$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft File: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft (raw, json) Hash identifier: xXpB4emBs1grDqKeGCFaEiNOekWDKFS6UyQ2QiH+3TA= Subject key identifier: 19:B0:75:75:2B:92:5E:A0:6F:6D:31:09:41:C0:05:BF:EE:00:98:EC Authority key identifier: 54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39 Certificate issuer: /CN=A9195AA2/serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39 Certificate serial: 0C66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft Manifest number: 1467 Signing time: Sun 24 Aug 2025 18:24:12 +0000 Manifest this update: Sun 24 Aug 2025 18:24:12 +0000 Manifest next update: Sun 31 Aug 2025 18:24:12 +0000 Files and hashes: 1: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl (hash: JdzT/su3BSxrGGjD12hdiVKUm3JQ59B0iG1y3+XxKW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3174 (0xc66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195AA2, serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39 Validity Not Before: Aug 24 18:24:12 2025 GMT Not After : Aug 31 18:24:12 2025 GMT Subject: CN=68ab58cc-1851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6f:9b:8d:d8:74:6b:15:0a:3d:fe:0a:5c:2f: 23:6e:5f:85:df:9c:e7:1e:e4:2c:89:6b:fe:f7:a5: a1:57:fe:da:54:b7:16:e5:09:cd:67:78:2f:fe:d5: eb:86:2d:da:20:74:6f:b2:f4:60:c3:b8:83:e0:56: 53:7f:40:35:9b:ec:b6:46:83:df:4d:93:9a:3c:2e: c3:d5:b2:bc:32:ea:b7:9a:0c:c1:a8:b3:e1:c5:73: a6:53:8d:0e:6c:79:03:07:f1:7e:b5:29:de:8a:f1: 20:79:9c:eb:c4:a3:79:de:ff:fb:71:cc:e5:18:be: 65:14:5a:e0:f4:ec:0e:92:39:0f:22:7c:dc:8c:fb: 9f:b9:12:86:3d:8b:ed:4f:10:8c:da:19:b5:28:e6: 18:d8:fc:04:58:c3:0c:cd:63:7f:f4:51:1c:89:a5: a0:ec:9c:a2:43:44:2a:a8:8d:43:f0:00:e7:9f:3e: cf:c3:3b:fa:19:11:45:78:a8:b9:f7:42:85:cd:b5: 7b:f2:58:31:78:35:cd:28:f8:7a:07:fb:07:06:df: 63:33:e4:97:46:3f:91:d9:33:86:8e:ed:dd:56:e5: 0d:02:ee:d1:53:19:da:c7:0f:ba:4a:be:49:0e:7f: 6e:fb:fb:dc:cc:87:f4:0d:af:6f:61:b8:19:de:fc: 18:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B0:75:75:2B:92:5E:A0:6F:6D:31:09:41:C0:05:BF:EE:00:98:EC X509v3 Authority Key Identifier: keyid:54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:60:0d:86:3d:0a:81:6f:ce:42:f3:b6:5b:95:e6:b0:b0:e0: a3:9a:04:71:56:c2:09:f1:0f:c8:fb:50:de:8f:60:62:2d:b5: b8:4d:92:a5:da:1a:d7:90:8a:23:f0:45:17:16:85:d2:89:bf: a5:ac:87:2f:d3:95:c5:75:ba:5b:f1:c0:80:0d:7b:38:3c:e5: 33:0e:b3:27:e6:b9:24:8a:2a:56:71:c1:88:97:88:b5:44:16: ff:b9:36:5a:b3:d1:a2:91:59:c6:5b:df:59:f5:77:4f:26:06: 1f:29:f5:e4:6f:88:57:38:57:c4:39:93:3c:21:55:e3:c7:9c: 45:69:5c:68:b2:b3:e1:01:c7:43:6a:3c:d7:61:68:33:a2:87: 25:18:e0:02:7d:c6:21:d4:cf:74:3d:5c:45:b5:fd:17:33:4f: 63:c5:3d:6f:2c:61:ec:a1:e9:18:d9:d7:65:99:d4:a2:61:3b: a5:6f:ed:bc:5d:4c:d8:1a:c1:eb:2f:fb:05:28:6b:71:fa:e6: 1f:d7:0b:7b:fe:0c:cc:f5:18:f3:70:b3:ac:16:68:42:d4:9f: ab:13:44:1f:d0:23:ef:d9:09:24:e7:9f:55:6f:ca:9e:b4:56: ce:3c:a1:6a:f0:75:82:ee:e0:1e:d8:35:d0:8f:30:65:a6:26: ab:9e:a3:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBQTIxMTAvBgNVBAUTKDU0NTgzQzI5QkJGQjUwMDlEQjlDQzA1NjE0RjYzRDYy QkNCNzdDMzkwHhcNMjUwODI0MTgyNDEyWhcNMjUwODMxMTgyNDEyWjAYMRYwFAYD VQQDEw02OGFiNThjYy0xODUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnm+bjdh0axUKPf4KXC8jbl+F35znHuQsiWv+96WhV/7aVLcW5QnNZ3gv/tXr hi3aIHRvsvRgw7iD4FZTf0A1m+y2RoPfTZOaPC7D1bK8Muq3mgzBqLPhxXOmU40O bHkDB/F+tSneivEgeZzrxKN53v/7cczlGL5lFFrg9OwOkjkPInzcjPufuRKGPYvt TxCM2hm1KOYY2PwEWMMMzWN/9FEciaWg7JyiQ0QqqI1D8ADnnz7Pwzv6GRFFeKi5 90KFzbV78lgxeDXNKPh6B/sHBt9jM+SXRj+R2TOGju3dVuUNAu7RUxnaxw+6Sr5J Dn9u+/vczIf0Da9vYbgZ3vwYzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmwdXUr kl6gb20xCUHABb/uAJjsMB8GA1UdIwQYMBaAFFRYPCm7+1AJ25zAVhT2PWK8t3w5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2 QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VBbmJuTUJXRlBZOVlyeTNm RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGZzhLYnY3VUFuYm5NQldGUFk5WXJ5M2ZEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VB bmJuTUJXRlBZOVlyeTNmRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvYA2GPQqBb85C87ZbleawsOCjmgRxVsIJ8Q/I+1Dej2BiLbW4TZKl 2hrXkIoj8EUXFoXSib+lrIcv05XFdbpb8cCADXs4POUzDrMn5rkkiipWccGIl4i1 RBb/uTZas9GikVnGW99Z9XdPJgYfKfXkb4hXOFfEOZM8IVXjx5xFaVxosrPhAcdD ajzXYWgzooclGOACfcYh1M90PVxFtf0XM09jxT1vLGHsoekY2ddlmdSiYTulb+28 XUzYGsHrL/sFKGtx+uYf1wt7/gzM9RjzcLOsFmhC1J+rE0Qf0CPv2Qkk559Vb8qe tFbOPKFq8HWC7uAe2DXQjzBlpiarnqOh -----END CERTIFICATE-----Generated at Sun Aug 24 22:16:04 2025 by rpki-client