$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft File: vIx594SRodWqRdvkEzwMEPaTZK0.mft (raw, json) Hash identifier: L+wORaaWzojeqjTySLbl9jKNRScGg6mGt51mvzuc758= Subject key identifier: 41:AC:96:C7:92:A7:88:5B:28:15:3F:57:FB:6D:01:B5:97:17:59:51 Authority key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD Certificate issuer: /CN=A911DB66/serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft Manifest number: 70 Signing time: Fri 05 Sep 2025 07:22:10 +0000 Manifest this update: Fri 05 Sep 2025 07:22:09 +0000 Manifest next update: Fri 12 Sep 2025 07:22:09 +0000 Files and hashes: 1: vIx594SRodWqRdvkEzwMEPaTZK0.crl (hash: 6xrJPgTGc56Z+7SWH5XwnEArrXbMFu/TKvoyh/NGCv8=) 2: D973E6FEF51D11EFAD3D042EC4F9AE02.roa (hash: u93MIpjxF46V825wNe89adLBqBtdyI8rJgiDXDAPRbk=) 3: DA673610F51D11EFAD3D042EC4F9AE02.roa (hash: Ditm9jS3Zsy5UK/tSQ4fwIyFAaD9ya5NTIds4DVaHEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DB66, serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD Validity Not Before: Sep 5 07:22:09 2025 GMT Not After : Sep 12 07:22:09 2025 GMT Subject: CN=68ba8fa1-2fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:db:65:ff:28:98:f2:2b:21:16:ed:9d:03:e6: cd:61:3e:ae:1a:4a:a7:2b:95:b8:d4:91:a3:64:fc: 13:8c:2f:3c:85:23:a7:9c:60:25:0e:d3:5a:22:52: 50:9b:e1:ee:9e:5a:db:2c:b8:58:a6:92:d7:36:58: e2:94:c2:20:50:62:c4:cd:26:40:39:c6:83:d8:4d: 3d:3d:4a:71:7f:cd:2b:f7:7e:75:d2:bc:b4:40:33: 24:9d:71:8c:2a:5a:89:42:c1:31:1c:1d:1a:2f:55: c8:d7:a7:55:6e:16:89:14:20:8f:95:e8:50:06:c7: 5c:a4:bd:1d:14:0c:bd:60:7c:52:ea:ec:9e:0a:02: d5:46:56:d2:3f:86:58:f4:e9:23:3b:8e:a7:4c:4f: 68:65:68:e1:4a:01:0d:a2:64:af:fc:a6:fc:4a:72: ce:8d:b8:b9:d3:42:bf:89:98:0b:b7:93:eb:99:1a: 1d:ff:f2:72:31:8a:12:d3:e5:dd:d0:d1:c8:5f:c3: 4a:ef:ed:b8:81:98:24:3e:9d:c1:b1:40:24:7d:90: ca:28:5a:d7:c1:49:e1:af:1c:12:f4:42:ec:d6:01: 8d:a8:7b:0d:5e:30:fd:08:9c:19:62:8b:30:74:0c: 2b:1c:aa:89:7c:7a:2b:23:a0:21:81:62:d6:be:48: a6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AC:96:C7:92:A7:88:5B:28:15:3F:57:FB:6D:01:B5:97:17:59:51 X509v3 Authority Key Identifier: keyid:BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:10:57:ad:5d:d4:cd:03:4c:ac:84:18:8f:05:a1:af:3c:1e: 1d:8d:cf:f4:37:49:f2:40:09:d7:7d:5c:b7:4a:18:87:be:53: