$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft File: vcSlFjMX9zCX8CejQrhgp5LX8dw.mft (raw, json) Hash identifier: Sr7tEYRV+IfI484Jt2mXUIdUOufyNZ3vhJg+ZFRWyOE= Subject key identifier: 40:CA:A1:C0:A5:E3:F5:8F:6B:02:2C:AD:5F:A3:C6:F1:0D:2B:14:23 Authority key identifier: BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC Certificate issuer: /CN=A9179F64/serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft Manifest number: AE Signing time: Wed 23 Jul 2025 06:27:09 +0000 Manifest this update: Wed 23 Jul 2025 06:27:09 +0000 Manifest next update: Wed 30 Jul 2025 06:27:08 +0000 Files and hashes: 1: vcSlFjMX9zCX8CejQrhgp5LX8dw.crl (hash: v1G9FayickHUEoXHtbofIT2tF3/CSNjpMzNeOhZ0ZdE=) 2: AB4A60EECBA311EFB9E20E13C4F9AE02.roa (hash: Xcy4MFhRyr2k/5Jm4R5iv0t1VBaS/P+wq9LQCj1UUVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 06:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F64, serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC Validity Not Before: Jul 23 06:27:09 2025 GMT Not After : Jul 30 06:27:08 2025 GMT Subject: CN=688080bd-c318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4d:b6:66:26:75:08:97:4d:c0:2d:1c:2d:2b: f8:88:73:4c:3b:ce:07:56:33:01:78:e8:0f:f8:cd: d2:76:0f:f9:3a:6d:b6:a2:b4:e6:87:b7:1e:8d:75: cb:53:e8:d6:ab:a8:9b:38:b3:f6:84:66:8a:f1:84: 66:0e:d4:f3:b7:01:8e:5b:67:91:8b:0c:e1:13:01: 06:c5:5c:36:b4:dd:f6:81:81:01:56:76:69:b0:e9: bf:76:e3:bc:3b:36:21:60:b1:5c:61:5b:3d:81:3e: a0:84:39:05:79:28:2d:e0:a1:41:7c:b8:0d:38:fd: 3d:77:fe:99:90:12:53:77:b8:53:d6:81:3a:9a:33: d4:0f:f0:00:60:aa:28:3f:c5:4a:7f:e2:dc:92:d4: ef:5e:9c:b1:35:32:cd:23:82:81:38:b8:ff:6f:7d: 8f:b6:9e:d8:0a:0c:66:d1:bd:49:37:d2:36:9a:6a: 46:1a:44:5e:4b:2c:f2:ef:af:7a:e8:bf:4c:6b:32: ed:41:5d:40:a3:ae:8c:1e:f3:1a:72:98:12:ea:48: 08:b2:9f:c8:a6:0e:d8:d9:8c:ac:5a:8b:6e:89:d6: 5b:77:8a:86:cc:72:cd:cb:9e:ac:57:30:32:be:33: f6:04:c0:4f:11:bc:f4:15:2a:1c:b3:a4:0f:43:00: 07:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CA:A1:C0:A5:E3:F5:8F:6B:02:2C:AD:5F:A3:C6:F1:0D:2B:14:23 X509v3 Authority Key Identifier: keyid:BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:9a:b8:2a:69:dd:aa:69:74:38:9e:0f:16:84:15:5b:17:ef: a0:b1:b3:15:c0:f0:e8:da:24:cf:f7:db:32:46:64:ed:ba:a8: 07:57:de:e2:44:41:82:c0:8d:8e:ee:50:80:36:6e:60:44:5e: 96:11:32:53:91:44:16:62:a4:5e:85:f9:5c:77:d2:d1:1a:e0: 58:c2:44:bd:45:99:60:17:47:db:ae:74:ca:98:ad:89:3f:69: a6:3a:85:d6:13:a8:79:e4:d6:0e:f3:43:cd:89:ba:9a:e4:ea: 8e:67:e6:d9:f2:8a:f2:8c:c6:76:81:67:b9:e2:ad:b5:49:05: 5e:5c:c8:27:5b:87:a1:53:d5:1c:50:98:ae:f7:f2:84:09:67: ec:56:4d:c7:1c:34:b8:48:26:9b:c2:a0:e6:00:07:48:99:c1: 4e:7d:b1:02:3d:80:d7:4d:b0:42:32:fc:22:3f:58:21:33:df: 38:0b:16:ef:72:25:70:97:79:80:88:fb:f0:b6:77:22:07:66: de:64:7a:52:c3:a0:32:68:10:2e:ac:b8:1c:ec:31:8f:2c:3a: 19:43:47:a5:aa:87:d0:62:2b:d7:dd:d6:c2:81:b7:be:cc:25: 5e:ca:c6:02:c1:2b:ba:e0:a4:76:0c:93:26:a9:ae:0c:1b:12: b1:d4:28:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGNjQxMTAvBgNVBAUTKEJEQzRBNTE2MzMxN0Y3MzA5N0YwMjdBMzQyQjg2MEE3 OTJEN0YxREMwHhcNMjUwNzIzMDYyNzA5WhcNMjUwNzMwMDYyNzA4WjAYMRYwFAYD VQQDEw02ODgwODBiZC1jMzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsk22ZiZ1CJdNwC0cLSv4iHNMO84HVjMBeOgP+M3Sdg/5Om22orTmh7cejXXL U+jWq6ibOLP2hGaK8YRmDtTztwGOW2eRiwzhEwEGxVw2tN32gYEBVnZpsOm/duO8 OzYhYLFcYVs9gT6ghDkFeSgt4KFBfLgNOP09d/6ZkBJTd7hT1oE6mjPUD/AAYKoo P8VKf+LcktTvXpyxNTLNI4KBOLj/b32Ptp7YCgxm0b1JN9I2mmpGGkReSyzy7696 6L9MazLtQV1Ao66MHvMacpgS6kgIsp/Ipg7Y2YysWotuidZbd4qGzHLNy56sVzAy vjP2BMBPEbz0FSocs6QPQwAHSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDKocCl 4/WPawIsrV+jxvENKxQjMB8GA1UdIwQYMBaAFL3EpRYzF/cwl/Ano0K4YKeS1/Hc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2NC84MDkzODQ2NDYy NEIxMUVGQUIxMjBGNEZDNEY5QUUwMi92Y1NsRmpNWDl6Q1g4Q2VqUXJoZ3A1TFg4 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZjU2xGak1YOXpDWDhDZWpRcmhncDVMWDhkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUY2NC84MDkzODQ2NDYyNEIxMUVGQUIxMjBGNEZDNEY5QUUwMi92Y1NsRmpNWDl6 Q1g4Q2VqUXJoZ3A1TFg4ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4mrgqad2qaXQ4ng8WhBVbF++gsbMVwPDo2iTP99syRmTtuqgHV97i REGCwI2O7lCANm5gRF6WETJTkUQWYqRehflcd9LRGuBYwkS9RZlgF0fbrnTKmK2J P2mmOoXWE6h55NYO80PNibqa5OqOZ+bZ8oryjMZ2gWe54q21SQVeXMgnW4ehU9Uc UJiu9/KECWfsVk3HHDS4SCabwqDmAAdImcFOfbECPYDXTbBCMvwiP1ghM984Cxbv ciVwl3mAiPvwtnciB2beZHpSw6AyaBAurLgc7DGPLDoZQ0elqofQYivX3dbCgbe+ zCVeysYCwSu64KR2DJMmqa4MGxKx1CiX -----END CERTIFICATE-----Generated at Wed Jul 23 22:02:43 2025 by rpki-client