$ rpki-client -vvf rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft File: vkMB4qQLT2pH4YWmdX2abo18dEI.mft (raw, json) Hash identifier: hy8AqmfzuEK5aKHU0EKK2+pX3AYpsLmKSLVMwo8ur3g= Subject key identifier: 53:D7:C0:6E:02:47:2F:7C:89:2F:C5:C2:AF:11:BA:A2:21:E9:40:15 Authority key identifier: BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42 Certificate issuer: /CN=A919318C/serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft Manifest number: 0B Signing time: Sat 19 Jul 2025 08:29:53 +0000 Manifest this update: Sat 19 Jul 2025 08:29:52 +0000 Manifest next update: Sat 26 Jul 2025 08:29:52 +0000 Files and hashes: 1: vkMB4qQLT2pH4YWmdX2abo18dEI.crl (hash: u5o/QsQvGtkqqfnLP5Spt9OrnQS2GebhcLd9wDkKuyU=) 2: 99DC33DA621D11F0B3B28C17C4F9AE02.roa (hash: 9kelna+bn4AOokX7+VNhCMprSYcOppK0alNOtL2P1j4=) 3: 9FB4CD9462DB11F0B8A4FE59C4F9AE02.roa (hash: qjbaR5DPgSKsm7fnzDHbXrkez/bN/PhLzRqIXdA5oKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919318C, serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442 Validity Not Before: Jul 19 08:29:52 2025 GMT Not After : Jul 26 08:29:52 2025 GMT Subject: CN=687b5781-a5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:3e:10:38:3b:35:f7:0a:df:16:ab:6b:3b: 68:c1:32:c0:81:ed:b1:fe:51:8f:9f:78:01:5b:33: 3c:a0:f1:24:c0:35:79:bd:ce:c0:64:9c:af:1c:ef: c8:80:7d:30:2a:b6:54:2d:55:16:97:3d:ee:71:3c: 55:0b:d1:e1:0d:d8:00:af:a0:49:82:d4:2c:ea:90: c3:80:1b:eb:d6:88:af:98:a5:ae:de:bc:64:92:91: da:1a:12:d0:a6:2a:5f:64:b4:9a:f0:0c:9e:8d:1f: 88:dc:7a:4f:2e:33:29:d3:fd:0c:ef:fd:97:2b:f6: b8:92:73:8e:27:f6:a1:55:18:17:f6:86:d2:88:d4: cc:96:21:76:a3:9e:c3:53:75:f4:65:c2:86:f9:bf: 6c:11:25:d8:d1:f5:37:62:4f:9a:db:32:1a:d2:4c: fb:e1:61:6c:e7:b2:14:ab:12:1f:ca:90:ff:03:79: d5:01:14:05:d4:8f:1e:95:da:c7:37:8a:8d:1e:a7: e3:76:47:9e:72:f6:3e:e7:c5:e8:e2:fc:b5:af:d5: e4:31:6e:45:91:fc:b1:50:60:e9:2d:b8:d4:14:97: 25:d9:cc:29:6b:b6:47:b2:3c:55:b8:9f:a5:ac:e3: 56:ec:84:54:1f:f2:f4:30:18:25:64:50:f8:b1:ec: 4c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D7:C0:6E:02:47:2F:7C:89:2F:C5:C2:AF:11:BA:A2:21:E9:40:15 X509v3 Authority Key Identifier: keyid:BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:14:e9:89:67:76:f9:54:42:01:b1:6e:9f:e0:1c:18:c0:35: 8d:71:c4:57:68:66:d8:f4:bb:78:c2:72:57:62:8d:72:a4:d6: