$ rpki-client -vvf rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft File: VB4KZv5g86rAJQLO8eSOYnpi90E.mft (raw, json) Hash identifier: 3MXS3Zo0uuRf52PDJFEnQJJPcEXb0BjWQdG72Cot/Ws= Subject key identifier: A7:FF:F5:60:C5:BE:27:63:EC:A6:6C:44:7F:E5:93:82:20:98:F8:AD Authority key identifier: 54:1E:0A:66:FE:60:F3:AA:C0:25:02:CE:F1:E4:8E:62:7A:62:F7:41 Certificate issuer: /CN=A91288D9/serialNumber=541E0A66FE60F3AAC02502CEF1E48E627A62F741 Certificate serial: 0B3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft Manifest number: 0B32 Signing time: Sun 24 Aug 2025 19:13:12 +0000 Manifest this update: Sun 24 Aug 2025 19:13:12 +0000 Manifest next update: Sun 31 Aug 2025 19:13:12 +0000 Files and hashes: 1: VB4KZv5g86rAJQLO8eSOYnpi90E.crl (hash: 7seaIhiBkR+WHDYavbVZAhA467EmsTLsnFVwOuYTZu0=) 2: E0FCE614425811EAADEA3B45C4F9AE02.roa (hash: 4i/qRxDxm1IhOaEBUeWCrIN1RXkz58rViMQa88EFEXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.crl rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2874 (0xb3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91288D9, serialNumber=541E0A66FE60F3AAC02502CEF1E48E627A62F741 Validity Not Before: Aug 24 19:13:12 2025 GMT Not After : Aug 31 19:13:12 2025 GMT Subject: CN=68ab6448-dfe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b9:e9:c1:eb:fc:45:d2:5e:ba:57:df:41:0d: cc:db:fe:8a:cd:f8:00:8c:ea:62:4d:90:c2:84:4f: e2:ad:d1:ce:93:81:18:fa:5c:98:ba:e6:4f:5c:22: aa:9b:6c:a7:e5:37:86:45:17:c9:a5:be:b8:a2:80: d9:ed:61:e3:e4:07:63:25:e1:3a:52:d5:bb:62:7c: d9:98:3b:92:57:bd:f2:fb:84:6a:0c:f8:05:3f:f6: 9f:7b:be:58:42:a0:3a:b5:cd:14:55:93:54:05:a1: 85:a4:df:48:80:29:d0:88:0e:8d:67:5c:f4:9d:a0: a7:38:fd:43:6e:c1:21:43:df:4b:b9:e2:b1:b8:60: 3f:99:08:fa:3c:c8:35:4b:b9:fb:3f:22:67:aa:77: 7e:db:a4:74:3e:c5:c9:68:a7:c3:70:f4:70:99:73: 76:23:4c:3f:83:10:7b:fe:74:b8:b4:ed:41:fa:2b: bd:5a:4c:ec:1f:7e:bc:57:8b:f4:59:bf:a5:49:9a: 8f:4d:44:21:3e:9d:9c:62:0b:7e:fd:0b:12:75:51: 6c:8e:2a:35:a4:3f:26:ee:9c:f6:ea:60:af:02:5d: 6f:df:0d:9d:0e:e4:23:38:fc:8b:6b:a9:3c:7e:c0: 4f:cf:b0:37:6b:cc:58:3e:9a:3b:3f:17:0c:21:48: c5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FF:F5:60:C5:BE:27:63:EC:A6:6C:44:7F:E5:93:82:20:98:F8:AD X509v3 Authority Key Identifier: keyid:54:1E:0A:66:FE:60:F3:AA:C0:25:02:CE:F1:E4:8E:62:7A:62:F7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:3f:5f:49:58:12:7f:c2:4e:1d:48:f5:36:e1:b1:48:89:f2: