$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft File: VIY3awW4olUjKeNhvXJcd-H40Mk.mft (raw, json) Hash identifier: NPYNXuXpceHevap5bzAfIZG6RANPrVk4drKWwgzeu38= Subject key identifier: 5E:FE:AE:C0:A0:86:4D:73:24:15:9D:C7:38:0A:6A:06:54:3F:38:FC Authority key identifier: 54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9 Certificate issuer: /CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9 Certificate serial: 0D66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft Manifest number: 0D09 Signing time: Sun 24 Aug 2025 18:10:54 +0000 Manifest this update: Sun 24 Aug 2025 18:10:53 +0000 Manifest next update: Sun 31 Aug 2025 18:10:53 +0000 Files and hashes: 1: VIY3awW4olUjKeNhvXJcd-H40Mk.crl (hash: FpWMMjVF/4aXEqAoV+Lbd13dR+DvI6NHb79wLqlaBZ8=) 2: 56B11920B64911EFBDB0DF37C4F9AE02.roa (hash: XCT7tuDg7rRdggBIsYIkP0xUcz1gGkq6RdReIlG+HqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3430 (0xd66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17F2, serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9 Validity Not Before: Aug 24 18:10:53 2025 GMT Not After : Aug 31 18:10:53 2025 GMT Subject: CN=68ab55ad-0ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:05:01:cd:1c:25:96:96:96:b6:08:c0:a2:b1: 6e:50:c3:85:a7:d6:b6:a0:27:82:70:68:e7:5c:c9: 3f:6c:c4:85:16:bd:86:3e:9e:d8:65:5b:e6:d4:7f: 08:e1:bc:1f:cc:10:c4:2a:6f:95:9e:26:82:08:87: 95:00:dd:9a:fb:0a:46:15:b8:c0:67:3d:84:17:c2: 66:0d:e7:24:db:e0:79:72:2b:7f:72:14:47:a3:e2: bc:ad:c5:7e:31:ff:a9:bc:a8:39:4b:ca:e0:7c:21: df:e8:8b:37:4b:f1:52:d2:40:20:fd:73:7e:5a:32: bf:37:91:12:0b:2e:6f:d6:b9:d2:3b:f8:6d:da:cf: b9:2b:1e:89:61:40:ad:83:af:9d:84:e5:f3:72:dd: 7d:36:bb:0b:e6:46:06:90:b7:85:27:52:15:46:49: 22:3d:35:d2:db:25:a8:b1:bd:95:89:a0:91:30:09: de:39:f5:3f:36:3b:44:bc:1e:62:4e:76:8b:de:6f: dc:1a:c7:29:ed:97:16:16:0f:be:6b:08:88:df:2c: f4:a1:15:9f:81:d1:d7:a1:cb:3d:a7:c6:b1:7d:6b: 31:66:f4:3c:1b:70:fc:6b:51:a0:76:fd:e8:b3:38: b7:87:0c:b8:92:d7:e1:d1:16:53:f8:26:97:fa:c1: fc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FE:AE:C0:A0:86:4D:73:24:15:9D:C7:38:0A:6A:06:54:3F:38:FC X509v3 Authority Key Identifier: keyid:54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:dc:48:56:a4:32:cd:56:c9:5c:e8:af:cc:28:77:9d:79:ed: 8b:e6:99:f4:89:08:4a:8d:d1:e1:db:22:ac:e5:fc:42:34:56: e6:17:0e:35:21:ed:f3:b5:36:b8:4e:ad:ca:57:a0:43:03:fb: 48:01:3f:76:5d:44:fe:ba:b1:ba:d7:d2:af:77:fa:66:d7:e5: e7:1d:ba:ec:58:8e:8f:be:18:94:6a:0b:f4:2f:04:54:c9:40: 7e:e4:7c:66:d7:c2:16:b5:06:4b:20:81:b5:76:ed:72:02:66: 06:aa:5e:93:96:5a:ad:65:db:33:76:24:aa:5a:8b:63:ec:61: e4:c6:33:83:8b:51:86:bb:d0:23:54:51:fa:30:7c:12:16:06: c7:84:da:e8:cc:e8:dc:68:72:1b:7a:d2:61:4a:d7:cb:bc:28: 89:a8:35:67:a8:6e:e7:e4:cb:5b:28:18:5e:44:e4:57:ab:be: 63:fa:d2:cb:d1:1e:58:df:08:bc:e0:f5:4e:93:19:4b:df:a3: f0:1f:f2:84:c5:5f:ac:f7:36:40:8b:d8:d9:d5:ae:9e:05:b6: 5b:12:5f:ac:64:ea:56:92:1b:2f:ed:ea:40:5f:c5:29:ab:8b: 0a:fe:36:57:5d:7c:0b:55:56:9d:af:cf:82:74:a3:eb:89:3a: de:f1:39:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE3RjIxMTAvBgNVBAUTKDU0ODYzNzZCMDVCOEEyNTUyMzI5RTM2MUJENzI1Qzc3 RTFGOEQwQzkwHhcNMjUwODI0MTgxMDUzWhcNMjUwODMxMTgxMDUzWjAYMRYwFAYD VQQDEw02OGFiNTVhZC0wZWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwUBzRwllpaWtgjAorFuUMOFp9a2oCeCcGjnXMk/bMSFFr2GPp7YZVvm1H8I 4bwfzBDEKm+VniaCCIeVAN2a+wpGFbjAZz2EF8JmDeck2+B5cit/chRHo+K8rcV+ Mf+pvKg5S8rgfCHf6Is3S/FS0kAg/XN+WjK/N5ESCy5v1rnSO/ht2s+5Kx6JYUCt g6+dhOXzct19NrsL5kYGkLeFJ1IVRkkiPTXS2yWosb2ViaCRMAneOfU/NjtEvB5i TnaL3m/cGscp7ZcWFg++awiI3yz0oRWfgdHXocs9p8axfWsxZvQ8G3D8a1Ggdv3o szi3hwy4ktfh0RZT+CaX+sH8SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7+rsCg hk1zJBWdxzgKagZUPzj8MB8GA1UdIwQYMBaAFFSGN2sFuKJVIynjYb1yXHfh+NDJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTdGMi80Qzg4QTdBMEZE RkUxMUU5QkQ2NjdEMUZDNEY5QUUwMi9WSVkzYXdXNG9sVWpLZU5odlhKY2QtSDQw TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJWTNhd1c0b2xVaktlTmh2WEpjZC1INDBNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTdGMi80Qzg4QTdBMEZERkUxMUU5QkQ2NjdEMUZDNEY5QUUwMi9WSVkzYXdXNG9s VWpLZU5odlhKY2QtSDQwTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI3EhWpDLNVslc6K/MKHedee2L5pn0iQhKjdHh2yKs5fxCNFbmFw41 Ie3ztTa4Tq3KV6BDA/tIAT92XUT+urG619Kvd/pm1+XnHbrsWI6PvhiUagv0LwRU yUB+5Hxm18IWtQZLIIG1du1yAmYGql6TllqtZdszdiSqWotj7GHkxjODi1GGu9Aj VFH6MHwSFgbHhNrozOjcaHIbetJhStfLvCiJqDVnqG7n5MtbKBheRORXq75j+tLL 0R5Y3wi84PVOkxlL36PwH/KExV+s9zZAi9jZ1a6eBbZbEl+sZOpWkhsv7epAX8Up q4sK/jZXXXwLVVadr8+CdKPriTre8Tn3 -----END CERTIFICATE-----Generated at Sun Aug 24 22:11:23 2025 by rpki-client