$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft File: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft (raw, json) Hash identifier: vCuw46q9qpcvfRQmUgRfWIfLdLVXRIg0MSENQpB294M= Subject key identifier: CF:91:91:7E:34:62:3E:70:91:AC:C3:79:36:2B:63:8E:3F:56:36:63 Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7 Certificate issuer: /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7 Certificate serial: 2611 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft Manifest number: 25FF Signing time: Sat 06 Sep 2025 15:45:10 +0000 Manifest this update: Sat 06 Sep 2025 15:45:10 +0000 Manifest next update: Sat 13 Sep 2025 15:45:10 +0000 Files and hashes: 1: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl (hash: sL9T6sCPUjkxSeJWPi6Fi2oz3cBhRLqOFq6t3jpDgew=) 2: E2E360EEF3EE11ECBAE10054C4F9AE02.roa (hash: MwkxKey8SdTfX3rA2ndaHPVnUsJ97475p+Dzwmyl9SQ=) 3: E21E1C6CF3EE11ECBAE10054C4F9AE02.roa (hash: UiQJQcjiTKGUKZaMNBKg71L13IK59w5XS6QCL7nnWSE=) 4: E14BDC8EF3EE11ECBAE10054C4F9AE02.roa (hash: gP1rmRhgK5le3CICuUOYmVhhDItIyOhZ8RIHh+3gkE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 15:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9745 (0x2611) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5B46, serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7 Validity Not Before: Sep 6 15:45:10 2025 GMT Not After : Sep 13 15:45:10 2025 GMT Subject: CN=68bc5706-8ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:02:08:8c:c6:e4:b0:af:10:4a:ac:d9:00:0c: 26:d3:ed:8b:4b:34:c7:4f:d3:e3:76:8f:79:f9:7c: a8:dc:1f:80:2c:90:5f:7b:c5:4e:9e:e2:30:c9:e8: a2:74:88:18:19:5d:20:df:91:d0:87:05:1a:b6:3b: d7:98:77:cd:7a:9d:ce:6e:4d:31:ad:79:77:3f:d1: 54:ad:5a:d8:84:07:a1:15:1e:68:da:70:77:c5:c9: 5b:e7:38:8b:47:55:65:a6:ca:79:6f:fa:cc:a0:51: 26:8d:1e:18:0a:db:8d:5d:9e:7e:02:59:80:d1:be: 3c:0a:81:6d:0f:b6:1b:90:78:d9:27:62:23:ef:29: 7a:3e:fc:56:97:d7:92:e6:4c:67:3d:b0:03:2a:f2: d1:72:c7:55:04:52:12:e6:81:22:5f:0c:d0:de:00: eb:8a:23:54:a0:ae:38:aa:27:27:fc:27:c8:55:09: 44:fb:df:90:99:2b:06:1a:3a:bf:a1:fb:27:a9:9d: 2e:bf:11:af:09:0e:38:8b:bc:5b:d2:8d:17:91:83: c5:4e:2e:ae:ca:57:e5:6d:9d:c1:a8:88:91:b9:4b: 12:68:cb:2a:fe:0b:f7:81:99:f1:f0:af:44:d5:d2: 26:0f:0f:ae:a6:d9:0c:02:49:78:79:8c:fc:b5:10: c8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:91:91:7E:34:62:3E:70:91:AC:C3:79:36:2B:63:8E:3F:56:36:63 X509v3 Authority Key Identifier: keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:18:40:c0:ef:dc:91:66:f0:aa:9a:ad:0c:62:4d:42:60:77: e0:4a:16:d0:86:b7:97:d3:a8:d0:00:54:5d:7a:2f:fc:b5:f6: ed:c7:f2:b2:82:f2:77:98:a4:35:6f:28:96:de:4e:75:b0:32: 53:a2:68:27:ad:62:42:58:f5:24:fa:3d:86:05:67:80:62:b5: 0c:0b:5a:2c:ae:07:e3:0c:f7:ac:be:4e:73:0b:e8:9f:e9:c0: 88:1b:39:6d:b7:83:84:90:55:fe:c0:5a:43:9d:c1:b5:5b:a7: b5:d2:70:22:e1:65:6e:2c:e1:d5:8a:53:dc:71:1f:6c:7a:b1: ec:c6:dd:b2:25:5a:c9:ff:21:b9:36:64:55:d5:ee:b1:44:89: a1:95:ce:89:6f:8b:f3:d1:f8:59:16:a5:be:bf:6e:8d:e7:58: a1:93:3b:b4:20:47:17:08:65:3b:ca:2c:d4:df:35:aa:ca:25: f0:83:a4:60:89:35:53:db:81:86:f5:d8:e4:81:81:ec:19:31: 25:10:c3:1d:35:92:38:0b:a9:0e:42:6d:8a:5b:7a:de:a8:05: 52:37:01:d9:99:4b:9f:b0:bd:de:b1:ec:ad:3a:40:f1:48:77: 9e:9b:63:b4:1e:0b:17:23:94:4b:11:8a:25:bb:d3:60:5f:f1: 29:2d:6a:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVCNDYxMTAvBgNVBAUTKDU2Q0QzMkQxM0Y4Q0FFMUU5MkY5Qzk3RjM5NUYxQTIz QUJCOUM2RjcwHhcNMjUwOTA2MTU0NTEwWhcNMjUwOTEzMTU0NTEwWjAYMRYwFAYD VQQDEw02OGJjNTcwNi04ZWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgIIjMbksK8QSqzZAAwm0+2LSzTHT9Pjdo95+Xyo3B+ALJBfe8VOnuIwyeii dIgYGV0g35HQhwUatjvXmHfNep3Obk0xrXl3P9FUrVrYhAehFR5o2nB3xclb5ziL R1Vlpsp5b/rMoFEmjR4YCtuNXZ5+AlmA0b48CoFtD7YbkHjZJ2Ij7yl6PvxWl9eS 5kxnPbADKvLRcsdVBFIS5oEiXwzQ3gDriiNUoK44qicn/CfIVQlE+9+QmSsGGjq/ ofsnqZ0uvxGvCQ44i7xb0o0XkYPFTi6uylflbZ3BqIiRuUsSaMsq/gv3gZnx8K9E 1dImDw+uptkMAkl4eYz8tRDINwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+RkX40 Yj5wkazDeTYrY44/VjZjMB8GA1UdIwQYMBaAFFbNMtE/jK4ekvnJfzlfGiOrucb3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUI0Ni9CQTBCODQzMDAy ODgxMUU1QUUxRTQ3NjFDNEY5QUUwMi9WczB5MFQtTXJoNlMtY2xfT1Y4YUk2dTV4 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZzMHkwVC1Ncmg2Uy1jbF9PVjhhSTZ1NXh2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUI0Ni9CQTBCODQzMDAyODgxMUU1QUUxRTQ3NjFDNEY5QUUwMi9WczB5MFQtTXJo NlMtY2xfT1Y4YUk2dTV4dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdGEDA79yRZvCqmq0MYk1CYHfgShbQhreX06jQAFRdei/8tfbtx/Ky gvJ3mKQ1byiW3k51sDJTomgnrWJCWPUk+j2GBWeAYrUMC1osrgfjDPesvk5zC+if 6cCIGzltt4OEkFX+wFpDncG1W6e10nAi4WVuLOHVilPccR9serHsxt2yJVrJ/yG5 NmRV1e6xRImhlc6Jb4vz0fhZFqW+v26N51ihkzu0IEcXCGU7yizU3zWqyiXwg6Rg iTVT24GG9djkgYHsGTElEMMdNZI4C6kOQm2KW3reqAVSNwHZmUufsL3eseytOkDx SHeem2O0HgsXI5RLEYolu9NgX/EpLWrQ -----END CERTIFICATE-----Generated at Sun Sep 7 15:22:57 2025 by rpki-client