$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft File: vdXpp28axMjlF5fs6Z49zuzudJM.mft (raw, json) Hash identifier: J260hk1r0v0arNeivkOMEgpyJY2AECDCh6jukExBvmc= Subject key identifier: F2:22:78:43:25:6A:49:02:EA:F8:F2:79:F6:88:F5:65:43:43:86:68 Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 Certificate issuer: /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Certificate serial: 079D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft Manifest number: 0771 Signing time: Mon 02 Jun 2025 21:56:50 +0000 Manifest this update: Mon 02 Jun 2025 21:56:50 +0000 Manifest next update: Mon 09 Jun 2025 21:56:50 +0000 Files and hashes: 1: vdXpp28axMjlF5fs6Z49zuzudJM.crl (hash: KdybAZ0LwtsmmocabEyLsyGtdBC44xWf7Cb6LtKIfoc=) 2: B95187FC2FB811EBBF9A864BC4F9AE02.roa (hash: 7LNQOsT6W5YF7PbwLpdxc+PNq2qTTKmlTXDNMzrKzkc=) 3: 934050F4CE1F11ED9C66DB60C4F9AE02.roa (hash: baTkvqYLLObVVgzBHPInngFn1RI2tT6fsgLIq4Wf1Yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1949 (0x79d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Validity Not Before: Jun 2 21:56:50 2025 GMT Not After : Jun 9 21:56:50 2025 GMT Subject: CN=683e1e22-55ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:38:ba:4b:e9:d2:b9:7a:86:fe:e0:e8:79:de: 8a:a1:fc:8d:94:61:f4:14:9e:4f:1e:e1:c6:1c:87: cc:7a:e1:ee:96:22:53:42:8c:93:8f:57:19:9c:6c: 88:19:d9:fb:7b:df:4f:37:32:3f:15:03:c6:7b:43: e9:7c:da:8e:d8:59:e9:c7:7b:70:83:db:86:12:21: 09:d0:b1:c0:b2:bb:3f:f4:18:48:90:f5:3e:7f:76: d4:b7:a7:40:ce:82:1c:b1:d1:53:2d:71:c6:38:20: af:ea:7c:69:be:bd:51:0f:e1:4a:93:66:16:5b:77: 33:b0:49:fa:38:bc:cf:78:e0:0e:fe:ca:c3:e4:6d: bc:04:ce:29:4b:25:fb:40:67:8b:c7:96:e8:28:6c: 68:97:3e:cd:51:89:39:a2:cb:6c:0d:ed:e6:54:ca: b3:13:c2:dd:c2:b7:bb:44:0a:24:33:de:b4:a0:33: d5:d2:96:c1:1c:0f:22:21:bb:b7:89:1d:1a:49:21: 64:4b:2b:e5:bc:df:05:27:ea:37:3e:e4:bb:fc:22: 43:b7:f7:0a:75:d2:a8:e5:11:40:3e:23:53:c2:34: 86:16:c7:17:21:60:99:5f:84:c3:90:b3:f5:1c:32: 44:c1:1f:d3:54:cf:06:43:b3:ad:69:49:7e:1b:f3: 5e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:22:78:43:25:6A:49:02:EA:F8:F2:79:F6:88:F5:65:43:43:86:68 X509v3 Authority Key Identifier: keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:fe:fc:07:78:d3:33:c4:70:cd:20:0b:7a:49:f5:18:53:e6: c5:22:cd:8c:37:1e:b3:09:ea:d8:aa:6e:9e:05:66:5b:b9:d1: e7:9c:ce:66:13:5c:e1:5c:40:f2:c6:dc:90:9e:40:fc:6c:63: a6:48:c8:a7:31:3e:27:e3:e2:b0:83:24:7e:ea:86:f6:40:37: 73:4e:6d:4a:4b:27:a1:ed:83:b4:b4:eb:2d:92:71:7c:ec:4d: c1:5b:f3:53:b3:c4:9d:78:e0:ec:6a:4f:f4:ce:70:d5:04:b9: ff:5e:4e:62:e4:4f:61:b6:c2:81:e8:82:5b:92:47:33:14:02: 48:b6:be:07:e6:70:84:66:78:cf:a3:c9:65:bc:a1:23:43:a2: 9a:d6:3b:0f:a1:b1:3a:89:84:e8:4e:e9:f5:a0:aa:4a:4a:44: 08:e4:37:44:00:7f:e1:7d:b4:4f:f1:e8:1b:5f:36:f9:59:bd: 21:4f:a7:53:c0:8a:3f:32:dc:21:08:f8:c9:58:3d:a5:c4:1c: b4:e8:2f:b3:14:5c:e6:0f:ba:b0:81:74:43:98:c8:53:e1:66: 34:5e:3c:8a:55:c6:4e:17:fe:31:e4:cb:7f:d1:06:78:ae:23: cb:22:cb:c7:03:ed:d8:b2:1c:a5:a5:80:76:79:ab:0b:b7:3a: 35:10:05:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEJERDVFOUE3NkYxQUM0QzhFNTE3OTdFQ0U5OUUzRENF RUNFRTc0OTMwHhcNMjUwNjAyMjE1NjUwWhcNMjUwNjA5MjE1NjUwWjAYMRYwFAYD VQQDEw02ODNlMWUyMi01NWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDi6S+nSuXqG/uDoed6KofyNlGH0FJ5PHuHGHIfMeuHuliJTQoyTj1cZnGyI Gdn7e99PNzI/FQPGe0PpfNqO2Fnpx3twg9uGEiEJ0LHAsrs/9BhIkPU+f3bUt6dA zoIcsdFTLXHGOCCv6nxpvr1RD+FKk2YWW3czsEn6OLzPeOAO/srD5G28BM4pSyX7 QGeLx5boKGxolz7NUYk5ostsDe3mVMqzE8Ldwre7RAokM960oDPV0pbBHA8iIbu3 iR0aSSFkSyvlvN8FJ+o3PuS7/CJDt/cKddKo5RFAPiNTwjSGFscXIWCZX4TDkLP1 HDJEwR/TVM8GQ7OtaUl+G/NeqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIieEMl akkC6vjyefaI9WVDQ4ZoMB8GA1UdIwQYMBaAFL3V6advGsTI5ReX7OmePc7s7nST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zMTQ4REM5RTJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhNamxGNWZzNlo0OXp1enVk Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZkWHBwMjhheE1qbEY1ZnM2WjQ5enV6dWRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zMTQ4REM5RTJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhN amxGNWZzNlo0OXp1enVkSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi/vwHeNMzxHDNIAt6SfUYU+bFIs2MNx6zCerYqm6eBWZbudHnnM5m E1zhXEDyxtyQnkD8bGOmSMinMT4n4+KwgyR+6ob2QDdzTm1KSyeh7YO0tOstknF8 7E3BW/NTs8SdeODsak/0znDVBLn/Xk5i5E9htsKB6IJbkkczFAJItr4H5nCEZnjP o8llvKEjQ6Ka1jsPobE6iYToTun1oKpKSkQI5DdEAH/hfbRP8egbXzb5Wb0hT6dT wIo/MtwhCPjJWD2lxBy06C+zFFzmD7qwgXRDmMhT4WY0XjyKVcZOF/4x5Mt/0QZ4 riPLIsvHA+3YshylpYB2easLtzo1EAUE -----END CERTIFICATE-----Generated at Wed Jun 4 00:17:07 2025 by rpki-client