$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft File: vXVo3ESTcv4iwuyet3K31ugtKoA.mft (raw, json) Hash identifier: qRfvE8kG7autzKmOSEyMtmxCc2rOMnGNdkl9c1/N50s= Subject key identifier: A2:19:D6:4A:7C:1D:82:19:C5:05:3B:61:59:0C:9F:12:40:A8:86:AE Authority key identifier: BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80 Certificate issuer: /CN=A91D6940/serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80 Certificate serial: 083F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft Manifest number: 0835 Signing time: Tue 22 Jul 2025 20:59:51 +0000 Manifest this update: Tue 22 Jul 2025 20:59:51 +0000 Manifest next update: Tue 29 Jul 2025 20:59:51 +0000 Files and hashes: 1: vXVo3ESTcv4iwuyet3K31ugtKoA.crl (hash: lULrGJD25REd3UaKPyHbc5c1v68nwajs0okP8yCrfKQ=) 2: 160ADCACE34A11EFA6960F0CC4F9AE02.roa (hash: SXpG+rP8KDZ7mlez3vzJppnJKS0AYTjR+XpM0wzK6oU=) 3: 153BEF1EE34A11EFA6960F0CC4F9AE02.roa (hash: kkpip1TEWWFNH1mROSk1fuufLAg/gIfzk1gjTV7g7jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 20:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2111 (0x83f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6940, serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80 Validity Not Before: Jul 22 20:59:51 2025 GMT Not After : Jul 29 20:59:51 2025 GMT Subject: CN=687ffbc7-cdb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2b:9f:04:6f:19:3a:b1:1a:ac:d0:61:ff:bd: 2e:dc:f0:0b:c8:4a:07:3b:5c:af:20:18:68:4f:ee: 24:11:6e:ec:67:62:62:07:4c:32:de:0b:e4:e7:3e: d3:bd:07:ea:55:19:26:d1:c9:d0:1a:2f:83:b4:7c: 56:6d:af:d0:31:5e:92:94:a9:d1:41:8e:38:f2:b2: 4e:23:ae:60:e5:12:2e:a1:09:df:35:3b:a7:81:1f: 02:57:a7:39:65:2c:92:75:ec:48:c8:4d:95:dc:89: 93:3a:70:79:69:04:98:0c:b1:f3:d2:6e:6e:98:e6: ba:dd:ca:56:3f:78:b5:a6:65:54:68:b7:a9:86:7a: 41:02:de:0a:28:09:7d:3f:74:69:8c:65:c5:b0:6a: 3a:5c:fc:25:75:e8:be:32:d7:7d:9d:5f:04:48:2a: 6b:96:12:46:20:b7:8d:92:34:78:8d:97:07:00:90: 89:80:71:76:a3:4c:c5:29:54:8b:a5:58:5d:3b:ca: 5d:7a:da:2c:d0:61:c9:d0:b6:61:af:e2:61:ff:2b: 70:5b:a9:de:58:71:2e:c1:05:a2:9e:b0:f4:20:1b: 94:e9:57:6a:33:ee:55:68:3a:f1:0a:0e:1d:33:ac: c9:43:58:d3:5d:6f:f4:d3:d9:e1:55:b1:89:17:10: f1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:19:D6:4A:7C:1D:82:19:C5:05:3B:61:59:0C:9F:12:40:A8:86:AE X509v3 Authority Key Identifier: keyid:BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d9:ea:ff:62:e9:03:b1:e6:ff:4e:b6:7d:bb:48:a1:89:79: a9:f9:8c:43:c2:f4:b2:03:fe:ed:3a:12:30:b2:23:b1:c2:a1: e2:c0:cb:1d:d3:d5:b1:33:38:a0:13:66:9f:74:e3:82:9c:8c: 42:74:b2:c7:08:bb:55:0d:d5:a1:06:f8:2e:ee:1b:46:93:87: be:a2:ab:8c:5c:b7:27:f5:91:09:29:66:e5:7b:1c:6b:6b:2b: b9:e2:d3:c4:a9:68:0e:c2:93:a6:31:9d:b7:cf:b0:37:77:8e: 2b:cc:9f:0b:67:47:c0:8e:65:c1:85:25:64:04:21:25:f6:fa: 1c:b5:03:39:b9:54:71:72:e6:8c:cd:be:03:f7:13:9b:a0:9e: 4c:fe:7c:b9:d2:3d:19:fc:7a:84:5c:63:d9:d5:be:c8:29:c1: 3f:e3:7d:de:d7:54:e2:ff:5c:b9:48:e6:64:80:30:06:92:d1: 8f:6c:1e:ba:f8:48:15:20:bd:7d:2b:01:19:73:f0:5c:7e:d9: b6:9b:36:92:da:49:ef:60:51:d7:d8:4d:d9:58:d6:ba:7d:8a: 5f:dc:43:79:3d:fa:a3:29:c1:0f:8f:0f:8b:9d:f8:38:3d:2d: 9e:6b:cf:ed:a8:5a:18:64:d8:74:f4:83:60:f1:d6:65:ac:2e: 37:6f:8f:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY5NDAxMTAvBgNVBAUTKEJENzU2OERDNDQ5MzcyRkUyMkMyRUM5RUI3NzJCN0Q2 RTgyRDJBODAwHhcNMjUwNzIyMjA1OTUxWhcNMjUwNzI5MjA1OTUxWjAYMRYwFAYD VQQDEw02ODdmZmJjNy1jZGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yufBG8ZOrEarNBh/70u3PALyEoHO1yvIBhoT+4kEW7sZ2JiB0wy3gvk5z7T vQfqVRkm0cnQGi+DtHxWba/QMV6SlKnRQY448rJOI65g5RIuoQnfNTungR8CV6c5 ZSySdexIyE2V3ImTOnB5aQSYDLHz0m5umOa63cpWP3i1pmVUaLephnpBAt4KKAl9 P3RpjGXFsGo6XPwldei+Mtd9nV8ESCprlhJGILeNkjR4jZcHAJCJgHF2o0zFKVSL pVhdO8pdetos0GHJ0LZhr+Jh/ytwW6neWHEuwQWinrD0IBuU6VdqM+5VaDrxCg4d M6zJQ1jTXW/009nhVbGJFxDxGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIZ1kp8 HYIZxQU7YVkMnxJAqIauMB8GA1UdIwQYMBaAFL11aNxEk3L+IsLsnrdyt9boLSqA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjk0MC9FMEQwNkI4MkQ3 N0UxMUVBOEVFNjFCMzJDNEY5QUUwMi92WFZvM0VTVGN2NGl3dXlldDNLMzF1Z3RL b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZYVm8zRVNUY3Y0aXd1eWV0M0szMXVndEtvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njk0MC9FMEQwNkI4MkQ3N0UxMUVBOEVFNjFCMzJDNEY5QUUwMi92WFZvM0VTVGN2 NGl3dXlldDNLMzF1Z3RLb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr2er/YukDseb/TrZ9u0ihiXmp+YxDwvSyA/7tOhIwsiOxwqHiwMsd 09WxMzigE2afdOOCnIxCdLLHCLtVDdWhBvgu7htGk4e+oquMXLcn9ZEJKWblexxr ayu54tPEqWgOwpOmMZ23z7A3d44rzJ8LZ0fAjmXBhSVkBCEl9voctQM5uVRxcuaM zb4D9xOboJ5M/ny50j0Z/HqEXGPZ1b7IKcE/433e11Ti/1y5SOZkgDAGktGPbB66 +EgVIL19KwEZc/Bcftm2mzaS2knvYFHX2E3ZWNa6fYpf3EN5PfqjKcEPjw+Lnfg4 PS2ea8/tqFoYZNh09INg8dZlrC43b4+6 -----END CERTIFICATE-----Generated at Wed Jul 23 12:21:49 2025 by rpki-client