c0:ab:d6:62:08:65:b5:18:8d:49:00:c5:97:fe:de:f7:07:19: 5f:3f:2e:ef:30:29:1e:46:af:bc:96:e1:d2:b8:d3:40:ca:55: 90:64:76:82:03:d7:a5:a9:a6:15:5a:f7:72:1f:b7:b7:39:a3: 8a:ad:ff:38:10:7c:f7:20:0a:d0:61:76:78:c9:3e:cc:3f:c2: ee:f8:08:c4:1c:b1:0b:42:ce:44:7d:9f:39:97:b7:3e:27:c0: 29:5d:63:00:fd:99:8f:61:70:da:15:d3:bb:5d:c7:01:a9:92: 3f:aa:e0:5c:27:06:90:e3:30:26:42:3b:33:d7:17:e4:65:15: 54:a5:c4:8b:0d:15:cc:59:84:f8:c5:07:fa:dd:c8:57:5f:55: ac:1e:59:f2:fd:31:38:b3:a1:29:15:86:c9:4d:f0:d3:b0:bb: 25:bc:45:bf:4b:b8:21:a5:26:e9:0f:83:91:27:b8:7e:f3:ec: 89:eb:c1:af:90:0b:fe:2c:11:c4:48:91:94:c9:a7:44:18:a9: cd:0e:49:17:de:d2:c4:46:a4:07:ed:08:72:ed:e6:47:7c:3b: 71:77:d4:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MzE4QzExMC8GA1UEBRMoQkU0MzAxRTJBNDBCNEY2QTQ3RTE4NUE2NzU3RDlBNkU4 RDdDNzQ0MjAeFw0yNTA3MTkwODI5NTJaFw0yNTA3MjYwODI5NTJaMBgxFjAUBgNV BAMTDTY4N2I1NzgxLWE1Y2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+bj4QODs19wrfFqtrO2jBMsCB7bH+UY+feAFbMzyg8STANXm9zsBknK8c78iA fTAqtlQtVRaXPe5xPFUL0eEN2ACvoEmC1CzqkMOAG+vWiK+Ypa7evGSSkdoaEtCm Kl9ktJrwDJ6NH4jcek8uMynT/Qzv/Zcr9riSc44n9qFVGBf2htKI1MyWIXajnsNT dfRlwob5v2wRJdjR9TdiT5rbMhrSTPvhYWznshSrEh/KkP8DedUBFAXUjx6V2sc3 io0ep+N2R55y9j7nxeji/LWv1eQxbkWR/LFQYOktuNQUlyXZzClrtkeyPFW4n6Ws 41bshFQf8vQwGCVkUPix7EwlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU9fAbgJH L3yJL8XCrxG6oiHpQBUwHwYDVR0jBBgwFoAUvkMB4qQLT2pH4YWmdX2abo18dEIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzMThDL0NFOUIwOUVFNjE1 NDExRjBCQjUwRkEzN0M0RjlBRTAyL3ZrTUI0cVFMVDJwSDRZV21kWDJhYm8xOGRF SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdmtNQjRxUUxUMnBINFlXbWRYMmFibzE4ZEVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz MThDL0NFOUIwOUVFNjE1NDExRjBCQjUwRkEzN0M0RjlBRTAyL3ZrTUI0cVFMVDJw SDRZV21kWDJhYm8xOGRFSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACsU6YlndvlUQgGxbp/gHBjANY1xxFdoZtj0u3jCcldijXKk1sCr1mII ZbUYjUkAxZf+3vcHGV8/Lu8wKR5Gr7yW4dK400DKVZBkdoID16WpphVa93Ift7c5 o4qt/zgQfPcgCtBhdnjJPsw/wu74CMQcsQtCzkR9nzmXtz4nwCldYwD9mY9hcNoV 07tdxwGpkj+q4FwnBpDjMCZCOzPXF+RlFVSlxIsNFcxZhPjFB/rdyFdfVaweWfL9 MTizoSkVhslN8NOwuyW8Rb9LuCGlJukPg5EnuH7z7Inrwa+QC/4sEcRIkZTJp0QY qc0OSRfe0sRGpAftCHLt5kd8O3F31KU= -----END CERTIFICATE-----Generated at Mon Jul 21 02:50:03 2025 by rpki-client