$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft File: Vyfu6NouLMefq6Da0ZyISCvRWdw.mft (raw, json) Hash identifier: OC5fJ5fnhjYk5YdQ9jLiUcuGLW06TX84hjCuMkHbOeg= Subject key identifier: 91:25:09:50:F3:D0:8F:B2:9E:B8:26:09:37:39:21:64:F6:8D:59:C0 Authority key identifier: 57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC Certificate issuer: /CN=A9125C3D/serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC Certificate serial: 03BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft Manifest number: 03B9 Signing time: Tue 09 Sep 2025 00:48:24 +0000 Manifest this update: Tue 09 Sep 2025 00:48:24 +0000 Manifest next update: Tue 16 Sep 2025 00:48:24 +0000 Files and hashes: 1: Vyfu6NouLMefq6Da0ZyISCvRWdw.crl (hash: PGss68Kkte4kbJ2P2S8FOEEN+30kORG9xc1y69Z5K+k=) 2: D66E75F0A5CF11EC94CFB734C4F9AE02.roa (hash: l/s5xmTdNpZpeVMlmGz5C4jtr1q5+jW3USj6jM51K9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 958 (0x3be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C3D, serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC Validity Not Before: Sep 9 00:48:24 2025 GMT Not After : Sep 16 00:48:24 2025 GMT Subject: CN=68bf7958-acde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:59:c5:d8:78:12:ba:f6:a1:6d:b7:2e:7b:c6: 6a:34:65:eb:4d:c3:1b:20:51:0d:3b:40:55:6e:12: 4b:fe:bb:f9:ca:f6:10:2d:96:dd:64:29:c8:27:f8: 3a:b4:24:a8:16:59:a5:21:00:0a:ad:2a:52:f2:c2: 43:7f:a0:5d:7c:ec:20:96:79:2d:fc:b0:3c:ae:b2: 40:7f:fa:21:14:ab:78:83:ef:17:5f:d4:1a:66:ee: a3:82:66:c9:32:35:78:0d:29:2a:ab:d2:db:51:42: eb:94:b2:3b:4d:39:87:c3:96:22:13:f1:7c:03:b8: ce:69:93:66:50:d7:fc:4e:b9:9a:d0:ae:aa:1b:20: c6:ec:e7:7a:3a:ce:a0:66:63:e3:82:9c:0c:21:ea: eb:0c:3b:66:d2:15:32:68:c2:6f:cd:2e:db:8a:fa: 5c:cb:e1:3a:13:9d:c8:a3:79:8f:29:00:b3:4a:88: 28:0d:07:ed:bb:7f:08:e7:fd:6c:eb:d1:51:17:fc: 34:06:55:c2:a7:f7:13:3f:49:8d:3a:27:03:d3:30: 4c:86:30:c2:fb:f1:dd:47:ca:59:2f:6d:a4:cf:20: 31:29:fb:7d:d8:24:99:0b:83:52:51:c6:f0:4d:49: 0e:d5:00:f7:b0:eb:d7:f2:6e:94:06:3e:71:b8:43: 1b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:25:09:50:F3:D0:8F:B2:9E:B8:26:09:37:39:21:64:F6:8D:59:C0 X509v3 Authority Key Identifier: keyid:57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:be:b1:52:23:2b:d8:a3:1a:96:82:e6:ba:ed:ca:1e:7b:07: 