$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft File: VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft (raw, json) Hash identifier: 5LGyP1KknCrLZnUqFz/NS+nR7lrgDkPgC6qAnxh4G2I= Subject key identifier: E9:11:30:06:F3:EF:F8:53:C5:A3:3D:56:CD:21:A7:55:71:33:D9:84 Authority key identifier: 54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14 Certificate issuer: /CN=A91AEBFF/serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014 Certificate serial: 0467 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft Manifest number: 0461 Signing time: Sun 08 Jun 2025 23:45:45 +0000 Manifest this update: Sun 08 Jun 2025 23:45:44 +0000 Manifest next update: Sun 15 Jun 2025 23:45:44 +0000 Files and hashes: 1: VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl (hash: wJtGrfdUyWwrkUcQ07j4oh+PDjqM5TpLBdReg+M37q8=) 2: FEE1AED6C77311EEB751AE2CC4F9AE02.roa (hash: VVFFKCHYbosvaaLrPx2vqSUqYAflv5w/HG528t1OXHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 23:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1127 (0x467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEBFF, serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014 Validity Not Before: Jun 8 23:45:44 2025 GMT Not After : Jun 15 23:45:44 2025 GMT Subject: CN=684620a9-cc4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6b:c4:b0:4a:22:ac:f6:b4:e0:f6:da:20:5d: fb:9b:d3:02:88:4f:aa:af:07:12:f9:97:ab:8d:d7: 6e:a5:7e:69:45:7b:43:a1:e8:94:60:91:83:4b:02: 80:26:ac:e7:ee:32:8b:0a:66:74:83:e4:71:36:eb: 8d:2f:23:c5:9f:7a:bf:7c:68:d7:21:44:37:17:48: 32:68:55:de:36:73:9a:35:30:49:ca:91:1f:53:3d: 21:40:e6:f8:80:d6:b6:c4:2d:7d:87:60:37:f8:db: 8e:7c:e7:d0:65:93:19:5b:57:a9:f9:4a:e0:9b:26: 74:4e:3f:2f:ea:f3:b1:05:1a:ff:22:92:37:80:4a: 13:cf:91:31:e6:1d:64:80:2c:8a:3d:c8:5b:92:b2: 82:13:15:ca:06:20:f5:5d:45:eb:9f:ea:90:6d:57: 05:75:eb:a7:95:62:80:e0:02:58:8a:ee:f9:ce:57: 34:a4:70:94:36:b2:8c:67:5e:96:79:f0:6d:9d:73: b8:ae:f4:42:56:50:fb:f2:04:54:18:d7:66:78:a5: 22:ef:8f:2e:e8:00:9b:03:8b:28:24:ad:c1:f3:82: b3:74:07:e6:15:da:c6:7e:97:aa:7f:71:13:14:41: a9:32:b2:74:58:ac:a9:f6:69:ef:44:4f:7a:af:8b: 5f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:11:30:06:F3:EF:F8:53:C5:A3:3D:56:CD:21:A7:55:71:33:D9:84 X509v3 Authority Key Identifier: keyid:54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:10:73:6f:1b:f9:3d:7e:5d:e5:e6:ba:30:08:9f:39:a1:5c: 13:cb:71:32:1c:cd:8a:0f:a7:99:81:90:8a:67:18:86:5e:0a: 24:30:4f:9f:a2:07:33:b6:e2:ca:e0:c4:98:93:47:5f:37:ed: 0a:60:e9:4f:54:1c:7b:90:ad:8a:ab:e9:c7:10:87:53:f9:c3: 76:5b:59:3b:83:5e:8a:2a:a8:92:28:ef:eb:c3:f2:18:99:8a: 25:45:4a:a3:ee:87:f3:70:fb:4e:ee:83:0e:78:22:43:0e:bc: 9a:90:fe:45:40:fa:37:3e:d3:64:c2:1b:c0:8e:a3:01:cb:79: aa:9d:7e:b7:ee:37:ce:2f:4e:00:6d:6b:a2:14:7c:16:b9:e8: 38:94:5a:f5:f4:f4:85:9b:de:b5:36:b7:f6:29:38:a9:db:b7: f5:7f:f2:ac:33:7f:c5:de:90:67:52:8f:1b:69:1a:58:50:8d: c6:49:08:eb:fd:57:89:5c:b0:6f:69:42:3e:c4:79:ef:b7:43: bc:5c:ec:20:b1:4e:15:6b:d3:4c:e2:b3:64:3d:9d:18:76:3e: 97:2c:ec:9f:64:c8:76:c5:7e:92:11:e3:8c:01:c2:9e:bf:cd: c8:f3:e8:e0:3a:a9:d6:4e:ec:4e:b0:bb:72:ef:75:c1:91:04: dc:15:27:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVCRkYxMTAvBgNVBAUTKDU0NDExRkU3MzMyRDJFRjRGRjI3NUU1OUQ1REVGRUQx Q0NFOTYwMTQwHhcNMjUwNjA4MjM0NTQ0WhcNMjUwNjE1MjM0NTQ0WjAYMRYwFAYD VQQDEw02ODQ2MjBhOS1jYzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA22vEsEoirPa04PbaIF37m9MCiE+qrwcS+ZerjddupX5pRXtDoeiUYJGDSwKA Jqzn7jKLCmZ0g+RxNuuNLyPFn3q/fGjXIUQ3F0gyaFXeNnOaNTBJypEfUz0hQOb4 gNa2xC19h2A3+NuOfOfQZZMZW1ep+UrgmyZ0Tj8v6vOxBRr/IpI3gEoTz5Ex5h1k gCyKPchbkrKCExXKBiD1XUXrn+qQbVcFdeunlWKA4AJYiu75zlc0pHCUNrKMZ16W efBtnXO4rvRCVlD78gRUGNdmeKUi748u6ACbA4soJK3B84KzdAfmFdrGfpeqf3ET FEGpMrJ0WKyp9mnvRE96r4tfiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkRMAbz 7/hTxaM9Vs0hp1VxM9mEMB8GA1UdIwQYMBaAFFRBH+czLS70/ydeWdXe/tHM6WAU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUJGRi9FM0RDMjlFNjUw REMxMUVDOUJGOTBFMzFDNEY5QUUwMi9WRUVmNXpNdEx2VF9KMTVaMWQ3LTBjenBZ QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZFRWY1ek10THZUX0oxNVoxZDctMGN6cFlCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUJGRi9FM0RDMjlFNjUwREMxMUVDOUJGOTBFMzFDNEY5QUUwMi9WRUVmNXpNdEx2 VF9KMTVaMWQ3LTBjenBZQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuEHNvG/k9fl3l5rowCJ85oVwTy3EyHM2KD6eZgZCKZxiGXgokME+f ogcztuLK4MSYk0dfN+0KYOlPVBx7kK2Kq+nHEIdT+cN2W1k7g16KKqiSKO/rw/IY mYolRUqj7ofzcPtO7oMOeCJDDryakP5FQPo3PtNkwhvAjqMBy3mqnX637jfOL04A bWuiFHwWueg4lFr19PSFm961Nrf2KTip27f1f/KsM3/F3pBnUo8baRpYUI3GSQjr /VeJXLBvaUI+xHnvt0O8XOwgsU4Va9NM4rNkPZ0Ydj6XLOyfZMh2xX6SEeOMAcKe v83I8+jgOqnWTuxOsLty73XBkQTcFScT -----END CERTIFICATE-----Generated at Mon Jun 9 18:18:07 2025 by rpki-client