$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft File: vjdwS4x985dWFxlK8q3u2hzJvPY.mft (raw, json) Hash identifier: qBNZTvj6G0dIpNiFM9OHxaCM0xw2RQ3ioWg2M83q6wM= Subject key identifier: 0C:D5:94:24:66:A0:3B:18:A3:1A:FC:D2:75:26:52:73:75:82:2E:5E Authority key identifier: BE:37:70:4B:8C:7D:F3:97:56:17:19:4A:F2:AD:EE:DA:1C:C9:BC:F6 Certificate issuer: /CN=A91D0432/serialNumber=BE37704B8C7DF3975617194AF2ADEEDA1CC9BCF6 Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft Manifest number: 0208 Signing time: Wed 17 Sep 2025 02:48:21 +0000 Manifest this update: Wed 17 Sep 2025 02:48:20 +0000 Manifest next update: Wed 24 Sep 2025 02:48:20 +0000 Files and hashes: 1: vjdwS4x985dWFxlK8q3u2hzJvPY.crl (hash: UIId2yPlrRI9F55oH+xorzumzk3NODpYqA6rYSUBt90=) 2: 539DF534D1FB11EDA0A31C2FC4F9AE02.roa (hash: ZwuvYUkBHuPjyaZwcok71ZoBlPTV1oL4tY+NTXiSqLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.crl rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0432, serialNumber=BE37704B8C7DF3975617194AF2ADEEDA1CC9BCF6 Validity Not Before: Sep 17 02:48:20 2025 GMT Not After : Sep 24 02:48:20 2025 GMT Subject: CN=68ca2175-7522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:07:0b:7d:29:ea:2d:ca:56:69:a0:36:95:4d: 4b:88:67:5e:68:8a:21:2a:8a:69:b1:48:7e:ce:6b: fa:db:0e:2f:06:55:f5:fc:ca:3d:85:b8:4f:da:58: 9e:3b:97:91:3a:f4:aa:dc:7c:4b:f1:95:03:84:a1: 7d:53:11:67:ee:63:3f:bc:83:82:b6:76:eb:5d:fc: b2:19:4c:2b:72:dc:8d:ae:7f:b6:5a:4d:84:cf:fd: ab:83:5c:3f:87:fe:da:c8:16:6f:f5:7c:1d:ad:e9: 46:aa:01:c8:9a:a6:5c:c1:f8:d8:5f:b9:f9:ff:80: c5:80:bc:5b:4b:68:49:3e:64:61:e2:ec:43:a7:3c: f0:e8:27:1f:40:fb:be:8a:6f:54:5a:e7:c3:7f:3b: 60:ee:ce:74:dd:96:77:76:c6:b5:63:b8:a8:57:9b: 49:25:c0:26:d2:ee:45:d9:95:9a:26:61:86:58:82: d9:26:31:bc:fc:90:1e:45:68:2a:cb:df:10:3b:16: 05:5f:e5:92:87:e7:e3:65:fd:40:e7:2d:e6:6a:4d: e2:1a:92:4d:27:07:ae:7f:72:69:10:3a:5d:3a:83: b9:d7:16:4c:67:0e:93:12:af:85:f3:55:19:03:f1: 4b:61:21:57:a8:1a:0a:ef:f0:4f:cd:0b:ad:10:22: 13:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D5:94:24:66:A0:3B:18:A3:1A:FC:D2:75:26:52:73:75:82:2E:5E X509v3 Authority Key Identifier: keyid:BE:37:70:4B:8C:7D:F3:97:56:17:19:4A:F2:AD:EE:DA:1C:C9:BC:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjdwS4x985dWFxlK8q3u2hzJvPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0432/E3CA18EC7B8711EDB59E3B80C4F9AE02/vjdwS4x985dWFxlK8q3u2hzJvPY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:15:de:f3:fd:94:a6:44:8e:d3:93:09:29:11:76:4c:1b:cf: 