$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft File: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft (raw, json) Hash identifier: iixNTKme6s277psdqOh8nL+xobKfbJfJ2+i3104SZ2o= Subject key identifier: B8:E1:BC:4C:C1:50:4E:A7:E3:07:F3:21:8A:D7:DF:59:C0:2F:EA:E0 Authority key identifier: 56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC Certificate issuer: /CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC Certificate serial: 0DCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft Manifest number: 0DBB Signing time: Thu 18 Sep 2025 18:05:53 +0000 Manifest this update: Thu 18 Sep 2025 18:05:52 +0000 Manifest next update: Thu 25 Sep 2025 18:05:52 +0000 Files and hashes: 1: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl (hash: rSFO87x3+48XNVqbgoflbEH+w/QY4Ldn/Iq+sf5/tvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3532 (0xdcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203DF, serialNumber=56790B8C9507D9D4F3900950D329E275747767AC Validity Not Before: Sep 18 18:05:52 2025 GMT Not After : Sep 25 18:05:52 2025 GMT Subject: CN=68cc4a01-3fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:78:61:02:f5:7b:d1:93:2f:d7:af:24:75:ae: 0c:b2:17:20:9c:1c:5f:a0:30:9c:b7:4f:be:16:56: 2d:27:0b:a3:cb:fe:5c:f3:16:84:6d:a0:fe:18:26: 88:a0:38:3d:fd:d6:23:ee:6a:3a:fc:02:35:fa:d3: d4:9b:4d:be:79:09:71:89:78:b2:d4:b4:2b:ff:61: 0a:d5:b0:ea:be:8b:e1:17:00:79:de:2f:39:f2:50: 92:de:20:4e:4d:db:75:09:1a:e1:9b:3e:dd:59:a1: dd:fc:15:94:9e:e6:6c:8f:20:08:bf:45:42:57:06: ef:d7:40:a6:cd:65:03:ea:f8:f0:50:e0:84:e9:6b: 76:06:d1:c0:f3:8f:ff:83:e7:15:20:fa:ac:b8:0a: 3c:d7:04:04:3b:96:9d:f8:07:06:1e:9c:97:40:9e: fb:87:57:bc:0c:fb:9c:ac:26:b6:fe:1d:43:48:76: 87:93:8e:2f:7d:b0:2c:58:2c:67:83:69:22:2a:8b: 3b:1f:97:4e:15:65:f8:f5:54:70:bc:6a:cc:84:e0: 42:af:76:90:ae:32:1a:78:de:a2:21:86:94:76:06: e4:4e:2d:8f:d8:07:a1:21:50:96:e9:20:87:5e:c3: 69:2f:af:d1:65:df:54:fa:52:12:a9:c5:2d:a8:6a: 4b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E1:BC:4C:C1:50:4E:A7:E3:07:F3:21:8A:D7:DF:59:C0:2F:EA:E0 X509v3 Authority Key Identifier: keyid:56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:4e:b1:b9:4d:a2:f8:89:a9:be:ab:51:17:f1:20:05:65:6a: 1d:55:4d:18:d6:c9:32:a7:27:11:bb:07:f1:d4:fa:cc:1c:52: bf:20:8d:a4:ef:3f:84:5e:de:b8:aa:f0:66:6e:b7:a3:ef:22: ac:11:25:6e:08:dd:c1:bf:43:8f:c2:26:d7:97:04:af:9a:fa: fa:a8:be:b0:e7:0d:d5:a0:e1:e0:3a:bc:8a:2b:96:dd:24:1d: f5:d5:d5:ae:d8:f7:5a:a3:c0:d0:c3:01:d0:bb:8e:d4:38:0b: b4:e7:d6:e0:bd:c1:40:c4:6a:13:b4:4d:6a:05:0d:03:f3:1c: f0:b5:be:43:51:e6:a7:b8:d2:11:34:34:dc:26:aa:50:fc:a3: f1:28:fc:70:ed:de:da:5d:78:40:31:f9:13:c0:b5:77:ec:75: 81:3f:eb:06:f0:65:f4:28:79:7e:7a:a9:ce:b9:86:e2:0f:99: 0e:14:0a:86:51:35:ec:bf:41:3e:c6:6e:f1:3b:48:45:0b:c8: 77:c6:7b:c9:1c:cf:14:d6:5a:77:0c:16:92:e0:c5:a0:97:eb: 11:bc:c6:3e:a2:80:5c:0c:60:08:d4:c4:de:27:af:35:f2:05: 1e:05:3c:b2:d4:7b:2d:2e:a8:52:67:2d:fc:59:d2:4c:5b:9e: f3:1a:98:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzREYxMTAvBgNVBAUTKDU2NzkwQjhDOTUwN0Q5RDRGMzkwMDk1MEQzMjlFMjc1 NzQ3NzY3QUMwHhcNMjUwOTE4MTgwNTUyWhcNMjUwOTI1MTgwNTUyWjAYMRYwFAYD VQQDEw02OGNjNGEwMS0zZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3hhAvV70ZMv168kda4MshcgnBxfoDCct0++FlYtJwujy/5c8xaEbaD+GCaI oDg9/dYj7mo6/AI1+tPUm02+eQlxiXiy1LQr/2EK1bDqvovhFwB53i858lCS3iBO Tdt1CRrhmz7dWaHd/BWUnuZsjyAIv0VCVwbv10CmzWUD6vjwUOCE6Wt2BtHA84// g+cVIPqsuAo81wQEO5ad+AcGHpyXQJ77h1e8DPucrCa2/h1DSHaHk44vfbAsWCxn g2kiKos7H5dOFWX49VRwvGrMhOBCr3aQrjIaeN6iIYaUdgbkTi2P2AehIVCW6SCH XsNpL6/RZd9U+lISqcUtqGpLKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjhvEzB UE6n4wfzIYrX31nAL+rgMB8GA1UdIwQYMBaAFFZ5C4yVB9nU85AJUNMp4nV0d2es MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNERi85MjczOTdCNENB MzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJkVHprQWxRMHluaWRYUjNa NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Zua0xqSlVIMmRUemtBbFEweW5pZFhSM1o2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNERi85MjczOTdCNENBMzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJk VHprQWxRMHluaWRYUjNaNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpTrG5TaL4iam+q1EX8SAFZWodVU0Y1skypycRuwfx1PrMHFK/II2k 7z+EXt64qvBmbrej7yKsESVuCN3Bv0OPwibXlwSvmvr6qL6w5w3VoOHgOryKK5bd JB311dWu2Pdao8DQwwHQu47UOAu059bgvcFAxGoTtE1qBQ0D8xzwtb5DUeanuNIR NDTcJqpQ/KPxKPxw7d7aXXhAMfkTwLV37HWBP+sG8GX0KHl+eqnOuYbiD5kOFAqG UTXsv0E+xm7xO0hFC8h3xnvJHM8U1lp3DBaS4MWgl+sRvMY+ooBcDGAI1MTeJ681 8gUeBTyy1HstLqhSZy38WdJMW57zGpi4 -----END CERTIFICATE-----Generated at Fri Sep 19 16:45:24 2025 by rpki-client