$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft File: vm13JvnXOebsmvk0fs7LQhevej8.mft (raw, json) Hash identifier: aJ8Atni7ARGTOdsnr3Zs2sXGM4dwGHb3rI0jtbPo9Sc= Subject key identifier: CA:41:DC:2F:D7:37:EC:E2:2A:FF:D7:8A:D6:A2:84:C2:A0:D8:00:AF Authority key identifier: BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F Certificate issuer: /CN=A91ED35E/serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft Manifest number: 0123 Signing time: Wed 23 Jul 2025 04:57:37 +0000 Manifest this update: Wed 23 Jul 2025 04:57:37 +0000 Manifest next update: Wed 30 Jul 2025 04:57:37 +0000 Files and hashes: 1: vm13JvnXOebsmvk0fs7LQhevej8.crl (hash: FZ0RKlByenEJ3gOqON9rit8o69WR3SfTBTJIhKF3a2I=) 2: 3AE10060B0F111EE9727201AC4F9AE02.roa (hash: KyJCsFenYj6fuJ23jzQVPwAa2Ss88E8BW4syF1uzypU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 04:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED35E, serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Validity Not Before: Jul 23 04:57:37 2025 GMT Not After : Jul 30 04:57:37 2025 GMT Subject: CN=68806bc1-f8bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:10:fe:1f:50:55:aa:aa:71:a8:42:ea:7b:e1: 80:99:b4:a1:aa:38:bf:8f:e9:4d:7a:0c:52:0d:51: 29:37:32:91:9b:67:f7:79:84:7b:14:78:ab:0d:21: d9:fa:5e:78:4e:7e:23:c5:00:30:ca:64:6d:be:a4: 96:b8:db:41:68:90:1f:d0:02:49:da:e1:e6:f8:25: 0e:e1:73:de:b1:00:16:64:87:a6:a9:09:ec:40:e4: 47:cd:2a:b7:ab:e8:b9:7b:ab:8b:0e:76:ed:ef:71: 55:55:2b:9f:d7:35:57:f9:a4:71:fd:8b:29:fb:b6: 61:b3:61:94:1f:0f:1e:9f:da:b1:18:bc:47:b6:db: 91:85:30:0f:d8:3a:c5:91:de:d2:c4:4e:97:f8:7f: c0:f7:37:b9:db:9d:b4:03:c3:88:82:24:ca:29:96: 64:05:b3:13:ad:a5:0f:a4:79:0c:7f:86:85:a8:7d: 43:50:76:87:21:7d:32:d6:28:d1:74:40:01:90:a7: e3:00:ed:29:70:c9:85:ec:09:2c:e9:bf:54:db:a9: 16:64:eb:9c:21:0f:6b:1e:93:de:4e:d2:9d:df:b4: 82:5e:ce:1e:24:6b:2c:58:99:aa:65:87:a2:4c:06: 5f:d9:95:e7:fb:e6:cb:1a:4c:7f:e6:72:e3:80:56: e0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:41:DC:2F:D7:37:EC:E2:2A:FF:D7:8A:D6:A2:84:C2:A0:D8:00:AF X509v3 Authority Key Identifier: keyid:BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:8b:c7:1b:44:32:44:bb:83:b3:ca:19:8a:e5:a7:c7:5f:ab: 0c:b2:7f:fc:90:1d:0e:79:a0:83:ac:e1:79:6a:00:23:98:93: 5e:02:6d:52:6f:38:e3:7b:dc:60:2b:5e:73:4b:d5:6a:5c:59: 9c:77:ed:4b:9e:3f:70:07:c8:15:0c:ed:bf:dd:49:6d:d2:11: 77:a3:07:e7:99:f0:72:f0:33:98:f2:15:5c:97:00:69:fe:07: 8f:a8:5d:de:37:af:43:a6:e7:bc:47:aa:d9:a5:95:fb:85:8e: 4d:69:5d:63:ca:1d:c6:65:ec:84:dc:de:b6:3a:d7:e1:ae:e3: f1:d0:6d:b2:69:62:b3:0f:f0:a4:e5:8c:76:02:7e:76:9d:74: 76:38:6b:67:bc:a4:f4:f6:e7:36:0e:00:57:fc:1c:b1:d9:23: 31:8a:14:1c:7c:a0:5b:fa:4d:bc:f1:66:df:f2:ba:2d:c7:8e: e9:c6:c7:f1:63:81:44:71:49:63:e6:84:f9:dd:e9:be:38:b3: 4c:d7:69:0c:3a:77:60:35:85:7e:bc:33:f3:d9:18:19:ae:88: 76:e0:24:e6:14:20:93:e7:1e:31:85:2a:f6:d8:cf:d8:83:23: 41:9e:20:2e:6f:56:b5:a2:73:cd:a5:25:14:da:c7:44:af:6d: a2:ad:88:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQzNUUxMTAvBgNVBAUTKEJFNkQ3NzI2RjlENzM5RTZFQzlBRjkzNDdFQ0VDQjQy MTdBRjdBM0YwHhcNMjUwNzIzMDQ1NzM3WhcNMjUwNzMwMDQ1NzM3WjAYMRYwFAYD VQQDEw02ODgwNmJjMS1mOGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRD+H1BVqqpxqELqe+GAmbShqji/j+lNegxSDVEpNzKRm2f3eYR7FHirDSHZ +l54Tn4jxQAwymRtvqSWuNtBaJAf0AJJ2uHm+CUO4XPesQAWZIemqQnsQORHzSq3 q+i5e6uLDnbt73FVVSuf1zVX+aRx/Ysp+7Zhs2GUHw8en9qxGLxHttuRhTAP2DrF kd7SxE6X+H/A9ze52520A8OIgiTKKZZkBbMTraUPpHkMf4aFqH1DUHaHIX0y1ijR dEABkKfjAO0pcMmF7Aks6b9U26kWZOucIQ9rHpPeTtKd37SCXs4eJGssWJmqZYei TAZf2ZXn++bLGkx/5nLjgFbgPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpB3C/X N+ziKv/XitaihMKg2ACvMB8GA1UdIwQYMBaAFL5tdyb51znm7Jr5NH7Oy0IXr3o/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDM1RS8yMDhERkMzNkFD NDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9lYnNtdmswZnM3TFFoZXZl ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtMTNKdm5YT2Vic212azBmczdMUWhldmVqOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDM1RS8yMDhERkMzNkFDNDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9l YnNtdmswZnM3TFFoZXZlajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAri8cbRDJEu4OzyhmK5afHX6sMsn/8kB0OeaCDrOF5agAjmJNeAm1S bzjje9xgK15zS9VqXFmcd+1Lnj9wB8gVDO2/3Ult0hF3owfnmfBy8DOY8hVclwBp /gePqF3eN69Dpue8R6rZpZX7hY5NaV1jyh3GZeyE3N62OtfhruPx0G2yaWKzD/Ck 5Yx2An52nXR2OGtnvKT09uc2DgBX/Byx2SMxihQcfKBb+k288Wbf8rotx47pxsfx Y4FEcUlj5oT53em+OLNM12kMOndgNYV+vDPz2RgZroh24CTmFCCT5x4xhSr22M/Y gyNBniAub1a1onPNpSUU2sdEr22irYjp -----END CERTIFICATE-----Generated at Wed Jul 23 12:20:36 2025 by rpki-client