$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft File: Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft (raw, json) Hash identifier: SCecR8tJQ8Fyu/eFLQRdihG1vhI5qeH/xCs2xGw+caI= Subject key identifier: 9E:55:30:33:A4:DA:D1:92:CA:89:75:87:B4:A6:F3:B5:91:E2:21:3D Authority key identifier: 55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6 Certificate issuer: /CN=A91127C1/serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6 Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft Manifest number: 0213 Signing time: Sat 06 Sep 2025 20:05:38 +0000 Manifest this update: Sat 06 Sep 2025 20:05:38 +0000 Manifest next update: Sat 13 Sep 2025 20:05:38 +0000 Files and hashes: 1: Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl (hash: 57HgObAnUR9WBrSrQkA+LsQltGCbUUDI1YvJy1Zo7UM=) 2: 8ED301D0782011F0BDB6E683C4F9AE02.roa (hash: qjBtyTQ/dYsRebIp6ZkwlHiVqfqKITocMEosdGcOqv0=) 3: 96C1C6A0782111F0A5880F87C4F9AE02.roa (hash: G2RSm0IwLRt/typGeA6hLdDQJj9eRF45VegOaQjSFIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 18:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127C1, serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6 Validity Not Before: Sep 6 20:05:38 2025 GMT Not After : Sep 13 20:05:38 2025 GMT Subject: CN=68bc9412-6df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:71:52:23:e9:20:42:05:c4:c7:67:dd:44:1a: 45:74:8c:48:26:61:91:69:13:17:95:e1:ce:4b:bd: c6:49:cd:05:c9:4a:a8:8c:59:85:8d:5f:44:bc:e1: 02:25:af:cc:1d:ac:e6:1f:47:63:34:5e:dd:8a:8d: a5:c6:bd:22:7f:08:41:aa:c7:5c:b1:7b:6c:5d:7b: 05:8f:12:e9:5a:29:3c:81:e2:40:13:c0:f5:95:fb: 5c:27:53:75:ef:ac:c3:6a:bc:27:9a:8f:8a:f9:35: cf:e9:3a:a1:8a:f6:50:e5:b9:0b:f1:c4:ca:82:31: 90:68:bf:35:31:b7:f9:5f:e5:20:f8:84:4d:87:03: 28:97:05:b6:c7:dc:00:4e:20:13:bd:d4:4f:f5:71: 4d:b4:f1:1e:58:cd:c3:ae:21:93:39:a7:e6:31:7c: 49:54:92:fe:30:46:87:ea:57:9a:67:df:06:af:f9: ef:0d:cf:74:f4:24:bc:16:c7:60:70:6e:62:80:b8: 11:f7:2c:e3:ab:52:a3:33:ea:e0:94:fa:4b:31:46: c3:17:ca:33:23:48:45:94:a9:68:97:fc:86:3e:81: af:af:8e:36:a1:a9:0e:e2:3d:7b:0e:13:09:27:d5: 01:e7:28:1a:6d:99:ff:d1:e4:30:94:f0:e7:5c:07: e0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:55:30:33:A4:DA:D1:92:CA:89:75:87:B4:A6:F3:B5:91:E2:21:3D X509v3 Authority Key Identifier: keyid:55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:f8:ba:91:82:64:be:87:c5:f3:b8:2d:fd:5e:20:33:78:39: 93:41:0f:69:4d:2e:db:ab:1f:a8:c9:22:29:99:fd:5d:46:b9: 4f:cf:46:d3:dd:15:fe:fd:5e:fb:86:e1:90:38:e6:17:79:83: fb:97:10:20:9c:d3:fe:d2:06:1c:e3:78:53:d3:b5:de:39:67: 45:07:be:42:e6:47:cf:44:8e:99:19:6a:98:9f:6c:f1:e5:3a: 6f:68:98:ec:b6:92:2a:35:2d:e6:0b:cb:a3:52:41:92:ee:13: 99:91:26:3a:1d:05:ee:92:05:15:9f:59:ec:19:94:a9:3a:d1: 31:cd:50:dd:b9:1a:cc:bb:c2:b3:07:ef:da:83:0d:13:19:d9: f6:ec:7c:02:1e:4c:3b:da:24:3f:a6:82:e7:5a:f1:67:68:89: ef:97:7f:87:ec:f6:e5:a3:70:ee:d4:7c:85:66:ac:e8:d1:bd: 45:92:9c:7c:42:76:8c:70:6e:96:84:41:c0:dd:3e:37:4d:04: e6:6d:49:ec:ff:25:34:60:bc:24:60:30:7e:bd:f6:0a:eb:48: ed:5c:ed:7b:c3:da:b3:d1:80:c4:16:2f:4f:80:99:bc:8d:51: 7d:24:d3:42:98:a8:7d:ec:8e:ff:89:15:1d:0e:2f:5a:3c:4d: 36:27:53:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QzExMTAvBgNVBAUTKDU1RkI3QkNDQTc0MDI4NUZDODFBQTM2MEYwMkNFMzJG OTU4MTZEQjYwHhcNMjUwOTA2MjAwNTM4WhcNMjUwOTEzMjAwNTM4WjAYMRYwFAYD VQQDEw02OGJjOTQxMi02ZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHFSI+kgQgXEx2fdRBpFdIxIJmGRaRMXleHOS73GSc0FyUqojFmFjV9EvOEC Ja/MHazmH0djNF7dio2lxr0ifwhBqsdcsXtsXXsFjxLpWik8geJAE8D1lftcJ1N1 76zDarwnmo+K+TXP6TqhivZQ5bkL8cTKgjGQaL81Mbf5X+Ug+IRNhwMolwW2x9wA TiATvdRP9XFNtPEeWM3DriGTOafmMXxJVJL+MEaH6leaZ98Gr/nvDc909CS8Fsdg cG5igLgR9yzjq1KjM+rglPpLMUbDF8ozI0hFlKlol/yGPoGvr442oakO4j17DhMJ J9UB5ygabZn/0eQwlPDnXAfgwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5VMDOk 2tGSyol1h7Sm87WR4iE9MB8GA1UdIwQYMBaAFFX7e8ynQChfyBqjYPAs4y+VgW22 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdDMS9EQ0Y5OEExNjc3 ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtGX0lHcU5nOEN6akw1V0Ji YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZmdDd6S2RBS0ZfSUdxTmc4Q3pqTDVXQmJiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdDMS9EQ0Y5OEExNjc3ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtG X0lHcU5nOEN6akw1V0JiYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF+LqRgmS+h8XzuC39XiAzeDmTQQ9pTS7bqx+oySIpmf1dRrlPz0bT 3RX+/V77huGQOOYXeYP7lxAgnNP+0gYc43hT07XeOWdFB75C5kfPRI6ZGWqYn2zx 5TpvaJjstpIqNS3mC8ujUkGS7hOZkSY6HQXukgUVn1nsGZSpOtExzVDduRrMu8Kz B+/agw0TGdn27HwCHkw72iQ/poLnWvFnaInvl3+H7Pblo3Du1HyFZqzo0b1Fkpx8 QnaMcG6WhEHA3T43TQTmbUns/yU0YLwkYDB+vfYK60jtXO17w9qz0YDEFi9PgJm8 jVF9JNNCmKh97I7/iRUdDi9aPE02J1Om -----END CERTIFICATE-----Generated at Sat Sep 6 20:56:58 2025 by rpki-client