$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft File: vdXpp28axMjlF5fs6Z49zuzudJM.mft (raw, json) Hash identifier: a9vxdI+6ZbpSv0P4OdyiztNSRGGhcUr1+uJEYM5wovw= Subject key identifier: 37:FE:4A:65:01:00:CF:35:70:53:AE:19:73:D2:69:95:F9:82:5F:3D Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 Certificate issuer: /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Certificate serial: 07B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft Manifest number: 078A Signing time: Fri 18 Jul 2025 21:55:49 +0000 Manifest this update: Fri 18 Jul 2025 21:55:48 +0000 Manifest next update: Fri 25 Jul 2025 21:55:48 +0000 Files and hashes: 1: vdXpp28axMjlF5fs6Z49zuzudJM.crl (hash: zrruxsAe4JEtTVNvsF6fyMul3/zSGv8ib5Wjg/SCJKY=) 2: B95187FC2FB811EBBF9A864BC4F9AE02.roa (hash: 7LNQOsT6W5YF7PbwLpdxc+PNq2qTTKmlTXDNMzrKzkc=) 3: 882D2F8E614D11F0BDEA561AC4F9AE02.roa (hash: Wf8Yp/2Wf3nrrMgkmYB6r80LX3KGJalREelQ60kDho4=) 4: A39F9B12614D11F0B92E7536C4F9AE02.roa (hash: /cNCzP73KCeXOq4a1l00QP7uG/Uj16TGXUXJojUqMM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1976 (0x7b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Validity Not Before: Jul 18 21:55:48 2025 GMT Not After : Jul 25 21:55:48 2025 GMT Subject: CN=687ac2e5-1c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:7c:7e:19:75:38:81:e4:7e:73:4e:d3:50: 91:bd:63:55:ab:48:b8:6d:8f:a3:43:76:c5:fc:6b: 89:90:f5:2d:8d:51:cd:1b:e9:5b:bc:69:2c:32:a4: 6f:c1:65:73:6c:d4:a0:5a:d9:dd:7d:79:2a:e0:03: 0d:5c:6f:28:05:aa:30:f3:a1:50:45:cc:4e:13:38: 2a:b4:f0:4b:fd:5f:ed:03:b2:4c:5f:8f:dc:c4:8e: b8:a8:21:27:89:99:aa:c1:84:01:5c:81:d7:53:6d: b6:cc:8a:9b:7b:45:3e:74:41:69:f8:f8:5f:b1:4d: a5:82:f1:38:93:88:ca:cb:41:2e:a2:3c:6f:d5:fa: dc:7b:37:21:17:55:2a:8f:a2:64:ec:7e:b5:cc:58: f7:9c:2f:5f:ba:04:e0:db:cf:1c:8f:4e:a3:a7:7c: b7:05:dc:ba:7f:1b:55:4a:ad:6e:ae:21:59:c1:af: 13:4a:36:dd:53:12:18:00:93:4b:25:1f:4d:cf:be: 31:e4:aa:fc:38:30:f5:6d:32:ee:bc:c9:f5:90:ed: b7:11:6b:cb:df:29:d3:9a:cd:92:69:4c:24:12:f5: 31:c6:11:4e:fd:6f:c2:78:3e:17:81:f0:6d:eb:73: 5d:de:b5:2f:3d:f4:ea:e6:5d:1f:4d:4e:f8:71:0d: 15:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FE:4A:65:01:00:CF:35:70:53:AE:19:73:D2:69:95:F9:82:5F:3D X509v3 Authority Key Identifier: keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:66:78:18:ec:63:ef:b6:82:f0:e7:4c:a9:d3:0e:36:f3:1b: 1e:b7:9a:4b:35:43:ef:d7:de:0f:b5:11:3d:13:2d:9c:e1:e5: a9:1b:03:4f:2e:18:08:a9:05:27:11:07:3c:15:ed:a3:5d:de: d1:a0:e9:e7:c3:f7:95:22:22:24:4d:23:b7:0b:d8:9b:62:12: b8:98:51:9c:04:52:7f:cf:d2:a7:64:5c:a7:53:46:0b:bf:74: bf:d5:da:29:63:ea:62:79:04:43:3c:f4:8b:fe:b7:2e:c6:0b: bf:5b:06:34:89:11:05:7d:1b:78:f4:96:c5:c3:ef:dd:b6:c2: 89:6b:3d:ab:d1:d4:68:f7:3d:88:17:be:28:4c:de:ca:3b:6e: dd:61:fb:f5:bc:96:27:0f:82:f7:88:54:7a:c8:ab:1a:45:e1: a1:12:b2:49:23:a0:82:f2:25:2f:6d:78:a8:2b:77:ab:b1:21: 6d:be:ff:4c:88:a3:8d:a2:f6:e1:3f:d6:e5:5e:29:ca:cc:3b: 22:8a:67:89:11:5a:cc:56:e4:dc:10:e0:b0:96:fb:a1:88:3f: 69:9d:72:71:03:38:79:d5:be:a7:5a:74:2d:ab:af:79:a4:97: 25:23:fa:52:a2:bf:6a:53:68:27:88:86:9f:ae:76:48:c6:13: f1:e1:42:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEJERDVFOUE3NkYxQUM0QzhFNTE3OTdFQ0U5OUUzRENF RUNFRTc0OTMwHhcNMjUwNzE4MjE1NTQ4WhcNMjUwNzI1MjE1NTQ4WjAYMRYwFAYD VQQDEw02ODdhYzJlNS0xYzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUF8fhl1OIHkfnNO01CRvWNVq0i4bY+jQ3bF/GuJkPUtjVHNG+lbvGksMqRv wWVzbNSgWtndfXkq4AMNXG8oBaow86FQRcxOEzgqtPBL/V/tA7JMX4/cxI64qCEn iZmqwYQBXIHXU222zIqbe0U+dEFp+PhfsU2lgvE4k4jKy0Euojxv1frcezchF1Uq j6Jk7H61zFj3nC9fugTg288cj06jp3y3Bdy6fxtVSq1uriFZwa8TSjbdUxIYAJNL JR9Nz74x5Kr8ODD1bTLuvMn1kO23EWvL3ynTms2SaUwkEvUxxhFO/W/CeD4XgfBt 63Nd3rUvPfTq5l0fTU74cQ0VrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDf+SmUB AM81cFOuGXPSaZX5gl89MB8GA1UdIwQYMBaAFL3V6advGsTI5ReX7OmePc7s7nST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zMTQ4REM5RTJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhNamxGNWZzNlo0OXp1enVk Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZkWHBwMjhheE1qbEY1ZnM2WjQ5enV6dWRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zMTQ4REM5RTJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhN amxGNWZzNlo0OXp1enVkSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDZngY7GPvtoLw50yp0w428xset5pLNUPv194PtRE9Ey2c4eWpGwNP LhgIqQUnEQc8Fe2jXd7RoOnnw/eVIiIkTSO3C9ibYhK4mFGcBFJ/z9KnZFynU0YL v3S/1dopY+pieQRDPPSL/rcuxgu/WwY0iREFfRt49JbFw+/dtsKJaz2r0dRo9z2I F74oTN7KO27dYfv1vJYnD4L3iFR6yKsaReGhErJJI6CC8iUvbXioK3ersSFtvv9M iKONovbhP9blXinKzDsiimeJEVrMVuTcEOCwlvuhiD9pnXJxAzh51b6nWnQtq695 pJclI/pSor9qU2gniIafrnZIxhPx4ULJ -----END CERTIFICATE-----Generated at Sun Jul 20 07:56:42 2025 by rpki-client