$ rpki-client -vvf rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/VM1oEInn9JVSuuxWoHax7PJe_gY.mft File: VM1oEInn9JVSuuxWoHax7PJe_gY.mft (raw, json) Hash identifier: iySI2WhA2JDagRroec0uZ+qTRWtesgpv3CmlAk+mYHU= Subject key identifier: 5B:CF:0A:00:BB:BB:FE:E5:20:D9:5D:DB:6C:57:A3:23:85:19:61:6A Authority key identifier: 54:CD:68:10:89:E7:F4:95:52:BA:EC:56:A0:76:B1:EC:F2:5E:FE:06 Certificate issuer: /CN=A9130626/serialNumber=54CD681089E7F49552BAEC56A076B1ECF25EFE06 Certificate serial: 09A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VM1oEInn9JVSuuxWoHax7PJe_gY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/VM1oEInn9JVSuuxWoHax7PJe_gY.mft Manifest number: 17C1 Signing time: Thu 18 Sep 2025 17:58:53 +0000 Manifest this update: Thu 18 Sep 2025 17:58:53 +0000 Manifest next update: Thu 25 Sep 2025 17:58:53 +0000 Files and hashes: 1: VM1oEInn9JVSuuxWoHax7PJe_gY.crl (hash: HDd1I1uu+l2XZuDQqtKA3wT7ib1oU3WJN+s4b7jf4Xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/VM1oEInn9JVSuuxWoHax7PJe_gY.crl rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/VM1oEInn9JVSuuxWoHax7PJe_gY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VM1oEInn9JVSuuxWoHax7PJe_gY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2469 (0x9a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130626, serialNumber=54CD681089E7F49552BAEC56A076B1ECF25EFE06 Validity Not Before: Sep 18 17:58:53 2025 GMT Not After : Sep 25 17:58:53 2025 GMT Subject: CN=68cc485d-4a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:72:aa:0a:fe:5a:64:ff:6d:1f:70:eb:19:74: 08:73:45:31:78:fb:0d:d1:81:7f:31:c7:fd:ba:d9: 09:b7:b9:bc:4b:9d:76:28:dd:75:02:1f:09:6c:d8: b9:7d:30:42:62:7f:78:fc:ad:72:9a:c5:91:2e:80: 7e:38:22:af:8f:ec:41:99:6e:6b:b6:9b:77:aa:f7: 99:2c:05:a6:39:8c:2c:06:8f:6c:f7:03:52:54:e3: ce:ac:1b:d8:b5:40:7d:25:a2:0c:28:a7:ab:67:a7: 56:d0:53:15:2e:11:6a:55:9c:40:3c:2e:85:15:ff: f1:fb:11:3e:6a:b2:4f:32:79:46:8a:9b:71:d9:32: e3:a7:48:f8:43:49:a3:09:58:2b:65:8f:a0:35:1e: 93:97:45:8e:c7:6f:f5:55:ee:61:ba:01:98:d0:84: 18:c0:73:ce:06:0d:6f:7e:74:44:18:92:a7:f9:16: 11:11:6b:79:0d:ad:52:44:8d:e7:d0:0d:76:8a:67: 5a:8e:48:4d:bc:96:22:06:c1:23:6e:0a:7c:a2:34: be:3c:ff:b2:09:6e:fe:db:71:7e:d8:8d:3d:34:b0: f9:ba:0b:cd:9b:b8:81:64:9d:d7:ea:60:79:d3:62: 0e:e0:60:d2:a1:46:86:f2:19:1d:c8:6d:2f:68:51: 3a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CF:0A:00:BB:BB:FE:E5:20:D9:5D:DB:6C:57:A3:23:85:19:61:6A X509v3 Authority Key Identifier: