$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft File: vK5XMu8hlzK0msgoTbGBTpLIaxE.mft (raw, json) Hash identifier: P8OgNZYAuLW7swlMyWQ5UXD6tgKhGawETr5CX/YziLg= Subject key identifier: 30:92:73:60:BB:E2:03:84:02:C9:9F:2D:1B:CE:BA:0A:51:FA:8C:EC Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 Certificate issuer: /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Certificate serial: 08B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft Manifest number: 08A4 Signing time: Mon 18 Aug 2025 20:52:17 +0000 Manifest this update: Mon 18 Aug 2025 20:52:16 +0000 Manifest next update: Mon 25 Aug 2025 20:52:16 +0000 Files and hashes: 1: vK5XMu8hlzK0msgoTbGBTpLIaxE.crl (hash: O8lgtuiTN8IR7enY/8ehxhCPr6+p/lYROgmLeEQFxkM=) 2: 2015E6B2C66F11EAA0B1B019C4F9AE02.roa (hash: h3J4Tvd13De8oeu9y10qw5WhotHnj9E107WlmlhLTLE=) 3: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (hash: WRLRqvOq3SfDppm3IqDFX7iVTIlxw9qpmPcVf6+EH5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2226 (0x8b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Validity Not Before: Aug 18 20:52:16 2025 GMT Not After : Aug 25 20:52:16 2025 GMT Subject: CN=68a39280-62ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:f1:51:2a:2d:a8:96:be:9e:32:75:29:54: 45:22:61:df:d7:1e:ca:1d:15:3c:89:a1:a9:27:fe: f8:1e:42:91:a9:25:94:7e:f4:95:ee:85:34:6e:58: 47:9d:46:f3:8d:26:bb:f4:3c:72:2f:ff:da:71:ac: b4:82:95:1b:f6:42:10:12:9b:a7:50:4a:3d:1d:a2: 37:64:fe:da:33:bb:c7:63:e1:b4:d5:e5:26:c7:d5: 52:1a:55:14:aa:fd:5f:13:75:f2:80:2d:80:db:83: 35:df:63:df:21:fd:75:e5:77:7d:5a:04:6b:4e:30: 18:99:0f:59:11:cd:2a:a7:88:d9:69:33:0d:61:5e: ad:f7:c0:30:39:5b:22:06:1e:a2:39:75:a0:7d:fb: 3b:77:4c:3d:40:f6:42:3e:86:f5:c3:53:10:70:15: 59:d0:2a:44:f2:b1:38:5e:c2:3f:ec:78:33:1d:12: cd:33:c4:a5:f9:e6:d0:a4:7f:f8:be:6e:8e:98:20: 6f:0f:0c:3c:0a:b9:72:14:50:8a:55:b8:c3:0a:d9: 17:4a:88:1e:bd:68:f3:32:44:97:a2:32:d9:76:07: 10:d8:03:25:9f:7a:df:e0:89:07:d8:1b:44:8b:1c: 22:24:9b:f7:07:20:d7:94:92:f1:d1:58:46:3a:1e: 9a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:92:73:60:BB:E2:03:84:02:C9:9F:2D:1B:CE:BA:0A:51:FA:8C:EC X509v3 Authority Key Identifier: keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2c:15:2d:f2:5a:8e:4c:c7:56:8f:b2:7a:5e:79:c5:f6:69: eb:3f:89:09:41:00:62:e8:f5:26:de:f4:2f:d8:d0:1d:0c:0e: 7e:47:1b:c2:bd:7e:50:41:3e:f4:c5:fd:88:fb:b3:98:50:7b: 93:13:99:9e:17:fc:08:a9:72:c1:43:84:10:ad:8c:2c:15:49: 13:98:11:1d:cf:d7:d6:1a:f8:20:9e:c9:95:b1:bc:d5:4f:d4: 6b:65:ae:56:be:d2:ca:76:c8:51:1f:8d:46:f7:0d:fc:28:6c: f3:41:45:05:c7:e9:ca:3a:95:40:f2:4f:6f:da:26:9d:13:71: 09:d5:a0:9b:58:34:52:dd:14:8f:87:78:fa:a1:1f:d9:59:c1: ed:ab:ee:17:46:4f:43:b4:30:78:cd:ec:e3:e3:51:53:93:95: 76:40:ef:7c:8b:a1:07:ab:65:e5:de:4f:1b:17:f4:38:71:a6: 00:be:c1:fc:8c:0a:05:0d:67:b5:5d:e5:b9:0f:65:42:4a:45: 8d:f7:0c:6e:af:3a:56:0a:47:f5:0d:28:36:53:11:59:bd:1b: af:c0:1f:b6:b0:10:84:66:41:4a:c8:92:08:b7:12:03:a9:79: 88:c1:ff:17:17:f6:7f:86:5b:bf:f5:56:87:c8:6f:9f:b7:23: 2d:01:0a:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1M0IxMTAvBgNVBAUTKEJDQUU1NzMyRUYyMTk3MzJCNDlBQzgyODREQjE4MTRF OTJDODZCMTEwHhcNMjUwODE4MjA1MjE2WhcNMjUwODI1MjA1MjE2WjAYMRYwFAYD VQQDEw02OGEzOTI4MC02MmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/7xUSotqJa+njJ1KVRFImHf1x7KHRU8iaGpJ/74HkKRqSWUfvSV7oU0blhH nUbzjSa79DxyL//acay0gpUb9kIQEpunUEo9HaI3ZP7aM7vHY+G01eUmx9VSGlUU qv1fE3XygC2A24M132PfIf115Xd9WgRrTjAYmQ9ZEc0qp4jZaTMNYV6t98AwOVsi Bh6iOXWgffs7d0w9QPZCPob1w1MQcBVZ0CpE8rE4XsI/7HgzHRLNM8Sl+ebQpH/4 vm6OmCBvDww8CrlyFFCKVbjDCtkXSogevWjzMkSXojLZdgcQ2AMln3rf4IkH2BtE ixwiJJv3ByDXlJLx0VhGOh6aEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCSc2C7 4gOEAsmfLRvOugpR+ozsMB8GA1UdIwQYMBaAFLyuVzLvIZcytJrIKE2xgU6SyGsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjUzQi8yOTM4M0NERUMy MEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6SzBtc2dvVGJHQlRwTElh eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLNVhNdThobHpLMG1zZ29UYkdCVHBMSWF4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjUzQi8yOTM4M0NERUMyMEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6 SzBtc2dvVGJHQlRwTElheEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7LBUt8lqOTMdWj7J6XnnF9mnrP4kJQQBi6PUm3vQv2NAdDA5+RxvC vX5QQT70xf2I+7OYUHuTE5meF/wIqXLBQ4QQrYwsFUkTmBEdz9fWGvggnsmVsbzV T9RrZa5WvtLKdshRH41G9w38KGzzQUUFx+nKOpVA8k9v2iadE3EJ1aCbWDRS3RSP h3j6oR/ZWcHtq+4XRk9DtDB4zezj41FTk5V2QO98i6EHq2Xl3k8bF/Q4caYAvsH8 jAoFDWe1XeW5D2VCSkWN9wxurzpWCkf1DSg2UxFZvRuvwB+2sBCEZkFKyJIItxID qXmIwf8XF/Z/hlu/9VaHyG+ftyMtAQri -----END CERTIFICATE-----Generated at Wed Aug 20 15:34:05 2025 by rpki-client