$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft File: vAWTxH2s9senekHgfeuaBhYxpIQ.mft (raw, json) Hash identifier: qp+3p2Ef4HqcVWGf6F36U+tecNnLS3n15T3YoiBIoIY= Subject key identifier: F1:A5:D3:7B:8B:0F:33:64:4A:4E:E5:BB:3A:D3:41:BC:A7:8A:C1:E3 Authority key identifier: BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84 Certificate issuer: /CN=A91D0B40/serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft Manifest number: C9 Signing time: Sun 27 Jul 2025 05:57:49 +0000 Manifest this update: Sun 27 Jul 2025 05:57:48 +0000 Manifest next update: Sun 03 Aug 2025 05:57:48 +0000 Files and hashes: 1: vAWTxH2s9senekHgfeuaBhYxpIQ.crl (hash: 5Dm+WRx+JKmx7MTbZRKKOaPcUY9o7HOSDvM+lJ2yhxA=) 2: 0D5C00AC38E311EF99F62432C4F9AE02.roa (hash: xQMEY6P6f4jmqeDgv/TImb1ka64GtPCQvQqQLQx2M8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 05:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40, serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484 Validity Not Before: Jul 27 05:57:48 2025 GMT Not After : Aug 3 05:57:48 2025 GMT Subject: CN=6885bfdd-86d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4a:ee:25:3f:34:66:dc:0b:ac:38:65:cb:c8: 33:b7:04:03:b6:26:86:82:c2:9d:3a:ee:e5:31:51: 60:e2:8e:81:a6:cf:cb:66:5d:1e:12:0d:0e:ba:6d: 76:ed:18:dc:46:b5:aa:1d:60:ce:77:cd:e3:f2:6b: 8d:fc:47:d3:e3:c0:d9:c7:6d:b0:df:a2:3d:3f:d7: f8:cb:94:55:1f:a4:ad:ba:6d:04:9c:21:27:50:23: 08:6e:62:79:e6:51:ea:e2:1d:1e:c7:bf:5a:96:5c: dc:a8:87:e0:24:87:e4:4e:36:d5:de:68:49:4b:8f: d8:a8:4f:57:96:e8:4e:54:41:24:7a:e4:ae:2e:97: 38:f0:8b:ee:3c:e4:db:d1:c4:f0:17:56:01:10:bb: 93:af:23:a0:81:a4:ac:4c:05:c5:03:cb:45:c8:88: 73:f4:88:bb:00:5b:73:24:f1:84:e4:11:7b:df:89: eb:3e:6e:cc:57:bd:dd:7c:5b:b1:b4:95:d6:1f:e7: f4:0a:ff:f2:1f:8e:85:4d:6c:56:d4:94:97:f9:fb: cf:5f:29:30:df:04:b1:a3:23:b4:1b:94:f6:42:00: 32:8a:5d:b2:d2:85:ed:02:cd:56:df:b5:4b:5d:16: 48:2f:fb:c5:45:9e:11:c3:b7:0c:81:73:ba:f7:3e: 12:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A5:D3:7B:8B:0F:33:64:4A:4E:E5:BB:3A:D3:41:BC:A7:8A:C1:E3 X509v3 Authority Key Identifier: keyid:BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:03:ab:f8:88:9d:c7:00:2b:dd:79:1a:f4:64:04:ae:8d:99: ab:ee:d0:cc:5e:97:0d:ef:6e:94:4c:1e:9a:7d:00:02:89:9c: e3:75:d6:e8:10:56:1c:71:6e:cb:a0:07:cc:1f:f6:d7:ab:0f: 0e:f7:b7:9d:7e:c4:63:8c:9b:a8:4f:f0:c4:e5:c5:df:23:52: c0:4e:26:c4:bd:7d:c3:3a:6c:6b:ec:d0:f2:aa:72:f4:60:d7: ee:21:fc:62:e6:4d:37:6d:26:97:68:54:fe:ae:ec:c1:76:43: 04:55:26:7a:18:bc:79:cf:96:1a:4b:dc:73:9c:1e:c6:a1:7f: 04:9a:ff:aa:3b:e5:d2:2c:0c:80:33:97:bc:f9:a2:b9:17:be: 08:ab:f3:a6:3b:1a:e4:41:70:7d:14:b1:16:77:f3:f2:0d:09: 8e:d3:5b:b8:7a:12:7f:d1:7e:ae:da:45:06:44:37:dd:cc:d2: a3:76:5b:84:cf:9e:ee:ca:49:72:9a:57:a6:a7:42:30:e1:97: ff:16:f7:bb:33:db:69:2d:98:41:8f:81:42:36:61:29:8a:47: 4a:f0:08:2e:eb:ab:83:31:d0:1f:6e:83:a4:b1:35:8a:96:b1: 36:45:f4:61:a0:d6:32:86:b0:a0:a5:b3:d5:25:e3:97:43:f7: f8:f1:f4:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNDAxMTAvBgNVBAUTKEJDMDU5M0M0N0RBQ0Y2QzdBNzdBNDFFMDdERUI5QTA2 MTYzMUE0ODQwHhcNMjUwNzI3MDU1NzQ4WhcNMjUwODAzMDU1NzQ4WjAYMRYwFAYD VQQDEw02ODg1YmZkZC04NmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0ruJT80ZtwLrDhly8gztwQDtiaGgsKdOu7lMVFg4o6Bps/LZl0eEg0Oum12 7RjcRrWqHWDOd83j8muN/EfT48DZx22w36I9P9f4y5RVH6Stum0EnCEnUCMIbmJ5 5lHq4h0ex79allzcqIfgJIfkTjbV3mhJS4/YqE9XluhOVEEkeuSuLpc48IvuPOTb 0cTwF1YBELuTryOggaSsTAXFA8tFyIhz9Ii7AFtzJPGE5BF734nrPm7MV73dfFux tJXWH+f0Cv/yH46FTWxW1JSX+fvPXykw3wSxoyO0G5T2QgAyil2y0oXtAs1W37VL XRZIL/vFRZ4Rw7cMgXO69z4SvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGl03uL DzNkSk7luzrTQbynisHjMB8GA1UdIwQYMBaAFLwFk8R9rPbHp3pB4H3rmgYWMaSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8yODQwQzhBNjM4 RTAxMUVGOTRCODREN0ZDNEY5QUUwMi92QVdUeEgyczlzZW5la0hnZmV1YUJoWXhw SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZBV1R4SDJzOXNlbmVrSGdmZXVhQmhZeHBJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI0MC8yODQwQzhBNjM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi92QVdUeEgyczlz ZW5la0hnZmV1YUJoWXhwSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPA6v4iJ3HACvdeRr0ZASujZmr7tDMXpcN726UTB6afQACiZzjddbo EFYccW7LoAfMH/bXqw8O97edfsRjjJuoT/DE5cXfI1LATibEvX3DOmxr7NDyqnL0 YNfuIfxi5k03bSaXaFT+ruzBdkMEVSZ6GLx5z5YaS9xznB7GoX8Emv+qO+XSLAyA M5e8+aK5F74Iq/OmOxrkQXB9FLEWd/PyDQmO01u4ehJ/0X6u2kUGRDfdzNKjdluE z57uyklymlemp0Iw4Zf/Fve7M9tpLZhBj4FCNmEpikdK8Agu66uDMdAfboOksTWK lrE2RfRhoNYyhrCgpbPVJeOXQ/f48fTF -----END CERTIFICATE-----Generated at Tue Jul 29 00:15:25 2025 by rpki-client