$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft File: vAv4-dc7foz8yOpen0LXqFUjPXw.mft (raw, json) Hash identifier: JIZRTzIAGiSgTJmpGZXNW1Go7tMwaQNv49JseZ+UGdA= Subject key identifier: 04:AA:17:BC:35:11:05:B0:14:93:6B:C9:30:CA:CB:FD:C0:42:96:75 Authority key identifier: BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C Certificate issuer: /CN=A9163EB9/serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft Manifest number: CC Signing time: Fri 05 Sep 2025 06:06:15 +0000 Manifest this update: Fri 05 Sep 2025 06:06:14 +0000 Manifest next update: Fri 12 Sep 2025 06:06:14 +0000 Files and hashes: 1: vAv4-dc7foz8yOpen0LXqFUjPXw.crl (hash: gc68HuyYtaHED7mYYVLpo4jGNO0nNmdDUsoElsfD5Pw=) 2: 710FB354979E11EF99310B40C4F9AE02.roa (hash: bruRF8XqvNXc2lROOKilx3DJEF2Mi08/zHCfWANPCjg=) 3: 27AEE7D0979D11EFB1426839C4F9AE02.roa (hash: FRD/IGf5tsKizstdT15eHvBke9+NzOwPHHiU7wEzleM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EB9, serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C Validity Not Before: Sep 5 06:06:14 2025 GMT Not After : Sep 12 06:06:14 2025 GMT Subject: CN=68ba7dd7-cba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:37:8c:c6:70:87:09:bd:6a:4e:7b:a8:1d:99: e1:68:7e:f5:06:b2:5a:42:50:63:a4:c6:c4:be:42: 9a:8e:82:04:2a:7c:7d:dd:5b:e5:45:a1:c5:9a:36: 2f:d3:29:57:2b:0d:0a:ac:8d:d2:8a:4a:53:57:b4: 4f:b7:fb:61:76:b7:04:87:7c:d3:15:c7:d1:dc:fe: 1e:f6:02:b1:67:3a:05:6b:10:12:2f:7a:66:f1:dc: 7c:67:24:dc:3d:75:82:bb:69:38:07:85:d2:19:45: 8f:88:9a:c0:ca:7d:d8:dd:e1:2b:9e:13:3f:19:3c: 32:7a:f4:bf:9c:3c:f8:c7:b1:0e:a3:8b:f5:89:52: fb:a9:13:60:f3:76:23:49:01:c0:02:a2:d4:a5:01: fe:59:87:67:d5:85:78:d6:17:2c:92:69:bc:d5:b4: 91:a7:37:3f:ac:5e:65:ac:0c:c6:f7:5f:66:75:ed: 23:c6:90:eb:46:ed:c1:fd:d6:f5:a5:1d:84:eb:a5: 75:34:5d:db:92:dd:12:07:8d:d4:78:8d:53:df:4a: 01:8d:5c:12:98:a2:04:f7:6f:e8:5b:56:1b:86:95: 66:d6:d4:de:1d:b4:34:1e:5f:41:18:01:63:e0:8f: 2f:1a:76:66:bc:dc:59:88:5e:09:47:61:b8:15:9b: 20:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AA:17:BC:35:11:05:B0:14:93:6B:C9:30:CA:CB:FD:C0:42:96:75 X509v3 Authority Key Identifier: keyid:BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:85:95:55:6d:e7:b2:8e:53:3e:ca:1f:ee:6c:cf:f5:b7:53: 35:2e:35:ac:6a:41:4e:e7:07:f6:19:4a:cd:52:e2:c2:32:34: 