$ rpki-client -vvf rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft File: VktpF48mnvuWt2kW94FwdU6PDIc.mft (raw, json) Hash identifier: DTp6npr7/eqfa/o5Orhf9yNLK4fJ3i5obfKfcgx6Fnw= Subject key identifier: 19:F9:F5:EA:BE:72:BA:B1:05:B2:4B:DA:AD:70:C5:A8:F2:68:1F:6A Authority key identifier: 56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87 Certificate issuer: /CN=A91A99C5/serialNumber=564B69178F269EFB96B76916F78170754E8F0C87 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft Manifest number: 1F Signing time: Fri 05 Sep 2025 08:22:17 +0000 Manifest this update: Fri 05 Sep 2025 08:22:16 +0000 Manifest next update: Fri 12 Sep 2025 08:22:16 +0000 Files and hashes: 1: VktpF48mnvuWt2kW94FwdU6PDIc.crl (hash: GEH8/7dFiMzjms6lMzqXcuSdnZjA4Dtksi6YE7twYgQ=) 2: AE31872C5DBD11F083DD7F61C4F9AE02.roa (hash: eyKHyX1nC8rcYA1x+etP21iE0ELwmQ5yf7hxtFXOuMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A99C5, serialNumber=564B69178F269EFB96B76916F78170754E8F0C87 Validity Not Before: Sep 5 08:22:16 2025 GMT Not After : Sep 12 08:22:16 2025 GMT Subject: CN=68ba9db9-edd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:02:dc:81:df:b0:cb:8e:41:8f:24:2a:24:94: 40:52:c9:b0:f2:4e:86:7d:27:36:f4:6b:1c:ed:35: 8b:fb:6d:81:1a:38:9e:43:9f:f4:20:07:39:f0:05: 4f:2d:a3:fb:62:6d:58:b5:4a:d8:bf:4a:23:9f:32: 5f:48:f6:e3:20:bd:a2:5e:23:00:34:08:ba:b4:a6: 41:04:e5:d4:45:a6:da:7f:0c:07:1e:87:21:b1:a2: a6:a9:31:27:97:2e:0b:49:35:98:37:78:19:36:9b: 3d:03:3c:ed:85:25:b4:87:4a:16:be:b5:df:c7:93: fe:29:af:c6:89:4d:9e:02:fc:20:26:c6:1d:1b:3d: dd:44:f8:73:05:59:bc:f3:67:4d:37:ba:72:90:d9: ec:8b:e8:65:24:98:65:60:fb:6b:b7:c1:64:83:57: 36:64:76:15:5c:d7:52:e0:86:c0:22:4b:00:60:5c: 37:f3:7c:e1:81:be:83:5f:31:68:db:83:63:2a:29: c1:1c:fc:2f:bf:4e:e7:db:dd:f8:f1:8c:17:d3:50: a3:1f:91:5c:62:1a:71:79:fa:1b:a5:20:5a:5e:81: 61:1f:21:d7:39:c2:e0:b1:33:24:ed:95:1a:9d:6a: e0:ad:13:d9:b7:48:90:97:6f:e5:21:1c:87:ea:bd: b8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F9:F5:EA:BE:72:BA:B1:05:B2:4B:DA:AD:70:C5:A8:F2:68:1F:6A X509v3 Authority Key Identifier: keyid:56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:30:8d:19:b3:76:65:c3:06:75:7c:2c:18:54:be:cc:f4:d2: b0:1f:29:4b:eb:55:f0:b9:01:07:08:91:a8:ec:60:4e:5c:97: c9:85:a4:91:c1:a9:eb:36:ad:a7:9e:71:cb:d4:66:cd:5b:ce: 87:de:d7:3f:fc:c3:d9:1d:78:57:da:3a:78:66:b1:1b:b4:99: 64:e6:f5:ba:36:c8:08:97:c0:0c:95:97:7f:3d:d3:e6:4b:71: 8b:0e:d3:d5:83:30:34:4d:5e:c3:2f:fa:d0:0d:39:14:73:63: 9a:0d:28:91:4f:7b:f5:d3:94:96:fb:50:9a:95:e5:d0:8c:09: 42:35:3e:6a:7e:1a:74:6b:d0:7c:dd:b1:f8:56:6c:88:11:75: 8e:bc:82:af:38:ec:38:c5:cd:1c:b2:ee:de:f4:29:f7:cd:a5: a8:86:40:d1:ed:0a:a9:ae:68:73:cb:d9:0f:fa:ad:6d:79:2f: d2:36:e5:9f:33:cd:8f:27:80:5f:58:97:8c:a0:07:30:66:f5: 42:99:eb:33:37:10:e3:12:83:42:f3:f9:8a:e1:c8:f3:47:fc: d3:d2:c6:1f:5b:9d:9b:d6:50:ad:c0:fb:0c:8f:f8:c5:bd:ff: fe:ee:7f:59:96:9b:74:21:24:cf:af:a8:05:55:8d:6d:06:77: 8e:90:5f:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTlDNTExMC8GA1UEBRMoNTY0QjY5MTc4RjI2OUVGQjk2Qjc2OTE2Rjc4MTcwNzU0 RThGMEM4NzAeFw0yNTA5MDUwODIyMTZaFw0yNTA5MTIwODIyMTZaMBgxFjAUBgNV BAMTDTY4YmE5ZGI5LWVkZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUAtyB37DLjkGPJCoklEBSybDyToZ9Jzb0axztNYv7bYEaOJ5Dn/QgBznwBU8t o/tibVi1Sti/SiOfMl9I9uMgvaJeIwA0CLq0pkEE5dRFptp/DAcehyGxoqapMSeX LgtJNZg3eBk2mz0DPO2FJbSHSha+td/Hk/4pr8aJTZ4C/CAmxh0bPd1E+HMFWbzz Z003unKQ2eyL6GUkmGVg+2u3wWSDVzZkdhVc11LghsAiSwBgXDfzfOGBvoNfMWjb g2MqKcEc/C+/Tufb3fjxjBfTUKMfkVxiGnF5+hulIFpegWEfIdc5wuCxMyTtlRqd auCtE9m3SJCXb+UhHIfqvbhTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGfn16r5y urEFskvarXDFqPJoH2owHwYDVR0jBBgwFoAUVktpF48mnvuWt2kW94FwdU6PDIcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5OUM1L0ZDMDFFODdDNURC QjExRjA5QUExNzg1MEM0RjlBRTAyL1ZrdHBGNDhtbnZ1V3Qya1c5NEZ3ZFU2UERJ Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVmt0cEY0OG1udnVXdDJrVzk0RndkVTZQREljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 OUM1L0ZDMDFFODdDNURCQjExRjA5QUExNzg1MEM0RjlBRTAyL1ZrdHBGNDhtbnZ1 V3Qya1c5NEZ3ZFU2UERJYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF4wjRmzdmXDBnV8LBhUvsz00rAfKUvrVfC5AQcIkajsYE5cl8mFpJHB qes2raeeccvUZs1bzofe1z/8w9kdeFfaOnhmsRu0mWTm9bo2yAiXwAyVl3890+ZL cYsO09WDMDRNXsMv+tANORRzY5oNKJFPe/XTlJb7UJqV5dCMCUI1Pmp+GnRr0Hzd sfhWbIgRdY68gq847DjFzRyy7t70KffNpaiGQNHtCqmuaHPL2Q/6rW15L9I25Z8z zY8ngF9Yl4ygBzBm9UKZ6zM3EOMSg0Lz+YrhyPNH/NPSxh9bnZvWUK3A+wyP+MW9 //7uf1mWm3QhJM+vqAVVjW0Gd46QX0U= -----END CERTIFICATE-----Generated at Sat Sep 6 20:50:00 2025 by rpki-client