$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft File: vkiLTmCsanOmVu_bxfpnoajegSo.mft (raw, json) Hash identifier: mVEdgWHEMcwYB0fZR9XCP6IZkO2exP+cnZlNY34ALSc= Subject key identifier: D8:08:81:06:E3:1F:78:E0:5C:6C:B1:A0:4B:FD:8D:04:0D:83:86:D2 Authority key identifier: BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A Certificate issuer: /CN=A91ADE0A/serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A Certificate serial: 22A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft Manifest number: 2265 Signing time: Sun 20 Jul 2025 15:53:24 +0000 Manifest this update: Sun 20 Jul 2025 15:53:23 +0000 Manifest next update: Sun 27 Jul 2025 15:53:23 +0000 Files and hashes: 1: vkiLTmCsanOmVu_bxfpnoajegSo.crl (hash: JrvIQhahWTcds0Q01yb/l/Wvd+wy/gI8C+MeFkO1Yvc=) 2: 4AB8D38E178811EF95C8DF41C4F9AE02.roa (hash: bRjvCEzkjDm3JJYu7t1zkHD97hp8O/fwotkC6wIv1RQ=) 3: 815465903EB511E9881B6529C4F9AE02.roa (hash: gW74XIULKnrcRgyXZDwxsWWvrLPKxQLUY/wa7dOD1h8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8867 (0x22a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADE0A, serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A Validity Not Before: Jul 20 15:53:23 2025 GMT Not After : Jul 27 15:53:23 2025 GMT Subject: CN=687d10f3-bf54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:56:ad:d8:35:ed:c9:51:eb:c6:ad:d8:d9:3d: ca:8a:40:ee:99:9f:88:4e:f4:6c:cb:02:e5:10:40: 9c:a2:21:96:6b:12:6e:2d:7c:31:9d:4a:29:42:e0: e3:73:b2:aa:21:1a:e2:b5:bb:7d:48:13:3e:cd:d9: 50:a6:15:6a:3e:f3:e8:dd:80:eb:6a:b3:a1:d8:6f: 50:56:1d:ec:8f:d4:6d:6a:c8:2e:44:39:39:7f:e1: ce:f5:a0:d2:9b:4e:f9:13:bf:da:af:0b:b4:50:3a: a7:ab:53:a8:77:93:88:c7:ff:1f:34:07:00:f3:0d: 55:94:c1:5b:f7:a1:39:79:83:c5:0b:b2:1e:62:88: 18:70:d5:a4:a4:1c:a0:e9:17:f7:07:08:66:96:e5: 08:0f:44:6f:ed:a3:a7:d5:8f:5a:b1:85:69:25:53: ec:b9:77:35:a3:89:dc:3a:4e:5b:0d:ae:7b:df:b4: 6d:f8:80:e5:96:90:cc:58:88:94:c2:a8:ee:14:53: a4:00:f5:b9:82:98:a7:24:6f:2a:de:b5:37:f4:9a: 7e:57:3b:5b:38:8e:a2:fa:6f:41:ad:71:04:4b:3b: fb:a2:36:8d:77:53:12:e1:2e:2a:e5:6d:4b:5b:9c: 77:36:51:0a:63:70:77:99:d4:5d:d3:ac:a0:13:05: 59:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:08:81:06:E3:1F:78:E0:5C:6C:B1:A0:4B:FD:8D:04:0D:83:86:D2 X509v3 Authority Key Identifier: keyid:BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:30:30:5f:32:58:3b:eb:3c:4a:e0:dd:9b:f8:57:d0:19:d9: