$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft File: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft (raw, json) Hash identifier: 50+7EGZUeXTqL+k4Zl7p93wrkU4qUOymN5M0mOygiGU= Subject key identifier: B1:B3:79:47:8F:79:25:1F:71:0F:8F:12:24:93:42:6B:B5:EE:61:33 Authority key identifier: 56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29 Certificate issuer: /CN=A9136BD7/serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829 Certificate serial: 05FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft Manifest number: 05FA Signing time: Fri 06 Jun 2025 22:56:14 +0000 Manifest this update: Fri 06 Jun 2025 22:56:13 +0000 Manifest next update: Fri 13 Jun 2025 22:56:13 +0000 Files and hashes: 1: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl (hash: sqajm21d32FKHVNiwrDktv0lHPat2PY6Y1aCUAaUvP0=) 2: E22BD636AC5011EBA37CCA28C4F9AE02.roa (hash: fdFSt8Mu6WuYnLA2fbE3V7b+qZmpKdHiBdsuXljNq4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 22:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1535 (0x5ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BD7, serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829 Validity Not Before: Jun 6 22:56:13 2025 GMT Not After : Jun 13 22:56:13 2025 GMT Subject: CN=6843720e-ead2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:86:05:a8:f7:93:76:8a:f9:df:92:3f:a9:80: 3c:78:eb:82:66:e6:2b:58:ca:46:58:6e:30:cc:28: 3f:89:f9:f3:3c:68:18:72:63:72:7c:4c:8b:10:90: 69:45:b6:a9:b9:19:3a:28:fd:d1:35:79:8d:34:fc: 8c:57:36:70:8f:a6:57:db:5a:72:be:52:b2:26:19: 42:71:51:cc:3f:80:a0:c7:ea:30:eb:38:23:0c:9e: 64:0d:ab:a0:ca:10:e7:c4:97:63:ac:f4:fe:d1:be: 0d:2c:64:79:cc:0b:4d:62:77:52:a5:dd:a1:3c:06: cf:f4:1a:7f:12:1a:2f:87:c3:73:c3:e1:93:d5:f2: 8c:92:84:06:fe:c3:78:4c:b4:40:0c:4c:26:74:bd: 71:f4:85:1a:cb:51:9a:eb:fc:cb:ad:03:1b:4b:9e: 87:fa:48:b5:80:5a:52:aa:e1:86:71:76:cd:de:82: f9:16:32:cd:fb:29:76:a3:42:94:02:43:02:94:52: e4:a8:e5:19:04:e8:87:a8:f9:b2:3a:0f:86:69:5f: 89:5c:f9:c4:17:9c:7a:5f:7f:e5:19:e0:87:ec:d9: 10:95:da:af:59:48:a1:40:de:fe:01:3a:eb:89:cd: 8c:67:96:71:35:e8:dd:41:c1:a5:b0:53:17:e3:14: 1c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B3:79:47:8F:79:25:1F:71:0F:8F:12:24:93:42:6B:B5:EE:61:33 X509v3 Authority Key Identifier: keyid:56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:bf:17:e6:7c:67:b0:69:11:80:62:ad:79:3d:db:a8:8e:fa: 37:33:b2:7c:17:c7:be:e2:09:ef:90:4e:92:79:f7:b7:5e:c3: 15:60:9a:04:9c:05:1b:62:1a:4a:53:38:e0:f5:99:d3:21:d7: 15:3a:7e:15:43:b3:d9:65:41:15:24:75:df:95:ac:fe:91:8d: ed:06:6f:c6:03:42:14:70:cf:01:99:09:2d:a3:2b:61:9f:e5: 47:98:38:30:0c:33:f4:f3:6c:d5:25:16:44:44:1b:bd:e2:a5: 91:bb:fb:d7:2b:45:d2:6b:85:fa:8d:6f:e3:89:47:f4:0f:fd: be:cd:1c:8e:64:82:24:6e:aa:2e:89:25:02:81:70:1d:03:2b: e5:19:f4:df:87:9e:74:72:a4:e9:7f:e7:f0:8b:a2:fc:85:38: 27:70:d3:dc:f9:f2:17:3c:a6:a5:53:95:30:b6:b9:b9:65:29: ce:73:95:b5:6f:35:45:fd:25:e2:c8:01:66:24:33:5c:3f:df: 7b:10:fa:46:bf:6b:b2:d7:70:70:64:a1:9c:d0:53:2a:19:4b: 29:b9:57:05:ea:ab:e0:33:55:8a:c8:9e:2b:39:c9:a7:8b:01: d3:2f:e3:9c:20:47:4c:0c:0a:8b:aa:d7:32:66:5d:ee:2f:49: b9:69:98:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRDcxMTAvBgNVBAUTKDU2QTAzMTY3RkFFMTJCMUJBMTRCQjg0NzRENDQyQjY3 NzBCQjk4MjkwHhcNMjUwNjA2MjI1NjEzWhcNMjUwNjEzMjI1NjEzWjAYMRYwFAYD VQQDEw02ODQzNzIwZS1lYWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIYFqPeTdor535I/qYA8eOuCZuYrWMpGWG4wzCg/ifnzPGgYcmNyfEyLEJBp RbapuRk6KP3RNXmNNPyMVzZwj6ZX21pyvlKyJhlCcVHMP4Cgx+ow6zgjDJ5kDaug yhDnxJdjrPT+0b4NLGR5zAtNYndSpd2hPAbP9Bp/Ehovh8Nzw+GT1fKMkoQG/sN4 TLRADEwmdL1x9IUay1Ga6/zLrQMbS56H+ki1gFpSquGGcXbN3oL5FjLN+yl2o0KU AkMClFLkqOUZBOiHqPmyOg+GaV+JXPnEF5x6X3/lGeCH7NkQldqvWUihQN7+ATrr ic2MZ5ZxNejdQcGlsFMX4xQc7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGzeUeP eSUfcQ+PEiSTQmu17mEzMB8GA1UdIwQYMBaAFFagMWf64SsboUu4R01EK2dwu5gp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJENy9BNjUxQjQ3NEFD NEYxMUVCODNEMThFMjhDNEY5QUUwMi9WcUF4Wl9yaEt4dWhTN2hIVFVRclozQzdt Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZxQXhaX3JoS3h1aFM3aEhUVVFyWjNDN21Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkJENy9BNjUxQjQ3NEFDNEYxMUVCODNEMThFMjhDNEY5QUUwMi9WcUF4Wl9yaEt4 dWhTN2hIVFVRclozQzdtQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvvxfmfGewaRGAYq15Pduojvo3M7J8F8e+4gnvkE6Sefe3XsMVYJoE nAUbYhpKUzjg9ZnTIdcVOn4VQ7PZZUEVJHXflaz+kY3tBm/GA0IUcM8BmQktoyth n+VHmDgwDDP082zVJRZERBu94qWRu/vXK0XSa4X6jW/jiUf0D/2+zRyOZIIkbqou iSUCgXAdAyvlGfTfh550cqTpf+fwi6L8hTgncNPc+fIXPKalU5Uwtrm5ZSnOc5W1 bzVF/SXiyAFmJDNcP997EPpGv2uy13BwZKGc0FMqGUspuVcF6qvgM1WKyJ4rOcmn iwHTL+OcIEdMDAqLqtcyZl3uL0m5aZjD -----END CERTIFICATE-----Generated at Sat Jun 7 17:23:12 2025 by rpki-client