$ rpki-client -vvf rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft File: vIlHKy_1NJ5Maoqwmc745o3XuZU.mft (raw, json) Hash identifier: gSz/KluRMNqFMUHamNYuybBrcql/jKyWlV0NA4iPOEM= Subject key identifier: 12:1E:BC:3A:B3:3A:14:03:8C:FA:B1:28:EB:58:D7:8C:C4:08:18:FE Authority key identifier: BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 Certificate issuer: /CN=A91495CF/serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Certificate serial: 0821 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft Manifest number: 081B Signing time: Thu 18 Sep 2025 21:06:27 +0000 Manifest this update: Thu 18 Sep 2025 21:06:26 +0000 Manifest next update: Thu 25 Sep 2025 21:06:26 +0000 Files and hashes: 1: vIlHKy_1NJ5Maoqwmc745o3XuZU.crl (hash: maekMcualW+nD2Dj3v/bsVvym4xQzV+OkLBHBNIisd8=) 2: 27DCF5D6EBAC11EAA7A0FB1FC4F9AE02.roa (hash: g+6S4S2dxNtg0BGxl2vF4MpJIveeS58PPReJPs/GBY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2081 (0x821) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91495CF, serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Validity Not Before: Sep 18 21:06:26 2025 GMT Not After : Sep 25 21:06:26 2025 GMT Subject: CN=68cc7452-56d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ea:74:c2:ab:ac:52:e1:c4:a1:73:f4:cf:74: c7:8e:82:e8:2f:20:eb:bf:fc:ea:1b:3c:65:9c:55: 23:04:30:fe:86:79:36:0f:2e:a9:b2:29:6b:56:f0: b6:27:2e:e2:a6:e4:96:d6:1a:7f:3a:1e:3d:f1:1a: 72:ec:e5:8b:96:9d:95:f3:10:0f:73:9d:31:98:08: 1e:a0:5b:b7:9d:62:3a:ba:dc:a2:e6:b9:c6:4e:c5: 7c:49:66:b8:fa:2a:67:82:92:66:84:47:25:f1:46: 12:3a:02:68:80:36:64:bf:54:47:c0:d5:97:6e:b1: ba:2e:de:ee:7a:37:f9:62:af:d9:6d:2a:b6:ec:cf: c5:1e:4d:03:9b:b4:57:80:53:c6:c9:ba:29:87:92: 87:06:df:d7:75:87:c2:76:44:31:71:a6:19:80:79: 62:96:d0:2e:29:41:d6:a6:ee:d8:cc:04:b7:97:12: 2d:55:c5:52:76:19:b5:43:62:cd:b5:2e:25:3d:92: 2d:19:6a:f7:c0:e9:d6:4f:d5:98:33:e9:0d:da:b5: 83:2e:a0:17:4f:cf:c6:9a:30:b6:5b:de:76:ef:70: b0:be:50:08:c0:6d:99:f0:5d:47:b3:e4:1c:f7:04: 1c:6c:7a:bf:34:bd:2f:9e:02:62:ec:22:29:96:e1: 82:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1E:BC:3A:B3:3A:14:03:8C:FA:B1:28:EB:58:D7:8C:C4:08:18:FE X509v3 Authority Key Identifier: keyid:BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:d7:7f:50:4c:2a:a3:bf:7e:af:13:f5:1c:5e:40:7f:84:66: 3a:63:b3:f9:ce:b8:97:6f:e9:ac:73:28:a6:e9:54:9f:05:8f: cd:75:d3:f8:07:a5:cb:63:06:05:f1:5e:dc:20:c3:06:8b:da: c9:94:2c:be:bd:25:fe:b6:a7:e5:d2:e5:ac:a6:ba:99:23:60: 0c:8f:b8:7c:ed:d3:52:16:f4:f2:13:71:5b:97:23:82:6a:a6: d9:bb:84:59:c4:44:22:20:fd:86:3b:89:21:d4:8c:c8:49:d9: 23:15:12:cd:90:da:40:5c:3e:8a:d9:14:7e:6a:8f:28:ec:fd: 86:eb:ac:2a:ba:7f:6e:12:26:52:b0:26:60:ac:9b:77:30:d8: 47:13:39:68:5e:ab:25:46:95:3f:38:18:f1:4d:a8:bf:1a:91: 3b:76:4c:dc:18:da:d3:6d:69:a1:da:2d:54:73:3d:b0:1d:7c: 4d:2c:af:7e:5b:ef:c7:0a:27:25:bb:df:c9:2f:9d:e1:05:f7: 37:65:aa:6e:46:1c:cf:13:9f:87:9c:71:18:e0:59:f5:4a:fb: 10:f0:ee:aa:36:be:50:c7:87:a5:c1:b4:17:eb:3b:d3:30:06: 24:71:1b:29:d2:fc:3d:c6:6d:55:29:4a:30:3f:1f:2c:94:e0: 03:12:41:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk1Q0YxMTAvBgNVBAUTKEJDODk0NzJCMkZGNTM0OUU0QzZBOEFCMDk5Q0VGOEU2 OEREN0I5OTUwHhcNMjUwOTE4MjEwNjI2WhcNMjUwOTI1MjEwNjI2WjAYMRYwFAYD VQQDEw02OGNjNzQ1Mi01NmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyep0wqusUuHEoXP0z3THjoLoLyDrv/zqGzxlnFUjBDD+hnk2Dy6psilrVvC2 Jy7ipuSW1hp/Oh498Rpy7OWLlp2V8xAPc50xmAgeoFu3nWI6utyi5rnGTsV8SWa4 +ipngpJmhEcl8UYSOgJogDZkv1RHwNWXbrG6Lt7uejf5Yq/ZbSq27M/FHk0Dm7RX gFPGyboph5KHBt/XdYfCdkQxcaYZgHliltAuKUHWpu7YzAS3lxItVcVSdhm1Q2LN tS4lPZItGWr3wOnWT9WYM+kN2rWDLqAXT8/GmjC2W95273CwvlAIwG2Z8F1Hs+Qc 9wQcbHq/NL0vngJi7CIpluGC/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIevDqz OhQDjPqxKOtY14zECBj+MB8GA1UdIwQYMBaAFLyJRysv9TSeTGqKsJnO+OaN17mV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTVDRi8yQTUxMDY5Q0VC QUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5KNU1hb3F3bWM3NDVvM1h1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJbEhLeV8xTko1TWFvcXdtYzc0NW8zWHVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTVDRi8yQTUxMDY5Q0VCQUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5K NU1hb3F3bWM3NDVvM1h1WlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7139QTCqjv36vE/UcXkB/hGY6Y7P5zriXb+mscyim6VSfBY/NddP4 B6XLYwYF8V7cIMMGi9rJlCy+vSX+tqfl0uWsprqZI2AMj7h87dNSFvTyE3FblyOC aqbZu4RZxEQiIP2GO4kh1IzISdkjFRLNkNpAXD6K2RR+ao8o7P2G66wqun9uEiZS sCZgrJt3MNhHEzloXqslRpU/OBjxTai/GpE7dkzcGNrTbWmh2i1Ucz2wHXxNLK9+ W+/HCiclu9/JL53hBfc3ZapuRhzPE5+HnHEY4Fn1SvsQ8O6qNr5Qx4elwbQX6zvT MAYkcRsp0vw9xm1VKUowPx8slOADEkEw -----END CERTIFICATE-----Generated at Fri Sep 19 08:33:29 2025 by rpki-client