:8F:30:C1:F3:AB:3F:30:1A:EC:DE:6A:CC:02:2E:B5:5F Certificate issuer: /CN=A9131940/serialNumber=BD0CB3C48F30C1F3AB3F301AECDE6ACC022EB55F Certificate serial: 068A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft Manifest number: 0684 Signing time: Mon 30 Jun 2025 22:35:16 +0000 Manifest this update: Mon 30 Jun 2025 22:35:15 +0000 Manifest next update: Mon 07 Jul 2025 22:35:15 +0000 Files and hashes: 1: vQyzxI8wwfOrPzAa7N5qzAIutV8.crl (hash: hI8yGrDGoafLG/akJeF6xj6/LcUTP3+Bm0jbOGfMLkQ=) 2: B7E5ADEE7B2111EB89BB2347C4F9AE02.roa (hash: XhXh7/hc+7Rhp2pgMR497HY0tEko0qYz35OtmtH7m/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.crl rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1674 (0x68a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131940, serialNumber=BD0CB3C48F30C1F3AB3F301AECDE6ACC022EB55F Validity Not Before: Jun 30 22:35:15 2025 GMT Not After : Jul 7 22:35:15 2025 GMT Subject: CN=68631124-15fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:79:75:da:c1:a0:dd:1d:0d:29:a4:95:19:60: dc:9c:3b:2f:ac:de:4b:8a:97:bc:ac:b3:d2:3c:d2: 9e:02:c1:65:6f:c0:16:a5:7a:ed:58:8e:f2:4e:c3: 76:8c:0a:70:a3:a3:b5:d9:d6:cf:7b:60:87:52:ee: ab:b0:a3:f2:7d:00:e1:d7:49:12:43:79:bc:ed:1b: 31:81:35:e9:53:a4:84:81:22:ff:93:99:52:c6:2c: a5:0b:59:f4:71:d7:f9:e5:57:04:98:39:9b:a3:2e: b3:b4:47:94:6a:18:84:17:b7:d8:a9:b8:e5:89:68: 0d:16:13:71:65:4c:00:a7:d3:a1:49:9e:8e:da:c9: 0d:b8:71:50:2f:96:12:e3:7f:3c:38:a7:b4:fb:2c: 1d:ca:77:da:06:a8:0e:a5:c7:3f:4b:6a:0d:27:a5: bf:94:22:27:78:71:48:a1:48:5c:fc:32:24:39:c8: 9a:6f:f6:4c:dd:46:80:52:04:33:12:70:94:2b:61: e5:fe:c2:cf:a8:13:fa:98:15:04:0f:3b:d5:fb:8b: fe:25:f1:13:f6:5c:b4:3e:82:d4:3b:88:29:b4:6c: 49:d1:b3:01:be:d2:d3:5c:a1:02:75:cb:63:64:0c: fa:bf:7a:ef:3a:d4:8f:29:46:8e:72:aa:5a:96:93: 3e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0D:BD:2A:B1:CC:FA:7B:83:33:64:FE:1F:A9:3C:E6:B3:50:4D:B3 X509v3 Authority Key Identifier: keyid:BD:0C:B3:C4:8F:30:C1:F3:AB:3F:30:1A:EC:DE:6A:CC:02:2E:B5:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:84:74:12:8f:3e:25:e0:9b:5c:26:26:6e:a0:aa:37:38:fb: 3f:40:fc:0d:4f:f3:e3:2c:1f:84:04:a9:47:40:e3:53:d5:71: 3e:08:0c:59:71:3a:20:17:4f:36:d9:c4:c2:f3:d1:19:3e:14: 1f:0c:2a:50:af:f1:30:4a:fd:b9:bf:ce:79:86:2f:25:91:99: 55:f7:5c:01:97:15:0b:96:38:33:48:34:d1:8a:62:c3:13:45: fd:dc:90:be:53:69:e7:e9:a9:38:29:d3:a2:ee:48:95:00:9c: 7b:09:5c:1a:cc:53:08:3b:c5:2a:d6:41:2c:5b:8a:d8:b7:d3: df:51:a3:25:3a:82:05:b7:cd:0d:66:93:6e:f9:79:c5:44:bf: c9:01:0a:02:c4:2a:41:af:ce:28:8b:62:c9:b3:0d:37:21:d7: 60:ff:48:f8:95:f1:17:54:02:81:be:f1:bd:0d:b4:7d:68:a4: 3f:99:2f:c8:dc:ac:b1:21:4f:04:ff:27:48:f4:d0:f6:a7:29: 5b:e7:59:ee:93:2f:b6:6e:4b:c4:94:50:ad:4d:9a:1a:79:c9: 9d:de:07:e6:47:e6:9b:88:c1:1d:cb:e5:41:38:4b:57:5c:3a: 55:ba:b8:b5:18:c7:6d:cd:e3:03:2d:e7:ad:0b:58:2c:77:f4: b2:f0:72:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE5NDAxMTAvBgNVBAUTKEJEMENCM0M0OEYzMEMxRjNBQjNGMzAxQUVDREU2QUND MDIyRUI1NUYwHhcNMjUwNjMwMjIzNTE1WhcNMjUwNzA3MjIzNTE1WjAYMRYwFAYD VQQDEw02ODYzMTEyNC0xNWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Xl12sGg3R0NKaSVGWDcnDsvrN5Lipe8rLPSPNKeAsFlb8AWpXrtWI7yTsN2 jApwo6O12dbPe2CHUu6rsKPyfQDh10kSQ3m87RsxgTXpU6SEgSL/k5lSxiylC1n0 cdf55VcEmDmboy6ztEeUahiEF7fYqbjliWgNFhNxZUwAp9OhSZ6O2skNuHFQL5YS 4388OKe0+ywdynfaBqgOpcc/S2oNJ6W/lCIneHFIoUhc/DIkOciab/ZM3UaAUgQz EnCUK2Hl/sLPqBP6mBUEDzvV+4v+JfET9ly0PoLUO4gptGxJ0bMBvtLTXKECdctj ZAz6v3rvOtSPKUaOcqpalpM+3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4NvSqx zPp7gzNk/h+pPOazUE2zMB8GA1UdIwQYMBaAFL0Ms8SPMMHzqz8wGuzeaswCLrVf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTk0MC85Q0Y2MEJCMDdC MjAxMUVCQjBDOERDNDZDNEY5QUUwMi92UXl6eEk4d3dmT3JQekFhN041cXpBSXV0 VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZReXp4STh3d2ZPclB6QWE3TjVxekFJdXRWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTk0MC85Q0Y2MEJCMDdCMjAxMUVCQjBDOERDNDZDNEY5QUUwMi92UXl6eEk4d3dm T3JQekFhN041cXpBSXV0VjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDhHQSjz4l4JtcJiZuoKo3OPs/QPwNT/PjLB+EBKlHQONT1XE+CAxZ cTogF0822cTC89EZPhQfDCpQr/EwSv25v855hi8lkZlV91wBlxULljgzSDTRimLD E0X93JC+U2nn6ak4KdOi7kiVAJx7CVwazFMIO8Uq1kEsW4rYt9PfUaMlOoIFt80N ZpNu+XnFRL/JAQoCxCpBr84oi2LJsw03Iddg/0j4lfEXVAKBvvG9DbR9aKQ/mS/I 3KyxIU8E/ydI9ND2pylb51nuky+2bkvElFCtTZoaecmd3gfmR+abiMEdy+VBOEtX XDpVuri1GMdtzeMDLeetC1gsd/Sy8HL1 -----END CERTIFICATE-----Generated at Wed Jul 2 05:32:46 2025 by rpki-client