$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft File: vAv4-dc7foz8yOpen0LXqFUjPXw.mft (raw, json) Hash identifier: aDEgsaNoZpn+nrKYdSnQ/2gyTBiZIrhG+A4FSwhyN/o= Subject key identifier: 80:6C:C7:F6:E6:F7:60:87:8B:FC:FC:98:D2:6E:0F:96:34:AF:45:2B Authority key identifier: BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C Certificate issuer: /CN=A9163EB9/serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft Manifest number: B3 Signing time: Sat 19 Jul 2025 06:11:40 +0000 Manifest this update: Sat 19 Jul 2025 06:11:40 +0000 Manifest next update: Sat 26 Jul 2025 06:11:40 +0000 Files and hashes: 1: vAv4-dc7foz8yOpen0LXqFUjPXw.crl (hash: 8ZvC4qs9fRj4aOkFXsv30ym0xatEs9MmxSUXMNiCabI=) 2: 710FB354979E11EF99310B40C4F9AE02.roa (hash: bruRF8XqvNXc2lROOKilx3DJEF2Mi08/zHCfWANPCjg=) 3: 27AEE7D0979D11EFB1426839C4F9AE02.roa (hash: FRD/IGf5tsKizstdT15eHvBke9+NzOwPHHiU7wEzleM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EB9, serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C Validity Not Before: Jul 19 06:11:40 2025 GMT Not After : Jul 26 06:11:40 2025 GMT Subject: CN=687b371c-6e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:36:0b:bf:cf:5a:c6:9b:7d:4d:ae:68:85: 17:3a:17:ae:96:1f:40:49:3d:68:e9:57:ee:64:a4: 95:b0:fe:95:dc:12:3e:67:36:e3:5e:e5:71:6a:75: 20:3b:f1:e8:38:1e:bb:0e:63:4d:19:04:55:8d:90: 87:33:95:b6:4a:af:3e:7d:2f:5a:45:46:38:77:88: f6:3f:86:70:7f:77:1e:5e:6c:0d:ae:81:81:79:c8: 1b:6d:86:bf:20:e4:51:05:e0:e3:94:0d:54:3c:79: b2:3d:50:7a:43:eb:a2:0b:2e:00:8b:b3:21:71:07: 32:22:b2:24:7d:8e:5b:90:29:4b:d3:ec:13:15:67: 91:ee:30:42:4e:cd:fd:9b:49:5d:5e:50:9b:fe:29: b5:93:10:c1:7c:7b:d4:74:f2:af:7d:b3:6b:5b:89: 45:79:07:60:c4:83:b1:b0:75:ec:a5:50:ab:c9:14: 44:d2:a9:c6:e7:c6:2a:fe:7d:b6:48:20:a6:6a:53: e8:3c:e4:d2:a0:96:5d:0b:a6:4d:a3:82:fc:36:d0: ae:20:81:db:f7:d1:94:0f:c2:f7:53:cb:d7:38:eb: 8e:90:3f:a0:2f:04:4e:ba:52:3e:a9:9b:a5:eb:f9: af:92:a6:96:10:76:67:70:33:9f:db:dd:8e:84:c0: 7f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:6C:C7:F6:E6:F7:60:87:8B:FC:FC:98:D2:6E:0F:96:34:AF:45:2B X509v3 Authority Key Identifier: keyid:BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:db:1e:98:f3:28:43:9d:bb:78:f0:84:73:32:b0:21:ed:77: dd:c3:15:37:b8:b1:10:4c:52:b5:c7:9d:5c:3f:64:9d:1c:37: 