b2:54:c2:95:a6:b5:94:e1:19:58:41:fa:65:09:1c:b9:78:bb: 41:55:f5:2b:2b:e1:25:8b:04:19:6c:e4:5d:8b:70:ea:3f:19: 9c:55:5a:78:ea:b7:49:a7:3c:e0:80:bb:0a:b4:4a:b5:a9:a4: e7:46:39:39:ca:0f:94:9e:9a:93:3f:6f:e0:6c:36:fe:37:b8: 00:0b:49:1b:a9:e7:41:fd:57:9c:cf:9a:03:ab:06:1c:bc:4a: ab:72:6d:8d:8c:c4:2d:82:5d:03:ad:5f:19:e4:ef:dd:32:37: 8a:47:1c:53:16:55:e4:92:a8:39:61:7f:89:5b:58:65:82:2b: 9f:bf:83:5b:84:95:95:20:d0:45:33:e0:70:c6:c0:2d:ce:b6: 9a:9d:2c:eb:c8:26:ca:f3:9e:79:0f:66:e1:2f:e1:17:aa:2a: 71:3a:2f:93:da:96:cc:21:72:64:5d:a3:0e:23:79:f2:58:26: 2b:c2:f8:50:0e:50:9f:8f:cc:b3:46:dd:bf:1e:71:91:2a:ff: ef:d3:f3:1f:a1:98:45:8e:20:a0:81:2b:ef:50:2f:5b:53:08: c0:98:44:d7:00:22:23:a8:b3:a0:9e:8e:c5:25:a3:9d:0c:05: b8:d1:75:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4RDkxMTAvBgNVBAUTKDU0MUUwQTY2RkU2MEYzQUFDMDI1MDJDRUYxRTQ4RTYy N0E2MkY3NDEwHhcNMjUwODI0MTkxMzEyWhcNMjUwODMxMTkxMzEyWjAYMRYwFAYD VQQDEw02OGFiNjQ0OC1kZmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Lnpwev8RdJeulffQQ3M2/6KzfgAjOpiTZDChE/irdHOk4EY+lyYuuZPXCKq m2yn5TeGRRfJpb64ooDZ7WHj5AdjJeE6UtW7YnzZmDuSV73y+4RqDPgFP/afe75Y QqA6tc0UVZNUBaGFpN9IgCnQiA6NZ1z0naCnOP1DbsEhQ99LueKxuGA/mQj6PMg1 S7n7PyJnqnd+26R0PsXJaKfDcPRwmXN2I0w/gxB7/nS4tO1B+iu9WkzsH368V4v0 Wb+lSZqPTUQhPp2cYgt+/QsSdVFsjio1pD8m7pz26mCvAl1v3w2dDuQjOPyLa6k8 fsBPz7A3a8xYPpo7PxcMIUjFhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKf/9WDF vidj7KZsRH/lk4IgmPitMB8GA1UdIwQYMBaAFFQeCmb+YPOqwCUCzvHkjmJ6YvdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODhEOS9CQTU5NTM1RTQy NTcxMUVBOEY4MzhBNDNDNEY5QUUwMi9WQjRLWnY1Zzg2ckFKUUxPOGVTT1lucGk5 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZCNEtadjVnODZyQUpRTE84ZVNPWW5waTkwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODhEOS9CQTU5NTM1RTQyNTcxMUVBOEY4MzhBNDNDNEY5QUUwMi9WQjRLWnY1Zzg2 ckFKUUxPOGVTT1lucGk5MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqP19JWBJ/wk4dSPU24bFIifKyVMKVprWU4RlYQfplCRy5eLtBVfUr K+EliwQZbORdi3DqPxmcVVp46rdJpzzggLsKtEq1qaTnRjk5yg+UnpqTP2/gbDb+ N7gAC0kbqedB/Vecz5oDqwYcvEqrcm2NjMQtgl0DrV8Z5O/dMjeKRxxTFlXkkqg5 YX+JW1hlgiufv4NbhJWVINBFM+BwxsAtzraanSzryCbK8555D2bhL+EXqipxOi+T 2pbMIXJkXaMOI3nyWCYrwvhQDlCfj8yzRt2/HnGRKv/v0/MfoZhFjiCggSvvUC9b UwjAmETXACIjqLOgno7FJaOdDAW40XWq -----END CERTIFICATE-----Generated at Sun Aug 24 22:07:02 2025 by rpki-client