23:32:fc:2c:fc:6b:15:dc:fd:4e:cd:d5:a4:27:4d:43:24:7f: d7:c7:ed:b2:ee:0e:47:47:e8:7a:1e:32:f0:94:dc:52:7b:b9: 24:3a:e3:b4:8e:f2:41:83:89:8d:0b:d3:b0:ca:bf:ae:b6:9c: 56:cc:d8:40:f5:92:cc:10:e7:6e:1d:25:0d:35:dc:e5:2b:27: db:79:1b:35:c3:8b:37:ac:e9:84:91:a2:ac:8c:8e:4d:2c:07: 6e:50:d9:c6:c1:70:c3:3f:da:1e:38:aa:d1:94:a1:b3:11:69: 1e:14:14:98:6b:6a:04:f0:5d:eb:21:a1:37:71:be:a5:21:c1: 95:71:74:f7:5d:7d:e4:24:ba:dc:b2:55:68:bb:6c:69:23:76: 1b:e6:50:86:3e:44:b9:c9:1c:ee:93:fd:d1:0e:83:be:3c:74: 60:9d:ce:66:06:84:2c:5e:0b:5d:64:75:eb:34:eb:28:53:20: d2:3a:2d:96:fd:8b:0b:31:70:5b:90:48:ad:dc:39:c2:52:ed: 1a:4d:b7:74:e9:35:d3:93:35:32:17:c7:e3:0e:8f:f8:43:fb: 8f:79:12:67:76:b1:14:06:3a:e7:27:5b:20:1b:56:b6:6e:f8: 7f:45:ce:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDM0QxMTAvBgNVBAUTKDU3MjdFRUU4REEyRTJDQzc5RkFCQTBEQUQxOUM4ODQ4 MkJEMTU5REMwHhcNMjUwOTA5MDA0ODI0WhcNMjUwOTE2MDA0ODI0WjAYMRYwFAYD VQQDEw02OGJmNzk1OC1hY2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVnF2HgSuvahbbcue8ZqNGXrTcMbIFENO0BVbhJL/rv5yvYQLZbdZCnIJ/g6 tCSoFlmlIQAKrSpS8sJDf6BdfOwglnkt/LA8rrJAf/ohFKt4g+8XX9QaZu6jgmbJ MjV4DSkqq9LbUULrlLI7TTmHw5YiE/F8A7jOaZNmUNf8Trma0K6qGyDG7Od6Os6g ZmPjgpwMIerrDDtm0hUyaMJvzS7bivpcy+E6E53Io3mPKQCzSogoDQftu38I5/1s 69FRF/w0BlXCp/cTP0mNOicD0zBMhjDC+/HdR8pZL22kzyAxKft92CSZC4NSUcbw TUkO1QD3sOvX8m6UBj5xuEMbywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJElCVDz 0I+ynrgmCTc5IWT2jVnAMB8GA1UdIwQYMBaAFFcn7ujaLizHn6ug2tGciEgr0Vnc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMzRC9GODAyOUE0NkE1 Q0MxMUVDQjc1RUM1MkRDNEY5QUUwMi9WeWZ1Nk5vdUxNZWZxNkRhMFp5SVNDdlJX ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z5ZnU2Tm91TE1lZnE2RGEwWnlJU0N2Uldkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMzRC9GODAyOUE0NkE1Q0MxMUVDQjc1RUM1MkRDNEY5QUUwMi9WeWZ1Nk5vdUxN ZWZxNkRhMFp5SVNDdlJXZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+vrFSIyvYoxqWgua67coeewcjMvws/GsV3P1OzdWkJ01DJH/Xx+2y 7g5HR+h6HjLwlNxSe7kkOuO0jvJBg4mNC9Owyr+utpxWzNhA9ZLMEOduHSUNNdzl KyfbeRs1w4s3rOmEkaKsjI5NLAduUNnGwXDDP9oeOKrRlKGzEWkeFBSYa2oE8F3r IaE3cb6lIcGVcXT3XX3kJLrcslVou2xpI3Yb5lCGPkS5yRzuk/3RDoO+PHRgnc5m BoQsXgtdZHXrNOsoUyDSOi2W/YsLMXBbkEit3DnCUu0aTbd06TXTkzUyF8fjDo/4 Q/uPeRJndrEUBjrnJ1sgG1a2bvh/Rc7E -----END CERTIFICATE-----Generated at Tue Sep 9 13:30:41 2025 by rpki-client