$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft File: vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft (raw, json) Hash identifier: 3/PqMfWnExNXkBUhRWYbo7UtgVrrHR8fszRDN+ls6HA= Subject key identifier: 77:BE:99:3B:34:04:4C:F7:B3:20:BE:4D:C1:92:4A:C0:3A:44:0A:76 Authority key identifier: BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF Certificate issuer: /CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF Certificate serial: 0C56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft Manifest number: 0C50 Signing time: Wed 20 Aug 2025 18:35:41 +0000 Manifest this update: Wed 20 Aug 2025 18:35:41 +0000 Manifest next update: Wed 27 Aug 2025 18:35:41 +0000 Files and hashes: 1: vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl (hash: xHOCVbo+/2BETQKeInrnOiJS2mANk3XbAtG25umQADw=) 2: 674009AE09D811EA9BCFCE1EC4F9AE02.roa (hash: 6L60AAj2lTmMuUfie+8gmkdZ9wTJGKc1X+KnYu5hWQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3158 (0xc56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACC41, serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF Validity Not Before: Aug 20 18:35:41 2025 GMT Not After : Aug 27 18:35:41 2025 GMT Subject: CN=68a6157d-dfbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ec:78:4e:f4:38:86:6c:b3:1c:f1:3b:32:19: ad:4a:e8:89:59:33:43:38:11:6b:19:f8:ea:1f:58: b7:e9:0c:0d:30:c7:58:56:63:ca:45:74:64:fc:78: 08:94:0a:da:5e:92:40:44:82:b0:7f:38:50:da:a8: b6:3e:ae:6b:da:d3:99:0c:b5:19:ef:a6:70:43:f4: a1:14:8f:1e:31:ee:e2:95:8b:b5:3a:3a:4b:4c:eb: 36:1d:7e:5b:85:d0:a7:d1:57:20:5e:8e:5a:29:bd: 17:70:48:e7:ce:35:b1:c1:c9:b4:17:83:06:cd:0f: 8a:cb:77:24:40:6d:95:24:2f:7e:11:bb:df:c1:a8: 85:53:79:3b:85:33:18:c0:72:a5:9d:cc:cf:51:a4: f2:26:b1:b7:63:fe:00:8f:92:eb:da:0f:31:57:a2: d9:35:3b:69:47:83:61:dd:f6:5e:b4:2d:85:04:3b: 31:2a:8f:f9:f2:87:21:61:aa:a2:2d:a8:19:33:94: 16:aa:37:f7:a4:d0:a7:00:52:34:23:65:da:ef:c6: 55:0e:0b:8c:25:68:19:5b:1c:ef:24:7b:a6:14:e8: 7c:99:f3:bb:87:b0:a5:e9:50:7b:3d:e1:83:6e:a7: e5:e2:51:7d:7a:42:b3:ef:47:27:6a:3e:e5:e8:ec: 81:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BE:99:3B:34:04:4C:F7:B3:20:BE:4D:C1:92:4A:C0:3A:44:0A:76 X509v3 Authority Key Identifier: keyid:BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e6:47:75:df:b7:03:48:ee:e2:f9:fd:de:07:72:9b:53:66: b0:4f:a8:eb:9c:42:fa:5f:56:9b:d6:20:58:f1:2b:3f:c5:73: c0:86:c4:e7:0b:59:c6:43:2b:4a:cc:f1:5c:dc:d8:d8:f6:1a: a5:2f:74:7f:f3:85:d5:08:31:6b:e8:7a:bc:a5:1d:ea:99:98: e5:b7:a1:a0:5d:3b:ad:8f:26:42:5d:55:94:f8:a7:6c:4f:76: 4c:fe:a9:29:6a:fe:55:3c:df:27:ce:09:a3:05:6b:36:2c:97: 4c:ad:d6:5e:44:62:d1:52:11:17:58:6f:b8:79:ee:f7:e7:48: c1:02:d6:d7:a7:31:da:a1:ce:c7:bc:1e:3e:73:49:92:50:75: 55:e5:d4:1e:40:58:68:91:1e:1a:46:0c:43:33:09:6b:e8:0c: 0f:c1:98:84:85:09:be:7a:26:60:53:35:9a:be:67:f0:3c:a2: d6:d5:63:2d:cd:44:00:b1:f9:2c:d2:2a:53:c1:00:87:97:b9: cf:bd:07:ed:3a:d5:cd:c7:bb:05:d3:f2:f0:ce:72:8b:90:38: c3:9c:06:ae:47:35:cd:f7:df:73:d7:47:c7:e1:ae:1f:7f:07: 07:7d:09:f7:ac:1f:38:52:4b:cc:b8:37:fa:de:4c:94:5a:3a: d9:f9:c2:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNDNDExMTAvBgNVBAUTKEJERDVFQjE1NjMzODM5M0Q3NDREQUUyRkM1MzJENTgz MkJDNzg1QkYwHhcNMjUwODIwMTgzNTQxWhcNMjUwODI3MTgzNTQxWjAYMRYwFAYD VQQDEw02OGE2MTU3ZC1kZmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+x4TvQ4hmyzHPE7MhmtSuiJWTNDOBFrGfjqH1i36QwNMMdYVmPKRXRk/HgI lAraXpJARIKwfzhQ2qi2Pq5r2tOZDLUZ76ZwQ/ShFI8eMe7ilYu1OjpLTOs2HX5b hdCn0VcgXo5aKb0XcEjnzjWxwcm0F4MGzQ+Ky3ckQG2VJC9+EbvfwaiFU3k7hTMY wHKlnczPUaTyJrG3Y/4Aj5Lr2g8xV6LZNTtpR4Nh3fZetC2FBDsxKo/58ochYaqi LagZM5QWqjf3pNCnAFI0I2Xa78ZVDguMJWgZWxzvJHumFOh8mfO7h7Cl6VB7PeGD bqfl4lF9ekKz70cnaj7l6OyB1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHe+mTs0 BEz3syC+TcGSSsA6RAp2MB8GA1UdIwQYMBaAFL3V6xVjODk9dE2uL8Uy1YMrx4W/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0M0MS9FNkJBNTQ0ODA5 RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9UMTBUYTR2eFRMVmd5dkho YjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZkWHJGV000T1QxMFRhNHZ4VExWZ3l2SGhiOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0M0MS9FNkJBNTQ0ODA5RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9U MTBUYTR2eFRMVmd5dkhoYjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL5kd137cDSO7i+f3eB3KbU2awT6jrnEL6X1ab1iBY8Ss/xXPAhsTn C1nGQytKzPFc3NjY9hqlL3R/84XVCDFr6Hq8pR3qmZjlt6GgXTutjyZCXVWU+Kds T3ZM/qkpav5VPN8nzgmjBWs2LJdMrdZeRGLRUhEXWG+4ee7350jBAtbXpzHaoc7H vB4+c0mSUHVV5dQeQFhokR4aRgxDMwlr6AwPwZiEhQm+eiZgUzWavmfwPKLW1WMt zUQAsfks0ipTwQCHl7nPvQftOtXNx7sF0/LwznKLkDjDnAauRzXN999z10fH4a4f fwcHfQn3rB84UkvMuDf63kyUWjrZ+cKV -----END CERTIFICATE-----Generated at Fri Aug 22 16:35:16 2025 by rpki-client