$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft File: VlIPoddulfCBm23dSWe0VQRphp0.mft (raw, json) Hash identifier: 1uk6v7La+o3tQuGvs8lHeU7Nb+ILqJw0JYorr2a2fJQ= Subject key identifier: CF:FE:CB:D6:CB:B8:A0:DD:C0:BE:10:07:5F:A5:E8:F2:36:F7:B6:52 Authority key identifier: 56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D Certificate issuer: /CN=A91A91CB/serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft Manifest number: 68 Signing time: Wed 03 Sep 2025 07:38:08 +0000 Manifest this update: Wed 03 Sep 2025 07:38:07 +0000 Manifest next update: Wed 10 Sep 2025 07:38:07 +0000 Files and hashes: 1: VlIPoddulfCBm23dSWe0VQRphp0.crl (hash: aHi9PgS6vaP+5lpt+DvDwfHRrHzOldE6c7V8Cmtzv1A=) 2: EE8CD88EEA5A11EF922B276DC4F9AE02.roa (hash: NgoL1gjr88ZdEn/6hgZXntqKOlCBVmw0eMD59yFjWlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 07:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91CB, serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D Validity Not Before: Sep 3 07:38:07 2025 GMT Not After : Sep 10 07:38:07 2025 GMT Subject: CN=68b7f060-acdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4a:d1:7f:7a:0c:d1:b6:86:64:b9:b9:a6:c3: d6:87:40:28:44:6c:ca:78:83:43:06:b3:79:1f:f2: a2:9b:a9:8a:bd:20:bb:80:fc:d0:fb:f7:47:24:ea: 9b:7e:d5:1c:7b:45:e5:b8:27:99:1b:47:ed:93:d4: b1:c2:c6:4d:9a:ec:47:3e:8e:38:cb:ce:99:44:17: ef:cd:d1:64:a0:5d:44:6e:e3:70:aa:8a:5e:37:b8: 8c:ca:cf:83:fd:f2:f1:d0:c1:26:e8:d9:86:10:44: dc:7e:27:d7:a5:c0:2c:88:61:33:f1:40:a2:b8:87: 66:d1:1f:1f:2e:96:2d:9d:b9:3c:8d:d7:54:fb:b8: e8:81:58:e8:af:09:c3:f2:4f:ff:01:6d:6b:43:56: b2:6b:d3:72:3a:4f:0c:22:2b:8b:13:e6:5e:2e:c7: f5:de:7e:d7:2c:34:7d:f0:88:22:1b:b6:55:08:84: 9a:c6:d5:14:41:bc:35:78:1f:35:ec:8e:40:87:aa: 25:fd:05:8c:6e:f6:d3:9f:4c:fe:d4:e9:b0:ed:bf: bb:2e:0e:84:3f:e8:67:4b:6e:89:15:3d:50:9c:ca: 54:ce:39:5a:4e:10:5f:29:ab:5a:ce:86:7e:96:59: 34:da:95:92:46:ec:25:be:e9:8f:41:89:f3:87:58: fe:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FE:CB:D6:CB:B8:A0:DD:C0:BE:10:07:5F:A5:E8:F2:36:F7:B6:52 X509v3 Authority Key Identifier: keyid:56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:fc:3d:6f:b5:9e:28:66:30:0e:fa:b7:42:38:f6:10:65:b1: c7:88:72:db:18:e7:fa:20:1a:a5:2d:ea:e2:ec:f3:24:a2:c8: 05:d7:25:5b:13:f5:74:a1:f4:7f:a7:6a:f3:2c:b2:a1:36:b1: 52:36:1c:a1:55:80:06:be:ac:fd:43:7a:46:f8:df:68:de:da: 84:70:3f:da:8c:ed:0e:75:b6:1b:32:9e:57:74:4c:76:bc:93: fb:5e:c6:b7:c3:e0:63:bb:84:b8:f5:6e:66:4a:27:92:c6:3e: a6:3c:47:71:7d:06:7f:f7:f4:c3:c7:22:c6:20:23:18:90:c3: d4:77:70:54:c7:9c:1d:30:e6:d2:1a:92:9b:a4:43:02:72:44: 4c:39:be:63:60:75:7d:5e:03:30:73:b8:52:60:21:1a:37:14: 4e:4f:3e:0f:30:59:19:a1:46:be:14:2a:86:ff:ff:19:0b:60: cf:01:ee:68:b9:4d:9d:78:b8:a4:78:d1:57:ff:82:39:81:26: bc:ee:47:5f:71:90:dd:d3:ef:a7:f0:51:85:19:22:52:ea:84: 75:04:5a:80:a4:68:10:d3:63:ca:9c:12:a5:7b:04:0c:d0:24: ca:07:98:61:46:cd:4c:ab:28:44:6f:d8:86:a2:90:90:ef:89: 76:18:8c:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTFDQjExMC8GA1UEBRMoNTY1MjBGQTFENzZFOTVGMDgxOUI2RERENDk2N0I0NTUw NDY5ODY5RDAeFw0yNTA5MDMwNzM4MDdaFw0yNTA5MTAwNzM4MDdaMBgxFjAUBgNV BAMTDTY4YjdmMDYwLWFjZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfStF/egzRtoZkubmmw9aHQChEbMp4g0MGs3kf8qKbqYq9ILuA/ND790ck6pt+ 1Rx7ReW4J5kbR+2T1LHCxk2a7Ec+jjjLzplEF+/N0WSgXURu43Cqil43uIzKz4P9 8vHQwSbo2YYQRNx+J9elwCyIYTPxQKK4h2bRHx8uli2duTyN11T7uOiBWOivCcPy T/8BbWtDVrJr03I6TwwiK4sT5l4ux/XeftcsNH3wiCIbtlUIhJrG1RRBvDV4HzXs jkCHqiX9BYxu9tOfTP7U6bDtv7suDoQ/6GdLbokVPVCcylTOOVpOEF8pq1rOhn6W WTTalZJG7CW+6Y9BifOHWP59AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUz/7L1su4 oN3AvhAHX6Xo8jb3tlIwHwYDVR0jBBgwFoAUVlIPoddulfCBm23dSWe0VQRphp0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5MUNCLzVCNkZBMzYwRUE1 QTExRUZCODRBRTQ2OEM0RjlBRTAyL1ZsSVBvZGR1bGZDQm0yM2RTV2UwVlFScGhw MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVmxJUG9kZHVsZkNCbTIzZFNXZTBWUVJwaHAwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 MUNCLzVCNkZBMzYwRUE1QTExRUZCODRBRTQ2OEM0RjlBRTAyL1ZsSVBvZGR1bGZD Qm0yM2RTV2UwVlFScGhwMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG78PW+1nihmMA76t0I49hBlsceIctsY5/ogGqUt6uLs8ySiyAXXJVsT 9XSh9H+navMssqE2sVI2HKFVgAa+rP1Dekb432je2oRwP9qM7Q51thsynld0THa8 k/texrfD4GO7hLj1bmZKJ5LGPqY8R3F9Bn/39MPHIsYgIxiQw9R3cFTHnB0w5tIa kpukQwJyREw5vmNgdX1eAzBzuFJgIRo3FE5PPg8wWRmhRr4UKob//xkLYM8B7mi5 TZ14uKR40Vf/gjmBJrzuR19xkN3T76fwUYUZIlLqhHUEWoCkaBDTY8qcEqV7BAzQ JMoHmGFGzUyrKERv2IaikJDviXYYjIU= -----END CERTIFICATE-----Generated at Thu Sep 4 16:00:06 2025 by rpki-client