$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft File: vHDzdLcox7cRwkpoJ_dHekKyKk0.mft (raw, json) Hash identifier: LAuwGa3frqCSDxjC/pIVWD3TGh2vVK6UC9vTN/yuuh8= Subject key identifier: A8:4A:02:F3:65:85:78:14:25:1F:F0:4A:18:50:D2:32:41:72:02:07 Authority key identifier: BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D Certificate issuer: /CN=A9142A75/serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft Manifest number: 65 Signing time: Tue 09 Sep 2025 07:08:44 +0000 Manifest this update: Tue 09 Sep 2025 07:08:44 +0000 Manifest next update: Tue 16 Sep 2025 07:08:44 +0000 Files and hashes: 1: vHDzdLcox7cRwkpoJ_dHekKyKk0.crl (hash: qnQYHPiI53cr/0HNonkYuUmGm0KTGXZ/4nhe4LphAko=) 2: 3B69BCFAF53A11EF907A433EC4F9AE02.roa (hash: g53LMcn3iRdJAKtGtiImyfZixGirZg93i3IYIo94JAU=) 3: 6BD4BB16F83111EFBA64911FC4F9AE02.roa (hash: XvWuI1YoEga2y2ypcrjG1/r0tc+yszPXr1W996sUaXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A75, serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D Validity Not Before: Sep 9 07:08:44 2025 GMT Not After : Sep 16 07:08:44 2025 GMT Subject: CN=68bfd27c-a77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dd:7f:50:cf:6a:a7:47:0c:7d:2a:d7:75:c0: d5:8a:56:db:05:04:de:69:cb:73:08:3e:2e:15:51: 6c:2c:60:b9:7d:10:0d:9a:4c:8d:14:16:40:ca:49: 98:3e:e0:e4:43:bb:cb:48:d5:99:f5:50:7a:be:d4: a8:8c:18:0c:a1:99:f0:3a:15:16:51:7d:bd:9a:b7: b5:56:04:1f:ef:04:f0:e9:41:e3:c1:2c:33:89:91: 70:e2:d5:03:bf:42:97:82:73:4e:06:71:1b:9d:51: 67:a8:16:6c:6d:45:15:36:1c:7f:ff:d7:50:f4:2f: c7:f1:38:e8:89:90:ef:4e:53:f5:43:0b:ae:f2:06: 1a:35:bc:d2:88:c6:56:a8:8d:46:d6:af:87:17:7f: 73:4a:4b:4b:e0:97:32:14:5b:6f:fa:7b:4b:3c:64: 1a:bf:1d:42:86:15:61:aa:e8:bb:45:0e:cb:c4:80: b6:ba:93:15:4b:bc:51:02:33:84:3b:f7:44:ca:e0: f6:d8:18:40:e6:d8:ee:7e:eb:9c:de:8e:7b:c7:17: 59:0a:0a:d9:24:43:62:20:2b:5b:86:9d:cb:db:46: ae:1b:e0:4a:f9:e6:07:91:19:9f:9b:15:d8:f6:f2: e9:d3:bb:a4:63:73:22:ed:7b:5a:94:f5:2b:0a:70: 63:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4A:02:F3:65:85:78:14:25:1F:F0:4A:18:50:D2:32:41:72:02:07 X509v3 Authority Key Identifier: keyid:BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:f2:0f:4c:85:2d:26:00:f4:15:cb:22:5d:62:5d:c9:fb:c3: d1:83:f0:9f:03:59:0d:c8:62:16:ce:5d:18:57:71:72:a5:c2: