$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft File: VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft (raw, json) Hash identifier: ONT8ueiwVALaa8dwV9Taof7kQoVcvBy27pgbHrY/m7w= Subject key identifier: 5B:B4:2B:C9:82:DD:6A:9E:BA:3A:C1:73:62:3E:FB:F3:73:D5:6D:E9 Authority key identifier: 54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 Certificate issuer: /CN=A916DAC0/serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft Manifest number: 0102 Signing time: Sat 19 Jul 2025 05:19:55 +0000 Manifest this update: Sat 19 Jul 2025 05:19:55 +0000 Manifest next update: Sat 26 Jul 2025 05:19:55 +0000 Files and hashes: 1: VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl (hash: Bb6XI6ycwWKEnHB01zmWEqruPECpl97g79bqw8M8nSg=) 2: 2C06DFA22C4C11EFB6974530C4F9AE02.roa (hash: x0R7/aV5SAgSCY1aeBWFVSWK6YKsQh3+SMh4O+dO85w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DAC0, serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Validity Not Before: Jul 19 05:19:55 2025 GMT Not After : Jul 26 05:19:55 2025 GMT Subject: CN=687b2afb-7076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:46:31:31:ca:67:2a:ac:90:31:a4:81:da: d7:c7:07:80:e4:18:85:d4:7f:ae:af:6e:97:18:79: fc:bf:a5:05:11:4a:e5:eb:64:59:57:14:91:4a:11: e6:aa:81:ff:d9:19:f2:67:29:84:56:9c:5e:12:b6: 5f:b7:a5:bf:77:ab:93:8a:2e:fe:9c:36:2c:19:71: 07:98:8b:93:74:d8:db:b1:ce:f7:fe:e4:56:00:a7: 91:5a:b2:16:e7:79:0e:44:2b:55:f4:d7:75:81:37: eb:e8:84:fb:16:b1:58:51:c8:f6:07:a8:7b:57:2e: a5:c2:87:9f:af:28:e7:f7:ea:5f:76:6f:cb:1c:9a: fb:c8:dc:c6:0a:33:58:9e:41:5e:d9:f0:2d:67:6b: 09:2b:dd:f6:85:9c:f1:2f:17:0e:2c:44:16:cf:f8: e3:6e:2f:96:c6:e6:f5:92:66:02:d3:cc:37:62:ca: 2a:c4:4a:04:c3:fa:2c:80:05:71:53:b0:87:f9:34: 1e:88:0d:d2:66:a2:36:ed:9a:16:71:31:88:7f:06: e4:69:dc:be:5e:e1:b9:54:44:e3:ee:f4:31:a7:f0: 92:31:b8:ae:c0:1c:32:87:f8:99:e3:87:62:b7:ae: f2:bd:2f:f0:c1:60:e8:4b:19:60:39:37:ab:55:10: c9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B4:2B:C9:82:DD:6A:9E:BA:3A:C1:73:62:3E:FB:F3:73:D5:6D:E9 X509v3 Authority Key Identifier: keyid:54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:e3:92:21:36:2e:b3:3a:03:d7:2e:a5:3a:57:08:3f:fc:a6: f2:4e:60:e8:69:b7:05:cd:30:a4:52:c1:93:e8:e2:96:70:fb: 91:08:69:71:50:f6:68:06:bb:9d:0c:04:0f:38:6a:d4:cd:d8: 90:0e:44:08:e8:bd:5f:e2:c1:36:b8:d1:06:ec:a5:46:ad:6c: 9e:32:17:9d:3b:f2:30:f0:48:07:d7:a8:49:18:9c:88:29:19: 01:c9:41:83:41:6c:5d:6e:6b:17:de:03:12:48:6c:bb:bc:8d: 9a:89:76:5d:8f:ef:09:66:60:9c:18:70:5e:1c:9c:f4:18:7e: e4:44:b6:3e:4d:de:a3:7b:5d:73:72:0e:94:a3:45:ff:36:28: e0:38:ab:8a:9e:e3:84:c5:bd:be:e7:ca:38:20:d0:ca:fc:e8: 87:cf:00:00:cf:a6:7c:2b:c9:d5:1c:33:d8:8c:28:4e:0d:8a: ec:68:8c:4e:a4:4c:4d:93:3b:0f:96:84:45:a2:41:8f:c9:a4: b9:05:ec:7f:72:8f:4d:47:06:01:c1:93:6e:93:68:05:5f:24: d9:0d:ae:a0:10:bd:a5:21:d1:d1:6f:11:da:34:15:97:1e:94: 62:11:20:7a:fe:80:2c:e1:9e:6f:6d:ea:60:63:7f:80:12:85: 80:58:cb:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBQzAxMTAvBgNVBAUTKDU0Qjk2NkFEOEI1NzMxNjQxNjUyOTUwN0Y1QkNBOUMw MEUxMTgxQjkwHhcNMjUwNzE5MDUxOTU1WhcNMjUwNzI2MDUxOTU1WjAYMRYwFAYD VQQDEw02ODdiMmFmYi03MDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAte5GMTHKZyqskDGkgdrXxweA5BiF1H+ur26XGHn8v6UFEUrl62RZVxSRShHm qoH/2RnyZymEVpxeErZft6W/d6uTii7+nDYsGXEHmIuTdNjbsc73/uRWAKeRWrIW 53kORCtV9Nd1gTfr6IT7FrFYUcj2B6h7Vy6lwoefryjn9+pfdm/LHJr7yNzGCjNY nkFe2fAtZ2sJK932hZzxLxcOLEQWz/jjbi+Wxub1kmYC08w3YsoqxEoEw/osgAVx U7CH+TQeiA3SZqI27ZoWcTGIfwbkady+XuG5VETj7vQxp/CSMbiuwBwyh/iZ44di t67yvS/wwWDoSxlgOTerVRDJEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFu0K8mC 3WqeujrBc2I++/Nz1W3pMB8GA1UdIwQYMBaAFFS5Zq2LVzFkFlKVB/W8qcAOEYG5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REFDMC9FNzYzQUE4QURF ODgxMUVFOTNEOUE3NDRDNEY5QUUwMi9WTGxtcll0WE1XUVdVcFVIOWJ5cHdBNFJn YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZMbG1yWXRYTVdRV1VwVUg5Ynlwd0E0Umdiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REFDMC9FNzYzQUE4QURFODgxMUVFOTNEOUE3NDRDNEY5QUUwMi9WTGxtcll0WE1X UVdVcFVIOWJ5cHdBNFJnYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF45IhNi6zOgPXLqU6Vwg//KbyTmDoabcFzTCkUsGT6OKWcPuRCGlx UPZoBrudDAQPOGrUzdiQDkQI6L1f4sE2uNEG7KVGrWyeMhedO/Iw8EgH16hJGJyI KRkByUGDQWxdbmsX3gMSSGy7vI2aiXZdj+8JZmCcGHBeHJz0GH7kRLY+Td6je11z cg6Uo0X/NijgOKuKnuOExb2+58o4INDK/OiHzwAAz6Z8K8nVHDPYjChODYrsaIxO pExNkzsPloRFokGPyaS5Bex/co9NRwYBwZNuk2gFXyTZDa6gEL2lIdHRbxHaNBWX HpRiESB6/oAs4Z5vbepgY3+AEoWAWMs6 -----END CERTIFICATE-----Generated at Sun Jul 20 16:27:11 2025 by rpki-client