$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft File: Vd1sG_HER988yGQNERKpasrh-Aw.mft (raw, json) Hash identifier: 28ds4w661HjsR8Hy987HrAUHx3cqw0DeGpW+f1TiYms= Subject key identifier: 22:25:80:06:DD:FE:48:97:ED:F1:64:E1:AF:AA:8D:FE:F7:C3:DA:FF Authority key identifier: 55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C Certificate issuer: /CN=A91C5CA9/serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft Manifest number: 09 Signing time: Tue 01 Jul 2025 08:56:38 +0000 Manifest this update: Tue 01 Jul 2025 08:56:38 +0000 Manifest next update: Tue 08 Jul 2025 08:56:38 +0000 Files and hashes: 1: Vd1sG_HER988yGQNERKpasrh-Aw.crl (hash: g2vwD/a8KPodKevWWn2wb7XTM2D90rC0vIoDHG03mdg=) 2: 36B587404B0F11F0A2359B4EC4F9AE02.roa (hash: Mp1JcqkdMAmbReGNCmp0QyS72nIBhDSCoOb/C1pLXic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5CA9, serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C Validity Not Before: Jul 1 08:56:38 2025 GMT Not After : Jul 8 08:56:38 2025 GMT Subject: CN=6863a2c6-8631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b8:99:39:5c:23:a5:69:d2:6d:cc:3c:21:15: aa:ca:36:60:18:d3:4d:14:32:fa:d6:18:50:44:93: 88:a1:e3:da:a7:c4:a6:92:10:f6:f7:c5:9d:c5:41: 99:c7:1e:b9:70:a5:ca:42:30:54:a6:05:1d:12:d8: 64:bf:1f:59:30:9f:e2:62:94:c3:87:a3:30:0b:76: 40:c2:fe:13:0a:54:d8:14:5d:55:6a:81:50:70:cc: a2:02:92:46:09:9c:3d:ca:36:2a:bc:ed:61:a1:45: 2c:a4:cd:38:17:c1:17:70:5f:6e:b1:eb:92:18:3e: 68:ae:73:4a:92:bd:83:5c:1d:39:1a:45:87:73:99: 71:90:82:2a:54:0a:23:68:5d:3a:78:61:66:e6:bc: d3:3a:7c:89:aa:2b:4e:a7:aa:2c:0c:ab:4c:0a:d4: 19:84:87:ff:0e:a6:0b:b4:c5:34:2d:24:db:98:ed: 1d:a9:35:f4:af:c3:7e:30:63:80:5f:3a:ce:3f:c4: 46:4a:13:63:84:ec:00:65:68:6d:6d:c3:37:fa:fc: ec:8f:da:83:57:10:61:23:b3:f7:b9:0d:7e:e3:fb: 07:3b:dd:4c:2d:ab:0a:3b:53:61:ef:7c:3b:c9:76: d6:86:a0:43:23:91:84:61:64:5d:a6:c9:63:9f:33: fe:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:25:80:06:DD:FE:48:97:ED:F1:64:E1:AF:AA:8D:FE:F7:C3:DA:FF X509v3 Authority Key Identifier: keyid:55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:fc:be:c7:8f:83:31:74:fe:34:f9:ec:28:27:95:06:1b:fa: a1:94:ab:5c:ec:83:a2:15:16:67:66:bf:c2:a7:28:be:0a:84: 2f:f7:66:23:17:66:a8:fb:03:87:fa:6f:d5:13:6f:ca:91:54: b6:5e:8f:12:b1:03:47:a6:b3:17:96:8b:a0:ee:2a:b1:3a:aa: 72:31:18:3f:eb:96:05:1f:c9:b5:8a:74:9b:e0:3a:fa:5d:9f: d4:41:87:80:7d:ae:de:c6:d5:12:4d:5a:e3:13:93:cc:64:aa: 1b:74:6d:5c:c5:e0:c3:df:3e:be:9b:1b:93:7b:72:69:02:a8: b8:d0:3b:fc:2f:9b:05:2d:85:2d:ae:e8:02:b4:55:9a:39:cf: 01:6c:ca:51:ff:5c:1a:68:ec:92:69:83:00:ae:b9:04:ad:3d: 70:59:d6:1d:18:f2:58:ee:2b:76:dc:e9:74:88:c0:e4:ee:b9: fe:ce:df:2c:71:e4:92:55:0d:a4:1a:d1:c4:13:92:04:88:e3: 1e:31:55:68:2a:25:78:1c:27:bd:12:ea:5b:3f:4c:5e:59:10: 94:07:b4:50:69:0a:d2:dd:ad:34:8a:c8:e4:fc:9f:4c:9f:85: 52:86:12:20:11:c2:a6:29:e7:b1:f5:c1:65:12:33:b5:54:81: d9:87:69:5f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NUNBOTExMC8GA1UEBRMoNTVERDZDMUJGMUM0NDdERjNDQzg2NDBEMTExMkE5NkFD QUUxRjgwQzAeFw0yNTA3MDEwODU2MzhaFw0yNTA3MDgwODU2MzhaMBgxFjAUBgNV BAMTDTY4NjNhMmM2LTg2MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4uJk5XCOladJtzDwhFarKNmAY000UMvrWGFBEk4ih49qnxKaSEPb3xZ3FQZnH HrlwpcpCMFSmBR0S2GS/H1kwn+JilMOHozALdkDC/hMKVNgUXVVqgVBwzKICkkYJ nD3KNiq87WGhRSykzTgXwRdwX26x65IYPmiuc0qSvYNcHTkaRYdzmXGQgipUCiNo XTp4YWbmvNM6fImqK06nqiwMq0wK1BmEh/8Opgu0xTQtJNuY7R2pNfSvw34wY4Bf Os4/xEZKE2OE7ABlaG1twzf6/OyP2oNXEGEjs/e5DX7j+wc73Uwtqwo7U2HvfDvJ dtaGoEMjkYRhZF2myWOfM/6RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIiWABt3+ SJft8WThr6qN/vfD2v8wHwYDVR0jBBgwFoAUVd1sG/HER988yGQNERKpasrh+Aww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1Q0E5Lzk2RDYxMUQwNEIw QTExRjBBQjU0MjAxRUM0RjlBRTAyL1ZkMXNHX0hFUjk4OHlHUU5FUktwYXNyaC1B dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVmQxc0dfSEVSOTg4eUdRTkVSS3Bhc3JoLUF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 Q0E5Lzk2RDYxMUQwNEIwQTExRjBBQjU0MjAxRUM0RjlBRTAyL1ZkMXNHX0hFUjk4 OHlHUU5FUktwYXNyaC1Bdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHz8vsePgzF0/jT57CgnlQYb+qGUq1zsg6IVFmdmv8KnKL4KhC/3ZiMX Zqj7A4f6b9UTb8qRVLZejxKxA0emsxeWi6DuKrE6qnIxGD/rlgUfybWKdJvgOvpd n9RBh4B9rt7G1RJNWuMTk8xkqht0bVzF4MPfPr6bG5N7cmkCqLjQO/wvmwUthS2u 6AK0VZo5zwFsylH/XBpo7JJpgwCuuQStPXBZ1h0Y8ljuK3bc6XSIwOTuuf7O3yxx 5JJVDaQa0cQTkgSI4x4xVWgqJXgcJ70S6ls/TF5ZEJQHtFBpCtLdrTSKyOT8n0yf hVKGEiARwqYp57H1wWUSM7VUgdmHaV8= -----END CERTIFICATE-----Generated at Tue Jul 1 18:32:12 2025 by rpki-client