$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft File: vvMhsD2CRd537IDdAzG_uo0IWdg.mft (raw, json) Hash identifier: yan/0pN4AJGXDSzRygPEcIjueNzaM+YyNHy1I8ifxts= Subject key identifier: 6E:1B:84:D3:A1:F3:DA:94:6D:92:0C:4C:80:0D:81:D9:65:F2:E9:CB Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 Certificate issuer: /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft Manifest number: 031B Signing time: Tue 09 Sep 2025 02:25:59 +0000 Manifest this update: Tue 09 Sep 2025 02:25:58 +0000 Manifest next update: Tue 16 Sep 2025 02:25:58 +0000 Files and hashes: 1: vvMhsD2CRd537IDdAzG_uo0IWdg.crl (hash: VZRhWa9S9WPhS3S1tgfvKJsKOCkPSygMUcbTF4I0+pg=) 2: 5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (hash: Ds7R3+sBBZEG01JWJaEnAvs9QgVWz9hGRIlkayRqHKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE8AC, serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Validity Not Before: Sep 9 02:25:58 2025 GMT Not After : Sep 16 02:25:58 2025 GMT Subject: CN=68bf9036-89ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:90:b3:b1:4e:e7:f0:e6:84:2e:d2:1e:89:98: 72:88:04:2e:45:11:0f:e9:9a:b1:c0:03:b6:33:2b: 7d:b3:16:d0:e0:e8:41:7b:d5:8b:48:40:cf:c3:03: 0e:7a:45:13:ac:bd:46:fa:8b:91:ed:1c:c5:a6:08: 0a:81:98:f0:72:e5:4d:64:d0:38:61:08:b9:2e:29: 70:83:38:e7:f7:40:88:dd:00:7d:38:0f:b4:21:50: b9:3c:3a:33:a5:40:5b:2f:df:fe:84:d0:75:5a:13: 5a:e6:6b:ae:c9:f0:d1:81:97:66:19:9c:da:0b:5b: a7:6b:d9:32:c2:ef:05:ed:3a:60:76:fe:f5:3e:72: 7f:38:53:bf:9a:22:74:cc:25:a2:5a:5a:3f:e2:51: 8c:aa:2e:d8:ee:f2:9e:51:c8:cf:54:31:eb:69:b6: eb:da:cf:07:49:25:6e:62:1c:07:bd:b4:f7:1c:b5: 6d:35:06:a1:28:69:5f:a1:96:6f:a5:2a:8b:b6:d6: a3:ef:00:ea:0e:62:72:fc:91:3b:5c:e0:18:f5:bf: 62:38:4f:46:cb:af:22:0c:9f:60:f0:23:f2:23:09: fc:7a:7e:87:0f:62:0a:d7:03:3d:27:cc:e9:6c:61: 29:ae:dd:a7:cd:bc:13:68:c6:a8:15:04:e7:26:91: 35:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1B:84:D3:A1:F3:DA:94:6D:92:0C:4C:80:0D:81:D9:65:F2:E9:CB X509v3 Authority Key Identifier: keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:3d:ad:28:d0:45:b3:d3:10:37:7b:3a:26:19:74:6f:30:5e: e9:95:71:30:a1:0d:7e:be:b6:8e:56:fa:cc:0b:0d:3e:0e:da: f7:19:b6:04:1f:3f:19:c7:71:1f:b4:34:4d:19:fc:34:05:77: 7f:90:51:4a:87:26:b0:21:34:e6:91:4c:eb:59:e5:8c:4c:98: c7:45:64:ad:a9:f1:e4:ce:79:47:dc:48:e3:1d:7c:74:ec:66: e5:ff:24:38:cb:09:ca:09:fe:e6:d4:48:79:eb:47:4b:56:dd: 47:06:48:11:75:f0:ba:df:31:b0:6c:03:36:f4:5d:b1:7d:60: 77:e8:46:7e:58:5d:b5:a8:c8:6f:cd:0a:86:04:0e:21:02:51: dc:0d:98:22:c2:36:e3:c3:70:39:cd:76:0f:5f:84:aa:7f:db: e3:f2:ec:f6:28:d6:4d:8c:61:e9:8d:fd:41:2f:9a:04:2d:d5: 54:d8:70:68:3b:1d:e0:01:15:70:4d:02:0d:c5:c1:ae:fe:b0: 17:6d:bd:60:86:8a:7f:bc:fe:7e:45:55:eb:c8:08:fa:4f:e2: 08:2e:9b:ed:a9:16:36:99:fb:29:ac:1c:4f:67:c8:cb:11:10: 4e:22:73:42:12:20:7d:b7:95:e1:45:7f:20:1d:2e:73:c0:43: 69:be:9a:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU4QUMxMTAvBgNVBAUTKEJFRjMyMUIwM0Q4MjQ1REU3N0VDODBERDAzMzFCRkJB OEQwODU5RDgwHhcNMjUwOTA5MDIyNTU4WhcNMjUwOTE2MDIyNTU4WjAYMRYwFAYD VQQDEw02OGJmOTAzNi04OWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5CzsU7n8OaELtIeiZhyiAQuRREP6ZqxwAO2Myt9sxbQ4OhBe9WLSEDPwwMO ekUTrL1G+ouR7RzFpggKgZjwcuVNZNA4YQi5Lilwgzjn90CI3QB9OA+0IVC5PDoz pUBbL9/+hNB1WhNa5muuyfDRgZdmGZzaC1una9kywu8F7Tpgdv71PnJ/OFO/miJ0 zCWiWlo/4lGMqi7Y7vKeUcjPVDHrabbr2s8HSSVuYhwHvbT3HLVtNQahKGlfoZZv pSqLttaj7wDqDmJy/JE7XOAY9b9iOE9Gy68iDJ9g8CPyIwn8en6HD2IK1wM9J8zp bGEprt2nzbwTaMaoFQTnJpE1twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4bhNOh 89qUbZIMTIANgdll8unLMB8GA1UdIwQYMBaAFL7zIbA9gkXed+yA3QMxv7qNCFnY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRThBQy81MDM4RUM4QzdE RUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1JkNTM3SURkQXpHX3VvMElX ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z2TWhzRDJDUmQ1MzdJRGRBekdfdW8wSVdkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RThBQy81MDM4RUM4QzdERUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1Jk NTM3SURkQXpHX3VvMElXZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkPa0o0EWz0xA3ezomGXRvMF7plXEwoQ1+vraOVvrMCw0+Dtr3GbYE Hz8Zx3EftDRNGfw0BXd/kFFKhyawITTmkUzrWeWMTJjHRWStqfHkznlH3EjjHXx0 7Gbl/yQ4ywnKCf7m1Eh560dLVt1HBkgRdfC63zGwbAM29F2xfWB36EZ+WF21qMhv zQqGBA4hAlHcDZgiwjbjw3A5zXYPX4Sqf9vj8uz2KNZNjGHpjf1BL5oELdVU2HBo Ox3gARVwTQINxcGu/rAXbb1ghop/vP5+RVXryAj6T+IILpvtqRY2mfsprBxPZ8jL ERBOInNCEiB9t5XhRX8gHS5zwENpvprR -----END CERTIFICATE-----Generated at Wed Sep 10 03:57:24 2025 by rpki-client