$ rpki-client -vvf rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft File: VVzqN0EM0oazHxoArfYlPUzgUjI.mft (raw, json) Hash identifier: AF42WhGR3ZiWEsJFTp35kaCvuotF5NhkEu+R77PdkYs= Subject key identifier: 55:51:E1:89:40:74:48:E1:1F:FD:03:94:AE:11:16:A3:26:68:74:8B Authority key identifier: 55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32 Certificate issuer: /CN=A9137522/serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232 Certificate serial: 34B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft Manifest number: 34B1 Signing time: Wed 20 Aug 2025 15:02:18 +0000 Manifest this update: Wed 20 Aug 2025 15:02:17 +0000 Manifest next update: Wed 27 Aug 2025 15:02:17 +0000 Files and hashes: 1: VVzqN0EM0oazHxoArfYlPUzgUjI.crl (hash: SQyoF68SNdtMI7Ks9Y3lh+Er7N/lY37aZiZbU5Etopk=) 2: FF9802D6FE3911EBBCE1485DC4F9AE02.roa (hash: 568OZFsZ65IljrgEB7BfKeTiUKIZul9sanmI2zkZhwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 15:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13495 (0x34b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137522, serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232 Validity Not Before: Aug 20 15:02:17 2025 GMT Not After : Aug 27 15:02:17 2025 GMT Subject: CN=68a5e379-c129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2a:ab:63:53:e1:f7:cd:57:c5:69:b9:46:29: 8d:9a:b6:d8:af:c5:5c:8b:2d:75:e1:38:19:41:86: 5a:04:db:78:2e:62:63:ab:be:46:ef:a1:8a:d9:ad: 75:4d:6c:bb:f4:43:3e:a6:49:52:6c:29:b9:b5:18: ac:33:4e:bf:88:50:ee:98:33:4a:7c:82:e8:6b:ed: a8:4c:e3:a0:2c:b9:31:7e:21:8d:bf:45:52:93:02: 5f:f1:e0:64:68:75:de:dd:db:b3:be:ab:8c:5d:5c: 75:42:db:11:d3:8e:f9:66:fd:b6:24:2f:74:37:f1: bd:02:7b:c8:b0:c9:bd:fe:95:4e:ed:ec:37:32:b5: 27:29:f2:07:da:79:ae:e4:dd:da:f4:07:ea:a7:da: 79:22:64:19:df:98:5b:c1:4c:10:de:81:53:c4:11: 6d:81:3a:7d:88:46:1a:86:a0:54:ff:46:ca:3a:15: e1:a3:00:4b:bd:4a:c5:2d:0f:2c:ae:e1:36:9a:90: cf:26:2d:0a:2a:29:52:7d:a5:7e:f5:65:81:64:6f: 63:35:2a:d1:c6:ee:4b:7d:7c:66:8a:93:1c:ec:91: ef:99:17:44:4a:64:a9:0d:fb:94:2c:83:11:4e:a1: 2d:fe:34:a4:69:da:f3:3b:b2:99:ad:a6:7b:88:64: 3c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:51:E1:89:40:74:48:E1:1F:FD:03:94:AE:11:16:A3:26:68:74:8B X509v3 Authority Key Identifier: keyid:55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:92:b8:43:16:77:72:69:d3:ad:10:dd:17:76:24:60:99:63: 73:a1:a4:71:73:05:1c:19:f3:78:07:72:a8:f9:9c:c8:84:8c: 57:71:e8:fc:c8:8f:ca:b5:e7:8e:1f:8a:57:66:a5:ec:51:3d: f8:b2:ca:64:b5:8c:e1:18:e2:77:87:bd:1f:e1:51:94:a4:79: a6:d2:6c:38:2e:eb:5f:58:d2:15:40:13:a5:30:6e:0f:5b:c1: 7d:22:55:07:dc:1a:53:98:9d:c3:f8:a9:85:ad:8f:55:f6:43: 0f:28:ce:fd:38:6e:de:d8:e4:7c:39:b6:bb:6e:04:aa:cc:0e: 9f:85:9a:aa:2a:12:25:11:59:fb:e9:ad:5b:b0:e2:2b:6c:e1: 68:f8:d0:3f:77:6b:ca:18:fe:e3:47:9a:9e:2b:63:33:69:b2: 86:47:f7:62:19:f8:18:ac:2c:1e:16:d3:7c:40:b2:fc:ca:43: 08:bf:49:8a:ae:23:2d:63:5b:09:c7:f5:6d:cd:6a:cd:b8:42: 87:6b:3c:2e:66:3c:d1:47:30:2a:94:8d:71:be:bf:4d:23:17: aa:6e:09:99:fe:d8:b1:d2:80:f1:b5:5c:f3:d0:8c:5e:71:3d: 12:6c:87:93:d3:5f:40:06:26:dc:e0:f0:a3:f1:5a:4d:99:af: e1:3f:3c:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc1MjIxMTAvBgNVBAUTKDU1NUNFQTM3NDEwQ0QyODZCMzFGMUEwMEFERjYyNTNE NENFMDUyMzIwHhcNMjUwODIwMTUwMjE3WhcNMjUwODI3MTUwMjE3WjAYMRYwFAYD VQQDEw02OGE1ZTM3OS1jMTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyqrY1Ph981XxWm5RimNmrbYr8Vciy114TgZQYZaBNt4LmJjq75G76GK2a11 TWy79EM+pklSbCm5tRisM06/iFDumDNKfILoa+2oTOOgLLkxfiGNv0VSkwJf8eBk aHXe3duzvquMXVx1QtsR0475Zv22JC90N/G9AnvIsMm9/pVO7ew3MrUnKfIH2nmu 5N3a9Afqp9p5ImQZ35hbwUwQ3oFTxBFtgTp9iEYahqBU/0bKOhXhowBLvUrFLQ8s ruE2mpDPJi0KKilSfaV+9WWBZG9jNSrRxu5LfXxmipMc7JHvmRdESmSpDfuULIMR TqEt/jSkadrzO7KZraZ7iGQ8VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVR4YlA dEjhH/0DlK4RFqMmaHSLMB8GA1UdIwQYMBaAFFVc6jdBDNKGsx8aAK32JT1M4FIy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzUyMi8xMERDMTgyODFE OUYxMUUyOTYwNTc4OEYwOEIwMkNEMi9WVnpxTjBFTTBvYXpIeG9BcmZZbFBVemdV akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZWenFOMEVNMG9hekh4b0FyZllsUFV6Z1VqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzUyMi8xMERDMTgyODFEOUYxMUUyOTYwNTc4OEYwOEIwMkNEMi9WVnpxTjBFTTBv YXpIeG9BcmZZbFBVemdVakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7krhDFndyadOtEN0XdiRgmWNzoaRxcwUcGfN4B3Ko+ZzIhIxXcej8 yI/KteeOH4pXZqXsUT34sspktYzhGOJ3h70f4VGUpHmm0mw4LutfWNIVQBOlMG4P W8F9IlUH3BpTmJ3D+KmFrY9V9kMPKM79OG7e2OR8Oba7bgSqzA6fhZqqKhIlEVn7 6a1bsOIrbOFo+NA/d2vKGP7jR5qeK2MzabKGR/diGfgYrCweFtN8QLL8ykMIv0mK riMtY1sJx/VtzWrNuEKHazwuZjzRRzAqlI1xvr9NIxeqbgmZ/tix0oDxtVzz0Ixe cT0SbIeT019ABibc4PCj8VpNma/hPzzE -----END CERTIFICATE-----Generated at Fri Aug 22 16:15:00 2025 by rpki-client