$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft File: VNOpVcw0GoQYFajN6hkK6lEC384.mft (raw, json) Hash identifier: +BKdLvZzIOmdiePFYD3eT2wG4Z9IwAzWPGmKWDj6kK8= Subject key identifier: FD:8D:BD:C5:31:B4:5B:CC:D8:EB:7C:13:54:9C:4D:DC:3B:30:03:9A Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE Certificate issuer: /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Certificate serial: 0C6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft Manifest number: 0C68 Signing time: Sun 24 Aug 2025 18:22:56 +0000 Manifest this update: Sun 24 Aug 2025 18:22:56 +0000 Manifest next update: Sun 31 Aug 2025 18:22:56 +0000 Files and hashes: 1: VNOpVcw0GoQYFajN6hkK6lEC384.crl (hash: DI800tSq0sxgdbCErq7KJqCuB9YsLR7yJYkoOuaQIeo=) 2: 86B7FE9005FF11EAB499A845C4F9AE02.roa (hash: zdVWhh1fLYpRD960eUnMlAOzWPZg7F1+V76js4O1Hfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3182 (0xc6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FAC, serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Validity Not Before: Aug 24 18:22:56 2025 GMT Not After : Aug 31 18:22:56 2025 GMT Subject: CN=68ab5880-3b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f0:c3:15:dc:ce:63:03:40:47:1a:d0:f5:ea: 66:e0:f1:04:e0:64:bf:83:09:76:29:bf:30:7a:84: 29:92:0e:0b:b0:dc:27:96:88:81:ff:63:a2:7b:20: e5:01:0a:18:2f:a4:57:21:fd:55:8a:11:c9:64:ae: 32:c6:66:75:b8:8b:69:d7:b4:89:59:1a:14:0e:ee: 0d:d1:f3:65:e4:de:d9:5e:1c:d3:24:b5:17:ff:87: ec:d1:a9:9c:c1:97:54:69:0c:00:da:58:d1:10:dd: c7:7f:76:59:8e:c9:8a:dd:a2:52:2b:83:11:f2:1a: 11:ab:df:84:dd:62:5d:0e:4a:cb:12:1d:5c:9d:08: 91:9f:c4:8d:d9:f2:e9:e7:7f:df:b4:4d:b3:3c:f8: 3d:68:62:68:ce:c0:a8:4f:44:5b:04:d7:3d:70:34: 1d:82:4f:6e:a9:cf:a8:96:4f:44:06:98:0a:9a:30: 4b:ed:e7:dd:33:22:21:38:a3:37:e0:83:f1:69:72: fb:f2:6a:2e:66:39:a4:0d:7d:e8:d1:de:e9:e6:a3: a4:4b:ff:5b:7c:f4:72:2e:5b:cd:96:15:dc:4e:78: fb:6a:48:fa:dd:c2:5a:bd:ac:3f:6e:66:0d:c5:f4: d7:de:ab:cd:53:7c:15:af:e8:0d:70:14:0b:b7:eb: 4d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:8D:BD:C5:31:B4:5B:CC:D8:EB:7C:13:54:9C:4D:DC:3B:30:03:9A X509v3 Authority Key Identifier: keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:b9:d5:eb:a8:7e:c4:3e:d9:17:46:88:da:ed:e7:07:3f:22: 9b:09:3a:00:af:d4:a7:d9:3a:aa:1a:e3:09:41:80:5f:ce:8b: 5f:c6:9c:26:81:8d:e1:76:88:db:70:e8:a1:90:b9:25:26:9f: f3:b0:73:cd:86:5f:a4:db:22:24:ff:37:c4:7a:63:65:bf:0c: d6:c1:04:77:7f:30:4e:a5:8a:9e:64:3f:c2:8b:30:2a:02:35: d4:2a:df:02:92:8c:ae:35:59:8c:42:86:6f:ea:8f:81:2c:36: 4a:6e:9e:da:0c:fe:1c:9f:07:f8:26:34:a1:30:d1:c9:d9:e2: b5:4b:55:91:a1:df:67:42:4f:ff:dd:6e:2a:23:26:5e:f8:bd: e0:b1:f3:84:67:65:58:67:8b:73:3e:fa:db:4a:ba:89:b5:d1: 4f:c5:ef:7a:b7:9c:09:f3:fa:48:08:63:83:83:8e:76:c8:c5: 3b:62:c2:51:17:75:c0:cc:e8:e5:17:c4:32:7f:f2:20:ae:7c: 0f:3d:3f:af:0f:a3:cb:f9:1f:9e:11:a2:a5:18:83:da:1a:7a: 6c:ad:f6:28:9d:8c:09:46:5a:2b:00:b1:47:f5:aa:fe:e9:7a: da:04:62:bf:4f:f0:5a:45:93:aa:fc:32:49:25:b7:e0:cf:1e: e8:dd:49:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQUMxMTAvBgNVBAUTKDU0RDNBOTU1Q0MzNDFBODQxODE1QThDREVBMTkwQUVB NTEwMkRGQ0UwHhcNMjUwODI0MTgyMjU2WhcNMjUwODMxMTgyMjU2WjAYMRYwFAYD VQQDEw02OGFiNTg4MC0zYjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/DDFdzOYwNARxrQ9epm4PEE4GS/gwl2Kb8weoQpkg4LsNwnloiB/2OieyDl AQoYL6RXIf1VihHJZK4yxmZ1uItp17SJWRoUDu4N0fNl5N7ZXhzTJLUX/4fs0amc wZdUaQwA2ljREN3Hf3ZZjsmK3aJSK4MR8hoRq9+E3WJdDkrLEh1cnQiRn8SN2fLp 53/ftE2zPPg9aGJozsCoT0RbBNc9cDQdgk9uqc+olk9EBpgKmjBL7efdMyIhOKM3 4IPxaXL78mouZjmkDX3o0d7p5qOkS/9bfPRyLlvNlhXcTnj7akj63cJavaw/bmYN xfTX3qvNU3wVr+gNcBQLt+tNwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2NvcUx tFvM2Ot8E1ScTdw7MAOaMB8GA1UdIwQYMBaAFFTTqVXMNBqEGBWozeoZCupRAt/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBQy82ODE5QkY0MjA1 RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdvUVlGYWpONmhrSzZsRUMz ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZOT3BWY3cwR29RWUZhak42aGtLNmxFQzM4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZBQy82ODE5QkY0MjA1RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdv UVlGYWpONmhrSzZsRUMzODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrudXrqH7EPtkXRoja7ecHPyKbCToAr9Sn2TqqGuMJQYBfzotfxpwm gY3hdojbcOihkLklJp/zsHPNhl+k2yIk/zfEemNlvwzWwQR3fzBOpYqeZD/CizAq AjXUKt8CkoyuNVmMQoZv6o+BLDZKbp7aDP4cnwf4JjShMNHJ2eK1S1WRod9nQk// 3W4qIyZe+L3gsfOEZ2VYZ4tzPvrbSrqJtdFPxe96t5wJ8/pICGODg452yMU7YsJR F3XAzOjlF8Qyf/IgrnwPPT+vD6PL+R+eEaKlGIPaGnpsrfYonYwJRlorALFH9ar+ 6XraBGK/T/BaRZOq/DJJJbfgzx7o3Umy -----END CERTIFICATE-----Generated at Sun Aug 24 21:42:40 2025 by rpki-client