$ rpki-client -vvf rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft File: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft (raw, json) Hash identifier: tf6IaJndTG0zob4IbAKKrm2J5W1VH1xPqrUU0RR/f+A= Subject key identifier: E0:95:01:59:3B:AE:98:99:C9:C3:2F:D9:48:1B:CB:14:15:95:63:4F Authority key identifier: 56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE Certificate issuer: /CN=A91433B3/serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft Manifest number: 01DD Signing time: Wed 17 Sep 2025 03:09:39 +0000 Manifest this update: Wed 17 Sep 2025 03:09:38 +0000 Manifest next update: Wed 24 Sep 2025 03:09:38 +0000 Files and hashes: 1: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl (hash: TTbI5slOPGEzj6+JOZ0aMtpzXM8pQcuAc2SJKc1i9A0=) 2: AB6C302EB5F311EDA0148B2DC4F9AE02.roa (hash: 4FOvuF+lrbDRETyeVF9s3HBZnjQN5y+IfUmzH88TfmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91433B3, serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE Validity Not Before: Sep 17 03:09:38 2025 GMT Not After : Sep 24 03:09:38 2025 GMT Subject: CN=68ca2673-1161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0e:9e:09:3c:a3:ce:d5:1b:1b:cf:3d:f3:2a: 6d:6f:f5:49:04:78:fa:05:56:4b:2e:6d:99:4d:9c: 3b:bd:47:93:0b:f4:a1:32:d9:cb:c2:1c:e7:25:bd: 35:9b:7e:2d:b6:90:46:1e:a3:27:46:10:4a:5d:26: 7e:52:17:a5:3a:87:51:85:a4:6b:72:6d:7a:cb:05: f7:68:b1:33:3d:c3:c8:b6:64:a0:32:cd:7d:40:98: 99:45:4b:7d:d9:34:b7:68:79:1c:3b:be:27:a9:82: c1:24:67:f8:c4:ba:1f:f8:b3:04:c0:cc:ca:1c:a0: ed:c3:a0:da:ba:e6:1c:65:92:17:69:1c:ed:d3:8d: 45:ac:52:e6:25:b4:0a:f6:b5:87:5b:6e:00:bc:a4: 58:83:fd:73:b7:64:8c:91:52:3f:62:64:2d:48:9b: 61:e0:0c:44:96:09:09:4c:78:a3:87:ca:59:4f:a0: 68:a1:ee:3d:52:b4:ce:e6:b2:a1:77:ed:ab:fd:9a: 7a:5f:ea:c6:98:1a:ad:f5:5a:57:83:f4:05:94:9e: 28:b5:c2:13:4a:23:82:3b:67:67:08:e7:c1:a5:4b: d6:6c:cd:eb:fe:dd:35:ce:d9:9f:c7:92:3b:60:46: e5:e5:49:43:aa:20:4c:84:ad:f6:54:31:0a:1a:1b: 1f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:95:01:59:3B:AE:98:99:C9:C3:2F:D9:48:1B:CB:14:15:95:63:4F X509v3 Authority Key Identifier: keyid:56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:17:e8:a5:88:68:09:f6:10:a3:fd:1c:f0:e8:77:9c:a9:57: c4:b0:7e:c3:3c:e0:c8:4a:8a:aa:41:ad:24:32:a9:ca:3f:61: 5a:b3:fd:72:72:77:9c:7b:e0:c9:8e:77:3d:c1:02:fe:7a:38: fb:86:e7:6c:f4:62:04:f9:b9:4b:72:23:bf:e4:a7:8e:8d:f1: 1c:27:90:50:d3:24:60:9c:69:5f:6f:18:61:69:76:16:c7:bd: 55:c0:ec:31:d4:ca:57:b0:d4:75:2c:6e:4d:fc:50:fc:b8:1b: 9a:47:0d:dd:23:f1:1a:6e:3a:10:de:f6:e2:79:87:86:1e:73: 06:64:12:49:7f:4b:e7:cf:04:95:8b:3c:6f:4d:cb:5f:8f:6b: 39:ea:f1:a5:fb:1e:73:63:d6:7f:85:6b:f0:9c:c0:9e:51:46: ea:59:a0:4b:74:47:6b:b7:7d:f5:6b:fc:dd:20:c3:9d:5d:dc: d7:41:8c:91:11:f8:0d:31:e4:52:ac:b3:3a:a7:69:fe:87:f2: 0b:10:3b:f5:a7:2d:34:c1:8e:05:3e:d4:24:9b:e8:55:97:23: 31:cd:13:cf:a6:67:3e:87:47:89:2d:b9:f3:91:05:de:6e:fa: ad:f0:c3:73:4c:8c:58:a4:0b:2c:ed:35:d1:bc:95:2d:53:18: 26:12:0a:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzQjMxMTAvBgNVBAUTKDU2QkI2RjMxMzdEOEREOUVCOTdFMzgzQkM3RjQ2MUQ5 MEY4NURERkUwHhcNMjUwOTE3MDMwOTM4WhcNMjUwOTI0MDMwOTM4WjAYMRYwFAYD VQQDEw02OGNhMjY3My0xMTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxg6eCTyjztUbG8898yptb/VJBHj6BVZLLm2ZTZw7vUeTC/ShMtnLwhznJb01 m34ttpBGHqMnRhBKXSZ+UhelOodRhaRrcm16ywX3aLEzPcPItmSgMs19QJiZRUt9 2TS3aHkcO74nqYLBJGf4xLof+LMEwMzKHKDtw6DauuYcZZIXaRzt041FrFLmJbQK 9rWHW24AvKRYg/1zt2SMkVI/YmQtSJth4AxElgkJTHijh8pZT6Booe49UrTO5rKh d+2r/Zp6X+rGmBqt9VpXg/QFlJ4otcITSiOCO2dnCOfBpUvWbM3r/t01ztmfx5I7 YEbl5UlDqiBMhK32VDEKGhsfUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCVAVk7 rpiZycMv2UgbyxQVlWNPMB8GA1UdIwQYMBaAFFa7bzE32N2euX44O8f0YdkPhd3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzNCMy9CREZFMThDQ0I1 RjAxMUVEQTdEMEVGN0NDNEY5QUUwMi9WcnR2TVRmWTNaNjVmamc3eF9SaDJRLUYz ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZydHZNVGZZM1o2NWZqZzd4X1JoMlEtRjNmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzNCMy9CREZFMThDQ0I1RjAxMUVEQTdEMEVGN0NDNEY5QUUwMi9WcnR2TVRmWTNa NjVmamc3eF9SaDJRLUYzZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSF+iliGgJ9hCj/Rzw6HecqVfEsH7DPODISoqqQa0kMqnKP2Fas/1y cnece+DJjnc9wQL+ejj7huds9GIE+blLciO/5KeOjfEcJ5BQ0yRgnGlfbxhhaXYW x71VwOwx1MpXsNR1LG5N/FD8uBuaRw3dI/EabjoQ3vbieYeGHnMGZBJJf0vnzwSV izxvTctfj2s56vGl+x5zY9Z/hWvwnMCeUUbqWaBLdEdrt331a/zdIMOdXdzXQYyR EfgNMeRSrLM6p2n+h/ILEDv1py00wY4FPtQkm+hVlyMxzRPPpmc+h0eJLbnzkQXe bvqt8MNzTIxYpAss7TXRvJUtUxgmEgq2 -----END CERTIFICATE-----Generated at Fri Sep 19 00:47:02 2025 by rpki-client