$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft File: vpHAXiGMfmbqb5T50kV3cEGRveI.mft (raw, json) Hash identifier: M4Fq/AK4yXQyPd57Cz807guHi1axCE4MBrbh/NaNhOA= Subject key identifier: C2:B9:44:20:BD:69:A3:E3:86:50:F9:45:61:E8:04:DD:FF:1B:8B:03 Authority key identifier: BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2 Certificate issuer: /CN=A912FCBB/serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft Manifest number: CF Signing time: Fri 05 Sep 2025 06:05:36 +0000 Manifest this update: Fri 05 Sep 2025 06:05:36 +0000 Manifest next update: Fri 12 Sep 2025 06:05:36 +0000 Files and hashes: 1: vpHAXiGMfmbqb5T50kV3cEGRveI.crl (hash: iFLN2zw26OOpsyE7O1nL7UDPAS7KQUYqZQqHuIyZTPU=) 2: 8F80C48E531211EFAB0B8726C4F9AE02.roa (hash: qqwKlPG3HHIO/Ni46rjsjHo2nk3zj0h/n5n+UQCKPlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:05:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB, serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2 Validity Not Before: Sep 5 06:05:36 2025 GMT Not After : Sep 12 06:05:36 2025 GMT Subject: CN=68ba7db0-f3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:59:4d:c5:84:7d:72:3a:ce:b8:1d:13:59:75: fa:b9:10:0b:49:5c:71:f7:09:93:c5:de:03:02:87: 1d:4a:73:64:d6:cf:1f:cc:f7:71:a6:44:75:ed:9c: cb:01:32:44:c2:35:3c:73:2e:5d:d4:18:04:f7:04: fc:6f:f6:7b:0a:73:a7:bd:58:d7:1e:85:c4:b7:12: 44:0f:a0:77:fb:92:c5:c2:2a:6b:3f:8a:2b:c8:a9: 57:85:1a:6a:b7:af:29:ef:1a:ea:05:5a:04:ac:d9: 20:72:72:f8:e7:d3:2a:3c:5b:8f:d1:ea:97:2f:5d: 34:14:cb:8e:c8:fe:b2:c1:71:2a:cd:41:02:b3:4d: c8:61:6f:c9:b3:1c:14:ba:e1:7d:45:97:aa:fe:a6: a2:82:a2:59:97:b0:61:bf:d1:92:b1:05:a2:fe:92: 4b:8e:fe:26:88:82:af:61:f4:b9:84:f4:0c:ea:07: 84:61:84:97:ea:4f:b6:a2:17:5c:e0:34:d1:96:04: 27:72:82:bd:52:17:a4:e7:04:6d:7f:3d:93:d3:e2: 23:72:6b:9e:40:57:65:1d:bd:b2:87:aa:d5:28:18: b3:7d:3c:9e:f5:00:84:62:8a:d3:ee:24:ff:25:d9: 3c:69:55:83:0a:02:d4:ff:90:b5:6f:a1:25:f5:d7: 2c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B9:44:20:BD:69:A3:E3:86:50:F9:45:61:E8:04:DD:FF:1B:8B:03 X509v3 Authority Key Identifier: keyid:BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:a9:26:52:26:0e:5e:a2:63:42:9d:25:68:fa:16:69:7f:3c: 67:24:aa:f3:27:2e:2d:17:29:75:03:e1:22:d1:eb:4e:ce:b5: 80:dc:0f:04:66:65:59:8d:22:a4:a9:14:0a:da:9c:4e:a6:b1: 56:e2:8e:23:0e:0b:f1:50:4c:82:af:73:b4:58:f5:c6:59:8a: a2:d1:bd:9a:47:7d:ac:a2:95:c2:b4:0d:c2:8f:a7:cb:23:cf: 0e:96:1f:b5:fe:75:59:8b:c0:bf:d8:17:3a:2e:6f:fc:bb:f1: b8:c3:44:eb:1c:a8:93:24:b5:b0:c6:36:da:45:e2:81:8f:30: 0c:f8:a4:60:45:ad:49:6d:5e:85:ea:b4:ce:0e:36:a8:9d:df: 68:ff:56:a1:76:90:54:21:29:83:01:82:61:4f:00:5d:10:6c: 98:59:c4:12:7d:97:e6:c1:05:e8:75:91:f1:cb:30:6e:fa:98: 9a:c5:6c:fb:10:40:24:f3:b2:7f:48:e2:51:6e:f7:8d:ae:59: 3f:ae:a8:03:57:ca:8a:b4:a1:a9:86:73:c5:ea:1f:8a:d6:98: af:0d:32:52:21:25:e7:2a:60:1f:d7:fd:ea:bf:f1:1c:0f:be: 97:7b:71:4d:06:90:05:c5:95:51:3f:b1:4f:c8:a5:36:38:3f: 0e:2c:00:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDQkIxMTAvBgNVBAUTKEJFOTFDMDVFMjE4QzdFNjZFQTZGOTRGOUQyNDU3Nzcw NDE5MUJERTIwHhcNMjUwOTA1MDYwNTM2WhcNMjUwOTEyMDYwNTM2WjAYMRYwFAYD VQQDEw02OGJhN2RiMC1mM2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVlNxYR9cjrOuB0TWXX6uRALSVxx9wmTxd4DAocdSnNk1s8fzPdxpkR17ZzL ATJEwjU8cy5d1BgE9wT8b/Z7CnOnvVjXHoXEtxJED6B3+5LFwiprP4oryKlXhRpq t68p7xrqBVoErNkgcnL459MqPFuP0eqXL100FMuOyP6ywXEqzUECs03IYW/JsxwU uuF9RZeq/qaigqJZl7Bhv9GSsQWi/pJLjv4miIKvYfS5hPQM6geEYYSX6k+2ohdc 4DTRlgQncoK9Uhek5wRtfz2T0+IjcmueQFdlHb2yh6rVKBizfTye9QCEYorT7iT/ Jdk8aVWDCgLU/5C1b6El9dcsHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMK5RCC9 aaPjhlD5RWHoBN3/G4sDMB8GA1UdIwQYMBaAFL6RwF4hjH5m6m+U+dJFd3BBkb3i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81NEQyM0Y0NjUz MEYxMUVGOTlDODhEMEZDNEY5QUUwMi92cEhBWGlHTWZtYnFiNVQ1MGtWM2NFR1J2 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZwSEFYaUdNZm1icWI1VDUwa1YzY0VHUnZlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNCQi81NEQyM0Y0NjUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi92cEhBWGlHTWZt YnFiNVQ1MGtWM2NFR1J2ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlqSZSJg5eomNCnSVo+hZpfzxnJKrzJy4tFyl1A+Ei0etOzrWA3A8E ZmVZjSKkqRQK2pxOprFW4o4jDgvxUEyCr3O0WPXGWYqi0b2aR32sopXCtA3Cj6fL I88Olh+1/nVZi8C/2Bc6Lm/8u/G4w0TrHKiTJLWwxjbaReKBjzAM+KRgRa1JbV6F 6rTODjaond9o/1ahdpBUISmDAYJhTwBdEGyYWcQSfZfmwQXodZHxyzBu+piaxWz7 EEAk87J/SOJRbveNrlk/rqgDV8qKtKGphnPF6h+K1pivDTJSISXnKmAf1/3qv/Ec D76Xe3FNBpAFxZVRP7FPyKU2OD8OLABX -----END CERTIFICATE-----Generated at Sat Sep 6 21:30:33 2025 by rpki-client