$ rpki-client -vvf rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft File: vkMB4qQLT2pH4YWmdX2abo18dEI.mft (raw, json) Hash identifier: ITyVtWvNpuiBGOiQjqdyDR3ns5M3Z+g3Hbo5sVlrfJ0= Subject key identifier: F6:1D:A4:A4:31:0D:22:F5:A5:CA:59:DB:C2:DB:50:6A:85:AB:0F:BA Authority key identifier: BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42 Certificate issuer: /CN=A919318C/serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft Manifest number: 2A Signing time: Wed 17 Sep 2025 08:36:27 +0000 Manifest this update: Wed 17 Sep 2025 08:36:26 +0000 Manifest next update: Wed 24 Sep 2025 08:36:26 +0000 Files and hashes: 1: vkMB4qQLT2pH4YWmdX2abo18dEI.crl (hash: XLo/YpOGfHi1mapHCrBqYmQ1t+Nr/ywDWw6sbj37lJM=) 2: 99DC33DA621D11F0B3B28C17C4F9AE02.roa (hash: 9kelna+bn4AOokX7+VNhCMprSYcOppK0alNOtL2P1j4=) 3: 9FB4CD9462DB11F0B8A4FE59C4F9AE02.roa (hash: qjbaR5DPgSKsm7fnzDHbXrkez/bN/PhLzRqIXdA5oKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919318C, serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442 Validity Not Before: Sep 17 08:36:26 2025 GMT Not After : Sep 24 08:36:26 2025 GMT Subject: CN=68ca730b-0cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a9:24:d4:6c:37:60:90:da:30:d2:01:51:e7: 7c:ad:d3:71:a4:01:cc:78:52:a0:26:4b:00:f0:4b: 36:33:12:08:dd:8d:a9:15:3c:b1:b1:48:f5:74:a5: 82:e3:16:ad:8b:c5:90:6b:51:63:75:e8:d6:de:ff: 06:72:b8:b5:f4:9c:dc:5c:f0:a1:29:2d:67:d3:aa: 2c:f2:6b:de:19:e1:b9:79:dd:40:8a:70:d8:78:fe: 28:e5:ed:7e:7d:a2:e7:9d:5d:51:05:72:7a:48:ed: 74:7f:43:8e:69:f0:74:07:75:58:58:4b:e3:ab:32: 45:9d:ca:8b:01:14:92:7e:61:9d:b2:80:95:d3:f0: 49:38:cf:1b:2b:2d:dd:79:bf:8d:55:74:75:a8:16: 27:9a:c9:4d:28:50:88:c7:48:f2:16:34:ab:be:b8: 96:9f:22:1e:a5:b2:96:4a:72:2f:1f:48:5f:47:f4: d1:7b:de:eb:58:d3:15:4e:ff:7f:07:8d:cd:fd:cf: 7e:3e:a9:19:54:57:60:89:db:46:6b:18:e0:3c:a9: 84:28:bc:59:54:44:d5:66:2b:4e:24:9f:c1:7b:6c: c4:85:24:bb:2e:ea:88:59:dc:e6:a9:26:e4:b5:8e: 52:5c:d6:8b:2e:a5:87:e3:57:32:42:d2:4b:37:8b: d1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1D:A4:A4:31:0D:22:F5:A5:CA:59:DB:C2:DB:50:6A:85:AB:0F:BA X509v3 Authority Key Identifier: keyid:BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:52:d3:e3:e9:97:93:68:9a:52:80:53:f5:b5:fc:91:24:75: ad:ca:3b:c8:a0:6b:bb:bb:34:70:e5:fe:21:95:ed:68:98:43: