$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft File: vcSlFjMX9zCX8CejQrhgp5LX8dw.mft (raw, json) Hash identifier: 4m9tWe6CYIEQbPuZQGfQndv+yWOMetXuT2UzsJgy2E8= Subject key identifier: CB:D3:A6:C3:15:EC:7F:E6:E1:A8:A0:52:E5:93:AE:A8:F6:3D:4A:66 Authority key identifier: BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC Certificate issuer: /CN=A9179F64/serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft Manifest number: CC Signing time: Fri 19 Sep 2025 06:24:11 +0000 Manifest this update: Fri 19 Sep 2025 06:24:10 +0000 Manifest next update: Fri 26 Sep 2025 06:24:10 +0000 Files and hashes: 1: vcSlFjMX9zCX8CejQrhgp5LX8dw.crl (hash: Si9d85EGnTB0n0pp+9dIPdyyWKlzGH2X7WBbze626eQ=) 2: AB4A60EECBA311EFB9E20E13C4F9AE02.roa (hash: Xcy4MFhRyr2k/5Jm4R5iv0t1VBaS/P+wq9LQCj1UUVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 06:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F64, serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC Validity Not Before: Sep 19 06:24:10 2025 GMT Not After : Sep 26 06:24:10 2025 GMT Subject: CN=68ccf70b-9875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a1:c8:1f:0d:3f:93:1a:e2:93:60:bc:2b:27: 91:fe:e3:74:40:fc:cb:8f:d6:18:3d:b7:e0:73:64: 1d:74:6a:ea:4e:b6:ca:39:36:a8:89:2b:4f:ed:44: d6:bc:70:2b:88:e0:94:90:2d:54:7b:57:6f:d0:2c: f3:4a:8b:e4:25:0a:fa:38:d9:c1:10:52:56:3a:3e: a6:78:9b:c6:79:af:e9:39:af:c8:ab:01:9c:00:2d: de:72:a5:97:bc:43:0b:75:43:ea:d5:87:97:9b:42: 82:cb:a8:0f:8c:d2:47:db:d8:be:eb:ea:db:e3:c0: 76:53:86:ae:08:15:2d:8c:5b:7a:14:68:9b:78:e0: 99:8a:b8:e3:ed:d6:26:02:74:98:27:4e:aa:74:73: f4:5e:7f:16:2c:12:b6:c1:95:42:b3:f0:cb:23:54: 0f:c1:8a:91:48:d5:a0:3d:4f:b6:6a:52:05:4b:e9: 19:73:bd:4d:60:4c:b5:63:4d:aa:73:fa:a5:91:0b: 92:50:60:9d:a0:e7:a1:81:3b:62:39:b4:c9:09:79: bc:3a:f1:14:c7:23:00:93:5d:e9:11:f3:64:03:ea: a4:d7:e4:9e:b5:aa:c9:ee:3d:eb:32:b8:bf:b2:1f: d2:eb:2e:30:b6:a1:34:1e:62:b0:c7:76:89:c4:59: e1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D3:A6:C3:15:EC:7F:E6:E1:A8:A0:52:E5:93:AE:A8:F6:3D:4A:66 X509v3 Authority Key Identifier: keyid:BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:74:ca:48:4a:2f:73:7c:9b:85:cd:c5:77:47:df:c8:6c:c0: 7b:bf:bb:e7:d0:0e:88:30:fe:50:7e:88:f5:f0:cc:00:4b:35: e6:df:02:ec:e9:4a:20:bb:1f:53:3a:bf:23:a9:a0:7a:45:a4: c9:22:8d:35:65:a4:7a:e7:b3:15:86:e7:22:4e:e8:99:10:47: ad:27:fd:46:ab:e4:c0:84:64:52:64:0e:df:f8:16:3b:3a:25: 03:c7:68:54:0c:41:af:67:6b:58:b8:52:6a:49:34:fa:6b:64: 66:b1:9d:b4:c2:2e:28:5b:e4:87:e6:60:a9:27:a6:81:ba:f8: 23:92:e4:d4:87:1e:ec:6f:fd:e5:6b:89:d9:10:d3:3b:60:12: 76:3c:a6:01:46:0d:20:67:46:89:2e:e9:3e:4f:c9:90:b4:f3: b4:e1:e3:da:fe:89:22:27:a5:77:89:63:9f:f1:97:bc:f2:52: a8:6b:fc:91:0a:eb:07:c0:0f:5a:92:41:79:7b:84:55:b6:f5: df:b2:2d:76:64:97:8c:5d:89:71:1e:ef:66:42:f3:2a:80:fb: 81:e1:8a:b0:8a:81:98:3e:70:23:fd:99:44:fe:02:a7:aa:d3: ad:74:c8:16:ee:57:be:f8:15:a8:1c:0b:1a:3c:0b:8e:90:62: c2:42:c1:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGNjQxMTAvBgNVBAUTKEJEQzRBNTE2MzMxN0Y3MzA5N0YwMjdBMzQyQjg2MEE3 OTJEN0YxREMwHhcNMjUwOTE5MDYyNDEwWhcNMjUwOTI2MDYyNDEwWjAYMRYwFAYD VQQDEw02OGNjZjcwYi05ODc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qHIHw0/kxrik2C8KyeR/uN0QPzLj9YYPbfgc2QddGrqTrbKOTaoiStP7UTW vHAriOCUkC1Ue1dv0CzzSovkJQr6ONnBEFJWOj6meJvGea/pOa/IqwGcAC3ecqWX vEMLdUPq1YeXm0KCy6gPjNJH29i+6+rb48B2U4auCBUtjFt6FGibeOCZirjj7dYm AnSYJ06qdHP0Xn8WLBK2wZVCs/DLI1QPwYqRSNWgPU+2alIFS+kZc71NYEy1Y02q c/qlkQuSUGCdoOehgTtiObTJCXm8OvEUxyMAk13pEfNkA+qk1+SetarJ7j3rMri/ sh/S6y4wtqE0HmKwx3aJxFnhMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvTpsMV 7H/m4aigUuWTrqj2PUpmMB8GA1UdIwQYMBaAFL3EpRYzF/cwl/Ano0K4YKeS1/Hc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2NC84MDkzODQ2NDYy NEIxMUVGQUIxMjBGNEZDNEY5QUUwMi92Y1NsRmpNWDl6Q1g4Q2VqUXJoZ3A1TFg4 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZjU2xGak1YOXpDWDhDZWpRcmhncDVMWDhkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUY2NC84MDkzODQ2NDYyNEIxMUVGQUIxMjBGNEZDNEY5QUUwMi92Y1NsRmpNWDl6 Q1g4Q2VqUXJoZ3A1TFg4ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqdMpISi9zfJuFzcV3R9/IbMB7v7vn0A6IMP5Qfoj18MwASzXm3wLs 6Uogux9TOr8jqaB6RaTJIo01ZaR657MVhuciTuiZEEetJ/1Gq+TAhGRSZA7f+BY7 OiUDx2hUDEGvZ2tYuFJqSTT6a2RmsZ20wi4oW+SH5mCpJ6aBuvgjkuTUhx7sb/3l a4nZENM7YBJ2PKYBRg0gZ0aJLuk+T8mQtPO04ePa/okiJ6V3iWOf8Ze88lKoa/yR CusHwA9akkF5e4RVtvXfsi12ZJeMXYlxHu9mQvMqgPuB4YqwioGYPnAj/ZlE/gKn qtOtdMgW7le++BWoHAsaPAuOkGLCQsE5 -----END CERTIFICATE-----Generated at Fri Sep 19 09:26:35 2025 by rpki-client