$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft File: VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft (raw, json) Hash identifier: uiPbNG01CK2hVGj1q0tpNnysJvwnH6CE46se5+SThmE= Subject key identifier: F7:13:6E:4A:9B:F8:3B:23:8D:99:40:ED:ED:90:44:94:86:B7:EE:4F Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Certificate serial: 0610 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft Manifest number: 055C Signing time: Fri 05 Sep 2025 00:17:53 +0000 Manifest this update: Fri 05 Sep 2025 00:17:52 +0000 Manifest next update: Fri 12 Sep 2025 00:17:52 +0000 Files and hashes: 1: VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl (hash: cUkwDP7nGnAvhOmfK0UQu9emwYnAD4YSBxI3O3YrhBg=) 2: 0BD4BBC2716911EDA03D4A50C4F9AE02.roa (hash: iCGYHqcapZ1DKt8RS4ox+PrMVLiDQPhQLsfb9ZqKn8Y=) 3: 48CB7422E27911ED88B5A641C4F9AE02.roa (hash: QmFCb1gnvXBWWYpq973wK4QQOQ9b3T0BnSVKwwKlbk4=) 4: D4FCF92C716B11ED9F349A49C4F9AE02.roa (hash: UuOQPjOHW3te4OiVFYw+HXL7r4q+xv2PoIFABxSLF70=) 5: B7342ECA555B11F0B35B1E0DC4F9AE02.roa (hash: ZCWgM50hKhmVlBN6caSNUYvrDT45U67mSi8JO40F7Hk=) 6: ECC41AD2748A11ED80EF3436C4F9AE02.roa (hash: sg221W/egXu0ZEIvG5/3NuaO+9JdsATAt/T48V/WxaU=) 7: 0C5EDCDA716911EDA03D4A50C4F9AE02.roa (hash: /udoJCuRJJiznFyAsVCyc0gM64uxhJqp5G9jTAQbZu4=) 8: 9A1D8B2E867D11ED856A8E54C4F9AE02.roa (hash: cieJSU2MctUg0O+GWn4XGuRsQ3vHkHefCudId57mspk=) 9: 8DEEDC96E6B511EF9FEF6436C4F9AE02.roa (hash: PXNaSMJ5YVKmgSX7D94F0YVFvnDTmRG8eGKKeg/Al70=) 10: 0D0517EE716911EDA03D4A50C4F9AE02.roa (hash: fhtBFY+6U1Q/NDrcrqBZE1BQCslriv3eFT6qN9HqyO4=) 11: D359E238716B11ED9F349A49C4F9AE02.roa (hash: aJuLqquEQyyIiKwXY41VQpBHPxNA/CIwMjOgaOCooJI=) 12: 1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa (hash: A2ygxvr9PN0f2GmPnzr/pvOkxXlgbKwoY3C25qzAOpk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 00:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1552 (0x610) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Validity Not Before: Sep 5 00:17:52 2025 GMT Not After : Sep 12 00:17:52 2025 GMT Subject: CN=68ba2c30-4af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cc:e7:d9:d4:6f:88:da:ed:aa:97:f3:8a:ce: e4:7e:ba:04:98:e8:36:49:68:ef:94:aa:1a:07:91: e1:f4:c1:01:a8:8c:da:91:d1:14:fb:0a:a6:f3:f7: be:af:f7:d6:3f:1c:e8:26:78:99:87:9c:aa:8a:4f: 91:53:9b:2c:fd:d0:72:68:66:41:2d:30:3f:e2:8e: 7d:3f:69:1c:30:5a:82:6d:cb:2b:8a:e8:a9:6e:55: f9:09:ee:c6:45:4d:1f:0b:56:c8:e9:47:0c:14:c3: 1a:12:d4:36:73:82:7e:ff:e9:a5:a0:91:57:a0:f4: 1c:ab:00:7a:1c:98:a1:73:be:9a:df:e4:4d:6a:89: 75:7c:aa:1f:06:f1:fd:b7:16:44:3d:a9:02:d3:ee: 