$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft File: vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft (raw, json) Hash identifier: IL7pMeHyy6/HyVJzxKL9MecM551Oxp7Fk8lqr2NQrZA= Subject key identifier: 09:15:14:A8:E0:8F:76:1B:7C:16:93:4E:1E:F5:07:55:C4:11:60:1A Authority key identifier: BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B Certificate issuer: /CN=A9113C02/serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft Manifest number: 2593 Signing time: Mon 08 Sep 2025 16:20:00 +0000 Manifest this update: Mon 08 Sep 2025 16:19:59 +0000 Manifest next update: Mon 15 Sep 2025 16:19:59 +0000 Files and hashes: 1: vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl (hash: gJ3cEPUZkmhRDWir9rOJtAtdh3Q4/63Gf018hdPNGgs=) 2: 00CB73CC5B1011F08269C50FC4F9AE02.roa (hash: tee5qyYUeYtzVgY5XM9ROj+LoDAFDMjISaly7p7VUNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B Validity Not Before: Sep 8 16:19:59 2025 GMT Not After : Sep 15 16:19:59 2025 GMT Subject: CN=68bf022f-f0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:24:4a:03:73:80:42:12:7e:da:36:51:8e:38: 42:96:0b:84:d0:36:21:bd:4f:44:59:ca:54:b2:2c: 60:9b:45:0c:71:ea:55:8c:db:c5:42:3a:67:24:9a: bb:e4:ac:e6:d2:cb:63:9f:a1:2e:3c:12:aa:e7:55: 74:d9:d8:11:a8:63:a3:0b:2f:64:65:17:d7:ca:63: ba:cb:b6:7d:b5:2d:9e:48:f8:1c:46:ff:75:f2:e9: 76:2d:c5:4c:c2:7f:78:0e:ed:7f:56:09:80:f5:f6: d4:ff:a3:da:f2:9a:79:74:dd:ef:56:c0:ea:0b:ed: 20:df:79:e5:fa:d2:c6:fa:3a:68:8c:fd:f9:30:e3: 87:35:62:f5:e5:dd:b2:5a:aa:df:70:5e:16:fd:a9: fe:f4:ad:f6:8a:20:94:8d:11:1b:de:4b:51:59:b0: 0c:61:40:5b:9f:5c:e4:e7:d2:33:39:71:4c:7a:ec: dc:6d:7c:1d:18:67:13:6b:ed:ef:d5:50:2b:e4:50: e5:ff:ad:81:07:ee:a4:48:94:3a:3e:81:d3:3d:21: 5e:8d:6e:13:8c:8c:1c:0d:d9:c5:83:4a:01:65:fd: 5a:d2:0e:56:3d:44:c3:25:41:3a:70:e1:29:fb:9c: d2:11:c0:1f:b7:0b:d7:1d:1a:80:72:d7:c1:94:45: 5e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:15:14:A8:E0:8F:76:1B:7C:16:93:4E:1E:F5:07:55:C4:11:60:1A X509v3 Authority Key Identifier: keyid:BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c8:3c:15:33:d5:ea:e4:af:32:07:56:a3:22:a9:10:84:bf: 3a:71:9f:2e:61:f9:51:54:84:15:7c:7b:f4:9d:0a:9f:e4:fa: 7d:3e:57:3a:94:6f:97:cf:56:1e:d8:ea:76:8d:f0:14:13:97: 06:12:27:82:10:21:9f:f2:d9:46:2c:b5:dd:4b:76:cd:fc:c7: f2:97:2d:c6:cb:78:e8:8a:15:2b:50:97:32:5d:80:7d:09:cb: 39:2f:45:43:1d:92:12:39:08:29:3a:9c:51:13:d9:37:26:df: 92:9a:18:ae:d5:e9:e8:10:07:85:31:b7:85:35:62:89:44:de: 64:2f:4b:7a:7a:9f:8a:dd:8e:82:32:a7:96:3a:64:ff:ec:b0: 22:36:b1:fa:b9:a4:d1:24:c5:59:4f:07:cf:57:33:ec:aa:7f: 80:45:8c:c2:57:9b:a9:19:b3:ef:99:d8:2f:fa:5a:91:a0:05: 43:47:2b:23:19:ec:9c:6f:91:ec:58:ea:48:fb:7d:cc:29:55: 0d:35:4d:47:eb:78:6c:93:fb:d7:8f:5f:48:83:78:34:82:27: 35:1d:cc:11:d5:d1:dc:3d:da:92:cd:74:1f:6f:d8:bb:0f:88: d0:80:8f:53:ce:44:36:dc:95:1b:6f:66:44:64:0f:9f:cc:e4: c6:d5:1a:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0MwMjExMC8GA1UEBRMoQkU3NjRFRkVGNTNEODY5QzQ0RjYwNzA5OTYxMTNFMEEx ODE4NDExQjAeFw0yNTA5MDgxNjE5NTlaFw0yNTA5MTUxNjE5NTlaMBgxFjAUBgNV BAMTDTY4YmYwMjJmLWYwZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClJEoDc4BCEn7aNlGOOEKWC4TQNiG9T0RZylSyLGCbRQxx6lWM28VCOmckmrvk rObSy2OfoS48EqrnVXTZ2BGoY6MLL2RlF9fKY7rLtn21LZ5I+BxG/3Xy6XYtxUzC f3gO7X9WCYD19tT/o9rymnl03e9WwOoL7SDfeeX60sb6OmiM/fkw44c1YvXl3bJa qt9wXhb9qf70rfaKIJSNERveS1FZsAxhQFufXOTn0jM5cUx67NxtfB0YZxNr7e/V UCvkUOX/rYEH7qRIlDo+gdM9IV6NbhOMjBwN2cWDSgFl/VrSDlY9RMMlQTpw4Sn7 nNIRwB+3C9cdGoBy18GURV5FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCRUUqOCP dht8FpNOHvUHVcQRYBowHwYDVR0jBBgwFoAUvnZO/vU9hpxE9gcJlhE+ChgYQRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQzAyLzRDNDA2RkI2NDA1 NjExRTdBRjA0MUEzNUM0RjlBRTAyL3ZuWk9fdlU5aHB4RTlnY0psaEUtQ2hnWVFS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdm5aT192VTlocHhFOWdjSmxoRS1DaGdZUVJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QzAyLzRDNDA2RkI2NDA1NjExRTdBRjA0MUEzNUM0RjlBRTAyL3ZuWk9fdlU5aHB4 RTlnY0psaEUtQ2hnWVFScy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC3IPBUz1erkrzIHVqMiqRCEvzpxny5h+VFUhBV8e/SdCp/k+n0+VzqU b5fPVh7Y6naN8BQTlwYSJ4IQIZ/y2UYstd1Lds38x/KXLcbLeOiKFStQlzJdgH0J yzkvRUMdkhI5CCk6nFET2Tcm35KaGK7V6egQB4Uxt4U1YolE3mQvS3p6n4rdjoIy p5Y6ZP/ssCI2sfq5pNEkxVlPB89XM+yqf4BFjMJXm6kZs++Z2C/6WpGgBUNHKyMZ 7JxvkexY6kj7fcwpVQ01TUfreGyT+9ePX0iDeDSCJzUdzBHV0dw92pLNdB9v2LsP iNCAj1PORDbclRtvZkRkD5/M5MbVGhE= -----END CERTIFICATE-----Generated at Tue Sep 9 13:52:48 2025 by rpki-client