$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft File: vrCjIjTRl23j3iJaVReALbYTqLY.mft (raw, json) Hash identifier: lFWtMHjkLP1buQbp/gf6TnSTvqpFShYIPvzRYJhtiao= Subject key identifier: 3E:DF:2A:6F:0F:05:27:EB:62:80:37:BA:9A:13:1E:05:E2:E4:A2:D1 Authority key identifier: BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6 Certificate issuer: /CN=A91AF17B/serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6 Certificate serial: 05F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft Manifest number: 05EC Signing time: Thu 18 Sep 2025 23:16:01 +0000 Manifest this update: Thu 18 Sep 2025 23:16:01 +0000 Manifest next update: Thu 25 Sep 2025 23:16:01 +0000 Files and hashes: 1: vrCjIjTRl23j3iJaVReALbYTqLY.crl (hash: MIa0ubXPOt/cmrb9EqET+skHdQtVTyiM5fpD8s7Z8gU=) 2: 9C955450C77E11EB9DF68B6AC4F9AE02.roa (hash: 3VhvbAFpyQFgzK9qGDlGhCPjLIqfMEiNUYNuSiAIv58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1522 (0x5f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF17B, serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6 Validity Not Before: Sep 18 23:16:01 2025 GMT Not After : Sep 25 23:16:01 2025 GMT Subject: CN=68cc92b1-b019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f0:c4:8c:60:5b:b1:5a:a5:3c:c8:7b:e1:11: 65:38:32:54:5d:60:b9:f5:f1:04:3b:28:49:4b:e7: c7:60:9b:cc:f9:ba:88:b3:f2:ea:8c:a5:61:63:ae: 4e:ae:02:95:8c:e0:46:f2:d9:ce:86:45:07:76:3b: 14:48:4f:bc:88:94:a4:2c:8a:af:02:3c:40:b7:3f: 7a:be:c7:d7:df:27:b5:05:0d:09:1d:47:c4:f8:6e: a3:00:11:32:67:6d:5d:ad:93:4f:90:bf:d1:1e:e7: 5c:1c:67:25:79:06:67:d8:5a:89:fa:39:a3:df:08: d0:00:9c:ef:b1:05:19:3c:e9:20:70:00:23:53:97: 77:32:31:ce:98:ab:aa:c3:6a:b9:81:f3:a8:7c:82: 71:71:7b:d0:24:32:bb:93:eb:68:08:ae:6f:5a:e2: d2:09:6e:03:22:2c:3b:68:25:86:61:86:ce:db:10: 8f:68:c9:96:04:47:ab:e6:1f:a9:f3:d5:22:5b:04: 68:3e:86:2d:ea:c4:e8:24:37:c6:a9:b0:ed:0d:4d: 9c:ea:54:9d:ad:fa:8c:d5:e6:04:c6:fa:a6:8e:f0: c2:ff:a6:99:26:54:7e:6b:85:e4:e4:f1:06:0b:ad: a2:a8:8e:96:72:61:cf:58:f8:c9:0b:b7:70:fc:e9: 4b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DF:2A:6F:0F:05:27:EB:62:80:37:BA:9A:13:1E:05:E2:E4:A2:D1 X509v3 Authority Key Identifier: keyid:BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:dc:c3:4e:bd:a0:ef:45:7f:e7:26:66:3f:0a:4c:92:a3:20: e4:1d:00:1c:e4:ce:41:e4:f4:fa:81:ff:66:89:35:e4:da:45: aa:e0:c6:1a:b2:6e:a0:7d:cc:ac:e8:8d:e7:8e:98:6f:50:79: 95:d0:d1:a4:e3:07:a4:4c:1f:b5:42:81:ce:9b:31:09:1a:2e: b6:5c:04:df:cc:05:33:a6:67:24:70:a9:c9:3e:d1:47:a5:e3: 27:25:84:31:d6:bb:be:38:df:5d:7e:2c:7c:f7:33:87:18:23: 26:d0:3e:f8:08:91:a6:47:0b:07:ee:77:2c:bc:a5:31:f3:e6: 10:ea:e2:a5:5e:f8:5e:6f:8b:e0:24:a0:2b:42:22:16:d3:47: 4a:bd:d6:da:fc:e7:3b:2d:60:39:c5:dd:46:a6:e4:e9:8f:28: a2:74:73:31:8a:df:e7:36:94:31:4e:01:ae:92:55:be:a8:b1: 47:d0:40:3f:07:bb:24:f6:28:27:d8:9d:1c:10:be:8b:f3:c2: a7:2d:07:a9:b1:85:fe:ec:a7:6c:b3:6a:12:8e:79:15:e6:b4: a5:23:b4:32:46:76:df:59:fa:ce:2d:22:27:ed:cb:ea:ec:83: 01:c3:5a:d2:71:8c:58:42:0b:00:ca:9d:07:19:79:0b:39:20: c9:fe:31:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxN0IxMTAvBgNVBAUTKEJFQjBBMzIyMzREMTk3NkRFM0RFMjI1QTU1MTc4MDJE QjYxM0E4QjYwHhcNMjUwOTE4MjMxNjAxWhcNMjUwOTI1MjMxNjAxWjAYMRYwFAYD VQQDEw02OGNjOTJiMS1iMDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/DEjGBbsVqlPMh74RFlODJUXWC59fEEOyhJS+fHYJvM+bqIs/LqjKVhY65O rgKVjOBG8tnOhkUHdjsUSE+8iJSkLIqvAjxAtz96vsfX3ye1BQ0JHUfE+G6jABEy Z21drZNPkL/RHudcHGcleQZn2FqJ+jmj3wjQAJzvsQUZPOkgcAAjU5d3MjHOmKuq w2q5gfOofIJxcXvQJDK7k+toCK5vWuLSCW4DIiw7aCWGYYbO2xCPaMmWBEer5h+p 89UiWwRoPoYt6sToJDfGqbDtDU2c6lSdrfqM1eYExvqmjvDC/6aZJlR+a4Xk5PEG C62iqI6WcmHPWPjJC7dw/OlLzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7fKm8P BSfrYoA3upoTHgXi5KLRMB8GA1UdIwQYMBaAFL6woyI00Zdt494iWlUXgC22E6i2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE3Qi9FQjAyNzdGQ0M3 N0ExMUVCQkI4MEI4NzhDNEY5QUUwMi92ckNqSWpUUmwyM2ozaUphVlJlQUxiWVRx TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyQ2pJalRSbDIzajNpSmFWUmVBTGJZVHFMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE3Qi9FQjAyNzdGQ0M3N0ExMUVCQkI4MEI4NzhDNEY5QUUwMi92ckNqSWpUUmwy M2ozaUphVlJlQUxiWVRxTFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM3MNOvaDvRX/nJmY/CkySoyDkHQAc5M5B5PT6gf9miTXk2kWq4MYa sm6gfcys6I3njphvUHmV0NGk4wekTB+1QoHOmzEJGi62XATfzAUzpmckcKnJPtFH peMnJYQx1ru+ON9dfix89zOHGCMm0D74CJGmRwsH7ncsvKUx8+YQ6uKlXvheb4vg JKArQiIW00dKvdba/Oc7LWA5xd1GpuTpjyiidHMxit/nNpQxTgGuklW+qLFH0EA/ B7sk9ign2J0cEL6L88KnLQepsYX+7Kdss2oSjnkV5rSlI7QyRnbfWfrOLSIn7cvq 7IMBw1rScYxYQgsAyp0HGXkLOSDJ/jEJ -----END CERTIFICATE-----Generated at Fri Sep 19 07:12:32 2025 by rpki-client