$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft File: vZ1mh32GbnyQQVa-CMtDcargAb0.mft (raw, json) Hash identifier: pxVWe6AyAeOIBvuBQPBB/H5X2da2PlWl/z0vReo9Pg8= Subject key identifier: F0:96:DB:29:BE:9A:F5:DE:EB:20:DF:43:7A:7F:B7:CC:45:3F:71:74 Authority key identifier: BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD Certificate issuer: /CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft Manifest number: 018C Signing time: Wed 17 Sep 2025 04:19:29 +0000 Manifest this update: Wed 17 Sep 2025 04:19:29 +0000 Manifest next update: Wed 24 Sep 2025 04:19:29 +0000 Files and hashes: 1: vZ1mh32GbnyQQVa-CMtDcargAb0.crl (hash: xP8NeM5KL+3R+6h9WAHr0gSgL3k3YzqxTLJaS/jRiaQ=) 2: AC9A49A6B79811EF9C8DF330C4F9AE02.roa (hash: x42cPOY42/ihAcwEOhbusv08pDLFkf2E5Qjxerl5aIk=) 3: 975A513293B011EF9203EA6BC4F9AE02.roa (hash: LAC2JzlZ9Cqk3BSRvYxm4bLahu0/0Fv8k3EO+q7V5PY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5E8B, serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Validity Not Before: Sep 17 04:19:29 2025 GMT Not After : Sep 24 04:19:29 2025 GMT Subject: CN=68ca36d1-8740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7c:6c:ed:45:44:dd:04:44:45:87:6a:e8:6e: 48:1c:6c:9d:c0:ee:2c:ed:7f:c7:c2:46:c1:12:27: 49:d5:dc:ac:f5:7c:6c:76:15:95:97:38:93:d9:55: bd:c8:cf:2a:79:b5:21:2c:92:be:a3:83:b1:80:c4: 38:1e:d6:47:0b:8a:18:44:03:3c:c5:de:fa:13:5d: 1a:bd:ed:8e:21:33:87:13:06:cc:b2:10:f1:af:a0: 97:20:85:2c:eb:dc:f6:e4:98:48:5d:d1:5f:ed:a5: 4c:5a:6c:2d:39:03:76:54:dd:34:b6:c3:e5:6d:63: c2:c6:da:5b:15:39:0a:74:f6:16:cb:26:e7:4c:d3: 21:20:af:ff:ad:f8:58:1f:c5:fd:89:8b:b4:71:38: c3:36:b3:0a:a1:24:ef:72:64:52:5d:24:3e:e2:08: 7b:30:12:c1:c4:33:f4:24:62:3e:bd:8d:55:0b:e5: 6f:56:74:02:62:5e:2a:10:7c:65:a1:21:8c:25:8a: dc:1d:bc:02:5c:63:bb:7a:cf:3e:93:d1:39:48:4a: 53:5d:e1:59:09:b1:65:a7:88:66:2b:e7:6f:f2:e5: 21:b6:f5:59:e1:76:81:d6:d0:c7:03:61:de:7b:68: 1a:97:c2:3d:02:ac:8b:b3:71:4f:a8:6f:f5:5c:bd: 8f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:96:DB:29:BE:9A:F5:DE:EB:20:DF:43:7A:7F:B7:CC:45:3F:71:74 X509v3 Authority Key Identifier: keyid:BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:50:ed:98:18:af:14:41:38:eb:d0:ef:d6:b4:78:d0:10:da: 38:22:c1:0c:47:8a:ae:0c:40:5e:88:64:20:42:97:a5:86:c1: d0:ba:14:bc:b0:a9:be:cb:ef:6e:5e:e1:f7:e4:eb:b9:10:e4: 22:18:30:93:95:b9:bf:2a:fc:7f:cc:20:8e:fb:83:cc:19:cf: 01:95:0d:be:84:75:96:79:05:ce:58:98:11:a2:9d:6f:61:0a: a4:eb:36:b4:c0:37:0a:16:c9:bc:cf:68:a6:6f:70:35:6b:ca: 87:64:38:3c:cb:65:a5:3b:c0:30:ce:27:70:d0:e5:b7:51:7d: c5:42:35:96:df:e1:11:3f:fd:c0:00:45:ab:47:a8:ec:04:4f: 5b:55:5e:57:ed:9c:52:03:63:97:be:6d:36:00:f3:2f:88:59: 26:d1:27:ea:72:88:4d:61:33:b6:0e:1f:97:fb:40:72:b8:1d: 6e:ff:e8:86:e7:a0:af:76:67:c4:17:72:2f:15:0b:a6:6a:93: 58:83:19:1b:8b:52:49:a6:c2:09:a4:18:7c:31:75:a0:ff:e6: 34:ab:49:34:cf:be:92:9d:e2:c8:42:9d:da:3b:c9:dc:15:c7: 42:38:b1:30:64:15:f7:e1:2e:b1:f6:f8:e1:6f:34:45:08:2c: cb:57:e7:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVFOEIxMTAvBgNVBAUTKEJEOUQ2Njg3N0Q4NjZFN0M5MDQxNTZCRTA4Q0I0Mzcx QUFFMDAxQkQwHhcNMjUwOTE3MDQxOTI5WhcNMjUwOTI0MDQxOTI5WjAYMRYwFAYD VQQDEw02OGNhMzZkMS04NzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznxs7UVE3QRERYdq6G5IHGydwO4s7X/HwkbBEidJ1dys9XxsdhWVlziT2VW9 yM8qebUhLJK+o4OxgMQ4HtZHC4oYRAM8xd76E10ave2OITOHEwbMshDxr6CXIIUs 69z25JhIXdFf7aVMWmwtOQN2VN00tsPlbWPCxtpbFTkKdPYWyybnTNMhIK//rfhY H8X9iYu0cTjDNrMKoSTvcmRSXSQ+4gh7MBLBxDP0JGI+vY1VC+VvVnQCYl4qEHxl oSGMJYrcHbwCXGO7es8+k9E5SEpTXeFZCbFlp4hmK+dv8uUhtvVZ4XaB1tDHA2He e2gal8I9AqyLs3FPqG/1XL2PJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCW2ym+ mvXe6yDfQ3p/t8xFP3F0MB8GA1UdIwQYMBaAFL2dZod9hm58kEFWvgjLQ3Gq4AG9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUU4Qi9ERUMzQkQ3QzVB RDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2JueVFRVmEtQ010RGNhcmdB YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZaMW1oMzJHYm55UVFWYS1DTXREY2FyZ0FiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUU4Qi9ERUMzQkQ3QzVBRDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2Ju eVFRVmEtQ010RGNhcmdBYjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuUO2YGK8UQTjr0O/WtHjQENo4IsEMR4quDEBeiGQgQpelhsHQuhS8 sKm+y+9uXuH35Ou5EOQiGDCTlbm/Kvx/zCCO+4PMGc8BlQ2+hHWWeQXOWJgRop1v YQqk6za0wDcKFsm8z2imb3A1a8qHZDg8y2WlO8Awzidw0OW3UX3FQjWW3+ERP/3A AEWrR6jsBE9bVV5X7ZxSA2OXvm02APMviFkm0SfqcohNYTO2Dh+X+0ByuB1u/+iG 56CvdmfEF3IvFQumapNYgxkbi1JJpsIJpBh8MXWg/+Y0q0k0z76SneLIQp3aO8nc FcdCOLEwZBX34S6x9vjhbzRFCCzLV+dI -----END CERTIFICATE-----Generated at Thu Sep 18 23:26:03 2025 by rpki-client