$ rpki-client -vvf rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft File: VFiH13GXSLRp0FP_MWpqV6uZYjM.mft (raw, json) Hash identifier: H80DCEmc/v5W9FiufH2fRv8D2EJZtBsI8z2f4z3eDkE= Subject key identifier: 35:3D:1A:B9:F5:0D:C5:77:E1:95:38:60:4F:24:75:BC:4C:18:9B:F9 Authority key identifier: 54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 Certificate issuer: /CN=A91173B6/serialNumber=545887D7719748B469D053FF316A6A57AB996233 Certificate serial: 082B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft Manifest number: 0820 Signing time: Sun 20 Jul 2025 20:57:54 +0000 Manifest this update: Sun 20 Jul 2025 20:57:54 +0000 Manifest next update: Sun 27 Jul 2025 20:57:54 +0000 Files and hashes: 1: VFiH13GXSLRp0FP_MWpqV6uZYjM.crl (hash: 2/Q0MctuoKIv5NIImJNz3gaAjNVDkjbdOSVrfUyxiDs=) 2: CA290E34341311EFA3C99F09C4F9AE02.roa (hash: i/g/3tYg+cOFFmeFmf1wzVIm1860HHoYX7kFrZIFYhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2091 (0x82b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91173B6, serialNumber=545887D7719748B469D053FF316A6A57AB996233 Validity Not Before: Jul 20 20:57:54 2025 GMT Not After : Jul 27 20:57:54 2025 GMT Subject: CN=687d5852-a6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:72:cd:3a:c3:f6:30:7d:dd:44:a4:59:7f:96: 2a:7e:8f:73:8b:b3:3b:f5:bd:45:06:4c:67:34:b5: 22:fa:52:2f:97:61:5b:61:66:07:a8:31:91:f7:da: a9:f2:a2:42:1e:38:e0:7f:5b:2f:c7:9b:f7:2a:8c: b0:51:24:fc:78:f1:c7:88:28:73:39:76:f3:b0:db: 87:f0:b2:2c:a4:f5:74:a5:12:5b:a6:42:9a:1a:96: a9:05:06:67:4c:12:c2:ec:1f:f9:a6:e1:e4:9d:69: 81:f6:55:0d:45:15:68:2f:67:ca:34:e2:64:48:5e: 7c:bc:eb:4c:1b:5f:7f:90:f2:af:20:3a:be:e6:9e: c7:14:20:cc:12:aa:ae:38:d1:f1:c6:d0:9b:1c:42: f8:8f:44:be:0b:ff:08:5a:de:e3:91:67:a3:62:18: 3d:66:0a:c8:3c:21:6d:32:ff:46:83:d0:fd:20:53: ab:7b:36:17:00:fe:92:9a:c3:e7:a3:b8:67:e6:3f: 8d:a7:50:04:78:67:d2:70:e2:7e:da:32:57:09:8f: cc:6c:37:1c:68:03:4a:97:c5:73:3c:88:00:ed:9f: 57:7a:5d:7f:1a:a4:6f:c8:bd:d7:03:1d:5b:29:f7: a3:14:7e:bc:ce:8d:31:5a:20:fa:20:dd:3a:67:2a: c7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3D:1A:B9:F5:0D:C5:77:E1:95:38:60:4F:24:75:BC:4C:18:9B:F9 X509v3 Authority Key Identifier: keyid:54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:12:ad:78:f4:b2:0a:c6:f9:df:f0:ba:c4:fb:6e:e6:54:dd: ba:e1:13:1c:b3:5b:c6:e0:95:4f:c5:d9:db:9b:d1:ff:cf:be: 61:f4:a4:44:ac:f8:c9:11:3a:8f:07:6c:43:5d:f0:f2:53:46: 60:1a:c2:80:a0:17:f2:d5:cf:a8:64:ed:72:ec:52:08:0d:4f: 9c:f9:ed:db:cb:47:d8:53:45:f3:21:a9:32:7f:03:bf:e7:78: 73:1c:60:70:45:9c:b9:98:a8:7a:03:77:24:4c:92:85:43:a6: 3d:4f:93:67:c1:15:43:5a:f7:7d:d0:d6:e1:00:a9:76:e8:9c: 82:4d:be:3f:9d:e0:bc:c7:f5:1e:23:21:c9:51:17:c4:bd:d4: c2:75:7e:7b:30:f6:15:8f:e5:81:b8:7a:6d:c7:f6:69:49:89: 17:44:24:8d:b6:d1:9e:4b:09:c3:39:e5:f2:82:55:ae:e4:a1: b9:28:82:00:b6:c5:c6:47:d2:90:e0:43:d5:fb:60:2e:89:72: 10:12:fb:74:c4:1e:65:c2:93:eb:81:48:14:1b:7e:5d:ba:76: f8:c3:1e:f5:4f:92:3c:ff:79:fd:3a:90:9a:d3:14:d0:5f:17: 40:8f:79:1a:64:22:63:bb:c6:4a:1d:1b:66:c7:24:4f:1b:8f: 58:45:73:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTczQjYxMTAvBgNVBAUTKDU0NTg4N0Q3NzE5NzQ4QjQ2OUQwNTNGRjMxNkE2QTU3 QUI5OTYyMzMwHhcNMjUwNzIwMjA1NzU0WhcNMjUwNzI3MjA1NzU0WjAYMRYwFAYD VQQDEw02ODdkNTg1Mi1hNmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8HLNOsP2MH3dRKRZf5Yqfo9zi7M79b1FBkxnNLUi+lIvl2FbYWYHqDGR99qp 8qJCHjjgf1svx5v3KoywUST8ePHHiChzOXbzsNuH8LIspPV0pRJbpkKaGpapBQZn TBLC7B/5puHknWmB9lUNRRVoL2fKNOJkSF58vOtMG19/kPKvIDq+5p7HFCDMEqqu ONHxxtCbHEL4j0S+C/8IWt7jkWejYhg9ZgrIPCFtMv9Gg9D9IFOrezYXAP6SmsPn o7hn5j+Np1AEeGfScOJ+2jJXCY/MbDccaANKl8VzPIgA7Z9Xel1/GqRvyL3XAx1b KfejFH68zo0xWiD6IN06ZyrHKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDU9Grn1 DcV34ZU4YE8kdbxMGJv5MB8GA1UdIwQYMBaAFFRYh9dxl0i0adBT/zFqalermWIz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzNCNi8xMEY0ODQ4NkUx OUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNMUnAwRlBfTVdwcVY2dVpZ ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGaUgxM0dYU0xScDBGUF9NV3BxVjZ1WllqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzNCNi8xMEY0ODQ4NkUxOUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNM UnAwRlBfTVdwcVY2dVpZak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3Eq149LIKxvnf8LrE+27mVN264RMcs1vG4JVPxdnbm9H/z75h9KRE rPjJETqPB2xDXfDyU0ZgGsKAoBfy1c+oZO1y7FIIDU+c+e3by0fYU0XzIakyfwO/ 53hzHGBwRZy5mKh6A3ckTJKFQ6Y9T5NnwRVDWvd90NbhAKl26JyCTb4/neC8x/Ue IyHJURfEvdTCdX57MPYVj+WBuHptx/ZpSYkXRCSNttGeSwnDOeXyglWu5KG5KIIA tsXGR9KQ4EPV+2AuiXIQEvt0xB5lwpPrgUgUG35dunb4wx71T5I8/3n9OpCa0xTQ XxdAj3kaZCJju8ZKHRtmxyRPG49YRXNm -----END CERTIFICATE-----Generated at Mon Jul 21 05:52:40 2025 by rpki-client