$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft File: Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft (raw, json) Hash identifier: zcLCR3jrrPKbVtDzg4oC909Bt1QrzRhu1+K6n2hFlxg= Subject key identifier: 36:8A:07:98:6C:7B:55:09:8A:8C:33:C7:CB:5E:85:88:05:55:08:26 Authority key identifier: 56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00 Certificate issuer: /CN=A91ADB98/serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800 Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft Manifest number: 0225 Signing time: Thu 21 Aug 2025 02:09:22 +0000 Manifest this update: Thu 21 Aug 2025 02:09:22 +0000 Manifest next update: Thu 28 Aug 2025 02:09:21 +0000 Files and hashes: 1: Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl (hash: p0lKSJvcSbvqrVG42FsUMQ7/TT9np9NelNyQqRd4mdQ=) 2: 310AEC7A5B7C11EDAAFAB831C4F9AE02.roa (hash: LZXk13HoV3M3PJSIAKsfySeBLEgNErX9ux8+6mN8duA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800 Validity Not Before: Aug 21 02:09:22 2025 GMT Not After : Aug 28 02:09:21 2025 GMT Subject: CN=68a67fd2-40ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:78:58:12:90:b7:8f:92:55:2b:9b:de:89:1f: 6c:17:d5:90:b3:7d:e2:62:d0:6e:67:01:36:08:97: cd:13:e6:18:98:e2:e5:13:32:5b:84:e7:9a:7b:34: 54:cb:f8:4b:f7:14:02:41:af:e3:9a:e8:c0:9e:08: 2c:59:ce:38:01:9b:ab:ed:17:05:b3:e9:29:32:37: fb:bd:ba:63:69:61:e4:9d:ff:3b:ac:56:dc:c0:54: d1:68:5f:e6:3b:10:18:1e:48:39:47:b4:3a:c2:2c: ae:5d:aa:16:76:ce:e5:d5:58:e4:f3:dd:73:79:d8: f0:83:6f:d1:87:47:45:43:bb:52:ca:d2:1d:9f:66: a7:ac:34:08:4f:fb:c8:3b:cc:3d:9a:6f:74:26:33: f2:e3:e7:0e:f3:23:65:c7:24:1f:36:15:f5:0a:93: 0c:23:90:7e:63:a7:1c:82:a7:01:b4:b3:7d:2f:c5: 4b:28:d0:74:21:73:24:ee:ed:2a:19:0d:e8:f3:c3: 4c:83:92:39:6b:b4:17:43:8b:a8:72:23:a2:e8:fc: f3:9b:e4:fa:cb:9a:f3:14:5c:84:0a:47:08:49:53: 30:6a:a5:4e:34:99:37:dc:62:4b:6a:91:f5:94:50: af:2a:96:2b:88:33:87:c9:33:eb:71:92:90:7f:6d: ea:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8A:07:98:6C:7B:55:09:8A:8C:33:C7:CB:5E:85:88:05:55:08:26 X509v3 Authority Key Identifier: keyid:56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:71:36:d5:0d:ef:1c:eb:b5:57:7d:c4:01:01:82:88:4f:20: b6:39:8a:9f:f2:0a:e8:2e:d5:56:9b:24:4c:ef:ee:9f:f8:55: eb:eb:33:4f:99:e5:2f:79:24:be:37:be:86:e1:fd:ed:73:5d: ee:4f:45:df:18:d0:33:da:2f:d2:25:e0:8f:f9:f8:52:a2:16: 21:01:a4:c4:9c:68:da:83:88:f4:d2:ff:af:a0:80:5e:1c:48: bd:e1:7d:b3:d5:32:c3:26:51:ed:d9:bc:df:8c:74:91:46:81: 55:72:25:11:e0:52:21:38:13:16:99:b7:8d:bf:c4:65:d6:d6: 75:37:db:c3:e7:a8:4e:73:f2:07:b1:bc:39:91:d3:e8:38:79: 52:15:02:46:78:83:4a:99:b9:a7:56:a2:25:27:ef:b7:60:d2: 01:ab:9f:53:a0:25:d3:45:8b:8b:71:73:e1:1d:d3:62:a0:d4: e4:5b:99:40:3e:a5:d2:25:2b:60:17:dc:3d:54:48:2d:d2:b8: 74:9a:57:2c:30:a4:c2:ad:7a:ff:d0:a7:24:92:db:6b:3b:83: f5:b5:9c:96:f9:24:4e:44:d7:6e:25:d8:05:f6:57:4e:79:c9: 61:1c:0d:61:b8:d4:57:47:3c:51:47:b3:be:ce:91:1a:15:49: d0:ea:af:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDU2N0Y5QUIyQjJDNzk2OTI2ODVDMDMwNTVBRjk2OUU2 MEI2NkI4MDAwHhcNMjUwODIxMDIwOTIyWhcNMjUwODI4MDIwOTIxWjAYMRYwFAYD VQQDEw02OGE2N2ZkMi00MGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3XhYEpC3j5JVK5veiR9sF9WQs33iYtBuZwE2CJfNE+YYmOLlEzJbhOeaezRU y/hL9xQCQa/jmujAnggsWc44AZur7RcFs+kpMjf7vbpjaWHknf87rFbcwFTRaF/m OxAYHkg5R7Q6wiyuXaoWds7l1Vjk891zedjwg2/Rh0dFQ7tSytIdn2anrDQIT/vI O8w9mm90JjPy4+cO8yNlxyQfNhX1CpMMI5B+Y6ccgqcBtLN9L8VLKNB0IXMk7u0q GQ3o88NMg5I5a7QXQ4uociOi6Pzzm+T6y5rzFFyECkcISVMwaqVONJk33GJLapH1 lFCvKpYriDOHyTPrcZKQf23qUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDaKB5hs e1UJiowzx8tehYgFVQgmMB8GA1UdIwQYMBaAFFZ/mrKyx5aSaFwDBVr5aeYLZrgA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9FMkRBODUxODQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9Wbi1hc3JMSGxwSm9YQU1GV3ZscDVndG11 QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZuLWFzckxIbHBKb1hBTUZXdmxwNWd0bXVBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9FMkRBODUxODQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9Wbi1hc3JMSGxw Sm9YQU1GV3ZscDVndG11QUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrcTbVDe8c67VXfcQBAYKITyC2OYqf8groLtVWmyRM7+6f+FXr6zNP meUveSS+N76G4f3tc13uT0XfGNAz2i/SJeCP+fhSohYhAaTEnGjag4j00v+voIBe HEi94X2z1TLDJlHt2bzfjHSRRoFVciUR4FIhOBMWmbeNv8Rl1tZ1N9vD56hOc/IH sbw5kdPoOHlSFQJGeINKmbmnVqIlJ++3YNIBq59ToCXTRYuLcXPhHdNioNTkW5lA PqXSJStgF9w9VEgt0rh0mlcsMKTCrXr/0KckkttrO4P1tZyW+SRORNduJdgF9ldO eclhHA1huNRXRzxRR7O+zpEaFUnQ6q+A -----END CERTIFICATE-----Generated at Fri Aug 22 16:15:00 2025 by rpki-client