$ rpki-client -vvf rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft File: vmOANw9kBuY_dG-vUrxQHsTQvVI.mft (raw, json) Hash identifier: F6jnQ/BFCwVKPXyfGr/cEe8nnjSsd45OEz9DzqJUsCo= Subject key identifier: 27:75:AE:5D:4E:37:DD:95:FF:D4:4F:14:95:70:DE:E7:F0:86:00:E6 Authority key identifier: BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52 Certificate issuer: /CN=A9171B8D/serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft Manifest number: 60 Signing time: Wed 17 Sep 2025 07:50:18 +0000 Manifest this update: Wed 17 Sep 2025 07:50:18 +0000 Manifest next update: Wed 24 Sep 2025 07:50:18 +0000 Files and hashes: 1: vmOANw9kBuY_dG-vUrxQHsTQvVI.crl (hash: jF+k78hflxjEmC6/JptEipTHpEgA4kd7LGoNtVp5JNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171B8D, serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52 Validity Not Before: Sep 17 07:50:18 2025 GMT Not After : Sep 24 07:50:18 2025 GMT Subject: CN=68ca683a-e361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b6:ba:72:d9:13:b3:e9:a8:0a:cb:bb:e1:93: 30:69:6f:58:c3:e0:04:07:cc:1c:ea:65:d9:e3:28: d7:73:b5:f5:0f:98:78:65:ee:b1:74:3a:ae:86:9d: 84:c1:69:7f:46:60:23:6c:93:d5:71:87:ce:c5:77: 63:cc:8d:ab:38:89:b3:fc:9c:e0:8b:9a:c2:41:e6: d6:24:d9:9e:6d:60:ed:d0:e2:71:09:97:6c:31:9f: c4:fc:e6:a9:b5:b0:48:71:b5:09:cf:81:e7:0b:fc: 3d:cc:e6:ac:e3:28:00:15:ff:4c:cc:0f:9d:52:f8: f7:bd:83:4b:8b:83:1e:fd:b2:92:ec:64:ed:7e:9e: 9b:ce:fc:2a:5f:91:3d:a3:34:fc:40:97:a7:80:bc: 9d:84:2f:8e:1f:f7:c0:ba:e4:1a:b2:bb:0e:9a:db: c4:ea:e0:ac:8f:86:aa:e1:fd:f9:c1:d9:9d:ab:86: 37:d5:96:94:52:b3:b4:58:33:b1:21:1a:c7:d2:b5: 3f:26:f3:a5:f3:94:7f:5d:95:ac:a5:01:8b:17:73: c6:01:00:f8:ba:c5:61:1f:c4:2f:9d:7f:27:39:7b: 51:b0:bb:56:01:03:f1:f3:81:01:62:f9:32:17:cf: be:0b:34:1d:3e:53:3a:c9:62:aa:b0:8b:4a:fb:e9: 7c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:75:AE:5D:4E:37:DD:95:FF:D4:4F:14:95:70:DE:E7:F0:86:00:E6 X509v3 Authority Key Identifier: keyid:BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:a3:6d:c2:90:e7:61:76:52:55:40:23:fb:da:f0:5e:a0:10: 6d:f7:61:a3:63:ea:fb:2e:3c:18:03:d9:7b:39:fd:87:d2:6e: 3f:fa:78:8c:28:ae:32:05:16:47:67:46:7a:d9:51:67:6d:0a: 29:34:c3:44:13:36:82:de:29:2b:a6:f0:60:b1:7d:47:23:cd: 09:cb:fd:8b:8b:12:a5:d9:30:c2:86:fb:81:99:7d:39:d5:00: 88:f7:9c:50:ed:25:9d:5c:ae:f5:65:9d:b3:0c:89:20:fb:62: 1d:68:c8:fa:8b:0a:53:bc:cf:a8:55:cb:7a:a1:14:f7:16:e1: 27:e2:b7:8c:61:ad:f3:b4:85:0f:35:99:d6:70:5d:89:c2:ce: b2:63:b1:03:ca:3f:81:e1:83:2d:ba:0c:71:61:fd:05:72:c9: ce:fd:ff:67:fa:33:1c:f5:b9:e5:39:4d:2c:1d:fc:2b:87:ca: 2f:0b:c2:d9:1f:fa:f4:65:be:1a:49:a7:5c:c2:34:e4:53:a1: e6:ab:92:c1:6e:9f:8f:08:2e:71:1d:4b:0a:91:d3:2d:28:f2: dd:12:9a:53:50:70:f6:d3:4a:27:31:58:fe:b8:e8:1e:f1:d0: f8:d2:0a:19:50:b0:e8:69:89:11:c7:bd:ba:cd:5e:a6:91:64: 08:27:cb:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MUI4RDExMC8GA1UEBRMoQkU2MzgwMzcwRjY0MDZFNjNGNzQ2RkFGNTJCQzUwMUVD NEQwQkQ1MjAeFw0yNTA5MTcwNzUwMThaFw0yNTA5MjQwNzUwMThaMBgxFjAUBgNV BAMTDTY4Y2E2ODNhLWUzNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDotrpy2ROz6agKy7vhkzBpb1jD4AQHzBzqZdnjKNdztfUPmHhl7rF0Oq6GnYTB aX9GYCNsk9Vxh87Fd2PMjas4ibP8nOCLmsJB5tYk2Z5tYO3Q4nEJl2wxn8T85qm1 sEhxtQnPgecL/D3M5qzjKAAV/0zMD51S+Pe9g0uLgx79spLsZO1+npvO/CpfkT2j NPxAl6eAvJ2EL44f98C65Bqyuw6a28Tq4KyPhqrh/fnB2Z2rhjfVlpRSs7RYM7Eh GsfStT8m86XzlH9dlaylAYsXc8YBAPi6xWEfxC+dfyc5e1Gwu1YBA/HzgQFi+TIX z74LNB0+UzrJYqqwi0r76XxdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJ3WuXU43 3ZX/1E8UlXDe5/CGAOYwHwYDVR0jBBgwFoAUvmOANw9kBuY/dG+vUrxQHsTQvVIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxQjhELzFDRjlBODdBMDNE MTExRjBCMjM0QkMxNUM0RjlBRTAyL3ZtT0FOdzlrQnVZX2RHLXZVcnhRSHNUUXZW SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdm1PQU53OWtCdVlfZEctdlVyeFFIc1RRdlZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx QjhELzFDRjlBODdBMDNEMTExRjBCMjM0QkMxNUM0RjlBRTAyL3ZtT0FOdzlrQnVZ X2RHLXZVcnhRSHNUUXZWSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGijbcKQ52F2UlVAI/va8F6gEG33YaNj6vsuPBgD2Xs5/YfSbj/6eIwo rjIFFkdnRnrZUWdtCik0w0QTNoLeKSum8GCxfUcjzQnL/YuLEqXZMMKG+4GZfTnV AIj3nFDtJZ1crvVlnbMMiSD7Yh1oyPqLClO8z6hVy3qhFPcW4Sfit4xhrfO0hQ81 mdZwXYnCzrJjsQPKP4Hhgy26DHFh/QVyyc79/2f6Mxz1ueU5TSwd/CuHyi8Lwtkf +vRlvhpJp1zCNORToearksFun48ILnEdSwqR0y0o8t0SmlNQcPbTSicxWP646B7x 0PjSChlQsOhpiRHHvbrNXqaRZAgny3I= -----END CERTIFICATE-----Generated at Fri Sep 19 09:08:12 2025 by rpki-client