25:7a:84:75:e0:96:57:d2:51:58:dc:c3:04:50:74: ee:f9:2b:e8:f1:f2:40:97:bf:e1:20:bb:d8:41:fc: 83:dc:b5:06:b8:79:8b:39:69:8a:f4:89:cd:d3:4c: 5e:65:c1:93:81:d3:92:bf:b4:e1:3d:8a:3d:3a:d7: 1a:12:9e:fd:11:55:bd:25:a6:0c:c0:e9:73:f3:1e: 56:c5:76:f5:f6:7f:42:5e:4a:1b:87:30:0c:5c:31: 93:1d:43:b8:b3:03:db:85:a0:c4:83:aa:6d:5a:cf: 05:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:13:6E:4A:9B:F8:3B:23:8D:99:40:ED:ED:90:44:94:86:B7:EE:4F X509v3 Authority Key Identifier: keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:73:5f:a2:23:5f:51:d1:b6:2a:e0:36:8f:d0:65:08:84:d9: 53:f9:7f:97:c1:94:95:15:0b:ed:b2:4f:37:df:73:19:5e:47: 06:2e:8b:51:1d:ee:22:d2:82:9b:2d:a8:43:52:46:f6:97:eb: a1:12:65:77:21:a7:dc:cb:c2:1a:82:e3:b5:17:87:a6:0b:35: 2d:80:d2:42:aa:c8:a3:e1:99:08:5e:5c:90:fe:65:33:18:c8: 48:55:f1:e8:e3:07:d0:de:ab:52:ef:5e:0a:f1:72:50:ff:20: 00:06:17:32:27:cf:ae:f1:ec:81:1e:27:15:e5:c2:dc:57:e0: a9:5e:10:78:9f:dc:fd:18:82:22:63:7e:2e:93:2b:52:3f:e4: 25:1d:94:70:11:51:25:2b:ed:52:66:35:cf:4e:50:a0:6c:7b: f8:55:d6:ee:9d:05:00:3c:b0:cc:5d:44:cf:55:e0:10:9f:bc: d2:c1:e9:28:a8:7c:69:46:30:fe:c8:33:4d:bc:88:a8:5a:f5: a0:0c:b4:79:2d:b8:6a:01:e3:2f:cb:00:e6:4b:03:45:28:83: b9:a5:80:2f:dc:6b:a1:72:89:1d:42:e0:1b:10:48:f9:73:fb: 3d:a7:ad:b0:3e:b5:1e:96:bd:c7:b2:16:1a:29:6c:a6:95:2e: a5:08:b7:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3 RDc0MTQ3RjMwHhcNMjUwOTA1MDAxNzUyWhcNMjUwOTEyMDAxNzUyWjAYMRYwFAYD VQQDEw02OGJhMmMzMC00YWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqszn2dRviNrtqpfzis7kfroEmOg2SWjvlKoaB5Hh9MEBqIzakdEU+wqm8/e+ r/fWPxzoJniZh5yqik+RU5ss/dByaGZBLTA/4o59P2kcMFqCbcsriuipblX5Ce7G RU0fC1bI6UcMFMMaEtQ2c4J+/+mloJFXoPQcqwB6HJihc76a3+RNaol1fKofBvH9 txZEPakC0+4leoR14JZX0lFY3MMEUHTu+Svo8fJAl7/hILvYQfyD3LUGuHmLOWmK 9InN00xeZcGTgdOSv7ThPYo9OtcaEp79EVW9JaYMwOlz8x5WxXb19n9CXkobhzAM XDGTHUO4swPbhaDEg6ptWs8FFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcTbkqb +DsjjZlA7e2QRJSGt+5PMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDM5RC9ERTdEMkY5NDRFNzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9S WF9JbVgtU1JrSng5ZEJSX00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPc1+iI19R0bYq4DaP0GUIhNlT+X+XwZSVFQvtsk8333MZXkcGLotR He4i0oKbLahDUkb2l+uhEmV3Iafcy8IaguO1F4emCzUtgNJCqsij4ZkIXlyQ/mUz GMhIVfHo4wfQ3qtS714K8XJQ/yAABhcyJ8+u8eyBHicV5cLcV+CpXhB4n9z9GIIi Y34ukytSP+QlHZRwEVElK+1SZjXPTlCgbHv4VdbunQUAPLDMXUTPVeAQn7zSweko qHxpRjD+yDNNvIioWvWgDLR5LbhqAeMvywDmSwNFKIO5pYAv3GuhcokdQuAbEEj5 c/s9p62wPrUelr3HshYaKWymlS6lCLe9 -----END CERTIFICATE-----Generated at Sat Sep 6 12:08:18 2025 by rpki-client