$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft File: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json) Hash identifier: cs3v7uf6shaeihPA3tC24QXXohJhJIHDQDYkoI7Ezn4= Subject key identifier: C4:2F:76:A1:4A:D0:8E:4B:CE:3A:A4:BD:1F:3E:04:94:20:26:F7:B7 Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D Certificate issuer: /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Certificate serial: 0186 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft Manifest number: 017F Signing time: Thu 21 Aug 2025 03:49:30 +0000 Manifest this update: Thu 21 Aug 2025 03:49:29 +0000 Manifest next update: Thu 28 Aug 2025 03:49:29 +0000 Files and hashes: 1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: nq7DoVq5VFT3ttQmfRJ2/FRcnVO8pZYzOSub7K9/Am0=) 2: 804B8FA6E91511EE8B622417C4F9AE02.roa (hash: ss8VIOhJqFqdKONVWR6vq+iPEbbcFBwiChhI9XQ77bk=) 3: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: P3RI+iahMSOMEtdBfrZDu8ZMcvFxJp6/7cmLyR0Owr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 03:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Validity Not Before: Aug 21 03:49:29 2025 GMT Not After : Aug 28 03:49:29 2025 GMT Subject: CN=68a6974a-2958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:85:57:93:0e:e1:f5:07:76:1f:96:9f:bd:ec: 66:d5:db:35:57:7f:d5:fc:fb:0e:fb:70:af:a9:60: 23:2a:27:55:b6:cc:d9:68:5e:26:d3:8e:63:f7:a6: 42:52:e3:9b:23:8f:16:b6:82:04:c0:f5:ff:55:40: 9c:53:96:1f:30:11:31:9e:56:1e:71:73:19:85:cd: 8b:15:bf:20:9c:20:4f:62:54:4b:45:de:99:be:22: a5:a2:5d:7c:f2:b7:b2:9a:3e:f0:20:54:ae:e4:89: cc:fc:38:d2:e0:1b:3c:45:15:c1:57:a7:72:17:26: 0d:de:5f:a7:b8:2d:45:a4:8f:65:97:0d:f9:a2:92: 73:3b:fe:90:d8:0f:a2:45:cd:7e:3b:7d:1b:b6:f0: 04:62:8d:34:0f:24:89:61:2b:23:f0:38:ae:b8:d5: 55:9b:f4:e6:8b:1f:61:00:21:73:1d:ab:46:a4:85: 9c:60:a7:0b:18:d1:bc:93:28:d6:6b:6e:f3:e4:1f: 87:aa:c1:9b:2c:f7:0d:a4:d2:a0:a1:80:dc:30:25: 01:38:59:08:62:b2:f7:2d:2f:62:4e:d0:5a:66:1f: eb:3e:f2:b4:10:61:b7:c6:e3:0a:34:72:b1:94:bb: 6d:ae:9c:14:9c:9c:b9:6c:fc:80:5b:d3:d7:60:ce: e0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2F:76:A1:4A:D0:8E:4B:CE:3A:A4:BD:1F:3E:04:94:20:26:F7:B7 X509v3 Authority Key Identifier: keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:6c:dd:69:8e:5e:d7:ae:b0:4c:65:95:7a:f9:88:0e:23:ff: 7d:91:9e:1e:b6:9c:32:f3:be:ac:ab:c8:e1:19:98:23:ed:9d: ea:03:f0:c9:14:b2:46:ac:76:27:19:58:cc:05:f6:5b:8b:45: 43:d2:d6:62:48:e7:42:b1:00:9b:59:19:be:5a:57:ee:0b:fb: 8a:f9:6b:df:8f:c7:b1:ee:4b:47:54:ee:f8:13:21:37:80:65: 05:cf:63:bb:07:78:bd:72:30:1e:5a:c7:e4:3c:14:1a:c7:8b: 8f:cb:a3:ab:0f:d5:d7:f0:e9:d4:a3:bd:2c:cd:19:42:b7:ef: 90:c4:49:91:fc:54:8d:47:b4:a6:bc:9f:13:7b:a8:80:f7:c4: 57:b6:c5:90:41:69:fe:b3:00:78:e9:77:8d:42:39:f6:08:3b: b5:84:a6:59:94:e8:f1:c8:ae:81:39:73:c7:61:8b:a7:ad:a3: a4:4d:4a:d9:6d:57:95:05:fa:66:0b:e4:13:84:2c:2a:d9:48: 85:82:83:b2:1a:ca:fd:71:1e:4f:28:af:81:f7:6d:c4:55:ca: a1:d1:cb:38:ac:80:3c:ed:4e:65:0f:dc:7e:68:e2:2c:b5:dc: 7c:f8:48:85:1f:dd:85:9a:51:48:45:ba:07:07:e3:11:44:11: 70:80:a7:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjkxMTAvBgNVBAUTKEJFNjM0MUE3Q0MwQ0EwRjZDMUExNUUwNDY2RUM3MTU1 QjgyODNDOUQwHhcNMjUwODIxMDM0OTI5WhcNMjUwODI4MDM0OTI5WjAYMRYwFAYD VQQDEw02OGE2OTc0YS0yOTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIVXkw7h9Qd2H5afvexm1ds1V3/V/PsO+3CvqWAjKidVtszZaF4m045j96ZC UuObI48WtoIEwPX/VUCcU5YfMBExnlYecXMZhc2LFb8gnCBPYlRLRd6ZviKlol18 8reymj7wIFSu5InM/DjS4Bs8RRXBV6dyFyYN3l+nuC1FpI9llw35opJzO/6Q2A+i Rc1+O30btvAEYo00DySJYSsj8DiuuNVVm/Tmix9hACFzHatGpIWcYKcLGNG8kyjW a27z5B+HqsGbLPcNpNKgoYDcMCUBOFkIYrL3LS9iTtBaZh/rPvK0EGG3xuMKNHKx lLttrpwUnJy5bPyAW9PXYM7gFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQvdqFK 0I5LzjqkvR8+BJQgJve3MB8GA1UdIwQYMBaAFL5jQafMDKD2waFeBGbscVW4KDyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGOS80RTYwOUE3MjNC N0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9QYkJvVjRFWnV4eFZiZ29Q SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtTkJwOHdNb1BiQm9WNEVadXh4VmJnb1BKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGOS80RTYwOUE3MjNCN0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9Q YkJvVjRFWnV4eFZiZ29QSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACbN1pjl7XrrBMZZV6+YgOI/99kZ4etpwy876sq8jhGZgj7Z3qA/DJ FLJGrHYnGVjMBfZbi0VD0tZiSOdCsQCbWRm+WlfuC/uK+Wvfj8ex7ktHVO74EyE3 gGUFz2O7B3i9cjAeWsfkPBQax4uPy6OrD9XX8OnUo70szRlCt++QxEmR/FSNR7Sm vJ8Te6iA98RXtsWQQWn+swB46XeNQjn2CDu1hKZZlOjxyK6BOXPHYYunraOkTUrZ bVeVBfpmC+QThCwq2UiFgoOyGsr9cR5PKK+B923EVcqh0cs4rIA87U5lD9x+aOIs tdx8+EiFH92FmlFIRboHB+MRRBFwgKfr -----END CERTIFICATE-----Generated at Sat Aug 23 02:07:14 2025 by rpki-client