44:b4:b1:27:da:bc:77:aa:db:f5:8e:21:24:fc:11:c4:98:1b: 05:58:67:cf:8a:7c:6b:01:0b:ba:01:65:5a:fb:aa:7f:f7:b2: 22:1c:65:47:fb:de:05:2a:1d:93:c2:ce:1d:30:6c:93:3d:97: ff:d0:63:02:f5:83:13:83:f4:1f:e5:3e:df:76:ab:66:b2:d3: c4:29:7a:3e:71:99:e0:98:4a:f6:c0:a1:03:8a:09:5f:9f:e1: 65:ab:09:bb:c9:46:94:25:9b:b8:a8:5b:78:d4:99:b1:f8:aa: bf:be:f8:ad:cf:df:99:5c:61:a1:ac:60:94:4d:cc:5a:56:54: b2:1d:61:86:67:d7:5a:57:e2:23:5b:5f:fd:a9:ef:d6:5f:90: 29:d0:da:fe:b8:43:5e:c8:8a:17:c1:b8:34:50:8b:0a:90:81: 54:70:bc:ed:e6:c3:7a:f1:ca:80:83:c3:a1:14:fd:cf:53:f3: ac:e2:62:71:67:68:33:bb:7b:73:54:b8:77:f9:b5:37:3b:81: 9f:4c:65:24:da:15:e3:16:56:6d:a2:d3:75:ed:59:d6:83:d3: e3:62:00:2e:79:c3:f1:c4:4f:50:2b:95:94:7e:2b:ea:20:4f: 71:09:2e:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA0MzIxMTAvBgNVBAUTKEJFMzc3MDRCOEM3REYzOTc1NjE3MTk0QUYyQURFRURB MUNDOUJDRjYwHhcNMjUwOTE3MDI0ODIwWhcNMjUwOTI0MDI0ODIwWjAYMRYwFAYD VQQDEw02OGNhMjE3NS03NTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgcLfSnqLcpWaaA2lU1LiGdeaIohKoppsUh+zmv62w4vBlX1/Mo9hbhP2lie O5eROvSq3HxL8ZUDhKF9UxFn7mM/vIOCtnbrXfyyGUwrctyNrn+2Wk2Ez/2rg1w/ h/7ayBZv9XwdrelGqgHImqZcwfjYX7n5/4DFgLxbS2hJPmRh4uxDpzzw6CcfQPu+ im9UWufDfztg7s503ZZ3dsa1Y7ioV5tJJcAm0u5F2ZWaJmGGWILZJjG8/JAeRWgq y98QOxYFX+WSh+fjZf1A5y3mak3iGpJNJweuf3JpEDpdOoO51xZMZw6TEq+F81UZ A/FLYSFXqBoK7/BPzQutECITpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzVlCRm oDsYoxr80nUmUnN1gi5eMB8GA1UdIwQYMBaAFL43cEuMffOXVhcZSvKt7tocybz2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDQzMi9FM0NBMThFQzdC ODcxMUVEQjU5RTNCODBDNEY5QUUwMi92amR3UzR4OTg1ZFdGeGxLOHEzdTJoekp2 UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqZHdTNHg5ODVkV0Z4bEs4cTN1Mmh6SnZQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDQzMi9FM0NBMThFQzdCODcxMUVEQjU5RTNCODBDNEY5QUUwMi92amR3UzR4OTg1 ZFdGeGxLOHEzdTJoekp2UFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIFd7z/ZSmRI7TkwkpEXZMG89EtLEn2rx3qtv1jiEk/BHEmBsFWGfP inxrAQu6AWVa+6p/97IiHGVH+94FKh2Tws4dMGyTPZf/0GMC9YMTg/Qf5T7fdqtm stPEKXo+cZngmEr2wKEDiglfn+Flqwm7yUaUJZu4qFt41Jmx+Kq/vvitz9+ZXGGh rGCUTcxaVlSyHWGGZ9daV+IjW1/9qe/WX5Ap0Nr+uENeyIoXwbg0UIsKkIFUcLzt 5sN68cqAg8OhFP3PU/Os4mJxZ2gzu3tzVLh3+bU3O4GfTGUk2hXjFlZtotN17VnW g9PjYgAuecPxxE9QK5WUfivqIE9xCS6g -----END CERTIFICATE-----Generated at Fri Sep 19 02:50:21 2025 by rpki-client