$ rpki-client -vvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft File: vbWSaolrtlGg51QKOYzV7wcUFx8.mft (raw, json) Hash identifier: alLgvK8FL9K8Vx/MZP/q1S+mdwy8zm86a2qojNUVBb8= Subject key identifier: 43:E7:36:AC:F0:CA:96:33:BE:C8:14:F3:E5:25:6E:B5:96:0C:02:AA Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F Certificate issuer: /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Certificate serial: 0459 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft Manifest number: 0455 Signing time: Fri 19 Sep 2025 00:35:51 +0000 Manifest this update: Fri 19 Sep 2025 00:35:51 +0000 Manifest next update: Fri 26 Sep 2025 00:35:51 +0000 Files and hashes: 1: vbWSaolrtlGg51QKOYzV7wcUFx8.crl (hash: FDBH5KzzRugLPCAdx5ecl7w+mXvuuJXllkifDcw8r64=) 2: 66864FCE688011ECAA829E31C4F9AE02.roa (hash: w5bL3BxYC2VJUK/MoXPR18n/PN4tqZHifWiPk20fkzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:35:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1113 (0x459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A5CD, serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Validity Not Before: Sep 19 00:35:51 2025 GMT Not After : Sep 26 00:35:51 2025 GMT Subject: CN=68cca567-4043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f0:7b:d0:62:cd:7c:71:d1:8c:4c:c8:8e:6e: c1:d9:90:5d:06:79:44:00:0f:a8:7d:8a:95:90:3e: 1b:18:88:b1:c0:6c:31:80:63:48:08:1d:6f:7b:14: 2f:68:a5:ee:d2:08:df:13:6f:42:a9:87:7d:b1:23: 8f:eb:d3:23:ab:b8:99:6f:46:1b:35:d0:22:6f:ea: 12:08:65:ad:12:45:13:03:a5:d0:af:66:33:29:62: 01:db:d5:9b:28:5a:f2:47:28:b1:4e:8e:f1:df:c6: c2:78:28:68:16:6b:bb:44:83:59:54:e7:4f:cb:f5: ae:d1:48:86:18:cc:cd:5b:0b:71:33:f8:7d:c2:0c: 69:88:17:7d:98:7b:04:7c:fc:79:62:89:f2:e0:b7: 87:f2:3b:42:6a:66:b6:5f:47:91:4c:56:82:70:9e: 85:9e:a5:ea:53:c7:63:48:08:a6:81:00:74:0e:ea: 83:64:86:01:f3:a8:62:cc:12:96:1a:cb:ff:ce:4f: 30:11:f2:51:65:87:37:ff:4d:d9:c7:b5:c4:8d:85: d3:4c:1c:b5:3e:85:6e:d5:14:b9:2a:83:3f:d8:55: 00:cb:4e:f2:6b:22:c6:7d:1c:48:e1:44:64:10:ff: 7b:3f:c4:b8:a0:93:ce:5a:fd:04:52:8f:49:6f:1b: 5e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E7:36:AC:F0:CA:96:33:BE:C8:14:F3:E5:25:6E:B5:96:0C:02:AA X509v3 Authority Key Identifier: keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:b0:48:20:a4:02:28:fa:23:ea:72:63:f3:a8:00:82:66:a0: ca:3b:b8:4e:48:63:c5:5b:13:34:94:cf:79:4b:1f:42:ef:e7: fa:d1:d1:5d:59:52:f6:2e:9a:b8:e8:1f:2b:67:49:e8:48:2e: 98:56:b6:1c:2c:39:6f:87:cb:fd:0c:9f:c7:25:a5:2a:c2:3b: 78:7d:cc:8e:44:96:ba:d5:68:ad:b2:1b:e3:fe:60:3d:9d:0a: 57:f3:c3:71:50:b5:f8:05:69:1e:f5:a0:bc:5e:3b:70:08:72: b8:46:bb:10:73:8b:7d:5c:97:ee:14:43:1c:cc:68:70:e7:4e: c1:a1:e4:ae:1d:ee:71:36:da:78:b5:37:e0:64:ec:3d:0d:39: d4:fe:c3:9f:47:c2:3a:7d:90:8b:e5:a6:3a:ce:04:fe:10:4f: 9c:39:5d:03:96:1a:c5:07:3a:dc:0b:14:88:be:43:0d:fe:23: b7:ee:d6:3a:9e:2b:a3:7a:82:1c:55:07:2f:63:51:e7:33:cc: 4e:21:53:cb:99:67:f6:07:43:c0:98:31:8c:0f:3b:f8:7f:c1: 74:44:ff:8f:b0:b1:c3:8e:a9:d9:9f:06:48:75:ed:ed:25:27: 79:e5:cd:60:81:61:45:4f:08:15:27:7c:1f:97:af:69:6f:b4: 4b:b7:aa:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1Q0QxMTAvBgNVBAUTKEJEQjU5MjZBODk2QkI2NTFBMEU3NTQwQTM5OENENUVG MDcxNDE3MUYwHhcNMjUwOTE5MDAzNTUxWhcNMjUwOTI2MDAzNTUxWjAYMRYwFAYD VQQDEw02OGNjYTU2Ny00MDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3PB70GLNfHHRjEzIjm7B2ZBdBnlEAA+ofYqVkD4bGIixwGwxgGNICB1vexQv aKXu0gjfE29CqYd9sSOP69Mjq7iZb0YbNdAib+oSCGWtEkUTA6XQr2YzKWIB29Wb KFryRyixTo7x38bCeChoFmu7RINZVOdPy/Wu0UiGGMzNWwtxM/h9wgxpiBd9mHsE fPx5Yony4LeH8jtCama2X0eRTFaCcJ6FnqXqU8djSAimgQB0DuqDZIYB86hizBKW Gsv/zk8wEfJRZYc3/03Zx7XEjYXTTBy1PoVu1RS5KoM/2FUAy07yayLGfRxI4URk EP97P8S4oJPOWv0EUo9JbxtenwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPnNqzw ypYzvsgU8+UlbrWWDAKqMB8GA1UdIwQYMBaAFL21kmqJa7ZRoOdUCjmM1e8HFBcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTVDRC8yOTQzNkZDRTY4 N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRsR2c1MVFLT1l6Vjd3Y1VG eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZiV1Nhb2xydGxHZzUxUUtPWXpWN3djVUZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTVDRC8yOTQzNkZDRTY4N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRs R2c1MVFLT1l6Vjd3Y1VGeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFsEggpAIo+iPqcmPzqACCZqDKO7hOSGPFWxM0lM95Sx9C7+f60dFd WVL2Lpq46B8rZ0noSC6YVrYcLDlvh8v9DJ/HJaUqwjt4fcyORJa61Witshvj/mA9 nQpX88NxULX4BWke9aC8XjtwCHK4RrsQc4t9XJfuFEMczGhw507BoeSuHe5xNtp4 tTfgZOw9DTnU/sOfR8I6fZCL5aY6zgT+EE+cOV0DlhrFBzrcCxSIvkMN/iO37tY6 niujeoIcVQcvY1HnM8xOIVPLmWf2B0PAmDGMDzv4f8F0RP+PsLHDjqnZnwZIde3t JSd55c1ggWFFTwgVJ3wfl69pb7RLt6o7 -----END CERTIFICATE-----Generated at Fri Sep 19 05:25:56 2025 by rpki-client