$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft File: _vLBxOoJZEd1FMGqlG5sQXeNBr8.mft (raw, json) Hash identifier: BCgpRwS1o56+rkpXvuA0Mu1xi8TkpGu7OySva9+lMc8= Subject key identifier: CA:2F:88:30:AF:42:B4:7D:5D:71:76:FA:D5:60:10:12:8E:C7:4B:F4 Authority key identifier: FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF Certificate issuer: /CN=A91D298D/serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF Certificate serial: 087F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft Manifest number: 0846 Signing time: Sun 20 Jul 2025 21:06:15 +0000 Manifest this update: Sun 20 Jul 2025 21:06:14 +0000 Manifest next update: Sun 27 Jul 2025 21:06:14 +0000 Files and hashes: 1: _vLBxOoJZEd1FMGqlG5sQXeNBr8.crl (hash: vrRlkepnvz4w14NlB/iBKHWEiz58oXLXAGKZiQK/HPo=) 2: 65519ACC506C11EC99354984C4F9AE02.roa (hash: FSKLxu00ctg24+HmZkC2VPQWpobiDfHHaUN+7Y4NQZA=) 3: 01BB1B8E7C0411EFB0D29158C4F9AE02.roa (hash: KU0OYgNotYA3UtDO5hlxYlQJ813PAymWu54BIJPXlUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2175 (0x87f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D298D, serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF Validity Not Before: Jul 20 21:06:14 2025 GMT Not After : Jul 27 21:06:14 2025 GMT Subject: CN=687d5a46-53a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d2:f0:40:f7:b6:f5:60:b8:e8:eb:eb:87:df: 94:60:5f:b3:30:3d:d8:f0:c1:83:53:93:54:44:44: 49:b6:b0:12:fc:8e:da:a2:a8:21:ca:85:15:39:e4: 91:40:3f:67:1b:cc:99:05:29:2f:a8:15:16:22:c6: 23:8e:aa:01:dc:8b:a0:bf:c0:13:f1:34:85:cc:a5: 37:58:f9:08:b0:ac:5e:fc:f4:fc:c7:1a:ac:b4:68: 0f:57:89:47:e9:52:42:a6:87:51:b4:18:9a:c7:54: 57:eb:b5:98:99:e8:ee:5a:36:e8:27:d8:df:a6:c3: 1b:ec:d7:3e:47:10:76:7b:3d:86:9f:bd:89:b1:6b: 6d:26:26:3b:8c:65:00:c8:27:18:65:8a:53:3e:ca: d5:30:47:a8:9d:76:55:1c:e0:86:45:ab:83:c6:c5: 5a:57:07:10:00:28:c8:69:55:37:f1:ea:62:7c:1d: 64:4a:39:1e:8b:67:4d:7f:4f:b0:99:a8:d0:98:16: 23:bc:c5:75:2a:7c:4e:bc:0e:f5:fd:f7:c7:9e:6c: 86:f3:7e:9b:a3:df:33:24:9b:6c:58:10:e9:5c:89: 7f:e8:e7:2e:58:37:3a:5a:cc:6d:20:b8:63:f5:8a: da:93:1d:3d:17:48:30:16:24:78:06:4b:3a:ab:d2: 24:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2F:88:30:AF:42:B4:7D:5D:71:76:FA:D5:60:10:12:8E:C7:4B:F4 X509v3 Authority Key Identifier: keyid:FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:ae:d4:3d:01:b8:69:9a:50:b4:e3:de:63:db:7d:38:00:74: f0:f1:8b:90:69:96:bc:7b:ef:19:c7:83:77:60:4c:8e:4b:1e: d6:ee:90:88:6e:56:97:a5:ae:8f:6b:f8:1d:0a:d7:cb:89:19: bc:7f:82:e9:b6:0a:6c:c0:e0:2a:a4:d6:b6:b5:d9:96:28:e4: 64:69:29:fb:a5:f3:07:d0:af:cc:db:dd:0a:6b:7c:ff:3d:87: ba:77:d3:85:af:e2:9f:a2:ed:68:55:82:e1:d6:52:0e:33:d2: a8:e5:fe:ea:48:8a:85:1d:23:98:b5:bf:32:da:80:9f:6b:fb: 2b:98:ea:29:d7:c4:2f:24:16:55:34:db:20:a1:09:33:48:ab: c5:2b:ab:91:22:07:9e:73:d2:7a:4b:ae:da:08:16:3b:46:46: 21:fc:ea:13:59:ec:a1:9b:29:9f:13:81:4f:99:6e:76:be:03: cc:a4:c3:0a:08:b2:d8:0b:b9:78:e3:35:ec:37:55:28:cc:8c: 2f:54:13:76:6c:0d:17:75:da:5b:c0:2a:d4:db:ed:2d:82:35: 17:c8:1f:74:3e:12:f4:61:7f:ee:17:82:c7:f9:36:0f:3f:72: f2:17:04:74:5b:7a:e6:71:c7:36:11:09:0a:08:d9:1b:00:e4: b8:61:6c:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI5OEQxMTAvBgNVBAUTKEZFRjJDMUM0RUEwOTY0NDc3NTE0QzFBQTk0NkU2QzQx Nzc4RDA2QkYwHhcNMjUwNzIwMjEwNjE0WhcNMjUwNzI3MjEwNjE0WjAYMRYwFAYD VQQDEw02ODdkNWE0Ni01M2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9LwQPe29WC46Ovrh9+UYF+zMD3Y8MGDU5NURERJtrAS/I7aoqghyoUVOeSR QD9nG8yZBSkvqBUWIsYjjqoB3Iugv8AT8TSFzKU3WPkIsKxe/PT8xxqstGgPV4lH 6VJCpodRtBiax1RX67WYmejuWjboJ9jfpsMb7Nc+RxB2ez2Gn72JsWttJiY7jGUA yCcYZYpTPsrVMEeonXZVHOCGRauDxsVaVwcQACjIaVU38epifB1kSjkei2dNf0+w majQmBYjvMV1KnxOvA71/ffHnmyG836bo98zJJtsWBDpXIl/6OcuWDc6WsxtILhj 9Yrakx09F0gwFiR4Bks6q9IkPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoviDCv QrR9XXF2+tVgEBKOx0v0MB8GA1UdIwQYMBaAFP7ywcTqCWRHdRTBqpRubEF3jQa/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4RC8zMzdBNjQzMkYx QTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpFZDFGTUdxbEc1c1FYZU5C cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192TEJ4T29KWkVkMUZNR3FsRzVzUVhlTkJyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mjk4RC8zMzdBNjQzMkYxQTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpF ZDFGTUdxbEc1c1FYZU5CcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZrtQ9AbhpmlC0495j2304AHTw8YuQaZa8e+8Zx4N3YEyOSx7W7pCI blaXpa6Pa/gdCtfLiRm8f4LptgpswOAqpNa2tdmWKORkaSn7pfMH0K/M290Ka3z/ PYe6d9OFr+Kfou1oVYLh1lIOM9Ko5f7qSIqFHSOYtb8y2oCfa/srmOop18QvJBZV NNsgoQkzSKvFK6uRIgeec9J6S67aCBY7RkYh/OoTWeyhmymfE4FPmW52vgPMpMMK CLLYC7l44zXsN1UozIwvVBN2bA0XddpbwCrU2+0tgjUXyB90PhL0YX/uF4LH+TYP P3LyFwR0W3rmccc2EQkKCNkbAOS4YWyF -----END CERTIFICATE-----Generated at Mon Jul 21 12:50:03 2025 by rpki-client