$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft File: VFxHwOQxMzjcm0QCwSuty06YV8E.mft (raw, json) Hash identifier: XAdlYLj6lN7JWzM8kRNtwXW24XdRtUI8Zu39IokjiJU= Subject key identifier: 1E:A3:A9:2F:C8:F3:D4:31:B2:65:A5:2B:47:CD:BC:C0:B5:A5:90:7E Authority key identifier: 54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1 Certificate issuer: /CN=A91FB103/serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft Manifest number: 0152 Signing time: Sun 07 Sep 2025 04:42:23 +0000 Manifest this update: Sun 07 Sep 2025 04:42:23 +0000 Manifest next update: Sun 14 Sep 2025 04:42:23 +0000 Files and hashes: 1: VFxHwOQxMzjcm0QCwSuty06YV8E.crl (hash: 8miTouD0OE7BP56Gwsj85ZIkrBvtZrrTUwTNLWdrqQo=) 2: 77F8EAD29CF811EFA2E0CD6AC4F9AE02.roa (hash: Ain3qdd9woinL4inH/8nG99VHakyMNpv4v8rmQWJ1Bs=) 3: 0F440AB26E7711EFAA4A1C1AC4F9AE02.roa (hash: O1np95hbIM7tMbwqTYjzC3DrWBrLxkB/hTITnk5MJww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 04:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB103, serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1 Validity Not Before: Sep 7 04:42:23 2025 GMT Not After : Sep 14 04:42:23 2025 GMT Subject: CN=68bd0d2f-679e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ef:0b:e8:8f:c8:df:5b:cd:8c:16:ed:4d:16: 9c:6e:b0:ae:5d:00:9c:db:65:c6:fc:ee:30:e2:6d: fc:14:b2:ca:ae:55:44:f2:69:e6:c6:f7:c3:aa:49: 18:5c:20:7f:98:67:de:36:3d:32:45:29:01:b9:b1: 32:ec:0b:6a:d0:97:7c:08:64:2e:0b:a9:f7:59:6f: 1e:c1:f4:da:d4:4f:8b:d9:35:4e:81:e7:bc:b5:c0: 6e:66:43:4b:85:e2:54:ce:3d:db:37:9e:2a:7b:22: cf:bb:fe:f9:b8:3c:3d:46:f8:aa:f3:c0:92:8a:b9: 70:d3:80:1e:22:36:53:a3:6d:77:7b:ae:e7:f2:23: 7a:c9:c2:70:c6:85:ae:fc:ee:13:0a:5d:bc:16:78: 2d:f1:ce:f4:46:78:88:d1:2b:ec:30:98:1e:e0:fa: 92:79:e9:c9:d4:34:16:d6:4f:b7:ad:c0:f8:57:0d: 30:06:1f:a2:59:60:d8:5a:be:80:23:99:6b:10:36: 52:7a:a5:30:00:e8:1c:55:74:24:ac:d8:3d:57:6f: f9:2b:fc:90:7f:7f:0c:e4:03:33:7c:62:a5:04:cf: c8:e6:9a:3c:33:fd:eb:da:d2:c3:cc:0e:cc:50:3e: 2f:50:25:c8:b4:34:b7:5e:84:7c:f1:13:24:a9:a7: 34:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A3:A9:2F:C8:F3:D4:31:B2:65:A5:2B:47:CD:BC:C0:B5:A5:90:7E X509v3 Authority Key Identifier: keyid:54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:1c:db:36:a5:38:1b:84:5f:43:ca:ab:5a:42:53:b3:54:cc: 