$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft File: vrUOQRzD4sQGA7FqkWCepNQGZJU.mft (raw, json) Hash identifier: 06emF2EJX1zf+75xEbyqiUmzI2ev1PVSfZeLqqhf1hQ= Subject key identifier: 8B:68:D5:6D:71:A3:DB:B4:5B:44:EB:16:46:2D:B0:AC:99:FD:C3:8B Authority key identifier: BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 Certificate issuer: /CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Certificate serial: 0DE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft Manifest number: 0DE0 Signing time: Tue 22 Jul 2025 18:03:01 +0000 Manifest this update: Tue 22 Jul 2025 18:03:01 +0000 Manifest next update: Tue 29 Jul 2025 18:03:01 +0000 Files and hashes: 1: vrUOQRzD4sQGA7FqkWCepNQGZJU.crl (hash: gi9lc2zOSJP9VeqNlVmOpkmvNM7D6jNu6pDMz7povsc=) 2: 4BECBAFCB99811E98000600AC4F9AE02.roa (hash: rqASzwwK7FbCaVAYTK88nCqRcfP1vi7cp+uLy8ucquU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 18:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3560 (0xde8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B2F8, serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Validity Not Before: Jul 22 18:03:01 2025 GMT Not After : Jul 29 18:03:01 2025 GMT Subject: CN=687fd255-3bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e4:f1:40:1c:a6:52:15:28:e2:27:df:5a:2d: 1a:8c:68:3d:00:90:02:b7:88:11:93:47:14:cf:a1: e4:e5:6f:4e:1d:f1:e0:e9:fa:33:fb:e4:33:ab:74: fd:e3:97:19:30:28:42:72:19:96:59:44:50:41:d8: 9f:00:c4:3d:d4:23:a6:f4:89:84:85:c8:b6:f6:02: 0e:14:fa:a2:0e:3d:3e:23:9d:45:ad:99:19:c1:b6: a4:56:50:37:01:12:72:4f:72:f1:0c:7e:fb:74:d3: 5f:c4:66:7e:64:a8:2e:eb:5b:d8:73:53:de:09:c0: c8:86:05:7d:6b:00:04:5d:73:24:a3:34:10:1c:e1: c4:9a:f0:9c:4c:c5:36:b7:e7:52:2b:36:33:30:c9: 77:88:65:ab:02:54:68:f7:95:13:c2:80:9d:e6:6f: 2a:aa:41:ef:a2:8a:a6:7a:89:e9:49:32:72:b1:6d: ad:42:93:ac:35:df:9e:26:46:3b:55:c7:41:d9:cb: f2:a9:71:59:5f:59:3b:bb:60:e0:73:3c:f4:6c:ca: a6:16:81:7e:5d:ec:0b:40:0e:47:cd:76:1f:bb:23: 83:cf:41:18:70:c6:1f:ed:47:ed:4e:64:86:4b:f1: 3c:52:b2:1e:03:c7:e7:55:ab:67:1e:e3:49:86:ea: 37:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:68:D5:6D:71:A3:DB:B4:5B:44:EB:16:46:2D:B0:AC:99:FD:C3:8B X509v3 Authority Key Identifier: keyid:BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:7e:bf:cf:54:bf:74:29:79:13:10:40:ce:ff:3a:f2:8e:85: 57:15:82:05:06:4f:33:45:e2:c9:42:72:d3:ce:eb:1e:0f:bf: c2:c5:eb:09:32:77:29:21:34:92:ce:1e:90:7d:68:d3:57:69: 2a:a8:4e:f2:af:df:d0:4d:fb:7e:f8:45:28:04:0a:84:8c:ab: 8c:12:76:97:d5:c2:5d:a4:90:a3:e1:20:72:ed:29:51:05:e8: ae:7d:1b:82:b9:df:43:e6:38:05:26:36:da:fb:05:e4:30:66: 38:3c:e7:68:96:30:22:92:bc:1d:fd:b4:6d:91:43:ae:73:06: cc:ab:63:b9:66:8d:db:ea:b2:db:89:f4:f4:91:55:86:3f:0f: 43:92:09:dd:3d:83:2d:b9:0b:a0:18:95:27:a9:bb:fe:62:c4: c9:e1:2f:cd:f4:89:71:61:4a:ee:b3:c2:35:7a:fd:99:2b:73: cd:2b:fb:63:7f:6f:59:d0:4d:6d:88:dc:e7:cd:48:9f:a0:eb: 15:20:ec:a3:59:f5:4c:73:5e:1d:3a:0e:5d:e1:18:66:3a:a5: 3d:19:07:7c:91:73:9b:99:b3:d4:13:79:a1:e3:f7:bd:7c:01: a1:ab:12:f1:e4:5a:0e:16:98:93:2d:24:5a:88:93:6d:6c:91: 0d:eb:9e:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyRjgxMTAvBgNVBAUTKEJFQjUwRTQxMUNDM0UyQzQwNjAzQjE2QTkxNjA5RUE0 RDQwNjY0OTUwHhcNMjUwNzIyMTgwMzAxWhcNMjUwNzI5MTgwMzAxWjAYMRYwFAYD VQQDEw02ODdmZDI1NS0zYmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoeTxQBymUhUo4iffWi0ajGg9AJACt4gRk0cUz6Hk5W9OHfHg6foz++Qzq3T9 45cZMChCchmWWURQQdifAMQ91COm9ImEhci29gIOFPqiDj0+I51FrZkZwbakVlA3 ARJyT3LxDH77dNNfxGZ+ZKgu61vYc1PeCcDIhgV9awAEXXMkozQQHOHEmvCcTMU2 t+dSKzYzMMl3iGWrAlRo95UTwoCd5m8qqkHvooqmeonpSTJysW2tQpOsNd+eJkY7 VcdB2cvyqXFZX1k7u2Dgczz0bMqmFoF+XewLQA5HzXYfuyODz0EYcMYf7UftTmSG S/E8UrIeA8fnVatnHuNJhuo3RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIto1W1x o9u0W0TrFkYtsKyZ/cOLMB8GA1UdIwQYMBaAFL61DkEcw+LEBgOxapFgnqTUBmSV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjJGOC9ERkVFNjFERUI5 OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRzUUdBN0Zxa1dDZXBOUUda SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyVU9RUnpENHNRR0E3RnFrV0NlcE5RR1pKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjJGOC9ERkVFNjFERUI5OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRz UUdBN0Zxa1dDZXBOUUdaSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1fr/PVL90KXkTEEDO/zryjoVXFYIFBk8zReLJQnLTzuseD7/CxesJ MncpITSSzh6QfWjTV2kqqE7yr9/QTft++EUoBAqEjKuMEnaX1cJdpJCj4SBy7SlR BeiufRuCud9D5jgFJjba+wXkMGY4POdoljAikrwd/bRtkUOucwbMq2O5Zo3b6rLb ifT0kVWGPw9DkgndPYMtuQugGJUnqbv+YsTJ4S/N9IlxYUrus8I1ev2ZK3PNK/tj f29Z0E1tiNznzUifoOsVIOyjWfVMc14dOg5d4RhmOqU9GQd8kXObmbPUE3mh4/e9 fAGhqxLx5FoOFpiTLSRaiJNtbJEN657Z -----END CERTIFICATE-----Generated at Wed Jul 23 02:29:29 2025 by rpki-client