$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft File: vKs-dvhO1DdC8qCBJCcI55nOG18.mft (raw, json) Hash identifier: oEX8ZfCb1B+aR6T4EOi2iyF5UqJp6sjgoHlpspk7hqQ= Subject key identifier: 38:F5:63:8C:94:25:49:FE:2C:E6:49:9E:DB:5B:90:BE:B3:56:1C:3C Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F Certificate issuer: /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft Manifest number: 0114 Signing time: Tue 09 Sep 2025 05:10:30 +0000 Manifest this update: Tue 09 Sep 2025 05:10:29 +0000 Manifest next update: Tue 16 Sep 2025 05:10:29 +0000 Files and hashes: 1: vKs-dvhO1DdC8qCBJCcI55nOG18.crl (hash: 7QAnyYIJTeuzGwRfbvBCpI7Br4iBeXTRvc3fAJONEto=) 2: E08658208D2D11F09327643FC4F9AE02.roa (hash: 41FC6Qh9FHv4UtlaWBSLbf5ObxYVTSL2scuznbl1Qds=) 3: 222F2952038511EFAF036327C4F9AE02.roa (hash: 0POds3yRjM0RD6yJRDt5kjZrzEVN1RcsA2tdedecI4c=) 4: A0AD48EA083011EF82AFFD44C4F9AE02.roa (hash: E2oXK+nP7XuyH0hDSL1uq1DEWcq+1W48Rez3w3+1ppw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC532, serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F Validity Not Before: Sep 9 05:10:29 2025 GMT Not After : Sep 16 05:10:29 2025 GMT Subject: CN=68bfb6c5-e619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:92:0c:2b:f2:a9:d4:b4:08:f6:01:05:41:eb: 4e:a1:e5:f6:11:d3:15:b7:72:91:ee:02:59:83:0e: 2b:9d:a1:f5:e7:21:b1:26:e4:75:f4:56:74:84:b1: 49:e4:6e:5c:04:c6:d7:60:7a:05:33:7d:a3:51:91: ae:4e:d5:03:fc:a7:29:32:1c:9b:35:4b:42:ab:42: 94:e5:0f:10:61:f4:85:af:dc:fb:3a:ed:0f:0e:ac: c1:c5:c5:31:a8:7b:ee:0c:f3:c1:bd:f3:36:22:f7: 3a:a8:1f:98:24:0a:94:96:f2:fa:1e:be:bf:25:25: e9:ed:69:5a:67:7c:22:46:96:ef:c5:67:85:79:bc: fc:14:25:16:2e:4c:b8:d6:59:0c:21:02:45:d3:4f: 9c:11:bc:c8:a6:4c:5b:28:61:97:62:4d:4e:d7:1c: 7f:19:55:6d:b9:8f:a5:27:af:af:7f:d8:c4:a2:2c: 30:96:84:64:4f:8d:40:f7:f7:e4:2e:14:6c:57:e7: 9e:57:ab:b1:76:3f:e0:36:69:88:e0:53:84:14:66: 4a:e8:53:48:e9:e5:fb:4f:69:7a:ff:e4:e4:4a:71: 14:b7:86:70:d1:9b:2b:01:82:27:50:9e:3f:a7:3c: 29:fa:1f:29:29:84:09:92:ff:e6:9c:17:39:06:55: 26:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F5:63:8C:94:25:49:FE:2C:E6:49:9E:DB:5B:90:BE:B3:56:1C:3C X509v3 Authority Key Identifier: keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:45:77:1d:48:8f:f8:6a:78:1d:fd:6a:b2:26:e3:10:7b:5e: