$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft File: VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft (raw, json) Hash identifier: K/dA5O03FCmPzNPfJIORe6HZhKX+U+NWyZWDqXoRVTc= Subject key identifier: 98:36:5A:C8:DA:D7:EC:F4:4B:B2:D4:C6:01:F1:90:7E:FF:E7:5B:48 Authority key identifier: 54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 Certificate issuer: /CN=A916DAC0/serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft Manifest number: 011D Signing time: Tue 09 Sep 2025 04:53:39 +0000 Manifest this update: Tue 09 Sep 2025 04:53:39 +0000 Manifest next update: Tue 16 Sep 2025 04:53:39 +0000 Files and hashes: 1: VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl (hash: gznITbYvDuIFj8FlzYj41f1lyuMzqTzP+BTf8M+HERQ=) 2: 2C06DFA22C4C11EFB6974530C4F9AE02.roa (hash: x0R7/aV5SAgSCY1aeBWFVSWK6YKsQh3+SMh4O+dO85w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 04:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DAC0, serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Validity Not Before: Sep 9 04:53:39 2025 GMT Not After : Sep 16 04:53:39 2025 GMT Subject: CN=68bfb2d3-d61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:80:6c:7d:71:23:5e:c5:e2:9a:36:56:9b:45: 27:a7:94:39:94:dc:0a:15:77:04:d9:fb:42:56:e3: 66:81:ff:b8:8a:a6:b8:b2:f6:bd:1b:d2:2e:4c:4a: 2b:db:d0:e1:7b:4e:67:e9:c7:98:70:ed:ca:f9:f4: 99:cc:bc:e5:9e:2b:86:6f:5b:94:37:c3:94:62:cd: 74:05:19:fc:33:45:6f:7c:be:50:2e:12:2f:a9:44: 11:dd:80:a1:a1:0a:72:8e:d1:a6:ef:0f:1c:eb:f3: fc:9d:3c:d3:81:78:2b:b0:4f:ef:7a:f6:58:d4:ef: f6:4a:7e:d2:e4:ab:71:60:32:40:bb:d5:80:03:ce: 31:6b:1d:3b:b9:17:ea:ae:ae:2f:a6:f8:d3:5c:0f: a5:e9:79:ba:6d:ab:bf:ad:91:6e:b1:0c:fd:64:93: 46:14:42:c9:bf:28:1b:de:72:2c:05:8f:a2:62:32: 16:99:6a:ec:64:56:4c:90:cf:11:29:df:6c:bc:26: 8c:72:15:48:63:1a:37:2c:7f:f2:6e:fb:87:ce:21: 07:bd:91:43:89:fb:4e:95:78:6c:bc:ce:2b:17:09: fe:65:4c:75:08:af:a7:c6:20:b0:02:42:50:43:c0: 9e:c8:48:ea:7d:ca:73:e3:77:f9:1c:bd:d8:67:6f: 03:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:36:5A:C8:DA:D7:EC:F4:4B:B2:D4:C6:01:F1:90:7E:FF:E7:5B:48 X509v3 Authority Key Identifier: keyid:54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:7f:92:cb:d2:f3:5b:e5:cc:89:8c:33:d5:38:61:1d:f6:2f: 95:56:f1:b7:40:c2:ca:c5:8e:62:cd:b8:6e:a5:71:3a:41:79: 4c:2e:6d:65:45:9d:52:f8:9d:5f:01:dd:24:f3:11:ec:28:23: 43:09:6f:c3:aa:3c:93:5b:84:53:2a:c6:2d:05:08:93:3a:38: fd:17:e9:31:4a:df:4b:56:c1:16:98:f8:13:df:1e:15:f1:cf: 7f:28:9f:7a:96:83:f5:89:30:69:72:47:89:14:cb:d5:74:4f: ac:f6:e7:9c:58:59:42:a2:37:7c:e6:eb:3f:40:21:75:56:c1: 8c:99:df:7b:85:31:23:64:51:1c:73:59:5b:8e:25:3d:c7:4d: ba:08:a9:39:37:96:63:30:59:8c:1a:12:a9:6b:c4:6c:cf:ba: 30:a4:62:5c:ac:84:b3:e1:87:dc:4e:dc:d6:40:8a:8a:9a:75: ce:42:3d:79:9c:9b:13:65:f5:76:2e:22:84:92:51:b1:1e:4a: c9:25:4d:5d:2c:b7:fd:c9:fe:ef:a2:cf:17:01:43:44:c7:38: 9c:c6:ab:bd:03:67:32:dd:56:3b:31:aa:d6:ea:74:52:55:94: 4e:13:e2:55:3c:36:e5:11:73:11:61:27:df:f9:ee:a0:73:b6: 15:7b:a9:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBQzAxMTAvBgNVBAUTKDU0Qjk2NkFEOEI1NzMxNjQxNjUyOTUwN0Y1QkNBOUMw MEUxMTgxQjkwHhcNMjUwOTA5MDQ1MzM5WhcNMjUwOTE2MDQ1MzM5WjAYMRYwFAYD VQQDEw02OGJmYjJkMy1kNjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYBsfXEjXsXimjZWm0Unp5Q5lNwKFXcE2ftCVuNmgf+4iqa4sva9G9IuTEor 29Dhe05n6ceYcO3K+fSZzLzlniuGb1uUN8OUYs10BRn8M0VvfL5QLhIvqUQR3YCh oQpyjtGm7w8c6/P8nTzTgXgrsE/vevZY1O/2Sn7S5KtxYDJAu9WAA84xax07uRfq rq4vpvjTXA+l6Xm6bau/rZFusQz9ZJNGFELJvygb3nIsBY+iYjIWmWrsZFZMkM8R Kd9svCaMchVIYxo3LH/ybvuHziEHvZFDiftOlXhsvM4rFwn+ZUx1CK+nxiCwAkJQ Q8CeyEjqfcpz43f5HL3YZ28DsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJg2Wsja 1+z0S7LUxgHxkH7/51tIMB8GA1UdIwQYMBaAFFS5Zq2LVzFkFlKVB/W8qcAOEYG5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REFDMC9FNzYzQUE4QURF ODgxMUVFOTNEOUE3NDRDNEY5QUUwMi9WTGxtcll0WE1XUVdVcFVIOWJ5cHdBNFJn YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZMbG1yWXRYTVdRV1VwVUg5Ynlwd0E0Umdiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REFDMC9FNzYzQUE4QURFODgxMUVFOTNEOUE3NDRDNEY5QUUwMi9WTGxtcll0WE1X UVdVcFVIOWJ5cHdBNFJnYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnf5LL0vNb5cyJjDPVOGEd9i+VVvG3QMLKxY5izbhupXE6QXlMLm1l RZ1S+J1fAd0k8xHsKCNDCW/DqjyTW4RTKsYtBQiTOjj9F+kxSt9LVsEWmPgT3x4V 8c9/KJ96loP1iTBpckeJFMvVdE+s9uecWFlCojd85us/QCF1VsGMmd97hTEjZFEc c1lbjiU9x026CKk5N5ZjMFmMGhKpa8Rsz7owpGJcrISz4YfcTtzWQIqKmnXOQj15 nJsTZfV2LiKEklGxHkrJJU1dLLf9yf7vos8XAUNExzicxqu9A2cy3VY7MarW6nRS VZROE+JVPDblEXMRYSff+e6gc7YVe6lE -----END CERTIFICATE-----Generated at Tue Sep 9 13:18:05 2025 by rpki-client