$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft File: vWukX_AnbCxgSgM7B82k5MDfFdc.mft (raw, json) Hash identifier: /GZ/VcGQn8jVE9c5W+VnRVTURc1WHSFXY7ViZJpZIXo= Subject key identifier: CC:DC:B0:FD:C8:2A:43:23:35:44:69:9E:DB:FC:94:EB:D1:29:BD:48 Authority key identifier: BD:6B:A4:5F:F0:27:6C:2C:60:4A:03:3B:07:CD:A4:E4:C0:DF:15:D7 Certificate issuer: /CN=A9159B6F/serialNumber=BD6BA45FF0276C2C604A033B07CDA4E4C0DF15D7 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWukX_AnbCxgSgM7B82k5MDfFdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft Manifest number: 0121 Signing time: Tue 09 Sep 2025 04:48:50 +0000 Manifest this update: Tue 09 Sep 2025 04:48:49 +0000 Manifest next update: Tue 16 Sep 2025 04:48:49 +0000 Files and hashes: 1: vWukX_AnbCxgSgM7B82k5MDfFdc.crl (hash: iEgrR2bKrhifAtVBkzTVwav+/IMDXZHC+2/88tjs1Yg=) 2: F56322CCD09C11EE94431F80C4F9AE02.roa (hash: VBkLC1Ug6+V5ASssgia7rSJZ2O30hfTWr/78uTsbXl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.crl rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWukX_AnbCxgSgM7B82k5MDfFdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 04:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159B6F, serialNumber=BD6BA45FF0276C2C604A033B07CDA4E4C0DF15D7 Validity Not Before: Sep 9 04:48:49 2025 GMT Not After : Sep 16 04:48:49 2025 GMT Subject: CN=68bfb1b1-f95a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cc:b4:20:af:7c:30:0d:0c:2a:49:77:b3:4e: 2b:2b:a8:85:01:0c:08:4a:9f:e6:b4:bb:9b:7b:71: df:13:07:8a:91:c1:c4:fe:66:9d:10:bb:7c:c1:12: fd:82:26:e3:66:1f:58:64:70:23:e6:7e:47:60:0d: 13:01:1b:88:ad:cb:9a:9f:9a:b4:0b:81:5d:a6:55: f0:95:d8:07:31:1a:2d:19:c4:b9:66:47:a9:c2:a0: 3f:09:40:25:75:9b:8a:ad:9e:ef:40:6e:ee:63:e8: aa:fc:72:3c:13:78:3f:95:c9:ed:70:62:f5:d3:c9: b3:96:27:71:d8:12:c9:f9:9a:a3:c1:8c:cd:67:1e: c1:05:1e:66:b7:43:98:69:b0:54:cb:a3:42:04:1c: ed:5a:07:ff:4b:e3:bf:d1:ba:16:c7:51:6f:04:18: 76:61:c1:e3:d0:27:f6:a5:bf:ec:cb:c5:ad:d3:76: bc:8c:c2:90:f0:75:80:47:32:fe:3d:e6:a3:05:96: ff:ed:95:6f:1f:57:03:fd:6b:bc:77:8d:fa:1d:3c: d4:34:9e:e7:06:bd:d0:94:04:8c:e6:4e:1a:af:6e: 3c:ef:06:7e:19:7f:c7:b0:6a:19:9c:12:8e:03:f9: bd:f7:12:4b:2b:9f:7b:a1:a6:f8:4d:4c:f6:b1:b4: 14:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DC:B0:FD:C8:2A:43:23:35:44:69:9E:DB:FC:94:EB:D1:29:BD:48 X509v3 Authority Key Identifier: keyid:BD:6B:A4:5F:F0:27:6C:2C:60:4A:03:3B:07:CD:A4:E4:C0:DF:15:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWukX_AnbCxgSgM7B82k5MDfFdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:42:30:1a:ff:14:7d:ab:cc:11:d7:7f:bc:ab:26:65:b5:dd: 23:ac:8c:2f:51:cf:09:fe:da:e3:e6:86:ad:93:c0:c2:dd:62: ff:61:0f:00:cd:e8:9f:21:4d:28:7e:74:30:e4:a2:93:97:54: 6e:0c:32:e2:f5:10:c5:92:a7:7b:c2:31:26:36:c1:3c:04:d7: e2:95:91:49:16:78:87:61:08:90:65:78:f8:c9:51:b6:fe:46: c1:11:57:dd:5a:cc:fc:ac:a0:58:8c:18:1d:e9:36:fe:4e:aa: 8d:d1:c2:73:e1:82:05:3c:1a:58:26:05:9d:f4:3f:1b:da:6b: 81:8b:7f:47:fc:16:48:8f:a9:4a:9f:67:3c:59:dc:2b:68:2c: e1:1d:a3:c6:5c:38:06:79:df:7f:4a:52:cb:b0:fb:4d:a6:da: 6d:e9:5c:f3:49:25:92:7f:45:36:1c:75:1a:19:4b:c1:52:fd: 81:17:24:64:ba:e8:51:c4:3e:47:37:69:7d:75:7e:bb:d3:31: f7:9c:88:38:32:83:a9:05:0a:55:ca:60:b2:6e:e6:73:1c:f4: b0:a4:33:d4:92:98:f5:93:52:76:11:b2:58:2f:cc:c0:6c:4a: 56:f5:45:83:ed:de:4f:29:7f:29:88:02:48:c5:c8:16:d4:83: a1:df:6e:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlCNkYxMTAvBgNVBAUTKEJENkJBNDVGRjAyNzZDMkM2MDRBMDMzQjA3Q0RBNEU0 QzBERjE1RDcwHhcNMjUwOTA5MDQ0ODQ5WhcNMjUwOTE2MDQ0ODQ5WjAYMRYwFAYD VQQDEw02OGJmYjFiMS1mOTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8y0IK98MA0MKkl3s04rK6iFAQwISp/mtLube3HfEweKkcHE/madELt8wRL9 gibjZh9YZHAj5n5HYA0TARuIrcuan5q0C4FdplXwldgHMRotGcS5ZkepwqA/CUAl dZuKrZ7vQG7uY+iq/HI8E3g/lcntcGL108mzlidx2BLJ+ZqjwYzNZx7BBR5mt0OY abBUy6NCBBztWgf/S+O/0boWx1FvBBh2YcHj0Cf2pb/sy8Wt03a8jMKQ8HWARzL+ PeajBZb/7ZVvH1cD/Wu8d436HTzUNJ7nBr3QlASM5k4ar2487wZ+GX/HsGoZnBKO A/m99xJLK597oab4TUz2sbQUeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzcsP3I KkMjNURpntv8lOvRKb1IMB8GA1UdIwQYMBaAFL1rpF/wJ2wsYEoDOwfNpOTA3xXX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUI2Ri8zNDhBQTkwOEQw OUMxMUVFODBBQjhEN0VDNEY5QUUwMi92V3VrWF9BbmJDeGdTZ003QjgyazVNRGZG ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZXdWtYX0FuYkN4Z1NnTTdCODJrNU1EZkZkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUI2Ri8zNDhBQTkwOEQwOUMxMUVFODBBQjhEN0VDNEY5QUUwMi92V3VrWF9BbmJD eGdTZ003QjgyazVNRGZGZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSQjAa/xR9q8wR13+8qyZltd0jrIwvUc8J/trj5oatk8DC3WL/YQ8A zeifIU0ofnQw5KKTl1RuDDLi9RDFkqd7wjEmNsE8BNfilZFJFniHYQiQZXj4yVG2 /kbBEVfdWsz8rKBYjBgd6Tb+TqqN0cJz4YIFPBpYJgWd9D8b2muBi39H/BZIj6lK n2c8WdwraCzhHaPGXDgGed9/SlLLsPtNptpt6VzzSSWSf0U2HHUaGUvBUv2BFyRk uuhRxD5HN2l9dX670zH3nIg4MoOpBQpVymCybuZzHPSwpDPUkpj1k1J2EbJYL8zA bEpW9UWD7d5PKX8piAJIxcgW1IOh325s -----END CERTIFICATE-----Generated at Tue Sep 9 16:31:30 2025 by rpki-client