$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft File: vtASVxhUXB5QgDHT_1-26Chqf9g.mft (raw, json) Hash identifier: 1aQay52Y+3IxptPgikg0+MrBTIJt7Rs9VeRZGE1KNlI= Subject key identifier: 01:18:24:2E:E5:DC:AB:5B:62:64:93:38:8D:BD:BD:8D:EF:2F:1E:FE Authority key identifier: BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8 Certificate issuer: /CN=A91E72DE/serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8 Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft Manifest number: 022D Signing time: Thu 21 Aug 2025 02:05:26 +0000 Manifest this update: Thu 21 Aug 2025 02:05:26 +0000 Manifest next update: Thu 28 Aug 2025 02:05:26 +0000 Files and hashes: 1: vtASVxhUXB5QgDHT_1-26Chqf9g.crl (hash: eQzkUiitM2bPtPFo6DSNjZuFqcx7uJ5IqKmXAUcSnDs=) 2: DBA023303B6F11ED903B484FC4F9AE02.roa (hash: wuoqyYVDiG/sRQZo+9RPf+TSJtEdkwDtdHHUSy4QKA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E72DE, serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8 Validity Not Before: Aug 21 02:05:26 2025 GMT Not After : Aug 28 02:05:26 2025 GMT Subject: CN=68a67ee6-db20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c5:f3:ba:b7:89:60:04:23:c9:db:e2:86:e4: c1:fb:4e:6b:11:9e:7b:1d:ad:4b:a6:e3:ac:f5:39: b2:ff:e4:52:15:29:0f:82:02:ec:a2:12:2e:f0:ca: 94:41:c7:85:c0:4b:f5:86:5d:b1:11:a8:50:d4:d5: 62:2e:9a:d6:15:45:e7:cf:29:44:39:6e:66:2d:0a: 13:6b:79:60:ae:7b:85:51:6d:61:35:c0:f5:2a:23: 26:98:a4:8a:07:9b:47:e7:e4:c1:d5:38:ac:ff:b4: 1f:f2:3b:95:0d:95:41:17:25:a1:75:da:b6:fc:de: 29:f9:c2:f7:fb:57:ce:6c:f4:39:37:21:5b:f8:c8: 47:92:c2:c7:ce:79:48:98:da:1e:9c:86:62:a8:36: 55:6e:35:9f:ee:96:20:d4:14:95:af:fd:ff:73:97: f4:10:53:53:a5:44:cb:d1:46:1e:2c:33:5f:55:c5: cd:04:66:95:0b:2c:39:3c:d3:bf:10:d8:93:42:6c: a5:d7:7a:da:bf:47:b4:c5:d5:2c:25:16:4b:c8:c0: 8d:c0:b9:fc:15:5c:8c:47:45:18:6f:42:13:b3:16: b4:08:01:3a:15:d0:96:12:6c:be:f2:74:4b:8e:fa: 6a:f7:96:ec:10:d7:b6:77:f8:24:a8:a3:6f:64:58: 61:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:18:24:2E:E5:DC:AB:5B:62:64:93:38:8D:BD:BD:8D:EF:2F:1E:FE X509v3 Authority Key Identifier: keyid:BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:d5:4c:6b:4b:db:40:77:2c:0a:68:ea:05:12:5b:10:0b:7b: 31:bc:cb:2d:54:b2:e5:ea:a6:36:12:b5:f4:fd:4d:a0:c8:a7: e2:b1:57:d2:3a:15:f0:ec:1e:21:0a:b0:08:e7:a8:4b:1f:54: 94:30:66:e2:f1:b4:a4:de:11:0f:6a:20:b7:41:8f:41:8d:74: f7:b1:17:80:b2:39:fb:fe:5f:1d:6c:ea:52:07:55:f8:f3:aa: 5d:1e:c4:70:15:f7:c4:b7:37:ac:f6:0f:d8:35:8c:1c:e3:9f: d7:d2:c5:d1:5e:22:8c:2e:35:f0:83:03:f2:54:54:50:e6:c1: ce:1b:aa:31:53:df:73:5f:93:b6:da:7d:81:5e:2e:04:2c:81: 2d:65:56:2a:b8:10:69:95:1b:60:6f:d3:df:58:61:5f:63:52: 8b:5b:f4:e1:d4:1e:6d:66:b2:1e:59:68:1d:a2:b5:ee:34:0d: c4:21:22:2d:6a:3d:d5:a2:78:0a:ec:f4:94:ec:35:74:42:50: e5:8e:18:e1:ba:b9:40:8b:bc:8a:00:89:44:6a:c7:f6:71:4a: bc:d6:4c:23:45:52:1f:3f:4b:03:71:35:60:cb:02:65:65:6a: 9b:b9:55:dd:28:88:75:85:72:61:df:a6:bb:37:ea:3b:f5:1d: 51:06:3a:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyREUxMTAvBgNVBAUTKEJFRDAxMjU3MTg1NDVDMUU1MDgwMzFEM0ZGNUZCNkU4 Mjg2QTdGRDgwHhcNMjUwODIxMDIwNTI2WhcNMjUwODI4MDIwNTI2WjAYMRYwFAYD VQQDEw02OGE2N2VlNi1kYjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsXzureJYAQjydvihuTB+05rEZ57Ha1LpuOs9Tmy/+RSFSkPggLsohIu8MqU QceFwEv1hl2xEahQ1NViLprWFUXnzylEOW5mLQoTa3lgrnuFUW1hNcD1KiMmmKSK B5tH5+TB1Tis/7Qf8juVDZVBFyWhddq2/N4p+cL3+1fObPQ5NyFb+MhHksLHznlI mNoenIZiqDZVbjWf7pYg1BSVr/3/c5f0EFNTpUTL0UYeLDNfVcXNBGaVCyw5PNO/ ENiTQmyl13rav0e0xdUsJRZLyMCNwLn8FVyMR0UYb0ITsxa0CAE6FdCWEmy+8nRL jvpq95bsENe2d/gkqKNvZFhhcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEYJC7l 3KtbYmSTOI29vY3vLx7+MB8GA1UdIwQYMBaAFL7QElcYVFweUIAx0/9ftugoan/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJERS84REU0RTRDMDNC NkQxMUVEQjJCM0IzNEVDNEY5QUUwMi92dEFTVnhoVVhCNVFnREhUXzEtMjZDaHFm OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z0QVNWeGhVWEI1UWdESFRfMS0yNkNocWY5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzJERS84REU0RTRDMDNCNkQxMUVEQjJCM0IzNEVDNEY5QUUwMi92dEFTVnhoVVhC NVFnREhUXzEtMjZDaHFmOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD1UxrS9tAdywKaOoFElsQC3sxvMstVLLl6qY2ErX0/U2gyKfisVfS OhXw7B4hCrAI56hLH1SUMGbi8bSk3hEPaiC3QY9BjXT3sReAsjn7/l8dbOpSB1X4 86pdHsRwFffEtzes9g/YNYwc45/X0sXRXiKMLjXwgwPyVFRQ5sHOG6oxU99zX5O2 2n2BXi4ELIEtZVYquBBplRtgb9PfWGFfY1KLW/Th1B5tZrIeWWgdorXuNA3EISIt aj3VongK7PSU7DV0QlDljhjhurlAi7yKAIlEasf2cUq81kwjRVIfP0sDcTVgywJl ZWqbuVXdKIh1hXJh36a7N+o79R1RBjq6 -----END CERTIFICATE-----Generated at Fri Aug 22 16:29:50 2025 by rpki-client