$ rpki-client -vvf rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft File: _Vx4mxrWjgh0PYbOoMmfx4dr25M.mft (raw, json) Hash identifier: SrikeSCw3LBX5PB5KlWxPFMF9l4+hhBx82N8imKwy6c= Subject key identifier: A2:AA:C0:25:FE:4B:5F:42:56:8F:E9:78:08:31:66:9E:0A:D8:56:C9 Authority key identifier: FD:5C:78:9B:1A:D6:8E:08:74:3D:86:CE:A0:C9:9F:C7:87:6B:DB:93 Certificate issuer: /CN=A9190B27/serialNumber=FD5C789B1AD68E08743D86CEA0C99FC7876BDB93 Certificate serial: 068F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vx4mxrWjgh0PYbOoMmfx4dr25M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft Manifest number: 068A Signing time: Thu 24 Jul 2025 22:31:43 +0000 Manifest this update: Thu 24 Jul 2025 22:31:42 +0000 Manifest next update: Thu 31 Jul 2025 22:31:42 +0000 Files and hashes: 1: _Vx4mxrWjgh0PYbOoMmfx4dr25M.crl (hash: 8JcutXF1VT0ALg/H2QOp5OxkNzejAW9aoosBxRhXTT4=) 2: C014EDF67CB911EBBB4E2D1CC4F9AE02.roa (hash: aQZNfhiseoXahMcYa1mO4OhpMyMyYPdZKpX7ChBPpY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.crl rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vx4mxrWjgh0PYbOoMmfx4dr25M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 22:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190B27, serialNumber=FD5C789B1AD68E08743D86CEA0C99FC7876BDB93 Validity Not Before: Jul 24 22:31:42 2025 GMT Not After : Jul 31 22:31:42 2025 GMT Subject: CN=6882b44e-0420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9e:db:91:7b:a3:0f:83:d1:e6:2c:3f:61:6a: 55:46:25:55:65:19:fb:1c:6b:87:2b:a2:a6:67:e6: 44:3f:78:28:02:4f:5e:e1:97:ab:a1:64:24:5f:0f: 21:49:f7:d9:d3:e3:25:42:77:5b:68:ea:dd:33:fb: 89:70:7e:dd:79:4f:4f:6c:39:e2:e2:ed:d0:7c:10: ff:16:ac:44:90:2c:90:67:b5:79:90:9f:ce:92:a4: c0:4b:5b:85:c0:b7:ae:0b:92:fc:63:42:af:7a:bc: fb:ba:24:a5:8d:60:15:f1:ba:ef:8f:a0:18:47:7a: da:e6:f8:94:85:d9:9e:a6:18:93:8a:44:98:9a:e5: 7d:5b:6d:27:ae:26:dc:f7:21:b4:b8:d5:45:4b:07: 84:39:4d:a8:34:13:da:d7:3d:8a:68:83:71:01:56: 4a:2d:c3:65:6c:9c:18:4c:0d:3d:2f:f5:5d:f3:b6: 8f:a0:69:f7:01:91:c3:a6:d6:c9:fa:59:e7:66:3f: 6e:44:28:3f:e9:4e:f5:8b:c3:aa:b5:7f:d6:36:47: 77:08:ca:61:e2:32:9f:2e:18:ee:9b:3a:08:4a:3e: 00:28:d4:6d:4c:b6:ff:19:65:1c:b6:c1:77:0c:4d: da:32:ea:6d:af:aa:56:cf:64:f8:37:fd:45:69:83: 5e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AA:C0:25:FE:4B:5F:42:56:8F:E9:78:08:31:66:9E:0A:D8:56:C9 X509v3 Authority Key Identifier: