$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft File: vHENBWM8XhGwdEtxrruIriskRuM.mft (raw, json) Hash identifier: CKlPAq7qTTX3sBaEC6QCBD4ogeCxI21rhxbrNMpMIZ0= Subject key identifier: C5:F3:E2:49:27:EB:A6:5F:33:C5:2F:CC:C7:B9:2A:B4:43:C0:24:36 Authority key identifier: BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 Certificate issuer: /CN=A91AF406/serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Certificate serial: 1371 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft Manifest number: 1369 Signing time: Sun 24 Aug 2025 16:58:00 +0000 Manifest this update: Sun 24 Aug 2025 16:57:59 +0000 Manifest next update: Sun 31 Aug 2025 16:57:59 +0000 Files and hashes: 1: vHENBWM8XhGwdEtxrruIriskRuM.crl (hash: ZQ+lP2bFCW63mulBQxPjoSuAL7k+HLrLOpLXsZkQjb0=) 2: C2065F2CA5F311E8B54BF03DC4F9AE02.roa (hash: c/V3Stz0hBoC77cDsx2sOFkExhPVs+UBbA7TaA5YseQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4977 (0x1371) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF406, serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Validity Not Before: Aug 24 16:57:59 2025 GMT Not After : Aug 31 16:57:59 2025 GMT Subject: CN=68ab4497-01f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fc:28:ea:d8:de:7f:c8:5c:6d:27:24:a2:99: c7:51:84:0f:4f:f4:04:07:ce:0c:ff:6a:2a:97:f4: e9:28:ac:05:9b:0f:fd:66:91:e1:95:db:0e:b4:e2: bd:e9:45:22:58:59:35:7e:06:97:8f:0b:42:10:c6: d1:b2:09:0a:97:7c:d2:f9:32:9d:4e:dc:32:97:1b: 14:3e:0d:d0:e9:19:b6:56:1c:76:6d:24:4c:fc:93: 07:29:7f:8c:60:59:d6:72:1f:14:77:1c:4d:47:05: 72:e0:2c:63:7f:a0:23:ec:87:54:97:83:47:50:2a: 34:6d:b4:94:30:f7:69:a5:bd:a9:6b:b9:74:0f:63: fa:fb:07:e0:0a:43:57:42:90:cf:17:dc:0a:7e:8d: 51:44:af:64:61:df:05:cb:73:26:2d:15:c5:b3:19: 73:1c:e2:f5:71:54:ff:e1:ca:cc:95:f4:75:74:a5: 6f:a9:cf:27:4a:90:9a:e0:97:fd:19:f7:e0:96:87: 03:04:63:c6:50:b2:ec:8f:3c:0c:a8:2a:e6:82:e9: 8d:5d:b0:b0:cd:95:15:15:9f:ce:a1:4b:b0:ae:9e: ba:9e:d6:08:e5:19:f8:18:62:28:56:df:ab:04:01: 94:ec:dd:0c:64:c9:a3:c9:7a:66:7a:b7:86:44:a8: d9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F3:E2:49:27:EB:A6:5F:33:C5:2F:CC:C7:B9:2A:B4:43:C0:24:36 X509v3 Authority Key Identifier: keyid:BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:81:43:a6:f1:32:86:a5:d0:92:44:c6:02:58:59:b8:3e:76: d4:3a:66:59:38:66:b2:ff:77:38:32:ae:7f:8c:b3:77:a9:3d: 34:de:ca:98:2e:e3:6b:a6:72:8e:bc:71:ee:d7:74:ee:0f:8b: c8:1e:f1:f8:fe:da:f3:17:e6:4b:76:3f:4e:35:6c:0f:f4:35: e2:89:8e:f3:22:08:87:51:5f:c8:ba:a2:97:7e:b5:da:71:d1: 10:99:96:96:22:33:30:b1:45:3d:59:a4:a2:58:9d:66:c0:9f: 00:f0:57:b2:25:17:ae:5b:46:0e:79:15:87:eb:c2:2b:60:c2: b7:4b:47:d3:e1:ee:6a:9c:26:d6:0d:fc:53:28:76:11:26:8f: ba:75:19:f7:af:53:ac:18:25:ef:6a:de:75:58:1d:b5:db:c7: 59:3a:87:6c:b2:ad:dc:a6:1b:90:39:98:c6:6f:33:1d:60:a1: ba:83:9d:90:0d:88:a1:1f:cd:f1:d8:46:5e:f4:1e:6d:e8:ed: bb:11:04:40:46:79:b4:e2:5c:e8:71:22:4a:6d:c7:94:49:91: cb:94:52:ac:5f:f2:dd:e5:af:41:fe:70:6c:33:71:f0:38:5f: 9a:b0:81:34:ad:5c:a0:23:2e:8f:b7:31:e4:53:19:6f:0d:39: 72:5e:e3:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDYxMTAvBgNVBAUTKEJDNzEwRDA1NjMzQzVFMTFCMDc0NEI3MUFFQkI4OEFF MkIyNDQ2RTMwHhcNMjUwODI0MTY1NzU5WhcNMjUwODMxMTY1NzU5WjAYMRYwFAYD VQQDEw02OGFiNDQ5Ny0wMWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Pwo6tjef8hcbSckopnHUYQPT/QEB84M/2oql/TpKKwFmw/9ZpHhldsOtOK9 6UUiWFk1fgaXjwtCEMbRsgkKl3zS+TKdTtwylxsUPg3Q6Rm2Vhx2bSRM/JMHKX+M YFnWch8UdxxNRwVy4Cxjf6Aj7IdUl4NHUCo0bbSUMPdppb2pa7l0D2P6+wfgCkNX QpDPF9wKfo1RRK9kYd8Fy3MmLRXFsxlzHOL1cVT/4crMlfR1dKVvqc8nSpCa4Jf9 GffglocDBGPGULLsjzwMqCrmgumNXbCwzZUVFZ/OoUuwrp66ntYI5Rn4GGIoVt+r BAGU7N0MZMmjyXpmereGRKjZfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXz4kkn 66ZfM8UvzMe5KrRDwCQ2MB8GA1UdIwQYMBaAFLxxDQVjPF4RsHRLca67iK4rJEbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNi8zRjY3MEMwQ0E1 RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFhoR3dkRXR4cnJ1SXJpc2tS dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZIRU5CV004WGhHd2RFdHhycnVJcmlza1J1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNi8zRjY3MEMwQ0E1RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFho R3dkRXR4cnJ1SXJpc2tSdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCgUOm8TKGpdCSRMYCWFm4PnbUOmZZOGay/3c4Mq5/jLN3qT003sqY LuNrpnKOvHHu13TuD4vIHvH4/trzF+ZLdj9ONWwP9DXiiY7zIgiHUV/IuqKXfrXa cdEQmZaWIjMwsUU9WaSiWJ1mwJ8A8FeyJReuW0YOeRWH68IrYMK3S0fT4e5qnCbW DfxTKHYRJo+6dRn3r1OsGCXvat51WB2128dZOodssq3cphuQOZjGbzMdYKG6g52Q DYihH83x2EZe9B5t6O27EQRARnm04lzocSJKbceUSZHLlFKsX/Ld5a9B/nBsM3Hw OF+asIE0rVygIy6PtzHkUxlvDTlyXuOQ -----END CERTIFICATE-----Generated at Sun Aug 24 21:38:50 2025 by rpki-client