$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft File: vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft (raw, json) Hash identifier: 4xERyv/j25yInf/iGnjFVvLsB6wYZRrg9Xk+M396vIA= Subject key identifier: B4:17:5A:28:B5:6D:B1:F8:CC:62:E3:73:D0:0A:63:5D:D1:B4:B6:BA Authority key identifier: BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D Certificate issuer: /CN=A91C612E/serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft Manifest number: 12DD Signing time: Thu 12 Jun 2025 18:26:07 +0000 Manifest this update: Thu 12 Jun 2025 18:26:06 +0000 Manifest next update: Thu 19 Jun 2025 18:26:06 +0000 Files and hashes: 1: vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl (hash: mcpMf5CWrTSiyX5I7uR1ZrBK7xJT0MpbeB/cDvTMdR8=) 2: 763E080A142911F087C1AF7CC4F9AE02.roa (hash: OqYmuSN5Gj4HYv1k95fE+DkrkF2QoPlx9+v7d3wB2mI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D Validity Not Before: Jun 12 18:26:06 2025 GMT Not After : Jun 19 18:26:06 2025 GMT Subject: CN=684b1bbe-dbde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d0:dc:64:52:0e:e2:ff:b1:aa:c7:05:85:cc: 82:5b:ee:75:87:95:09:08:e3:1a:77:e1:d3:4f:11: bf:80:55:ef:b1:4b:b8:f4:a2:f4:4d:35:29:77:d3: 05:72:9e:56:47:fc:c3:67:7e:8e:e2:4d:8e:51:9a: cf:49:69:0d:f0:78:22:0d:dc:fc:8b:62:15:1f:53: b2:0b:82:71:5a:3d:d4:a7:b5:2c:a7:14:b5:53:34: 22:e3:dc:0b:ba:93:37:78:22:ec:14:41:d5:f0:b3: 60:cd:3c:24:17:46:4e:e4:fd:5e:25:ea:56:f7:2f: aa:8d:73:6e:10:c6:9c:82:74:32:ab:82:08:c7:ee: ab:83:b1:b2:37:db:22:27:a2:bb:44:25:df:e6:4e: 53:5d:c1:2a:0e:e6:74:b4:5c:b8:3e:75:bd:8b:87: 28:f0:66:63:d0:37:17:e0:b4:ba:c6:78:f9:7c:c2: 39:d9:be:51:36:31:ee:c7:b5:7c:d7:d9:cf:65:c5: e5:ff:2a:cb:b4:9d:36:9f:16:49:76:6b:fe:33:7e: a9:3e:48:6f:84:62:6e:9c:b5:48:40:8e:22:ff:00: 5a:e8:b1:a0:f6:df:25:2a:a6:29:e7:cd:d9:96:c2: 5c:9d:df:0e:6c:d9:cc:93:a5:34:bd:53:2d:d5:05: bd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:17:5A:28:B5:6D:B1:F8:CC:62:E3:73:D0:0A:63:5D:D1:B4:B6:BA X509v3 Authority Key Identifier: keyid:BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:4b:84:37:52:c7:1e:51:34:fa:82:85:fb:bc:31:a0:ca:d8: 7b:a3:1d:59:27:0d:ef:72:15:8c:76:4c:9e:8f:02:00:cc:c4: 7a:3b:c1:92:74:63:f3:0d:bd:f3:df:f9:6f:12:62:dc:e5:57: 8e:24:f8:02:8c:4c:2c:07:58:fb:2c:a0:a7:ec:9e:17:ad:01: 6c:a2:d1:44:94:01:3c:a7:6b:53:08:8e:49:72:53:90:25:fa: 8c:b5:e7:15:ac:7b:21:3d:d0:22:11:a9:8b:72:30:4b:40:7f: 7a:93:ff:15:a0:5d:d3:2a:d5:be:ad:ca:01:e1:60:18:b5:00: 67:be:d3:3d:a4:f9:d5:2f:ff:e7:7d:b5:2e:23:c9:d3:a4:87: 46:10:88:76:47:e2:99:22:ba:27:62:01:d9:64:b3:96:6f:ea: 7d:c7:01:00:61:b5:16:97:9c:2b:2a:57:b7:83:7b:64:63:eb: 42:04:7e:58:32:de:a4:d1:5c:6d:7a:93:e6:ff:d0:3e:2f:7c: 78:22:79:ad:38:b1:49:47:c1:b8:ec:d6:33:a6:16:46:aa:0d: 14:af:60:e1:61:f1:39:e3:02:f2:f2:c1:50:ae:7a:4d:b7:90: 5b:52:22:40:6e:46:b9:dd:83:e4:f4:ca:48:76:07:cb:cb:8a: cd:40:65:31 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjEyRTExMC8GA1UEBRMoQkVBN0U5OEM1QTNGQjVGQkQ4MzBBNDM1OTQ0MUI0MjI0 NzI3QzcyRDAeFw0yNTA2MTIxODI2MDZaFw0yNTA2MTkxODI2MDZaMBgxFjAUBgNV BAMTDTY4NGIxYmJlLWRiZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu0NxkUg7i/7GqxwWFzIJb7nWHlQkI4xp34dNPEb+AVe+xS7j0ovRNNSl30wVy nlZH/MNnfo7iTY5Rms9JaQ3weCIN3PyLYhUfU7ILgnFaPdSntSynFLVTNCLj3Au6 kzd4IuwUQdXws2DNPCQXRk7k/V4l6lb3L6qNc24QxpyCdDKrggjH7quDsbI32yIn ortEJd/mTlNdwSoO5nS0XLg+db2LhyjwZmPQNxfgtLrGePl8wjnZvlE2Me7HtXzX 2c9lxeX/Ksu0nTafFkl2a/4zfqk+SG+EYm6ctUhAjiL/AFrosaD23yUqpinnzdmW wlyd3w5s2cyTpTS9Uy3VBb1PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtBdaKLVt sfjMYuNz0ApjXdG0trowHwYDVR0jBBgwFoAUvqfpjFo/tfvYMKQ1lEG0Ikcnxy0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2MTJFLzY1QkMxN0QyMEI2 MTExRUFBRjA0MkY2OEM0RjlBRTAyL3ZxZnBqRm9fdGZ2WU1LUTFsRUcwSWtjbnh5 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdnFmcGpGb190ZnZZTUtRMWxFRzBJa2NueHkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 MTJFLzY1QkMxN0QyMEI2MTExRUFBRjA0MkY2OEM0RjlBRTAyL3ZxZnBqRm9fdGZ2 WU1LUTFsRUcwSWtjbnh5MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADBLhDdSxx5RNPqChfu8MaDK2HujHVknDe9yFYx2TJ6PAgDMxHo7wZJ0 Y/MNvfPf+W8SYtzlV44k+AKMTCwHWPssoKfsnhetAWyi0USUATyna1MIjklyU5Al +oy15xWseyE90CIRqYtyMEtAf3qT/xWgXdMq1b6tygHhYBi1AGe+0z2k+dUv/+d9 tS4jydOkh0YQiHZH4pkiuidiAdlks5Zv6n3HAQBhtRaXnCsqV7eDe2Rj60IEflgy 3qTRXG16k+b/0D4vfHgiea04sUlHwbjs1jOmFkaqDRSvYOFh8TnjAvLywVCuek23 kFtSIkBuRrndg+T0ykh2B8vLis1AZTE= -----END CERTIFICATE-----Generated at Sat Jun 14 14:42:56 2025 by rpki-client