$ rpki-client -vvf rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft File: Vg3ED_OlCfnv21Jg7huzhi222N8.mft (raw, json) Hash identifier: bBeLsBpM6gLubWdIYroeTemEA/fQD+mRhTQyNiAD9To= Subject key identifier: 5F:64:D2:18:8A:30:5D:04:BA:0A:1B:CE:FA:BF:E3:A6:CB:31:FA:A0 Authority key identifier: 56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF Certificate issuer: /CN=A912E926/serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft Manifest number: 01A4 Signing time: Thu 21 Aug 2025 03:20:44 +0000 Manifest this update: Thu 21 Aug 2025 03:20:44 +0000 Manifest next update: Thu 28 Aug 2025 03:20:44 +0000 Files and hashes: 1: Vg3ED_OlCfnv21Jg7huzhi222N8.crl (hash: KHNVU856MfKkl0FB40UJVnKb7JwqqKQMVdsAWrXfYXs=) 2: 46BF7E7CFA0611ED802A1C29C4F9AE02.roa (hash: jnuMHWmzh0Mkxo/UqfQiHQK9zwVM6oBly72+HKRXMlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 03:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E926, serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF Validity Not Before: Aug 21 03:20:44 2025 GMT Not After : Aug 28 03:20:44 2025 GMT Subject: CN=68a6908c-61a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:53:bf:75:e2:0c:e7:15:f5:b9:36:74:63: ec:c0:10:30:d8:3b:b4:ba:f5:5d:b3:5b:1b:91:90: b2:48:57:ec:c1:8c:5d:82:a7:c8:b2:71:41:94:bb: 11:7c:39:c0:ca:f6:86:c9:18:00:e2:a2:00:72:06: 42:28:a1:be:21:dc:b6:6c:77:c8:2c:43:ef:d2:d2: ac:f1:04:6e:bd:1b:b4:06:1a:30:6b:fe:24:a1:fb: a0:c0:07:09:09:56:f3:a4:2a:ee:92:66:b4:40:64: 33:2c:8b:74:44:38:80:22:5c:36:52:b0:f4:2e:fa: 3c:28:0f:81:cf:cb:fa:26:d1:34:0d:28:4a:db:65: 25:25:83:7c:2d:fb:b6:d0:c3:e2:24:85:d8:73:b6: 3c:30:ff:94:d9:f8:e7:ef:1e:0f:65:60:5d:13:8a: 15:fe:f0:01:cd:7b:61:a7:85:48:c8:1c:14:bc:51: d2:b3:ea:5d:1e:f3:49:f2:20:14:ed:b7:b0:a5:fe: 09:fb:40:c7:59:10:b6:d3:e6:8a:49:ec:16:0d:52: 46:a7:b7:fa:33:0b:be:04:9b:7a:33:db:48:57:8a: 08:16:8a:89:ae:4d:ca:f4:8a:9b:a2:1e:19:da:1b: f9:05:e7:9d:44:a9:cb:4d:89:70:7d:44:49:b2:21: 61:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:64:D2:18:8A:30:5D:04:BA:0A:1B:CE:FA:BF:E3:A6:CB:31:FA:A0 X509v3 Authority Key Identifier: keyid:56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:24:38:b5:fd:f5:ce:31:9a:f7:2a:fc:80:b7:1f:7a:8d:e3: d6:32:b8:de:66:1b:39:3b:fd:45:47:72:e3:bf:5b:29:4b:a5: 21:97:72:b6:dc:b9:f0:b5:38:3c:43:c8:31:d0:fd:fb:58:e2: c5:88:0a:0e:a5:b8:c9:ab:86:60:94:f4:4e:de:04:78:0b:ee: 25:b8:a0:83:42:9d:d0:30:3c:22:20:b6:02:14:fb:33:5f:c4: 16:81:d6:57:98:ca:76:4d:aa:35:ca:b8:75:95:a6:80:cd:eb: f3:f4:a8:bc:f1:17:d6:1f:ae:5e:4a:a0:0b:c4:10:d4:ca:85: bb:cd:20:41:09:b4:e7:f3:4c:0d:1e:46:be:a1:9f:d2:2f:a6: 8a:4a:0b:ba:83:f5:c9:15:fa:f5:05:0b:16:bf:8a:41:64:0a: 4c:d8:75:d4:14:48:49:a3:cb:3a:55:9f:bb:63:56:c7:16:94: a5:14:db:72:3f:39:6f:bf:00:4f:1d:f3:ed:98:72:31:af:fb: 2a:7c:67:72:e4:ce:12:a7:a9:f7:5c:41:84:0a:2e:5d:71:96: 44:6e:69:27:d0:b7:a9:85:b8:5a:4a:38:22:72:d4:58:f2:42: 5b:2e:35:d0:3b:0d:7f:c6:ad:d4:91:70:f9:7a:56:86:70:50: b5:cc:9a:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MjYxMTAvBgNVBAUTKDU2MERDNDBGRjNBNTA5RjlFRkRCNTI2MEVFMUJCMzg2 MkRCNkQ4REYwHhcNMjUwODIxMDMyMDQ0WhcNMjUwODI4MDMyMDQ0WjAYMRYwFAYD VQQDEw02OGE2OTA4Yy02MWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkRTv3XiDOcV9bk2dGPswBAw2Du0uvVds1sbkZCySFfswYxdgqfIsnFBlLsR fDnAyvaGyRgA4qIAcgZCKKG+Idy2bHfILEPv0tKs8QRuvRu0Bhowa/4kofugwAcJ CVbzpCrukma0QGQzLIt0RDiAIlw2UrD0Lvo8KA+Bz8v6JtE0DShK22UlJYN8Lfu2 0MPiJIXYc7Y8MP+U2fjn7x4PZWBdE4oV/vABzXthp4VIyBwUvFHSs+pdHvNJ8iAU 7bewpf4J+0DHWRC20+aKSewWDVJGp7f6Mwu+BJt6M9tIV4oIFoqJrk3K9Iqboh4Z 2hv5BeedRKnLTYlwfURJsiFhjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9k0hiK MF0Eugobzvq/46bLMfqgMB8GA1UdIwQYMBaAFFYNxA/zpQn579tSYO4bs4Ytttjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyNi84NjY3NkRBMEZB MDExMUVEQkFENzVEMjhDNEY5QUUwMi9WZzNFRF9PbENmbnYyMUpnN2h1emhpMjIy TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZnM0VEX09sQ2ZudjIxSmc3aHV6aGkyMjJOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyNi84NjY3NkRBMEZBMDExMUVEQkFENzVEMjhDNEY5QUUwMi9WZzNFRF9PbENm bnYyMUpnN2h1emhpMjIyTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6JDi1/fXOMZr3KvyAtx96jePWMrjeZhs5O/1FR3Ljv1spS6Uhl3K2 3LnwtTg8Q8gx0P37WOLFiAoOpbjJq4ZglPRO3gR4C+4luKCDQp3QMDwiILYCFPsz X8QWgdZXmMp2Tao1yrh1laaAzevz9Ki88RfWH65eSqALxBDUyoW7zSBBCbTn80wN Hka+oZ/SL6aKSgu6g/XJFfr1BQsWv4pBZApM2HXUFEhJo8s6VZ+7Y1bHFpSlFNty PzlvvwBPHfPtmHIxr/sqfGdy5M4Sp6n3XEGECi5dcZZEbmkn0LephbhaSjgictRY 8kJbLjXQOw1/xq3UkXD5elaGcFC1zJpA -----END CERTIFICATE-----Generated at Fri Aug 22 16:35:13 2025 by rpki-client