02:6c:82:23:d1:3f:33:87:5f:87:a5:17:ae:02:0a:26:09:38: b5:b4:cd:73:b2:5f:98:4d:f3:b5:5f:e7:88:6c:ee:51:62:a1: 28:6a:af:0d:c2:44:23:e7:4d:20:43:06:3f:58:bf:8c:b9:30: 72:3a:8d:bd:7e:33:2e:30:ec:6c:25:82:85:3d:cf:c8:9f:2e: 4b:2e:d2:0d:6c:67:c9:87:2e:11:84:21:2c:35:13:77:1e:3d: cc:84:d6:34:e5:ca:43:60:44:16:05:d6:f1:eb:c0:7e:bd:85: 60:33:e3:24:7e:50:62:62:b0:83:52:c6:56:07:43:2d:98:77: 60:a4:a7:63:11:50:2d:82:f2:a5:cc:8e:37:5b:76:9e:03:38: d4:9a:e9:3a:40:9b:9a:b5:c9:0e:65:8b:9f:18:ca:45:07:ca: ab:f5:57:42:c8:4b:d2:79:3a:45:c1:bd:a5:dc:88:65:e3:ef: 0c:9a:fa:d9:c8:0b:3c:8f:f6:fd:fe:72:17:27:5a:c6:ba:9e: 09:2a:6d:9f:fe:df:7c:9d:af:07:81:3f:78:62:45:7f:85:96: a7:d9:03:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFQjkxMTAvBgNVBAUTKEJDMEJGOEY5RDczQjdFOENGQ0M4RUE1RTlGNDJEN0E4 NTUyMzNEN0MwHhcNMjUwNzE5MDYxMTQwWhcNMjUwNzI2MDYxMTQwWjAYMRYwFAYD VQQDEw02ODdiMzcxYy02ZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEQ2C7/PWsabfU2uaIUXOheulh9AST1o6VfuZKSVsP6V3BI+ZzbjXuVxanUg O/HoOB67DmNNGQRVjZCHM5W2Sq8+fS9aRUY4d4j2P4Zwf3ceXmwNroGBecgbbYa/ IORRBeDjlA1UPHmyPVB6Q+uiCy4Ai7MhcQcyIrIkfY5bkClL0+wTFWeR7jBCTs39 m0ldXlCb/im1kxDBfHvUdPKvfbNrW4lFeQdgxIOxsHXspVCryRRE0qnG58Yq/n22 SCCmalPoPOTSoJZdC6ZNo4L8NtCuIIHb99GUD8L3U8vXOOuOkD+gLwROulI+qZul 6/mvkqaWEHZncDOf292OhMB/KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBsx/bm 92CHi/z8mNJuD5Y0r0UrMB8GA1UdIwQYMBaAFLwL+PnXO36M/MjqXp9C16hVIz18 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VCOS9GQ0Q1NUMwQTU0 OUYxMUVGODZBRTU5MjJDNEY5QUUwMi92QXY0LWRjN2Zvejh5T3BlbjBMWHFGVWpQ WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZBdjQtZGM3Zm96OHlPcGVuMExYcUZValBYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VCOS9GQ0Q1NUMwQTU0OUYxMUVGODZBRTU5MjJDNEY5QUUwMi92QXY0LWRjN2Zv ejh5T3BlbjBMWHFGVWpQWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu2x6Y8yhDnbt48IRzMrAh7XfdwxU3uLEQTFK1x51cP2SdHDcCbIIj 0T8zh1+HpReuAgomCTi1tM1zsl+YTfO1X+eIbO5RYqEoaq8NwkQj500gQwY/WL+M uTByOo29fjMuMOxsJYKFPc/Iny5LLtINbGfJhy4RhCEsNRN3Hj3MhNY05cpDYEQW Bdbx68B+vYVgM+MkflBiYrCDUsZWB0MtmHdgpKdjEVAtgvKlzI43W3aeAzjUmuk6 QJuatckOZYufGMpFB8qr9VdCyEvSeTpFwb2l3Ihl4+8MmvrZyAs8j/b9/nIXJ1rG up4JKm2f/t98na8HgT94YkV/hZan2QMp -----END CERTIFICATE-----Generated at Mon Jul 21 02:44:50 2025 by rpki-client