$ rpki-client -vvf rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft File: vxurTPDVSTDgAbctJPMLPtaK4rM.mft (raw, json) Hash identifier: roA0LkWD/dy2EIzuco752t6QXXjzhn0Tl1uOmHupzpo= Subject key identifier: 57:30:B4:CE:FC:88:07:33:8D:BA:77:60:9F:85:08:D7:86:C6:3C:36 Authority key identifier: BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3 Certificate issuer: /CN=A916F95E/serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3 Certificate serial: 10E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft Manifest number: 10DC Signing time: Sun 24 Aug 2025 17:16:00 +0000 Manifest this update: Sun 24 Aug 2025 17:16:00 +0000 Manifest next update: Sun 31 Aug 2025 17:16:00 +0000 Files and hashes: 1: vxurTPDVSTDgAbctJPMLPtaK4rM.crl (hash: nT+i4mWxBLbNGqPY2FFYXjpARi4ESlRdW2b/m5gwEmU=) 2: 1BB160C225EB11E9ADD6867FC4F9AE02.roa (hash: 8YN4HjFnFIcDaShQHDoigKa3LLkHGTw5fy+IJogcxeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:15:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4325 (0x10e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F95E, serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3 Validity Not Before: Aug 24 17:16:00 2025 GMT Not After : Aug 31 17:16:00 2025 GMT Subject: CN=68ab48d0-c78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2e:2e:2f:5e:70:ff:4e:33:89:9b:8a:ec:0f: 1a:49:3c:f1:c9:6b:5b:e1:70:e5:ac:71:9b:f1:39: 75:e2:1a:1d:89:92:92:29:0b:00:9e:3c:c8:c0:05: 22:bc:ac:ef:78:6d:fb:41:82:22:ae:54:27:a5:ab: 8c:16:5d:9d:eb:dd:f3:b3:85:0a:56:b7:2e:25:05: 8f:14:ea:4b:c6:31:7b:01:bb:f5:8a:ce:ad:5a:83: 58:34:c1:c0:41:45:5e:e0:22:16:48:e2:8e:32:1c: 5a:42:9f:b4:24:5f:21:e5:36:0f:c6:cf:72:9c:f2: ae:fe:4a:d4:f0:35:b5:c0:23:59:49:c0:a3:b3:30: 8e:e1:90:7b:c3:86:aa:0d:1d:b2:44:f0:18:13:4d: 46:05:4f:1a:8b:21:d7:ce:2b:b2:7b:7c:24:7b:05: 78:d1:95:df:96:f0:5f:1e:b1:54:ef:14:f1:b3:36: 78:51:7d:4c:6a:e5:5c:98:18:ca:8f:e9:3c:09:32: aa:2c:d4:4a:70:17:bb:b2:25:ea:fc:c6:e4:70:f0: 19:16:7d:44:5b:99:76:60:9a:57:e7:6e:a0:9f:c2: f1:4d:8b:32:c5:28:73:6d:06:e6:76:bb:23:0c:d4: a5:10:da:8b:51:5e:c1:82:c4:77:2c:ba:0a:b5:a9: d7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:30:B4:CE:FC:88:07:33:8D:BA:77:60:9F:85:08:D7:86:C6:3C:36 X509v3 Authority Key Identifier: keyid:BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:df:57:b6:05:cc:b0:46:e6:7b:bc:1b:68:2f:fa:1a:e9:63: 6d:1f:5b:10:af:62:b8:d4:b6:03:70:23:55:de:b7:64:30:df: ed:2e:3d:64:e3:a3:cd:2f:53:16:56:7a:45:f2:19:a8:9c:5d: 4b:3e:9f:13:bc:97:fe:f4:23:9d:30:33:77:58:fd:c9:03:fc: 08:9f:3d:18:5f:0b:04:55:0a:b7:15:67:c5:00:bf:06:f8:be: b9:07:ef:0e:54:0b:63:21:49:35:90:a8:74:51:4d:38:9a:26: e5:ac:77:c1:09:52:5a:41:fd:64:fc:46:37:9e:e9:ee:47:be: 60:92:0b:9f:38:b9:19:16:eb:92:76:7a:08:c8:95:ba:23:e0: a6:ee:ba:32:df:64:93:ec:14:7a:73:6a:df:2d:95:5d:5c:86: 8e:d7:2b:63:90:fc:d7:35:b1:22:1f:24:13:6b:da:5f:be:11: 97:03:ac:02:3f:c6:8d:8f:11:e0:06:6b:61:16:c2:bd:fc:8b: 6b:61:ab:f5:e0:65:82:0c:ea:a5:6e:2e:af:84:5d:bb:5b:7c: 60:ba:5d:09:45:81:27:cd:d5:0e:29:44:dd:ea:80:96:0e:58: 53:7f:ff:84:b6:d7:5c:69:3d:69:93:48:18:86:11:14:c7:69: 9e:66:e2:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY5NUUxMTAvBgNVBAUTKEJGMUJBQjRDRjBENTQ5MzBFMDAxQjcyRDI0RjMwQjNF RDY4QUUyQjMwHhcNMjUwODI0MTcxNjAwWhcNMjUwODMxMTcxNjAwWjAYMRYwFAYD VQQDEw02OGFiNDhkMC1jNzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApy4uL15w/04ziZuK7A8aSTzxyWtb4XDlrHGb8Tl14hodiZKSKQsAnjzIwAUi vKzveG37QYIirlQnpauMFl2d693zs4UKVrcuJQWPFOpLxjF7Abv1is6tWoNYNMHA QUVe4CIWSOKOMhxaQp+0JF8h5TYPxs9ynPKu/krU8DW1wCNZScCjszCO4ZB7w4aq DR2yRPAYE01GBU8aiyHXziuye3wkewV40ZXflvBfHrFU7xTxszZ4UX1MauVcmBjK j+k8CTKqLNRKcBe7siXq/MbkcPAZFn1EW5l2YJpX526gn8LxTYsyxShzbQbmdrsj DNSlENqLUV7BgsR3LLoKtanX7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcwtM78 iAczjbp3YJ+FCNeGxjw2MB8GA1UdIwQYMBaAFL8bq0zw1Ukw4AG3LSTzCz7WiuKz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Rjk1RS9CNzA4Nzk2ODI1 RTkxMUU5QkUzMUQ0N0RDNEY5QUUwMi92eHVyVFBEVlNURGdBYmN0SlBNTFB0YUs0 ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z4dXJUUERWU1REZ0FiY3RKUE1MUHRhSzRyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Rjk1RS9CNzA4Nzk2ODI1RTkxMUU5QkUzMUQ0N0RDNEY5QUUwMi92eHVyVFBEVlNU RGdBYmN0SlBNTFB0YUs0ck0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy31e2BcywRuZ7vBtoL/oa6WNtH1sQr2K41LYDcCNV3rdkMN/tLj1k 46PNL1MWVnpF8hmonF1LPp8TvJf+9COdMDN3WP3JA/wInz0YXwsEVQq3FWfFAL8G +L65B+8OVAtjIUk1kKh0UU04miblrHfBCVJaQf1k/EY3nunuR75gkgufOLkZFuuS dnoIyJW6I+Cm7roy32ST7BR6c2rfLZVdXIaO1ytjkPzXNbEiHyQTa9pfvhGXA6wC P8aNjxHgBmthFsK9/ItrYav14GWCDOqlbi6vhF27W3xgul0JRYEnzdUOKUTd6oCW DlhTf/+EttdcaT1pk0gYhhEUx2meZuIc -----END CERTIFICATE-----Generated at Sun Aug 24 21:44:32 2025 by rpki-client