$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft File: Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft (raw, json) Hash identifier: 7Ag1emVf+jqyZTMJ8LRpKNJzQdJ3hU1Cvx65z+yAl80= Subject key identifier: BE:9E:75:74:FA:7F:B2:E9:EE:3A:79:C0:AB:CB:CA:01:68:9C:0B:DB Authority key identifier: 56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71 Certificate issuer: /CN=A91203DC/serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071 Certificate serial: 21BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft Manifest number: 21B2 Signing time: Thu 18 Sep 2025 15:59:22 +0000 Manifest this update: Thu 18 Sep 2025 15:59:22 +0000 Manifest next update: Thu 25 Sep 2025 15:59:22 +0000 Files and hashes: 1: Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl (hash: k6E03OMlXLtnuMtOql799o6xaSgd9ApPH5eYT7nnmDw=) 2: 1D9DC82A652311EBA8CF3C4CC4F9AE02.roa (hash: dCLTxe5AeU3EWuhpQGl4ZlWRgK483ALuIyneqH0vPGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8638 (0x21be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203DC, serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071 Validity Not Before: Sep 18 15:59:22 2025 GMT Not After : Sep 25 15:59:22 2025 GMT Subject: CN=68cc2c5a-516c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c6:0d:95:b7:5e:6f:63:16:a1:14:99:ae:20: 7d:f5:ef:5c:7c:93:31:29:24:05:20:64:fb:ea:cf: ac:4c:7f:aa:b7:b7:b9:e0:9c:33:08:07:b4:e0:75: 04:3f:b1:52:e9:4a:0a:c8:e6:30:f5:f6:4f:c8:a8: cd:d7:8f:45:38:aa:a4:e9:b7:7c:40:44:ae:db:ee: 3c:72:a0:70:e3:c3:c7:42:ea:91:89:d9:30:a7:0b: 77:ea:19:e7:eb:33:10:89:c9:d8:7c:8b:b4:b8:f4: 17:16:79:00:cd:77:3e:3f:c1:7c:e8:00:e6:c3:db: 8b:8d:03:06:40:53:6f:db:c2:13:35:a3:96:ac:e8: d2:74:4f:6b:85:1c:23:88:d2:88:5e:57:f9:b9:f7: 8f:1e:0e:68:fb:d6:01:3e:95:b7:05:7d:17:4e:66: d2:a6:b6:69:47:c6:06:b3:0b:95:97:91:30:5d:0e: 27:80:b6:3b:9d:f4:0f:46:de:f7:a4:e4:80:29:82: 00:96:75:a9:37:5e:d1:0b:50:5c:1d:41:61:a4:6d: 2d:f4:86:12:4d:63:d7:1c:25:3b:8e:1c:72:37:2d: f0:39:71:7c:89:4e:da:27:cd:28:04:74:d1:f3:3f: 09:e7:76:6c:3a:61:cb:78:2d:c6:80:f2:45:9f:5b: 07:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9E:75:74:FA:7F:B2:E9:EE:3A:79:C0:AB:CB:CA:01:68:9C:0B:DB X509v3 Authority Key Identifier: keyid:56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:3a:e8:77:6b:ce:cb:8c:da:fc:36:ff:8d:15:5b:1b:25:66: a5:b5:52:db:02:69:a8:52:42:d5:06:70:a3:cd:05:bd:97:51: 5e:95:59:33:4d:20:62:c1:14:77:9b:fe:09:27:b9:57:d1:4f: 2d:1d:74:c1:a0:b8:e5:12:2e:54:ae:22:eb:fb:b9:e6:87:d7: 68:75:a8:61:48:03:b8:49:17:ff:20:3e:04:16:49:df:74:32: d5:fe:f4:ae:0c:a9:de:6e:29:3c:02:89:11:16:c5:eb:1d:bf: a1:d6:84:07:4c:b5:4f:4f:85:17:ed:d4:26:7f:8e:1b:09:4b: ac:de:05:73:2a:28:0c:dc:43:fd:fb:03:8e:eb:03:3f:4f:e4: 81:77:28:98:9c:1e:bc:e0:27:b9:28:b0:34:69:75:a9:ae:87: 47:4e:06:b7:06:2a:5f:cf:2b:b1:c2:5b:f9:25:bf:75:00:20: 52:cc:a2:45:dc:c2:95:77:3f:a5:09:10:53:a2:a0:d6:98:88: 76:2d:8e:09:51:b8:d5:73:43:e6:ff:96:4d:b4:dd:15:4b:03: 11:22:ed:68:c6:5c:e0:07:72:42:11:cc:b4:27:28:0a:cd:c1: 8f:b9:bb:a0:a4:eb:f8:7b:ad:cb:b4:47:f9:58:fa:64:4a:c9: b1:91:43:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzREMxMTAvBgNVBAUTKDU2NDZFMDdBMEY2MDI1RjFFMjYwRjFDNDk5NkY5QTY4 MUIyOTIwNzEwHhcNMjUwOTE4MTU1OTIyWhcNMjUwOTI1MTU1OTIyWjAYMRYwFAYD VQQDEw02OGNjMmM1YS01MTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysYNlbdeb2MWoRSZriB99e9cfJMxKSQFIGT76s+sTH+qt7e54JwzCAe04HUE P7FS6UoKyOYw9fZPyKjN149FOKqk6bd8QESu2+48cqBw48PHQuqRidkwpwt36hnn 6zMQicnYfIu0uPQXFnkAzXc+P8F86ADmw9uLjQMGQFNv28ITNaOWrOjSdE9rhRwj iNKIXlf5ufePHg5o+9YBPpW3BX0XTmbSprZpR8YGswuVl5EwXQ4ngLY7nfQPRt73 pOSAKYIAlnWpN17RC1BcHUFhpG0t9IYSTWPXHCU7jhxyNy3wOXF8iU7aJ80oBHTR 8z8J53ZsOmHLeC3GgPJFn1sHjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6edXT6 f7Lp7jp5wKvLygFonAvbMB8GA1UdIwQYMBaAFFZG4HoPYCXx4mDxxJlvmmgbKSBx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNEQy9GQUQzRDZGQ0RD NDkxMUU1QTA2MjVGODJDNEY5QUUwMi9Wa2JnZWc5Z0pmSGlZUEhFbVctYWFCc3BJ SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZrYmdlZzlnSmZIaVlQSEVtVy1hYUJzcElIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNEQy9GQUQzRDZGQ0RDNDkxMUU1QTA2MjVGODJDNEY5QUUwMi9Wa2JnZWc5Z0pm SGlZUEhFbVctYWFCc3BJSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCOuh3a87LjNr8Nv+NFVsbJWaltVLbAmmoUkLVBnCjzQW9l1FelVkz TSBiwRR3m/4JJ7lX0U8tHXTBoLjlEi5UriLr+7nmh9dodahhSAO4SRf/ID4EFknf dDLV/vSuDKnebik8AokRFsXrHb+h1oQHTLVPT4UX7dQmf44bCUus3gVzKigM3EP9 +wOO6wM/T+SBdyiYnB684Ce5KLA0aXWprodHTga3Bipfzyuxwlv5Jb91ACBSzKJF 3MKVdz+lCRBToqDWmIh2LY4JUbjVc0Pm/5ZNtN0VSwMRIu1oxlzgB3JCEcy0JygK zcGPubugpOv4e63LtEf5WPpkSsmxkUNG -----END CERTIFICATE-----Generated at Fri Sep 19 13:42:23 2025 by rpki-client