28:d0:e1:16:a6:4d:b7:c5:09:ea:74:3b:56:5a:65:d3:f4:47: 10:4d:4c:37:d5:57:9a:7c:ad:2c:ca:7c:c4:31:e4:4d:ac:63: 58:29:fe:d8:c0:71:ad:2e:3c:eb:e2:d1:b2:0d:24:67:e2:8e: 78:73:a9:af:ab:29:ca:f3:3b:b2:44:78:39:bf:f3:6c:7e:37: 9c:fd:bf:dc:d8:cf:cc:d8:3e:b9:0f:a1:63:7e:8b:05:fb:a3: 03:53:4b:59:f4:4f:ec:84:f0:ba:ce:21:7d:07:bd:18:43:bb: ee:53:fe:22:5b:5d:ab:8e:3c:dd:37:e1:13:9f:83:de:27:ce: af:51:6b:4d:dd:72:54:cd:4c:f3:0e:5b:f5:44:bf:c9:00:d2: 53:12:d3:8d:68:b6:c3:d2:c6:3c:59:04:95:61:ef:3a:f1:5b: 3f:62:a9:37:da:cb:f9:1c:d0:15:a5:ba:60:12:e4:46:4d:61: 76:83:3e:9c:a2:06:58:a0:93:a7:32:78:53:7e:40:e2:e0:8a: 93:f1:57:0d:3f:02:9d:cc:79:20:37:18:87:87:69:18:77:d3: 8d:c3:25:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFQjkxMTAvBgNVBAUTKEJDMEJGOEY5RDczQjdFOENGQ0M4RUE1RTlGNDJEN0E4 NTUyMzNEN0MwHhcNMjUwOTA1MDYwNjE0WhcNMjUwOTEyMDYwNjE0WjAYMRYwFAYD VQQDEw02OGJhN2RkNy1jYmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDeMxnCHCb1qTnuoHZnhaH71BrJaQlBjpMbEvkKajoIEKnx93VvlRaHFmjYv 0ylXKw0KrI3SikpTV7RPt/thdrcEh3zTFcfR3P4e9gKxZzoFaxASL3pm8dx8ZyTc PXWCu2k4B4XSGUWPiJrAyn3Y3eErnhM/GTwyevS/nDz4x7EOo4v1iVL7qRNg83Yj SQHAAqLUpQH+WYdn1YV41hcskmm81bSRpzc/rF5lrAzG919mde0jxpDrRu3B/db1 pR2E66V1NF3bkt0SB43UeI1T30oBjVwSmKIE92/oW1YbhpVm1tTeHbQ0Hl9BGAFj 4I8vGnZmvNxZiF4JR2G4FZsgGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASqF7w1 EQWwFJNryTDKy/3AQpZ1MB8GA1UdIwQYMBaAFLwL+PnXO36M/MjqXp9C16hVIz18 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VCOS9GQ0Q1NUMwQTU0 OUYxMUVGODZBRTU5MjJDNEY5QUUwMi92QXY0LWRjN2Zvejh5T3BlbjBMWHFGVWpQ WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZBdjQtZGM3Zm96OHlPcGVuMExYcUZValBYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VCOS9GQ0Q1NUMwQTU0OUYxMUVGODZBRTU5MjJDNEY5QUUwMi92QXY0LWRjN2Zv ejh5T3BlbjBMWHFGVWpQWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEhZVVbeeyjlM+yh/ubM/1t1M1LjWsakFO5wf2GUrNUuLCMjQo0OEW pk23xQnqdDtWWmXT9EcQTUw31VeafK0synzEMeRNrGNYKf7YwHGtLjzr4tGyDSRn 4o54c6mvqynK8zuyRHg5v/Nsfjec/b/c2M/M2D65D6FjfosF+6MDU0tZ9E/shPC6 ziF9B70YQ7vuU/4iW12rjjzdN+ETn4PeJ86vUWtN3XJUzUzzDlv1RL/JANJTEtON aLbD0sY8WQSVYe868Vs/Yqk32sv5HNAVpbpgEuRGTWF2gz6cogZYoJOnMnhTfkDi 4IqT8VcNPwKdzHkgNxiHh2kYd9ONwyUn -----END CERTIFICATE-----Generated at Sat Sep 6 20:51:59 2025 by rpki-client