$ rpki-client -vvf rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft File: VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft (raw, json) Hash identifier: 4fH4VFpkOmsUtU/x0uGN+AOcq7KUiZNtaWnRJEa2E4c= Subject key identifier: 70:8B:EF:97:32:C6:0A:92:8C:15:74:FB:9D:C3:24:AD:DA:B9:BB:72 Authority key identifier: 55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 Certificate issuer: /CN=A9154534/serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Certificate serial: 0B7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft Manifest number: 0B72 Signing time: Sat 06 Sep 2025 19:14:16 +0000 Manifest this update: Sat 06 Sep 2025 19:14:15 +0000 Manifest next update: Sat 13 Sep 2025 19:14:15 +0000 Files and hashes: 1: VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl (hash: Y0Err6fWPJq8KE7RpUv0nFGU//mvUQt36UCJ0ekD0ro=) 2: 8789C45E384311EAAA40EE51C4F9AE02.roa (hash: MAWDNXgpu9PgJn7Gnnkwa2ICesKD1B+IPcDJf1k8UoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 19:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2938 (0xb7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154534, serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Validity Not Before: Sep 6 19:14:15 2025 GMT Not After : Sep 13 19:14:15 2025 GMT Subject: CN=68bc8807-9135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:68:a0:4b:18:d1:74:30:15:d8:9f:3a:32:df: 1f:5f:e4:2d:b9:a5:0e:fa:b6:42:57:9f:b3:8b:58: ab:0b:4f:48:3b:9a:16:f5:7f:76:cb:95:34:72:32: 04:db:53:73:7b:97:9d:f8:e1:c0:f5:f2:64:42:79: d0:43:8d:22:f1:29:27:25:2f:29:b0:d3:47:e9:27: 11:33:43:0f:c9:e5:9b:81:d2:7b:e0:68:80:aa:52: 78:36:55:85:0f:30:04:fd:b8:38:55:8e:62:13:58: 4a:b2:5d:36:2e:49:4c:7d:57:5f:95:63:3c:92:3a: e0:b5:5a:63:74:53:1d:12:75:0e:5e:6d:16:79:3d: aa:c2:d1:5f:a1:f1:2c:34:95:e8:36:28:49:90:8c: 9f:9e:9e:b4:05:a1:25:38:e6:9a:b1:06:1a:b4:5a: 7b:84:01:2e:ff:94:d6:1b:e5:03:1b:ab:7c:70:45: 75:2f:2f:05:1f:55:82:57:7d:94:26:18:fe:3f:a6: b1:73:dc:21:c7:34:12:75:d4:d1:4a:64:0b:16:c9: dd:51:19:9e:f1:9a:fd:48:4b:8f:00:34:91:b8:10: b6:33:2f:f3:e0:7c:a8:12:5c:37:24:09:5f:a4:be: dc:2a:05:45:f6:a7:e4:f7:3d:d5:bc:b9:78:8a:44: 3d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8B:EF:97:32:C6:0A:92:8C:15:74:FB:9D:C3:24:AD:DA:B9:BB:72 X509v3 Authority Key Identifier: keyid:55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:20:09:ec:c9:be:9d:f8:cf:10:04:7e:e1:4a:37:7c:f1:f8: 43:58:63:4c:09:03:31:25:f8:a3:be:1e:3d:7d:0d:5c:d4:2d: ae:4c:f4:ea:d2:03:5b:86:e6:60:f9:fe:ff:e2:d6:7a:bd:b4: 44:72:d6:72:76:a5:08:25:fc:f8:66:9f:4f:d4:c6:4f:ed:d9: d7:35:46:63:e3:22:ec:4e:ee:44:78:5a:d2:b0:b4:c1:ba:20: 10:4c:2d:77:72:1f:5a:70:ee:01:2c:96:92:d2:49:f8:f8:91: e4:3f:bd:fc:57:cc:cd:b4:98:e8:a6:97:c7:35:f0:7c:51:9e: 30:c4:f5:bf:1f:2b:59:8c:74:42:05:6a:d3:46:cd:88:2c:5a: 6b:be:4f:44:b6:0a:35:6c:6e:37:a8:d7:f1:ec:a1:c3:5e:30: 6d:ca:3f:72:98:02:11:33:c7:04:49:a4:e0:e8:d0:21:31:a6: e2:95:12:9e:85:e8:bf:ca:b2:c2:84:2f:30:8e:09:a0:60:d3: e4:73:71:cb:36:f2:7c:c5:c7:e4:f4:63:72:b8:f1:69:91:ee: 05:fc:70:7b:c4:75:27:60:86:aa:84:6c:42:ac:fd:17:e1:60: a6:0b:e7:f8:b8:99:ac:47:b9:96:7c:c0:d6:9c:af:d5:b3:48: c5:81:76:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1MzQxMTAvBgNVBAUTKDU1QzQ2ODU1Q0M5MUFDNTRBQzA3NUMyOTdCNzUzMUZB ODhBNzM1RDkwHhcNMjUwOTA2MTkxNDE1WhcNMjUwOTEzMTkxNDE1WjAYMRYwFAYD VQQDEw02OGJjODgwNy05MTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGigSxjRdDAV2J86Mt8fX+QtuaUO+rZCV5+zi1irC09IO5oW9X92y5U0cjIE 21Nze5ed+OHA9fJkQnnQQ40i8SknJS8psNNH6ScRM0MPyeWbgdJ74GiAqlJ4NlWF DzAE/bg4VY5iE1hKsl02LklMfVdflWM8kjrgtVpjdFMdEnUOXm0WeT2qwtFfofEs NJXoNihJkIyfnp60BaElOOaasQYatFp7hAEu/5TWG+UDG6t8cEV1Ly8FH1WCV32U Jhj+P6axc9whxzQSddTRSmQLFsndURme8Zr9SEuPADSRuBC2My/z4HyoElw3JAlf pL7cKgVF9qfk9z3VvLl4ikQ9+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCL75cy xgqSjBV0+53DJK3aubtyMB8GA1UdIwQYMBaAFFXEaFXMkaxUrAdcKXt1MfqIpzXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDUzNC9CRDI2OTA5RTM4 NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJGU3NCMXdwZTNVeC1vaW5O ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZjUm9WY3lSckZTc0Ixd3BlM1V4LW9pbk5kay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDUzNC9CRDI2OTA5RTM4NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJG U3NCMXdwZTNVeC1vaW5OZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbIAnsyb6d+M8QBH7hSjd88fhDWGNMCQMxJfijvh49fQ1c1C2uTPTq 0gNbhuZg+f7/4tZ6vbREctZydqUIJfz4Zp9P1MZP7dnXNUZj4yLsTu5EeFrSsLTB uiAQTC13ch9acO4BLJaS0kn4+JHkP738V8zNtJjoppfHNfB8UZ4wxPW/HytZjHRC BWrTRs2ILFprvk9Etgo1bG43qNfx7KHDXjBtyj9ymAIRM8cESaTg6NAhMabilRKe hei/yrLChC8wjgmgYNPkc3HLNvJ8xcfk9GNyuPFpke4F/HB7xHUnYIaqhGxCrP0X 4WCmC+f4uJmsR7mWfMDWnK/Vs0jFgXZs -----END CERTIFICATE-----Generated at Mon Sep 8 08:47:35 2025 by rpki-client