c9:0a:05:d6:10:78:0a:a9:67:fc:50:25:35:af:53:da:a4:59: 3d:69:f7:6e:12:63:77:bb:64:d8:1b:e7:4e:01:dd:38:fe:5a: 23:67:4c:6c:4a:cd:ae:ee:64:4a:39:9d:50:27:af:cf:c9:59: 81:97:eb:48:99:89:f7:30:46:18:1a:c4:92:1c:d9:1f:3f:9a: f0:29:78:84:87:8d:a3:da:89:86:31:30:80:90:dc:87:80:9f: a5:18:5d:63:ff:8c:7e:92:0c:e2:45:72:1e:70:52:ea:f0:5a: 14:34:18:9e:41:5d:f0:a3:bd:8b:fe:38:89:65:41:ba:b4:2f: c0:ad:14:b1:2d:d8:14:2f:8a:f0:07:c0:b1:3a:f9:3f:20:a1: d5:25:3f:2d:38:09:9f:7a:42:19:aa:7e:53:e0:41:aa:05:63: 4c:93:b8:f6:68:cf:8c:31:bb:95:b9:00:fb:d0:91:75:df:63: 19:0c:d1:3b:dc:61:dd:e2:51:84:ca:88:04:43:eb:0b:7e:e1: 0e:1e:a5:e1:ce:b0:d1:51:46:79:b5:1c:0b:c2:97:33:f5:df: 81:59:5c:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MzE4QzExMC8GA1UEBRMoQkU0MzAxRTJBNDBCNEY2QTQ3RTE4NUE2NzU3RDlBNkU4 RDdDNzQ0MjAeFw0yNTA5MTcwODM2MjZaFw0yNTA5MjQwODM2MjZaMBgxFjAUBgNV BAMTDTY4Y2E3MzBiLTBjZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjqSTUbDdgkNow0gFR53yt03GkAcx4UqAmSwDwSzYzEgjdjakVPLGxSPV0pYLj Fq2LxZBrUWN16Nbe/wZyuLX0nNxc8KEpLWfTqizya94Z4bl53UCKcNh4/ijl7X59 ouedXVEFcnpI7XR/Q45p8HQHdVhYS+OrMkWdyosBFJJ+YZ2ygJXT8Ek4zxsrLd15 v41VdHWoFieayU0oUIjHSPIWNKu+uJafIh6lspZKci8fSF9H9NF73utY0xVO/38H jc39z34+qRlUV2CJ20ZrGOA8qYQovFlURNVmK04kn8F7bMSFJLsu6ohZ3OapJuS1 jlJc1osupYfjVzJC0ks3i9EHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9h2kpDEN IvWlylnbwttQaoWrD7owHwYDVR0jBBgwFoAUvkMB4qQLT2pH4YWmdX2abo18dEIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzMThDL0NFOUIwOUVFNjE1 NDExRjBCQjUwRkEzN0M0RjlBRTAyL3ZrTUI0cVFMVDJwSDRZV21kWDJhYm8xOGRF SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdmtNQjRxUUxUMnBINFlXbWRYMmFibzE4ZEVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz MThDL0NFOUIwOUVFNjE1NDExRjBCQjUwRkEzN0M0RjlBRTAyL3ZrTUI0cVFMVDJw SDRZV21kWDJhYm8xOGRFSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACBS0+Ppl5NomlKAU/W1/JEkda3KO8iga7u7NHDl/iGV7WiYQ8kKBdYQ eAqpZ/xQJTWvU9qkWT1p924SY3e7ZNgb504B3Tj+WiNnTGxKza7uZEo5nVAnr8/J WYGX60iZifcwRhgaxJIc2R8/mvApeISHjaPaiYYxMICQ3IeAn6UYXWP/jH6SDOJF ch5wUurwWhQ0GJ5BXfCjvYv+OIllQbq0L8CtFLEt2BQvivAHwLE6+T8godUlPy04 CZ96QhmqflPgQaoFY0yTuPZoz4wxu5W5APvQkXXfYxkM0TvcYd3iUYTKiARD6wt+ 4Q4epeHOsNFRRnm1HAvClzP134FZXPw= -----END CERTIFICATE-----Generated at Fri Sep 19 00:48:01 2025 by rpki-client