keyid:FD:5C:78:9B:1A:D6:8E:08:74:3D:86:CE:A0:C9:9F:C7:87:6B:DB:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vx4mxrWjgh0PYbOoMmfx4dr25M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c6:ca:b7:b8:73:ab:ff:d6:a3:fb:89:5d:13:25:e7:e5:39: 18:e8:35:7a:6f:2f:78:08:5f:d2:81:e2:7c:cd:d6:9e:6c:1d: fe:d3:85:c3:3f:22:8e:ad:49:1e:7d:49:78:f3:4d:67:01:d0: e2:a9:51:64:13:d0:3c:87:11:d2:be:8f:e2:fc:40:38:52:8f: cc:18:d3:ae:aa:1e:a6:b2:c2:f9:ca:a3:c0:27:a5:de:28:35: 50:cb:f0:3f:c3:37:12:bf:bb:2b:97:1d:f8:fd:48:27:1c:9e: f3:4b:7a:b6:ba:0e:35:81:66:20:85:63:00:24:73:0f:0e:36: 1a:65:01:05:ee:2e:5e:b7:aa:d2:69:0e:71:c6:2c:4d:4c:4c: f7:5f:93:75:21:c1:7d:1a:ef:16:db:eb:e9:06:cc:65:3a:f3: a7:2b:39:0f:48:8b:ec:a8:3e:9d:23:d2:6d:14:0e:6f:4e:6b: 47:23:18:da:b4:06:08:aa:37:28:23:36:ef:37:6d:10:56:86: 35:4d:e7:bd:0f:31:ef:e6:f4:e8:48:42:02:fc:3a:86:24:ab: 98:bd:42:5f:29:28:d0:1e:f0:7d:ac:64:35:4e:07:6b:c2:b6: 21:e2:61:c5:e6:e1:bd:19:d6:fc:17:7d:e5:9c:cb:64:59:f9: 3c:bf:c6:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBCMjcxMTAvBgNVBAUTKEZENUM3ODlCMUFENjhFMDg3NDNEODZDRUEwQzk5RkM3 ODc2QkRCOTMwHhcNMjUwNzI0MjIzMTQyWhcNMjUwNzMxMjIzMTQyWjAYMRYwFAYD VQQDEw02ODgyYjQ0ZS0wNDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0p7bkXujD4PR5iw/YWpVRiVVZRn7HGuHK6KmZ+ZEP3goAk9e4ZeroWQkXw8h SffZ0+MlQndbaOrdM/uJcH7deU9PbDni4u3QfBD/FqxEkCyQZ7V5kJ/OkqTAS1uF wLeuC5L8Y0Kverz7uiSljWAV8brvj6AYR3ra5viUhdmephiTikSYmuV9W20nribc 9yG0uNVFSweEOU2oNBPa1z2KaINxAVZKLcNlbJwYTA09L/Vd87aPoGn3AZHDptbJ +lnnZj9uRCg/6U71i8OqtX/WNkd3CMph4jKfLhjumzoISj4AKNRtTLb/GWUctsF3 DE3aMuptr6pWz2T4N/1FaYNe4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKqwCX+ S19CVo/peAgxZp4K2FbJMB8GA1UdIwQYMBaAFP1ceJsa1o4IdD2GzqDJn8eHa9uT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEIyNy85RTI0MjkxMDdD QjgxMUVCQTIwRTAxMUNDNEY5QUUwMi9fVng0bXhyV2pnaDBQWWJPb01tZng0ZHIy NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19WeDRteHJXamdoMFBZYk9vTW1meDRkcjI1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEIyNy85RTI0MjkxMDdDQjgxMUVCQTIwRTAxMUNDNEY5QUUwMi9fVng0bXhyV2pn aDBQWWJPb01tZng0ZHIyNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfxsq3uHOr/9aj+4ldEyXn5TkY6DV6by94CF/SgeJ8zdaebB3+04XD PyKOrUkefUl4801nAdDiqVFkE9A8hxHSvo/i/EA4Uo/MGNOuqh6mssL5yqPAJ6Xe KDVQy/A/wzcSv7srlx34/UgnHJ7zS3q2ug41gWYghWMAJHMPDjYaZQEF7i5et6rS aQ5xxixNTEz3X5N1IcF9Gu8W2+vpBsxlOvOnKzkPSIvsqD6dI9JtFA5vTmtHIxja tAYIqjcoIzbvN20QVoY1Tee9DzHv5vToSEIC/DqGJKuYvUJfKSjQHvB9rGQ1Tgdr wrYh4mHF5uG9Gdb8F33lnMtkWfk8v8Y5 -----END CERTIFICATE-----Generated at Fri Jul 25 07:05:29 2025 by rpki-client