$ rpki-client -vvf rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft File: VWyosJdH0HtvaiekBVKNOfpbgkw.mft (raw, json) Hash identifier: C29tRJi34ZJfMD6c8oi0YCRATiMNUz1GOPJkOZVkH9o= Subject key identifier: F5:0A:DB:7C:F4:FF:71:40:A6:E1:0E:C7:3E:72:1F:AE:1F:09:F9:02 Authority key identifier: 55:6C:A8:B0:97:47:D0:7B:6F:6A:27:A4:05:52:8D:39:FA:5B:82:4C Certificate issuer: /CN=A912A4D7/serialNumber=556CA8B09747D07B6F6A27A405528D39FA5B824C Certificate serial: 08B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft Manifest number: 08B1 Signing time: Wed 20 Aug 2025 20:33:52 +0000 Manifest this update: Wed 20 Aug 2025 20:33:51 +0000 Manifest next update: Wed 27 Aug 2025 20:33:51 +0000 Files and hashes: 1: VWyosJdH0HtvaiekBVKNOfpbgkw.crl (hash: PBvSq6WSQ8m2X3hBgqy8Mg7eUjQT413F8e9402q+0iQ=) 2: 3C24D492BF6911EAA877B317C4F9AE02.roa (hash: NZkd996OCXD4hErR3DmhrfGKjBgYP///vRBLCCwugg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.crl rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 20:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2233 (0x8b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A4D7, serialNumber=556CA8B09747D07B6F6A27A405528D39FA5B824C Validity Not Before: Aug 20 20:33:51 2025 GMT Not After : Aug 27 20:33:51 2025 GMT Subject: CN=68a63130-866e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7a:66:21:3c:21:3b:74:36:91:9f:9e:29:3c: 02:e7:a9:10:f8:96:3f:cf:fc:36:9e:05:5d:42:36: 27:a7:47:69:58:12:cb:f1:3d:48:2d:f7:66:54:25: b1:fa:77:8c:80:54:ee:5d:7d:80:35:c5:37:c8:bf: 3e:41:38:6c:7e:f5:55:65:5e:10:1e:92:65:cd:5f: 53:7c:b1:58:a5:6c:af:ea:4d:68:37:22:2e:16:00: 99:5a:8c:ed:de:45:a2:db:21:87:e8:77:67:d5:52: 10:bc:73:70:1b:36:78:be:14:da:5b:06:e9:cd:ce: 6e:25:c8:67:08:f4:d7:f6:dc:cd:79:26:76:db:76: ef:f8:03:c4:47:30:32:92:c7:c0:bf:51:0e:b3:60: c4:97:0d:4a:82:0e:84:43:37:b8:86:a9:d2:f3:72: a3:37:7c:d3:10:21:e9:33:bb:e0:39:af:85:20:81: 35:25:bd:0a:a2:e1:72:8a:40:a7:2d:6d:1f:ce:90: 63:60:e9:70:a1:52:af:f7:99:b3:12:bb:f7:1e:e5: af:7f:49:20:a5:15:7c:80:50:f4:ab:7a:97:06:3f: b5:17:18:35:9a:3a:c6:7e:d7:d5:1b:e5:87:fa:b9: 56:59:bf:93:b2:4b:3b:61:e2:f6:f1:58:bc:cd:20: 72:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0A:DB:7C:F4:FF:71:40:A6:E1:0E:C7:3E:72:1F:AE:1F:09:F9:02 X509v3 Authority Key Identifier: keyid:55:6C:A8:B0:97:47:D0:7B:6F:6A:27:A4:05:52:8D:39:FA:5B:82:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:8b:dd:7c:71:b3:b2:78:f8:78:77:b1:e7:4a:56:75:15:71: 