$ rpki-client -vvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft File: vbWSaolrtlGg51QKOYzV7wcUFx8.mft (raw, json) Hash identifier: sRc7Ke+yRYu6qdg1iS7rzQH3UplfXdtoHwHbJ56SSTE= Subject key identifier: 4C:0B:A5:2A:E3:E2:18:35:0D:6E:05:02:0A:79:21:91:56:D4:0A:7A Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F Certificate issuer: /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Certificate serial: 0439 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft Manifest number: 0435 Signing time: Sat 19 Jul 2025 00:42:52 +0000 Manifest this update: Sat 19 Jul 2025 00:42:51 +0000 Manifest next update: Sat 26 Jul 2025 00:42:51 +0000 Files and hashes: 1: vbWSaolrtlGg51QKOYzV7wcUFx8.crl (hash: DimzRpErBv9i/1nqORyBnwMqT7BBUIsfZsCdjq19T2A=) 2: 66864FCE688011ECAA829E31C4F9AE02.roa (hash: w5bL3BxYC2VJUK/MoXPR18n/PN4tqZHifWiPk20fkzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1081 (0x439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A5CD, serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Validity Not Before: Jul 19 00:42:51 2025 GMT Not After : Jul 26 00:42:51 2025 GMT Subject: CN=687aea0b-99f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:24:8b:95:0f:4e:54:70:88:34:a6:be:0c:09: 8e:1f:5d:46:3c:29:88:b7:26:3f:82:b1:ec:4c:69: b2:e2:c1:eb:e9:5e:01:25:00:95:3f:82:c3:e9:fc: c8:5f:e0:70:e9:94:ac:ed:b9:0b:f9:80:ca:2e:8a: 1f:ff:26:92:07:95:ba:ec:7c:8d:67:2d:e9:f4:2d: e6:54:ee:bf:71:6a:26:0c:2c:b4:fe:5c:51:22:ce: db:c2:ff:5f:ae:9a:c5:6f:cb:85:32:bc:83:61:63: 22:63:7e:52:0a:2a:5e:bb:ff:82:84:52:ba:9d:d3: 73:ec:85:18:7e:44:a0:51:ab:74:65:bd:11:6d:ae: 99:6f:72:a3:d0:8f:4e:7c:d1:5d:c9:1b:26:07:d1: 61:83:83:a6:93:9a:e0:0e:c9:65:b9:a9:a0:e8:3c: 90:18:56:a6:32:af:c4:58:8e:89:96:85:3b:1a:f0: fb:51:9d:29:62:ba:f1:5c:4e:a0:6c:3c:1c:e4:ae: b7:89:15:a0:ad:c0:81:db:2a:62:d2:df:8f:2c:b8: be:e8:7e:72:30:c4:97:d8:0d:8f:8a:fc:cd:fa:f0: 8a:9b:42:3b:07:a5:a7:ab:15:db:23:79:8d:4f:1c: c5:ec:d8:fe:59:0d:d2:13:7f:44:87:8d:c9:68:e0: ab:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0B:A5:2A:E3:E2:18:35:0D:6E:05:02:0A:79:21:91:56:D4:0A:7A X509v3 Authority Key Identifier: keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:70:45:8a:7d:29:21:8e:61:1d:96:fa:a6:d0:86:fc:c8:5d: 78:61:51:b4:30:c8:ac:ee:69:0a:b7:2c:25:15:77:14:a3:63: 84:e0:ac:31:96:41:39:2f:28:fe:d9:0e:56:90:3c:4d:c9:a7: e1:ef:67:65:0c:d9:ef:74:c7:0f:41:af:56:b4:fc:0f:de:1f: 50:ed:21:5e:9b:37:08:49:1a:26:ac:ea:24:0b:ae:2d:1b:ab: 1a:c2:f2:7c:c4:dc:b5:6c:fe:81:e0:eb:a5:3d:63:d9:f7:7f: 46:45:cf:36:28:b5:9b:08:38:93:b5:43:7e:aa:75:4c:64:f5: d6:33:f7:61:26:d2:70:81:fc:ba:55:8c:8e:c8:e8:b4:99:53: 6c:a6:ae:89:a3:2a:ee:9c:45:6e:42:ae:3a:23:1f:41:92:48: db:69:db:32:be:9b:f1:2a:15:de:b0:06:f6:af:fe:5b:31:28: 74:a1:3c:fe:ea:f8:00:3d:66:66:66:70:ba:af:30:74:ab:68: 53:27:7f:16:bd:c5:86:b4:57:58:de:8f:bf:ea:66:ee:45:6d: dd:3e:be:99:29:81:9f:42:84:b3:63:d5:9d:14:84:c3:cf:3b: cc:45:7c:a2:f9:80:07:7b:d4:2a:61:22:b4:5b:44:80:39:5c: 64:39:81:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1Q0QxMTAvBgNVBAUTKEJEQjU5MjZBODk2QkI2NTFBMEU3NTQwQTM5OENENUVG MDcxNDE3MUYwHhcNMjUwNzE5MDA0MjUxWhcNMjUwNzI2MDA0MjUxWjAYMRYwFAYD VQQDEw02ODdhZWEwYi05OWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyySLlQ9OVHCINKa+DAmOH11GPCmItyY/grHsTGmy4sHr6V4BJQCVP4LD6fzI X+Bw6ZSs7bkL+YDKLoof/yaSB5W67HyNZy3p9C3mVO6/cWomDCy0/lxRIs7bwv9f rprFb8uFMryDYWMiY35SCipeu/+ChFK6ndNz7IUYfkSgUat0Zb0Rba6Zb3Kj0I9O fNFdyRsmB9Fhg4Omk5rgDslluamg6DyQGFamMq/EWI6JloU7GvD7UZ0pYrrxXE6g bDwc5K63iRWgrcCB2ypi0t+PLLi+6H5yMMSX2A2PivzN+vCKm0I7B6WnqxXbI3mN TxzF7Nj+WQ3SE39Eh43JaOCrvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwLpSrj 4hg1DW4FAgp5IZFW1Ap6MB8GA1UdIwQYMBaAFL21kmqJa7ZRoOdUCjmM1e8HFBcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTVDRC8yOTQzNkZDRTY4 N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRsR2c1MVFLT1l6Vjd3Y1VG eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZiV1Nhb2xydGxHZzUxUUtPWXpWN3djVUZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTVDRC8yOTQzNkZDRTY4N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRs R2c1MVFLT1l6Vjd3Y1VGeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCacEWKfSkhjmEdlvqm0Ib8yF14YVG0MMis7mkKtywlFXcUo2OE4Kwx lkE5Lyj+2Q5WkDxNyafh72dlDNnvdMcPQa9WtPwP3h9Q7SFemzcISRomrOokC64t G6sawvJ8xNy1bP6B4OulPWPZ939GRc82KLWbCDiTtUN+qnVMZPXWM/dhJtJwgfy6 VYyOyOi0mVNspq6JoyrunEVuQq46Ix9BkkjbadsyvpvxKhXesAb2r/5bMSh0oTz+ 6vgAPWZmZnC6rzB0q2hTJ38WvcWGtFdY3o+/6mbuRW3dPr6ZKYGfQoSzY9WdFITD zzvMRXyi+YAHe9QqYSK0W0SAOVxkOYE0 -----END CERTIFICATE-----Generated at Sun Jul 20 07:31:11 2025 by rpki-client