keyid:54:CD:68:10:89:E7:F4:95:52:BA:EC:56:A0:76:B1:EC:F2:5E:FE:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/VM1oEInn9JVSuuxWoHax7PJe_gY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VM1oEInn9JVSuuxWoHax7PJe_gY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130626/310572EAAF0911E9AF7C4444C4F9AE02/VM1oEInn9JVSuuxWoHax7PJe_gY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:bb:31:f6:f1:07:3b:9f:03:01:bb:c0:47:03:9d:23:ac:8a: d1:8a:f1:dc:86:ed:b3:69:36:f6:3c:77:ed:9d:07:5b:7c:29: df:d8:78:27:e9:70:6d:6c:f1:50:9e:c0:b3:a6:9d:87:51:53: 1c:5d:c2:55:61:2a:69:07:0f:ee:f9:20:75:58:27:9a:34:3a: da:ef:8f:e9:0d:cb:63:14:f0:09:86:4e:86:18:4c:d8:5f:90: 22:db:ca:e6:39:3a:1d:3a:0c:9f:7e:c8:7e:ec:79:84:d4:ca: ac:ef:6f:da:d0:36:01:b5:df:db:f0:dd:c3:6a:81:17:15:f0: 17:93:44:8b:12:e3:f5:5f:84:73:6e:af:7d:84:62:7a:8f:2f: 84:32:df:2d:60:1e:f3:e4:d7:3c:c5:d8:3e:11:2a:ec:81:b7: e3:9a:90:8a:c4:4f:e5:4e:aa:9c:0f:8a:50:46:8c:1e:3f:2d: cc:27:2e:95:dc:dd:c1:63:06:cd:41:d6:64:d1:2d:e1:53:96: 39:38:36:a2:58:76:9e:05:30:0b:fa:4d:02:cc:b7:7e:2b:64: 9d:45:48:8b:e4:58:23:26:28:b5:65:17:ae:8a:f2:9e:dc:fd: 46:f6:3d:84:7d:21:14:3d:01:bd:fe:b5:10:67:c9:44:ff:47: e3:2f:5a:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA2MjYxMTAvBgNVBAUTKDU0Q0Q2ODEwODlFN0Y0OTU1MkJBRUM1NkEwNzZCMUVD RjI1RUZFMDYwHhcNMjUwOTE4MTc1ODUzWhcNMjUwOTI1MTc1ODUzWjAYMRYwFAYD VQQDEw02OGNjNDg1ZC00YTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXKqCv5aZP9tH3DrGXQIc0UxePsN0YF/Mcf9utkJt7m8S512KN11Ah8JbNi5 fTBCYn94/K1ymsWRLoB+OCKvj+xBmW5rtpt3qveZLAWmOYwsBo9s9wNSVOPOrBvY tUB9JaIMKKerZ6dW0FMVLhFqVZxAPC6FFf/x+xE+arJPMnlGiptx2TLjp0j4Q0mj CVgrZY+gNR6Tl0WOx2/1Ve5hugGY0IQYwHPOBg1vfnREGJKn+RYREWt5Da1SRI3n 0A12imdajkhNvJYiBsEjbgp8ojS+PP+yCW7+23F+2I09NLD5ugvNm7iBZJ3X6mB5 02IO4GDSoUaG8hkdyG0vaFE6TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvPCgC7 u/7lINld22xXoyOFGWFqMB8GA1UdIwQYMBaAFFTNaBCJ5/SVUrrsVqB2sezyXv4G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDYyNi8zMTA1NzJFQUFG MDkxMUU5QUY3QzQ0NDRDNEY5QUUwMi9WTTFvRUlubjlKVlN1dXhXb0hheDdQSmVf Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZNMW9FSW5uOUpWU3V1eFdvSGF4N1BKZV9nWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDYyNi8zMTA1NzJFQUFGMDkxMUU5QUY3QzQ0NDRDNEY5QUUwMi9WTTFvRUlubjlK VlN1dXhXb0hheDdQSmVfZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATuzH28Qc7nwMBu8BHA50jrIrRivHchu2zaTb2PHftnQdbfCnf2Hgn 6XBtbPFQnsCzpp2HUVMcXcJVYSppBw/u+SB1WCeaNDra74/pDctjFPAJhk6GGEzY X5Ai28rmOTodOgyffsh+7HmE1Mqs72/a0DYBtd/b8N3DaoEXFfAXk0SLEuP1X4Rz bq99hGJ6jy+EMt8tYB7z5Nc8xdg+ESrsgbfjmpCKxE/lTqqcD4pQRowePy3MJy6V 3N3BYwbNQdZk0S3hU5Y5ODaiWHaeBTAL+k0CzLd+K2SdRUiL5FgjJii1ZReuivKe 3P1G9j2EfSEUPQG9/rUQZ8lE/0fjL1o3 -----END CERTIFICATE-----Generated at Fri Sep 19 01:00:38 2025 by rpki-client