$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft File: Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft (raw, json) Hash identifier: C0UvYNXauCOuPh/y4n0+tfieAW8O5b1B+hnjwrLYsgE= Subject key identifier: D8:B5:CB:8F:C3:A3:5A:AD:C5:B9:A1:58:5D:80:30:E8:D9:39:57:1C Authority key identifier: 56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59 Certificate issuer: /CN=A91E0D8B/serialNumber=568D179152473C809A62E585E5ADC942866BE659 Certificate serial: 06DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft Manifest number: 06D6 Signing time: Wed 20 Aug 2025 22:07:27 +0000 Manifest this update: Wed 20 Aug 2025 22:07:26 +0000 Manifest next update: Wed 27 Aug 2025 22:07:26 +0000 Files and hashes: 1: Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl (hash: ZeGVXzo6TkbA0vqjsIx2A8tZTaSoOYZ6kLF3r62Zk9U=) 2: 146FD366653611EB99BE491DC4F9AE02.roa (hash: vDTtnYK0urRCnkWdVJaHunlHhYBCBiIEuZyHl4rL/x4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 22:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1756 (0x6dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D8B, serialNumber=568D179152473C809A62E585E5ADC942866BE659 Validity Not Before: Aug 20 22:07:26 2025 GMT Not After : Aug 27 22:07:26 2025 GMT Subject: CN=68a6471e-8426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:97:03:06:2f:fd:45:79:35:92:a4:8a:08:5b: fb:87:f2:10:6a:a0:6c:66:2f:d1:f4:e7:9f:bd:d8: e8:b7:9e:b8:df:1e:30:c9:67:a6:da:19:ca:b8:45: cb:fe:b4:f0:90:4f:b2:2b:70:f3:6e:9b:20:2a:e9: be:f0:dd:cf:e6:b5:12:af:fc:73:e5:14:e5:7e:4f: 39:c8:9d:17:19:ed:2e:5c:0a:2e:de:01:7b:22:8a: 53:8f:a5:40:78:10:7a:a3:37:05:ee:07:aa:00:1c: 57:c7:6a:71:03:f5:d9:3b:c5:6d:5e:7d:b1:18:67: 85:c1:ca:15:cc:8a:52:af:b3:ae:1e:6b:e3:f0:6d: 2a:7e:53:d2:88:31:c9:0e:85:26:21:36:77:dc:a2: 43:eb:2f:07:58:83:85:b0:93:0b:f6:e6:56:b3:df: 43:0e:e5:9d:a9:39:13:c1:9e:bd:f2:44:7d:24:ba: 74:cf:32:a4:a6:75:32:77:dc:79:a0:e3:41:b3:cb: 84:1d:34:bb:da:b3:b2:3b:d4:a4:2d:5c:b8:21:1b: 5a:79:5c:fc:1b:37:13:cd:b5:70:b8:32:08:53:ba: 3f:01:13:85:a7:33:36:25:af:2b:0f:2f:1c:1b:d4: c6:0c:30:31:b5:a3:49:02:7a:b5:bd:60:54:64:fd: 18:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B5:CB:8F:C3:A3:5A:AD:C5:B9:A1:58:5D:80:30:E8:D9:39:57:1C X509v3 Authority Key Identifier: keyid:56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c4:ad:52:4c:19:cc:83:91:d6:1e:ef:91:c4:4f:e5:77:b8: 44:7e:60:c2:c5:19:2f:70:66:1c:3e:6e:fe:62:3f:cf:6f:13: d7:9f:95:2a:93:04:3d:4d:88:f4:ec:a9:f8:a7:61:98:45:e4: 7b:de:35:e3:6c:66:22:9a:df:a4:db:8b:2b:27:2a:11:75:43: 95:6b:29:09:bf:51:b9:cd:3f:6a:d0:ad:66:79:d8:76:e7:6f: a0:28:9d:05:b3:24:13:b6:a0:51:dd:ea:5d:61:fc:42:4d:f6: a5:d2:8b:e8:63:9e:9e:b4:bc:60:14:fe:03:18:ca:70:33:0b: bb:fa:2e:91:06:4c:91:f3:41:d6:ab:ac:30:a2:b7:8b:d3:66: 1f:fc:a5:a7:54:cd:53:64:c7:11:2e:89:5a:3b:64:c8:9c:bc: 09:11:c5:d2:55:35:ff:2f:41:97:3b:e9:68:75:fe:91:77:04: 56:2e:41:8d:55:87:05:cd:10:d2:85:82:01:e9:47:52:ee:48: 41:50:a3:19:29:13:a1:b5:0a:76:ce:e9:5b:d2:1f:d1:bb:30: 85:22:17:76:9b:06:09:d2:ac:9e:86:78:fb:d0:28:51:7c:21: 32:70:35:88:c6:1d:63:f3:e5:0a:cf:88:50:bf:e9:66:93:f0: 6c:6e:9f:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEOEIxMTAvBgNVBAUTKDU2OEQxNzkxNTI0NzNDODA5QTYyRTU4NUU1QURDOTQy ODY2QkU2NTkwHhcNMjUwODIwMjIwNzI2WhcNMjUwODI3MjIwNzI2WjAYMRYwFAYD VQQDEw02OGE2NDcxZS04NDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZcDBi/9RXk1kqSKCFv7h/IQaqBsZi/R9Oefvdjot5643x4wyWem2hnKuEXL /rTwkE+yK3DzbpsgKum+8N3P5rUSr/xz5RTlfk85yJ0XGe0uXAou3gF7IopTj6VA eBB6ozcF7geqABxXx2pxA/XZO8VtXn2xGGeFwcoVzIpSr7OuHmvj8G0qflPSiDHJ DoUmITZ33KJD6y8HWIOFsJML9uZWs99DDuWdqTkTwZ698kR9JLp0zzKkpnUyd9x5 oONBs8uEHTS72rOyO9SkLVy4IRtaeVz8GzcTzbVwuDIIU7o/AROFpzM2Ja8rDy8c G9TGDDAxtaNJAnq1vWBUZP0YQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNi1y4/D o1qtxbmhWF2AMOjZOVccMB8GA1UdIwQYMBaAFFaNF5FSRzyAmmLlheWtyUKGa+ZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Qi80QTZENkMwQTY1 MzQxMUVCQjZCOEYwMTlDNEY5QUUwMi9WbzBYa1ZKSFBJQ2FZdVdGNWEzSlFvWnI1 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZvMFhrVkpIUElDYVl1V0Y1YTNKUW9acjVsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEQ4Qi80QTZENkMwQTY1MzQxMUVCQjZCOEYwMTlDNEY5QUUwMi9WbzBYa1ZKSFBJ Q2FZdVdGNWEzSlFvWnI1bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbxK1STBnMg5HWHu+RxE/ld7hEfmDCxRkvcGYcPm7+Yj/PbxPXn5Uq kwQ9TYj07Kn4p2GYReR73jXjbGYimt+k24srJyoRdUOVaykJv1G5zT9q0K1medh2 52+gKJ0FsyQTtqBR3epdYfxCTfal0ovoY56etLxgFP4DGMpwMwu7+i6RBkyR80HW q6wworeL02Yf/KWnVM1TZMcRLolaO2TInLwJEcXSVTX/L0GXO+lodf6RdwRWLkGN VYcFzRDShYIB6UdS7khBUKMZKROhtQp2zulb0h/RuzCFIhd2mwYJ0qyehnj70ChR fCEycDWIxh1j8+UKz4hQv+lmk/Bsbp+/ -----END CERTIFICATE-----Generated at Fri Aug 22 16:28:47 2025 by rpki-client