ef:8d:4c:68:d8:43:33:35:86:65:77:db:66:47:42:0b:d9:96: af:18:1a:93:d2:ef:d7:ba:4e:42:af:8a:47:9a:0d:bd:22:b1: 5b:ad:29:21:f9:9a:fd:a7:01:c6:58:a6:a2:95:e0:f5:d9:b1: af:a1:df:69:37:2f:3e:4a:31:c1:98:7e:29:e4:d5:83:d4:fa: 57:86:65:7f:c8:88:ad:63:9e:84:6d:8e:42:0f:7d:f2:35:0b: 79:98:f4:9c:bd:01:65:38:f5:8c:67:43:f4:a4:de:5e:2c:dd: c6:93:b3:63:cf:63:14:3c:4c:93:23:7f:67:65:37:a8:19:09: dc:a9:18:e5:1c:d3:76:4c:b4:47:ab:ef:c3:b8:ef:64:98:03: 75:61:c8:5a:c5:d0:09:0e:73:25:5e:d0:b7:20:b9:17:96:4c: 02:dc:2f:6a:ce:9c:61:00:2a:9f:43:d2:87:ec:53:02:29:d3: 8b:84:bd:be:d6:59:6c:40:e4:df:ab:1c:06:24:19:17:af:a2: 84:4f:61:36:be:0e:af:0e:ae:08:f0:31:a2:07:71:e6:fb:01: 0e:66:98:59:9f:87:2c:65:0a:d8:fb:1d:46:f7:cc:14:2c:02: 96:15:2f:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM1MzIxMTAvBgNVBAUTKEJDQUIzRTc2Rjg0RUQ0Mzc0MkYyQTA4MTI0MjcwOEU3 OTlDRTFCNUYwHhcNMjUwOTA5MDUxMDI5WhcNMjUwOTE2MDUxMDI5WjAYMRYwFAYD VQQDEw02OGJmYjZjNS1lNjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5IMK/Kp1LQI9gEFQetOoeX2EdMVt3KR7gJZgw4rnaH15yGxJuR19FZ0hLFJ 5G5cBMbXYHoFM32jUZGuTtUD/KcpMhybNUtCq0KU5Q8QYfSFr9z7Ou0PDqzBxcUx qHvuDPPBvfM2Ivc6qB+YJAqUlvL6Hr6/JSXp7WlaZ3wiRpbvxWeFebz8FCUWLky4 1lkMIQJF00+cEbzIpkxbKGGXYk1O1xx/GVVtuY+lJ6+vf9jEoiwwloRkT41A9/fk LhRsV+eeV6uxdj/gNmmI4FOEFGZK6FNI6eX7T2l6/+TkSnEUt4Zw0ZsrAYInUJ4/ pzwp+h8pKYQJkv/mnBc5BlUmWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDj1Y4yU JUn+LOZJnttbkL6zVhw8MB8GA1UdIwQYMBaAFLyrPnb4TtQ3QvKggSQnCOeZzhtf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzUzMi9EQUEwRDBCNDAz N0UxMUVGODUyMEU3NThDNEY5QUUwMi92S3MtZHZoTzFEZEM4cUNCSkNjSTU1bk9H MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLcy1kdmhPMURkQzhxQ0JKQ2NJNTVuT0cxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzUzMi9EQUEwRDBCNDAzN0UxMUVGODUyMEU3NThDNEY5QUUwMi92S3MtZHZoTzFE ZEM4cUNCSkNjSTU1bk9HMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmRXcdSI/4angd/WqyJuMQe17vjUxo2EMzNYZld9tmR0IL2ZavGBqT 0u/Xuk5Cr4pHmg29IrFbrSkh+Zr9pwHGWKaileD12bGvod9pNy8+SjHBmH4p5NWD 1PpXhmV/yIitY56EbY5CD33yNQt5mPScvQFlOPWMZ0P0pN5eLN3Gk7Njz2MUPEyT I39nZTeoGQncqRjlHNN2TLRHq+/DuO9kmAN1YchaxdAJDnMlXtC3ILkXlkwC3C9q zpxhACqfQ9KH7FMCKdOLhL2+1llsQOTfqxwGJBkXr6KET2E2vg6vDq4I8DGiB3Hm +wEOZphZn4csZQrY+x1G98wULAKWFS8I -----END CERTIFICATE-----Generated at Wed Sep 10 01:31:32 2025 by rpki-client