$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft File: VZvvzzSYaXPTvkWTUWF45MOs4os.mft (raw, json) Hash identifier: /Onp9uCOvWtfeOatEDEerTQN0/0qhpnJMY8ji6dzprw= Subject key identifier: 2C:65:37:0F:03:D3:D9:99:54:19:03:11:EF:E0:20:BD:92:85:4F:42 Authority key identifier: 55:9B:EF:CF:34:98:69:73:D3:BE:45:93:51:61:78:E4:C3:AC:E2:8B Certificate issuer: /CN=A9167003/serialNumber=559BEFCF34986973D3BE4593516178E4C3ACE28B Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft Manifest number: EC Signing time: Sun 07 Sep 2025 05:52:12 +0000 Manifest this update: Sun 07 Sep 2025 05:52:12 +0000 Manifest next update: Sun 14 Sep 2025 05:52:12 +0000 Files and hashes: 1: VZvvzzSYaXPTvkWTUWF45MOs4os.crl (hash: YvsMJQZuIoeIDaRstgvcUScauBdMnRIA3mjqENJi8Ao=) 2: 7B6E133A61D911F0822B8C0CC4F9AE02.roa (hash: ezXxJLwoPcgk4MWna/9ZB6q7u9eauHRSVysibGU4wOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.crl rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 05:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167003, serialNumber=559BEFCF34986973D3BE4593516178E4C3ACE28B Validity Not Before: Sep 7 05:52:12 2025 GMT Not After : Sep 14 05:52:12 2025 GMT Subject: CN=68bd1d8c-aedc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:76:9b:a2:95:9d:fe:33:ea:32:11:17:94:ff: 1e:09:45:7b:7a:73:dd:45:7c:d0:b6:ec:01:51:b2: c2:5c:d3:4f:ff:7c:e1:45:85:d2:90:c9:68:1b:40: 66:ea:f6:93:d0:7a:10:9c:1f:a6:17:e3:b6:53:cc: c5:f2:10:f3:aa:5f:1b:98:d3:81:42:34:f5:a9:aa: 15:20:4b:89:e9:0d:02:b2:18:ef:ad:50:c7:d4:9b: 1d:b5:89:97:70:fa:c1:3a:fa:0f:4c:bf:b3:02:b0: fb:52:c1:d8:62:b3:60:95:ad:2e:db:14:d6:f7:4b: 3a:5a:44:5f:e6:e7:8b:8d:c4:cf:c5:5c:0f:33:10: a1:0c:db:6f:9d:db:96:60:ef:00:00:d7:cf:96:51: 14:cb:03:cb:ef:bc:cd:0f:6d:00:1d:ec:a2:67:54: 11:82:4f:6d:7f:a1:b7:54:3f:89:b7:cd:fc:5a:2b: 07:92:43:0a:07:3a:44:a6:6e:1a:a3:63:d4:df:3f: df:27:21:83:22:78:b3:c9:67:c5:e6:f3:57:39:ba: e1:2d:c0:6c:22:09:cb:ce:33:a4:13:05:2e:41:dc: 74:08:09:c4:d3:f5:40:0e:69:8d:e4:0b:42:a9:12: 1c:f6:61:33:00:45:d4:8e:61:15:68:34:6c:e1:e1: 19:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:65:37:0F:03:D3:D9:99:54:19:03:11:EF:E0:20:BD:92:85:4F:42 X509v3 Authority Key Identifier: keyid:55:9B:EF:CF:34:98:69:73:D3:BE:45:93:51:61:78:E4:C3:AC:E2:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:e2:9f:69:f0:63:ee:81:77:cf:0c:55:56:f5:88:44:d3:5e: 