83:d6:41:7a:21:6f:e0:c4:1d:c7:b7:c7:9b:ec:c5:69:8c:01: f6:35:27:6a:5f:20:a9:2d:f4:db:88:f3:3d:3c:36:37:ba:c0: d7:81:05:7a:ec:90:0a:33:54:2f:b2:c3:fe:56:ae:f2:47:0e: e4:ee:c9:86:5e:00:a9:a6:09:aa:28:ad:f9:f3:b9:f0:b5:d7: 30:6d:ad:64:b4:b9:38:2e:01:e1:e7:a0:b6:a1:0a:34:83:c0: a4:ca:18:d3:e6:c7:a0:eb:65:fc:30:55:7b:be:dc:62:b0:5b: 37:fa:cd:8a:fd:db:dc:5d:d0:58:2e:4c:0f:ad:e8:32:0e:a5: d3:17:03:3d:64:b2:3a:2b:d7:6b:b2:29:ad:8a:0f:b8:7a:a4: 4b:36:86:a7:b8:fe:04:20:59:3e:9f:02:43:d3:7d:87:8d:1d: f3:1e:56:93:08:9d:34:af:a8:61:88:cf:24:7b:5d:c5:9a:61: 8e:6c:34:fd:cb:3d:05:e3:84:ec:e1:62:ae:79:6b:71:3c:e1: 22:6c:26:36:52:1a:47:8d:0c:25:41:6b:6a:5f:08:f1:d3:80: c1:2c:1f:a2:27:9f:c0:3b:28:94:d6:1e:0f:7d:6d:97:55:11: ac:90:fe:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIxMDMxMTAvBgNVBAUTKDU0NUM0N0MwRTQzMTMzMzhEQzlCNDQwMkMxMkJBRENC NEU5ODU3QzEwHhcNMjUwOTA3MDQ0MjIzWhcNMjUwOTE0MDQ0MjIzWjAYMRYwFAYD VQQDEw02OGJkMGQyZi02NzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApe8L6I/I31vNjBbtTRacbrCuXQCc22XG/O4w4m38FLLKrlVE8mnmxvfDqkkY XCB/mGfeNj0yRSkBubEy7Atq0Jd8CGQuC6n3WW8ewfTa1E+L2TVOgee8tcBuZkNL heJUzj3bN54qeyLPu/75uDw9Rviq88CSirlw04AeIjZTo213e67n8iN6ycJwxoWu /O4TCl28Fngt8c70RniI0SvsMJge4PqSeenJ1DQW1k+3rcD4Vw0wBh+iWWDYWr6A I5lrEDZSeqUwAOgcVXQkrNg9V2/5K/yQf38M5AMzfGKlBM/I5po8M/3r2tLDzA7M UD4vUCXItDS3XoR88RMkqac0EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6jqS/I 89QxsmWlK0fNvMC1pZB+MB8GA1UdIwQYMBaAFFRcR8DkMTM43JtEAsErrctOmFfB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjEwMy8yRkI5ODUwODkz RkIxMUVFOTY4RUU0NDJDNEY5QUUwMi9WRnhId09ReE16amNtMFFDd1N1dHkwNllW OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGeEh3T1F4TXpqY20wUUN3U3V0eTA2WVY4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjEwMy8yRkI5ODUwODkzRkIxMUVFOTY4RUU0NDJDNEY5QUUwMi9WRnhId09ReE16 amNtMFFDd1N1dHkwNllWOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKHNs2pTgbhF9DyqtaQlOzVMyD1kF6IW/gxB3Ht8eb7MVpjAH2NSdq XyCpLfTbiPM9PDY3usDXgQV67JAKM1QvssP+Vq7yRw7k7smGXgCppgmqKK3587nw tdcwba1ktLk4LgHh56C2oQo0g8CkyhjT5seg62X8MFV7vtxisFs3+s2K/dvcXdBY LkwPregyDqXTFwM9ZLI6K9drsimtig+4eqRLNoanuP4EIFk+nwJD032HjR3zHlaT CJ00r6hhiM8ke13FmmGObDT9yz0F44Ts4WKueWtxPOEibCY2UhpHjQwlQWtqXwjx 04DBLB+iJ5/AOyiU1h4PfW2XVRGskP7W -----END CERTIFICATE-----Generated at Mon Sep 8 10:07:58 2025 by rpki-client