b4:f2:4e:d0:06:33:0f:86:d7:78:75:f3:5d:fd:3e:30:48:fe: 4f:cb:5b:af:a6:5c:55:54:67:3b:35:05:a6:0c:4a:0d:85:d0: c8:db:d8:97:d1:ee:e2:5a:b6:35:67:f1:01:06:21:02:d0:72: 2a:72:ac:7f:3b:31:56:01:a0:40:23:b3:59:aa:c3:b8:43:20: cc:86:44:81:52:c8:7b:e3:ee:b4:21:ce:c6:23:fe:a1:f8:73: c9:9f:7b:5c:8f:1d:36:9e:74:3b:5a:fc:d0:d8:b0:85:8e:41: 98:c8:04:77:ca:1a:b6:2a:3d:5a:0e:02:bc:f5:f1:6b:ec:8e: 11:6f:ca:cd:46:62:14:03:cf:c9:b7:04:61:19:5d:91:b1:06: 91:b7:a3:a2:d5:31:d2:74:e1:96:70:50:61:c3:26:76:15:50: c4:44:c4:b3:0d:f4:b5:2e:c9:02:4f:28:c0:de:f7:ca:55:6b: 53:b4:59:6e:60:ee:38:72:ac:cb:64:df:b9:36:60:b6:00:e1: 60:96:46:02:77:ad:fc:6d:5f:3b:2a:a2:f5:be:48:a4:3e:f4: 5e:70:0f:8d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REI2NjExMC8GA1UEBRMoQkM4Qzc5Rjc4NDkxQTFENUFBNDVEQkU0MTMzQzBDMTBG NjkzNjRBRDAeFw0yNTA5MDUwNzIyMDlaFw0yNTA5MTIwNzIyMDlaMBgxFjAUBgNV BAMTDTY4YmE4ZmExLTJmYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCW22X/KJjyKyEW7Z0D5s1hPq4aSqcrlbjUkaNk/BOMLzyFI6ecYCUO01oiUlCb 4e6eWtssuFimktc2WOKUwiBQYsTNJkA5xoPYTT09SnF/zSv3fnXSvLRAMySdcYwq WolCwTEcHRovVcjXp1VuFokUII+V6FAGx1ykvR0UDL1gfFLq7J4KAtVGVtI/hlj0 6SM7jqdMT2hlaOFKAQ2iZK/8pvxKcs6NuLnTQr+JmAu3k+uZGh3/8nIxihLT5d3Q 0chfw0rv7biBmCQ+ncGxQCR9kMooWtfBSeGvHBL0QuzWAY2oew1eMP0InBliizB0 DCscqol8eisjoCGBYta+SKb9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQayWx5Kn iFsoFT9X+20BtZcXWVEwHwYDVR0jBBgwFoAUvIx594SRodWqRdvkEzwMEPaTZK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFEQjY2Lzc3QjYxOTlDRTA5 QTExRUZCNjNBODEzMEM0RjlBRTAyL3ZJeDU5NFNSb2RXcVJkdmtFendNRVBhVFpL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdkl4NTk0U1JvZFdxUmR2a0V6d01FUGFUWkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE QjY2Lzc3QjYxOTlDRTA5QTExRUZCNjNBODEzMEM0RjlBRTAyL3ZJeDU5NFNSb2RX cVJkdmtFendNRVBhVFpLMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGgQV61d1M0DTKyEGI8Foa88Hh2Nz/Q3SfJACdd9XLdKGIe+U7TyTtAG Mw+G13h18139PjBI/k/LW6+mXFVUZzs1BaYMSg2F0Mjb2JfR7uJatjVn8QEGIQLQ cipyrH87MVYBoEAjs1mqw7hDIMyGRIFSyHvj7rQhzsYj/qH4c8mfe1yPHTaedDta /NDYsIWOQZjIBHfKGrYqPVoOArz18WvsjhFvys1GYhQDz8m3BGEZXZGxBpG3o6LV MdJ04ZZwUGHDJnYVUMRExLMN9LUuyQJPKMDe98pVa1O0WW5g7jhyrMtk37k2YLYA 4WCWRgJ3rfxtXzsqovW+SKQ+9F5wD40= -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:12 2025 by rpki-client