e8:c1:d0:43:2c:91:15:c8:b3:a8:51:9b:a5:3c:08:b8:9d:73: ac:8c:c5:a0:de:34:29:5d:d3:95:c2:9d:92:30:be:dc:17:b2: c3:a3:3d:e2:b4:49:1c:e4:dd:d2:cb:25:08:f1:5c:13:32:fb: a6:33:8a:d2:4a:c9:5f:4b:16:b7:15:dc:f8:94:7a:94:fa:71: e6:20:12:fc:26:c3:91:03:6b:92:ef:e7:e2:17:7f:da:73:19: d2:73:2b:22:00:58:61:1a:59:42:dc:2a:0f:c7:40:d2:e7:c8: 34:63:c5:a5:e8:3e:96:bb:2a:b7:fa:6e:86:22:72:6e:0e:aa: 59:1e:58:5b:f0:fc:0a:3c:41:61:1b:2b:b4:0f:c5:a5:07:50: 41:81:23:de:32:16:dc:4b:c8:e7:f4:59:30:60:bf:eb:60:e9: 68:ce:f6:ba:15:97:78:53:32:1b:e0:06:55:be:28:05:32:d1: 90:e3:ed:f5:95:a3:98:43:9f:8f:0d:45:1b:07:7a:62:bb:cb: e9:e4:4d:82:6d:81:6e:1f:18:84:63:ba:0f:13:b7:ad:96:99: 6a:3a:78:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkE3NTExMC8GA1UEBRMoQkM3MEYzNzRCNzI4QzdCNzExQzI0QTY4MjdGNzQ3N0E0 MkIyMkE0RDAeFw0yNTA5MDkwNzA4NDRaFw0yNTA5MTYwNzA4NDRaMBgxFjAUBgNV BAMTDTY4YmZkMjdjLWE3N2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZ3X9Qz2qnRwx9Ktd1wNWKVtsFBN5py3MIPi4VUWwsYLl9EA2aTI0UFkDKSZg+ 4ORDu8tI1Zn1UHq+1KiMGAyhmfA6FRZRfb2at7VWBB/vBPDpQePBLDOJkXDi1QO/ QpeCc04GcRudUWeoFmxtRRU2HH//11D0L8fxOOiJkO9OU/VDC67yBho1vNKIxlao jUbWr4cXf3NKS0vglzIUW2/6e0s8ZBq/HUKGFWGq6LtFDsvEgLa6kxVLvFECM4Q7 90TK4PbYGEDm2O5+65zejnvHF1kKCtkkQ2IgK1uGncvbRq4b4Er55geRGZ+bFdj2 8unTu6RjcyLte1qU9SsKcGN9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqEoC82WF eBQlH/BKGFDSMkFyAgcwHwYDVR0jBBgwFoAUvHDzdLcox7cRwkpoJ/dHekKyKk0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyQTc1L0VGNUNENkRBRjUz OTExRUZCMDlGQzgzREM0RjlBRTAyL3ZIRHpkTGNveDdjUndrcG9KX2RIZWtLeUtr MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdkhEemRMY294N2NSd2twb0pfZEhla0t5S2swLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy QTc1L0VGNUNENkRBRjUzOTExRUZCMDlGQzgzREM0RjlBRTAyL3ZIRHpkTGNveDdj UndrcG9KX2RIZWtLeUtrMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADfyD0yFLSYA9BXLIl1iXcn7w9GD8J8DWQ3IYhbOXRhXcXKlwujB0EMs kRXIs6hRm6U8CLidc6yMxaDeNCld05XCnZIwvtwXssOjPeK0SRzk3dLLJQjxXBMy +6YzitJKyV9LFrcV3PiUepT6ceYgEvwmw5EDa5Lv5+IXf9pzGdJzKyIAWGEaWULc Kg/HQNLnyDRjxaXoPpa7Krf6boYicm4OqlkeWFvw/Ao8QWEbK7QPxaUHUEGBI94y FtxLyOf0WTBgv+tg6WjO9roVl3hTMhvgBlW+KAUy0ZDj7fWVo5hDn48NRRsHemK7 y+nkTYJtgW4fGIRjug8Tt62WmWo6eDI= -----END CERTIFICATE-----Generated at Tue Sep 9 13:33:59 2025 by rpki-client