$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft File: vdXpp28axMjlF5fs6Z49zuzudJM.mft (raw, json) Hash identifier: D20RdJ0MMGm34Zw75/NMUo9NWAJbHrqtiak+m8gJRxc= Subject key identifier: E8:79:4C:F7:F4:FB:DD:CC:9C:EC:E6:8C:39:B9:47:74:A5:47:46:8E Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 Certificate issuer: /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Certificate serial: 0814 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft Manifest number: 07C9 Signing time: Thu 04 Sep 2025 21:50:51 +0000 Manifest this update: Thu 04 Sep 2025 21:50:50 +0000 Manifest next update: Thu 11 Sep 2025 21:50:50 +0000 Files and hashes: 1: vdXpp28axMjlF5fs6Z49zuzudJM.crl (hash: mDE8FX56ZPb8LSN1uBy63gIvamWGqgyk0xxLEBrXp38=) 2: 9A2EC0AA6BF011F0A7327D86C4F9AE02.roa (hash: q4XD/AQqfkjB0bWd2cAwQj0LVcqgF9IjAclvpli5BAw=) 3: B95187FC2FB811EBBF9A864BC4F9AE02.roa (hash: 7LNQOsT6W5YF7PbwLpdxc+PNq2qTTKmlTXDNMzrKzkc=) 4: DF70A63C6BF111F0A9181236C4F9AE02.roa (hash: q7i3CsKTp0yL6iYZiFHlx/5hnnt+XvM120dMmxFLBaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 21:50:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2068 (0x814) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Validity Not Before: Sep 4 21:50:50 2025 GMT Not After : Sep 11 21:50:50 2025 GMT Subject: CN=68ba09bb-c386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:03:d4:97:fc:0c:bb:64:df:35:a9:86:7e:f5: 9f:30:79:6e:47:9c:bc:61:be:ba:78:9d:13:3c:87: 7e:fa:5f:67:c4:22:45:70:13:88:84:3e:cb:bd:77: ef:45:4d:85:56:7b:1e:36:f8:34:2a:a5:f2:9c:3d: 42:34:a4:87:27:1d:c9:7a:ff:a7:b3:e0:6c:f7:58: ef:64:4d:2e:34:c7:49:93:50:0b:aa:6f:43:64:57: 8c:36:4c:ce:33:18:9f:a1:e8:3e:a9:bc:94:96:d0: c4:0d:0c:e5:6b:3f:45:0d:49:bb:03:1b:33:d4:9f: bd:99:92:b8:54:96:28:6f:70:5c:27:c1:bf:b5:6e: 0a:54:2e:de:ff:a8:7b:81:c5:c5:dd:48:23:0c:98: d8:0d:06:fb:5b:fc:b4:36:f9:f2:c9:4a:f6:0f:d3: 02:de:51:4b:1a:c8:82:1e:29:0b:32:25:c0:c9:38: 54:51:3f:4e:63:e3:3a:16:93:7d:2a:b4:4a:d7:d6: e7:3a:46:eb:20:10:8e:ba:f5:9f:ab:40:09:b2:3c: bf:af:e1:ea:80:ef:2f:04:bc:99:d2:a1:93:61:fe: 73:97:05:bb:ce:6a:8d:62:34:45:27:41:3e:67:d8: 52:d0:cd:b9:d1:70:bf:4e:cc:93:2d:2c:a0:00:86: 75:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:79:4C:F7:F4:FB:DD:CC:9C:EC:E6:8C:39:B9:47:74:A5:47:46:8E X509v3 Authority Key Identifier: keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:4b:17:cf:ab:af:2a:14:8d:27:e7:f5:7f:e7:3c:a0:80:82: b0:c4:0f:b4:8c:8e:77:e3:5f:0c:b8:cb:55:db:0c:f0:f4:1f: 1d:da:cd:5d:87:f3:89:5a:19:70:5b:cd:cb:5f:fd:18:40:fe: 6e:bb:9d:6a:52:95:45:44:7f:b7:35:f3:15:f5:ea:ef:d0:cf: 9e:6c:55:05:19:c8:ac:5a:67:49:fc:7c:74:9d:6b:77:9d:20: bc:35:3e:63:10:23:de:c6:03:83:1a:55:fa:b6:61:4f:90:4f: f7:15:2d:e4:79:84:35:3e:67:8c:f7:35:ec:eb:62:9e:54:f1: 6f:be:62:dc:90:90:aa:c9:14:54:4f:78:27:ea:b5:48:af:e0: 2a:dc:4d:1d:15:4c:8b:45:18:12:8c:9f:a5:e3:fa:49:6f:a3: d2:93:65:f9:ea:d1:8e:c5:a9:1a:aa:76:2c:59:4a:7b:b0:68: 22:ff:60:cb:0d:41:99:eb:4d:59:3e:67:47:08:76:d7:b1:98: aa:e6:04:89:4f:b5:cf:ea:93:01:05:a6:3c:70:c2:d2:f9:60: 13:c2:b1:cb:71:0b:d6:b5:a3:19:2a:be:a5:25:31:b9:39:0c: e5:b8:26:bc:aa:ed:a7:e6:b8:33:29:41:d6:be:94:c8:3c:c0: 50:d2:55:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEJERDVFOUE3NkYxQUM0QzhFNTE3OTdFQ0U5OUUzRENF RUNFRTc0OTMwHhcNMjUwOTA0MjE1MDUwWhcNMjUwOTExMjE1MDUwWjAYMRYwFAYD VQQDEw02OGJhMDliYi1jMzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwPUl/wMu2TfNamGfvWfMHluR5y8Yb66eJ0TPId++l9nxCJFcBOIhD7LvXfv RU2FVnseNvg0KqXynD1CNKSHJx3Jev+ns+Bs91jvZE0uNMdJk1ALqm9DZFeMNkzO Mxifoeg+qbyUltDEDQzlaz9FDUm7Axsz1J+9mZK4VJYob3BcJ8G/tW4KVC7e/6h7 gcXF3UgjDJjYDQb7W/y0NvnyyUr2D9MC3lFLGsiCHikLMiXAyThUUT9OY+M6FpN9 KrRK19bnOkbrIBCOuvWfq0AJsjy/r+HqgO8vBLyZ0qGTYf5zlwW7zmqNYjRFJ0E+ Z9hS0M250XC/TsyTLSygAIZ1VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOh5TPf0 +93MnOzmjDm5R3SlR0aOMB8GA1UdIwQYMBaAFL3V6advGsTI5ReX7OmePc7s7nST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zMTQ4REM5RTJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhNamxGNWZzNlo0OXp1enVk Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZkWHBwMjhheE1qbEY1ZnM2WjQ5enV6dWRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zMTQ4REM5RTJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhN amxGNWZzNlo0OXp1enVkSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVSxfPq68qFI0n5/V/5zyggIKwxA+0jI53418MuMtV2wzw9B8d2s1d h/OJWhlwW83LX/0YQP5uu51qUpVFRH+3NfMV9erv0M+ebFUFGcisWmdJ/Hx0nWt3 nSC8NT5jECPexgODGlX6tmFPkE/3FS3keYQ1PmeM9zXs62KeVPFvvmLckJCqyRRU T3gn6rVIr+Aq3E0dFUyLRRgSjJ+l4/pJb6PSk2X56tGOxakaqnYsWUp7sGgi/2DL DUGZ601ZPmdHCHbXsZiq5gSJT7XP6pMBBaY8cMLS+WATwrHLcQvWtaMZKr6lJTG5 OQzluCa8qu2n5rgzKUHWvpTIPMBQ0lWN -----END CERTIFICATE-----Generated at Sat Sep 6 21:09:09 2025 by rpki-client