55:c8:5e:d9:6e:87:10:d7:9e:32:7a:50:2a:02:29:3e:24:cf: 0a:d7:b8:cf:b5:2a:36:ec:65:81:1f:1b:67:61:bf:26:5e:ee: 5f:1b:4c:74:f7:9a:95:44:2a:89:62:b6:c5:c0:e2:1a:4d:a8: 4b:2c:b3:5d:9d:74:29:ce:66:bd:d9:51:9b:b3:8b:e9:25:91: 55:78:4e:d6:0c:54:a9:df:39:36:8a:01:b1:b5:c5:1a:d0:23: ea:6d:52:12:14:71:4d:ba:67:b3:c6:bd:14:9f:b1:b4:0b:12: f3:25:07:c1:33:64:22:b8:16:ef:58:ff:e5:b2:d7:de:d2:5d: e7:0b:84:b4:90:84:80:10:39:e6:a8:7b:43:dd:a6:54:31:37: 4a:68:f9:7a:ef:5a:2f:50:9f:b4:36:db:70:b6:06:99:42:c5: 57:01:1b:ee:92:1c:c8:3a:78:32:00:06:c3:7e:d9:64:fa:f8: cf:59:18:a2:59:dc:b5:0c:e2:a8:a5:67:a9:e4:37:28:5d:b0: 81:81:c1:38:a3:e8:f5:81:fa:0e:ca:4e:18:8d:57:28:2f:20: 11:13:16:02:5b:34:b7:e0:57:dd:86:ca:39:db:ee:c1:c8:66: 4f:af:0a:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwMDMxMTAvBgNVBAUTKDU1OUJFRkNGMzQ5ODY5NzNEM0JFNDU5MzUxNjE3OEU0 QzNBQ0UyOEIwHhcNMjUwOTA3MDU1MjEyWhcNMjUwOTE0MDU1MjEyWjAYMRYwFAYD VQQDEw02OGJkMWQ4Yy1hZWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5nabopWd/jPqMhEXlP8eCUV7enPdRXzQtuwBUbLCXNNP/3zhRYXSkMloG0Bm 6vaT0HoQnB+mF+O2U8zF8hDzql8bmNOBQjT1qaoVIEuJ6Q0CshjvrVDH1JsdtYmX cPrBOvoPTL+zArD7UsHYYrNgla0u2xTW90s6WkRf5ueLjcTPxVwPMxChDNtvnduW YO8AANfPllEUywPL77zND20AHeyiZ1QRgk9tf6G3VD+Jt838WisHkkMKBzpEpm4a o2PU3z/fJyGDInizyWfF5vNXObrhLcBsIgnLzjOkEwUuQdx0CAnE0/VADmmN5AtC qRIc9mEzAEXUjmEVaDRs4eEZrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxlNw8D 09mZVBkDEe/gIL2ShU9CMB8GA1UdIwQYMBaAFFWb7880mGlz075Fk1FheOTDrOKL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzAwMy8yRjkzRjVDQzMy QkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9WWnZ2enpTWWFYUFR2a1dUVVdGNDVNT3M0 b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZadnZ6elNZYVhQVHZrV1RVV0Y0NU1PczRvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzAwMy8yRjkzRjVDQzMyQkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9WWnZ2enpTWWFY UFR2a1dUVVdGNDVNT3M0b3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ4p9p8GPugXfPDFVW9YhE015VyF7ZbocQ154yelAqAik+JM8K17jP tSo27GWBHxtnYb8mXu5fG0x095qVRCqJYrbFwOIaTahLLLNdnXQpzma92VGbs4vp JZFVeE7WDFSp3zk2igGxtcUa0CPqbVISFHFNumezxr0Un7G0CxLzJQfBM2QiuBbv WP/lstfe0l3nC4S0kISAEDnmqHtD3aZUMTdKaPl671ovUJ+0NttwtgaZQsVXARvu khzIOngyAAbDftlk+vjPWRiiWdy1DOKopWep5DcoXbCBgcE4o+j1gfoOyk4YjVco LyARExYCWzS34Ffdhso52+7ByGZPrwrp -----END CERTIFICATE-----Generated at Mon Sep 8 13:59:18 2025 by rpki-client