$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft File: vaPoqCMceH9rfxi8FGuV-1wDjtk.mft (raw, json) Hash identifier: +YSk0tqozXTe6c2B0wzHUeHEhfuC+XZnk4H0wQGGDGA= Subject key identifier: 12:B1:5E:58:3A:20:E9:15:EE:C1:DD:DF:B3:ED:E4:FE:F9:37:DA:FD Authority key identifier: BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9 Certificate issuer: /CN=A91AE8D7/serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft Manifest number: 5F Signing time: Fri 05 Sep 2025 07:33:58 +0000 Manifest this update: Fri 05 Sep 2025 07:33:57 +0000 Manifest next update: Fri 12 Sep 2025 07:33:57 +0000 Files and hashes: 1: vaPoqCMceH9rfxi8FGuV-1wDjtk.crl (hash: 8Y/BAGIXe2eChY0X88o3MbtaKJngAIHSPu+n0AZjrSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE8D7, serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9 Validity Not Before: Sep 5 07:33:57 2025 GMT Not After : Sep 12 07:33:57 2025 GMT Subject: CN=68ba9266-41be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9c:f4:d4:48:f0:84:e8:b2:a0:a1:28:6a:69: 1c:8d:f1:bc:7d:f0:1a:aa:4c:8c:ab:16:b6:c5:2a: 7b:bd:ba:3a:ec:01:bc:f8:81:9e:23:e8:d5:50:4e: db:08:9a:a1:00:b2:74:51:21:b0:f7:e7:79:21:53: f5:3c:58:52:76:61:04:02:c5:4b:03:9b:60:47:9a: 2e:8e:a4:86:aa:76:c0:b2:6d:6a:fe:e6:b7:c9:44: a6:c7:2d:65:45:59:6e:d1:76:4a:fd:24:94:f2:fd: e6:f6:3a:9f:f9:f2:eb:90:40:b8:b5:10:3c:21:3f: 75:9a:60:c1:b8:36:65:e1:88:13:69:9c:dd:45:65: 39:00:50:6e:a5:51:fe:85:38:ec:7c:d4:6b:c9:12: b6:bf:c7:a7:09:f3:60:a6:03:28:d1:fd:45:34:d8: 75:38:b3:e3:7d:fd:c5:2d:6c:16:c9:82:d5:75:86: 0b:f6:c5:41:bb:74:a7:40:81:0c:23:1f:4e:e7:55: 29:55:a1:7d:e8:1d:eb:f8:80:af:f9:1f:0d:c3:a5: bc:ff:3b:f7:d5:63:d2:87:45:a4:90:26:f6:da:f2: a7:5f:c1:0f:a0:39:cf:75:53:ca:4b:17:22:ff:7f: 26:78:ad:b4:1b:60:8d:67:5d:88:f0:85:c6:62:22: 56:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B1:5E:58:3A:20:E9:15:EE:C1:DD:DF:B3:ED:E4:FE:F9:37:DA:FD X509v3 Authority Key Identifier: keyid:BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:5d:49:bb:f4:f5:0a:84:4c:8a:58:dc:ed:d4:81:1e:17:e0: 7b:e5:9f:6e:5d:aa:3e:7d:02:b4:9a:31:c7:93:ca:4c:d4:95: cf:70:19:c0:af:4b:1e:87:56:a9:68:23:fb:4a:d1:50:04:06: 9f:4a:9e:d2:e6:42:96:a7:d8:45:27:f6:71:90:a3:7a:54:77: 2c:3f:1b:3d:5b:60:94:6b:e0:88:5e:b8:ee:48:52:67:cc:4c: 76:29:2a:75:47:7d:b0:0d:b8:e8:35:88:bf:5a:dd:5e:ca:5b: e0:c8:31:2d:98:01:9b:94:ea:c2:dc:c9:95:5d:5a:2e:80:11: 74:5c:50:2a:45:eb:c9:11:96:a9:24:41:99:b9:a4:f5:ca:06: f3:71:e0:b7:c9:0f:6a:4c:99:64:6c:f5:1a:e9:a2:a3:71:fe: b4:e4:3b:21:df:b1:6f:b7:40:90:78:fb:6f:eb:a1:de:b7:35: 36:91:c7:46:94:b9:ff:bc:42:fc:95:d5:da:5e:06:b5:17:01: 69:c4:6c:d4:65:6b:04:8c:67:91:92:af:be:32:57:04:bb:be: 67:9f:cd:97:33:d9:1f:6e:80:c3:d5:f7:21:b8:45:a5:0d:19: 28:4c:70:c9:47:0e:bc:4a:09:2e:1a:1e:49:41:6d:5a:ea:f6: d4:01:be:10 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RThENzExMC8GA1UEBRMoQkRBM0U4QTgyMzFDNzg3RjZCN0YxOEJDMTQ2Qjk1RkI1 QzAzOEVEOTAeFw0yNTA5MDUwNzMzNTdaFw0yNTA5MTIwNzMzNTdaMBgxFjAUBgNV BAMTDTY4YmE5MjY2LTQxYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhnPTUSPCE6LKgoShqaRyN8bx98BqqTIyrFrbFKnu9ujrsAbz4gZ4j6NVQTtsI mqEAsnRRIbD353khU/U8WFJ2YQQCxUsDm2BHmi6OpIaqdsCybWr+5rfJRKbHLWVF WW7Rdkr9JJTy/eb2Op/58uuQQLi1EDwhP3WaYMG4NmXhiBNpnN1FZTkAUG6lUf6F OOx81GvJEra/x6cJ82CmAyjR/UU02HU4s+N9/cUtbBbJgtV1hgv2xUG7dKdAgQwj H07nVSlVoX3oHev4gK/5Hw3Dpbz/O/fVY9KHRaSQJvba8qdfwQ+gOc91U8pLFyL/ fyZ4rbQbYI1nXYjwhcZiIlbHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUErFeWDog 6RXuwd3fs+3k/vk32v0wHwYDVR0jBBgwFoAUvaPoqCMceH9rfxi8FGuV+1wDjtkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFOEQ3LzRCMDFDNEE2Rjkz RjExRUZCN0VBQjQyNUM0RjlBRTAyL3ZhUG9xQ01jZUg5cmZ4aThGR3VWLTF3RGp0 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdmFQb3FDTWNlSDlyZnhpOEZHdVYtMXdEanRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF OEQ3LzRCMDFDNEE2RjkzRjExRUZCN0VBQjQyNUM0RjlBRTAyL3ZhUG9xQ01jZUg5 cmZ4aThGR3VWLTF3RGp0ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAANdSbv09QqETIpY3O3UgR4X4Hvln25dqj59ArSaMceTykzUlc9wGcCv Sx6HVqloI/tK0VAEBp9KntLmQpan2EUn9nGQo3pUdyw/Gz1bYJRr4IheuO5IUmfM THYpKnVHfbANuOg1iL9a3V7KW+DIMS2YAZuU6sLcyZVdWi6AEXRcUCpF68kRlqkk QZm5pPXKBvNx4LfJD2pMmWRs9RrpoqNx/rTkOyHfsW+3QJB4+2/rod63NTaRx0aU uf+8QvyV1dpeBrUXAWnEbNRlawSMZ5GSr74yVwS7vmefzZcz2R9ugMPV9yG4RaUN GShMcMlHDrxKCS4aHklBbVrq9tQBvhA= -----END CERTIFICATE-----Generated at Sat Sep 6 21:13:22 2025 by rpki-client