8d:3d:da:bf:c9:97:55:00:cc:8d:73:d7:93:88:03:c0:90:10: 0d:10:58:db:67:77:0b:55:9b:3a:9b:2c:53:d4:8b:e3:5d:54: 12:ab:3e:33:ff:9c:56:7a:dd:b6:2f:39:39:ff:02:34:70:69: 44:ec:32:02:2f:ee:8b:50:7c:5c:82:73:c7:3f:fd:5b:25:dd: bb:47:4b:d7:3a:b2:7a:c0:51:f9:a0:ce:fb:5b:02:97:ea:8d: 72:0d:94:34:52:fb:e8:e5:71:ec:67:90:37:54:34:89:f6:73: 38:95:1e:8b:1a:58:9b:53:e3:e3:1c:19:5a:a4:a4:d0:72:3c: 6c:26:c2:50:51:c3:7d:99:76:fb:f1:9b:e2:06:62:4b:0c:a2: 99:de:35:ad:12:8a:6f:a2:56:1f:e6:57:33:57:cc:fc:08:35: 05:44:b3:a7:86:3f:bd:8d:06:05:6c:b4:11:3e:2d:f9:bf:b8: 53:19:19:88:c1:ac:65:24:db:6f:4b:a9:e8:f2:16:8e:9e:0c: 56:b6:07:62:c6:2a:49:d7:55:01:22:2c:a9:c4:6e:d6:24:79: 40:dd:e7:97:50:8e:09:9b:ca:56:24:c2:2d:04:a4:cb:43:3d: 77:e0:b3:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE0RDcxMTAvBgNVBAUTKDU1NkNBOEIwOTc0N0QwN0I2RjZBMjdBNDA1NTI4RDM5 RkE1QjgyNEMwHhcNMjUwODIwMjAzMzUxWhcNMjUwODI3MjAzMzUxWjAYMRYwFAYD VQQDEw02OGE2MzEzMC04NjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHpmITwhO3Q2kZ+eKTwC56kQ+JY/z/w2ngVdQjYnp0dpWBLL8T1ILfdmVCWx +neMgFTuXX2ANcU3yL8+QThsfvVVZV4QHpJlzV9TfLFYpWyv6k1oNyIuFgCZWozt 3kWi2yGH6Hdn1VIQvHNwGzZ4vhTaWwbpzc5uJchnCPTX9tzNeSZ223bv+APERzAy ksfAv1EOs2DElw1Kgg6EQze4hqnS83KjN3zTECHpM7vgOa+FIIE1Jb0KouFyikCn LW0fzpBjYOlwoVKv95mzErv3HuWvf0kgpRV8gFD0q3qXBj+1Fxg1mjrGftfVG+WH +rlWWb+Tsks7YeL28Vi8zSBywwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUK23z0 /3FApuEOxz5yH64fCfkCMB8GA1UdIwQYMBaAFFVsqLCXR9B7b2onpAVSjTn6W4JM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTRENy9CRDBDMDNGMkJG NjcxMUVBQjNCQjE4MTVDNEY5QUUwMi9WV3lvc0pkSDBIdHZhaWVrQlZLTk9mcGJn a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZXeW9zSmRIMEh0dmFpZWtCVktOT2ZwYmdrdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTRENy9CRDBDMDNGMkJGNjcxMUVBQjNCQjE4MTVDNEY5QUUwMi9WV3lvc0pkSDBI dHZhaWVrQlZLTk9mcGJna3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUi918cbOyePh4d7HnSlZ1FXGNPdq/yZdVAMyNc9eTiAPAkBANEFjb Z3cLVZs6myxT1IvjXVQSqz4z/5xWet22Lzk5/wI0cGlE7DICL+6LUHxcgnPHP/1b Jd27R0vXOrJ6wFH5oM77WwKX6o1yDZQ0Uvvo5XHsZ5A3VDSJ9nM4lR6LGlibU+Pj HBlapKTQcjxsJsJQUcN9mXb78ZviBmJLDKKZ3jWtEopvolYf5lczV8z8CDUFRLOn hj+9jQYFbLQRPi35v7hTGRmIwaxlJNtvS6no8haOngxWtgdixipJ11UBIiypxG7W JHlA3eeXUI4Jm8pWJMItBKTLQz134LN5 -----END CERTIFICATE-----Generated at Fri Aug 22 16:36:07 2025 by rpki-client