$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft File: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft (raw, json) Hash identifier: 7LB3LnScma2+JpEv4NQkh+SNfhsi8/jvkbo/fHBhJok= Subject key identifier: 2A:29:E5:7C:61:28:19:8A:74:C6:D5:F8:D3:4B:1F:72:1F:FC:C3:68 Authority key identifier: 54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39 Certificate issuer: /CN=A9195AA2/serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39 Certificate serial: 0C49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft Manifest number: 142C Signing time: Mon 30 Jun 2025 18:39:23 +0000 Manifest this update: Mon 30 Jun 2025 18:39:22 +0000 Manifest next update: Mon 07 Jul 2025 18:39:22 +0000 Files and hashes: 1: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl (hash: Mtp9birgV/2Csda5b7s3PJOlCP9QH2NLjTL41icNRaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3145 (0xc49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195AA2, serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39 Validity Not Before: Jun 30 18:39:22 2025 GMT Not After : Jul 7 18:39:22 2025 GMT Subject: CN=6862d9db-dec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:75:71:ce:94:30:0d:08:bb:1b:13:6a:26:0c: 66:04:f2:69:f4:5e:2b:d9:6e:c8:89:c6:4f:1c:9f: 7d:2e:37:d3:a8:04:49:5f:e2:55:ac:e8:73:79:84: 51:12:0c:03:fd:7a:62:b9:a4:92:66:05:58:1f:3b: ce:d7:15:08:1a:4e:2f:08:ff:59:b7:3c:b6:55:73: 43:e7:f7:f4:c3:3a:6b:78:3d:33:e8:ef:ad:8b:70: 93:72:5b:12:a0:95:5c:3b:57:94:18:f0:03:1a:bb: 98:d3:a8:67:cf:3b:80:06:92:8c:aa:5f:8e:43:7a: 96:59:5c:92:f2:a1:f5:1c:c1:32:d6:cd:01:db:f0: 6e:e6:d3:37:1e:5f:39:90:96:57:5b:75:b4:30:2c: 42:ec:ea:24:a2:c9:af:cb:86:e4:4c:ed:19:56:33: 39:a2:f6:59:e5:06:48:69:63:5a:e8:15:a5:e5:23: e8:ab:ab:a0:33:5e:43:71:6c:d2:d5:f3:e0:7e:aa: 6d:3e:61:01:e4:56:89:1e:37:6e:9a:4a:f2:fa:f4: b4:66:b5:0c:36:cf:ed:23:4e:1b:a8:c0:70:00:15: 6a:c4:e6:4e:73:0b:21:73:64:b7:59:63:02:ad:1a: af:5d:0d:47:f5:f1:05:7c:16:3e:24:f6:9e:bd:01: 4b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:29:E5:7C:61:28:19:8A:74:C6:D5:F8:D3:4B:1F:72:1F:FC:C3:68 X509v3 Authority Key Identifier: keyid:54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:ed:03:da:20:b2:03:5a:6d:1f:af:d9:cb:28:55:1a:61:c1: 87:ed:59:96:b7:a1:a7:ff:a5:6a:85:30:75:5a:fb:1c:be:54: 72:27:1c:6f:4d:bc:39:be:b7:b1:a5:3d:46:1f:e4:c3:35:4d: a6:13:56:f2:5e:62:6d:cc:5f:6f:5f:5b:04:bb:7b:48:5c:18: 95:a9:10:cf:62:24:6e:98:26:dd:40:ac:b8:50:4c:35:c5:d2: 22:de:09:13:c4:f4:88:ff:f6:8d:de:6a:f3:a7:d5:48:ec:74: 3e:29:50:cd:5a:85:4d:9f:9c:76:03:5f:82:de:33:33:9c:86: 4c:e7:45:ab:26:88:fc:e3:6f:7f:e6:9a:5e:93:ab:82:11:56: f2:15:b8:21:b8:a8:60:e9:fd:ae:f5:a7:1b:51:5b:3d:b4:fe: 9b:15:c2:02:83:7f:0e:95:0f:14:a3:79:2e:56:77:9c:1d:1e: 3a:77:48:14:56:22:20:ce:74:66:fd:39:35:3b:6f:42:67:20: a3:2c:3e:6a:08:b3:ff:41:6e:57:3a:1e:27:d2:66:3e:a8:55: 55:17:ed:5d:b9:11:4b:4d:2b:13:8c:3e:16:1b:6c:7b:37:fa: 06:b0:3b:b4:14:69:99:64:8d:94:ec:d2:fb:b3:1f:c7:61:e1: 65:d5:22:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBQTIxMTAvBgNVBAUTKDU0NTgzQzI5QkJGQjUwMDlEQjlDQzA1NjE0RjYzRDYy QkNCNzdDMzkwHhcNMjUwNjMwMTgzOTIyWhcNMjUwNzA3MTgzOTIyWjAYMRYwFAYD VQQDEw02ODYyZDlkYi1kZWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HVxzpQwDQi7GxNqJgxmBPJp9F4r2W7IicZPHJ99LjfTqARJX+JVrOhzeYRR EgwD/XpiuaSSZgVYHzvO1xUIGk4vCP9Ztzy2VXND5/f0wzpreD0z6O+ti3CTclsS oJVcO1eUGPADGruY06hnzzuABpKMql+OQ3qWWVyS8qH1HMEy1s0B2/Bu5tM3Hl85 kJZXW3W0MCxC7Ookosmvy4bkTO0ZVjM5ovZZ5QZIaWNa6BWl5SPoq6ugM15DcWzS 1fPgfqptPmEB5FaJHjdumkry+vS0ZrUMNs/tI04bqMBwABVqxOZOcwshc2S3WWMC rRqvXQ1H9fEFfBY+JPaevQFLqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCop5Xxh KBmKdMbV+NNLH3If/MNoMB8GA1UdIwQYMBaAFFRYPCm7+1AJ25zAVhT2PWK8t3w5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2 QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VBbmJuTUJXRlBZOVlyeTNm RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGZzhLYnY3VUFuYm5NQldGUFk5WXJ5M2ZEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VB bmJuTUJXRlBZOVlyeTNmRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi7QPaILIDWm0fr9nLKFUaYcGH7VmWt6Gn/6VqhTB1WvscvlRyJxxv Tbw5vrexpT1GH+TDNU2mE1byXmJtzF9vX1sEu3tIXBiVqRDPYiRumCbdQKy4UEw1 xdIi3gkTxPSI//aN3mrzp9VI7HQ+KVDNWoVNn5x2A1+C3jMznIZM50WrJoj8429/ 5ppek6uCEVbyFbghuKhg6f2u9acbUVs9tP6bFcICg38OlQ8Uo3kuVnecHR46d0gU ViIgznRm/Tk1O29CZyCjLD5qCLP/QW5XOh4n0mY+qFVVF+1duRFLTSsTjD4WG2x7 N/oGsDu0FGmZZI2U7NL7sx/HYeFl1SLm -----END CERTIFICATE-----Generated at Wed Jul 2 05:27:11 2025 by rpki-client