a2:41:a2:10:cc:67:99:32:ab:46:78:0b:ee:9a:6c:cb:9e:f2: 64:3b:f5:50:f7:1e:7e:66:e3:bd:c0:68:b8:e4:f1:6d:a9:72: 3e:72:97:39:9c:71:99:15:13:ab:d3:0f:57:17:57:60:2d:94: d6:31:c9:42:c8:19:d2:2c:67:6b:1e:59:99:b4:e0:a7:45:22: a4:c6:ba:da:e5:56:db:ac:a9:2f:ef:05:87:16:c8:d2:6d:1e: 8c:00:bc:bf:42:d5:0c:d1:f7:c0:0b:60:ce:9c:73:08:13:14: f3:bf:13:31:40:c3:65:44:35:18:5a:28:7a:d8:a4:e1:2c:27: 0e:c9:16:36:e7:58:60:e6:95:ac:98:c7:c6:cc:81:f3:dc:e7: 4f:8d:0b:53:c5:f6:f4:40:b1:25:d4:d1:73:91:1a:92:f9:f0: 04:f2:32:4a:20:4d:7e:a9:8b:58:09:32:62:f6:7b:87:83:df: 8e:4d:8f:55:7e:72:07:02:d5:df:e3:30:67:98:72:ea:65:e4: 28:02:ba:70:24:78:4e:11:24:92:5a:e5:c0:bf:7f:f9:ce:c2: 2e:e4:3a:f6:b1:8c:82:97:88:d7:fe:3f:c6:51:89:e6:e4:b4: 1c:43:f6:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURFMEExMTAvBgNVBAUTKEJFNDg4QjRFNjBBQzZBNzNBNjU2RUZEQkM1RkE2N0Ex QThERTgxMkEwHhcNMjUwNzIwMTU1MzIzWhcNMjUwNzI3MTU1MzIzWjAYMRYwFAYD VQQDEw02ODdkMTBmMy1iZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Fat2DXtyVHrxq3Y2T3KikDumZ+ITvRsywLlEECcoiGWaxJuLXwxnUopQuDj c7KqIRritbt9SBM+zdlQphVqPvPo3YDrarOh2G9QVh3sj9RtasguRDk5f+HO9aDS m075E7/arwu0UDqnq1Ood5OIx/8fNAcA8w1VlMFb96E5eYPFC7IeYogYcNWkpByg 6Rf3BwhmluUID0Rv7aOn1Y9asYVpJVPsuXc1o4ncOk5bDa5737Rt+IDllpDMWIiU wqjuFFOkAPW5gpinJG8q3rU39Jp+VztbOI6i+m9BrXEESzv7ojaNd1MS4S4q5W1L W5x3NlEKY3B3mdRd06ygEwVZfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgIgQbj H3jgXGyxoEv9jQQNg4bSMB8GA1UdIwQYMBaAFL5Ii05grGpzplbv28X6Z6Go3oEq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS8zMEQ4MDEyNkMx MTMxMUU1QjAxQTcyNjlDNEY5QUUwMi92a2lMVG1Dc2FuT21WdV9ieGZwbm9hamVn U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZraUxUbUNzYW5PbVZ1X2J4ZnBub2FqZWdTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REUwQS8zMEQ4MDEyNkMxMTMxMUU1QjAxQTcyNjlDNEY5QUUwMi92a2lMVG1Dc2Fu T21WdV9ieGZwbm9hamVnU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgMDBfMlg76zxK4N2b+FfQGdmiQaIQzGeZMqtGeAvummzLnvJkO/VQ 9x5+ZuO9wGi45PFtqXI+cpc5nHGZFROr0w9XF1dgLZTWMclCyBnSLGdrHlmZtOCn RSKkxrra5VbbrKkv7wWHFsjSbR6MALy/QtUM0ffAC2DOnHMIExTzvxMxQMNlRDUY Wih62KThLCcOyRY251hg5pWsmMfGzIHz3OdPjQtTxfb0QLEl1NFzkRqS+fAE8jJK IE1+qYtYCTJi9nuHg9+OTY9VfnIHAtXf4zBnmHLqZeQoArpwJHhOESSSWuXAv3/5 zsIu5Dr2sYyCl4jX/j/GUYnm5LQcQ/a9 -----END CERTIFICATE-----Generated at Mon Jul 21 07:01:24 2025 by rpki-client