$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft File: vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft (raw, json) Hash identifier: ziUKinNaYbcV/WTbUY7TQc1oCnQt9TqDCf0WiWlgy0I= Subject key identifier: E8:AA:F3:5D:CE:8E:5A:4A:ED:C6:E5:7C:F2:84:E9:C6:BB:08:40:38 Authority key identifier: BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B Certificate issuer: /CN=A9113C02/serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft Manifest number: 2566 Signing time: Fri 22 Aug 2025 16:25:09 +0000 Manifest this update: Fri 22 Aug 2025 16:25:09 +0000 Manifest next update: Fri 29 Aug 2025 16:25:09 +0000 Files and hashes: 1: vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl (hash: wcc5jxpk/87W6bmg9jga5D3CfjTyBR9uMYnzwK6aBTg=) 2: 00CB73CC5B1011F08269C50FC4F9AE02.roa (hash: tee5qyYUeYtzVgY5XM9ROj+LoDAFDMjISaly7p7VUNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B Validity Not Before: Aug 22 16:25:09 2025 GMT Not After : Aug 29 16:25:09 2025 GMT Subject: CN=68a899e5-6d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3d:b6:33:ad:2b:f2:44:1d:e3:13:01:c3:ba: 5b:83:ae:62:50:35:cb:9b:44:e4:83:fb:78:eb:34: db:d0:0f:2d:ea:92:89:1b:96:44:8a:a0:9c:67:4f: 6c:4e:d1:83:b0:30:7d:6b:70:d2:3e:a3:62:ff:5f: 6e:1d:34:21:1e:7a:5f:61:97:81:fa:88:a2:74:d2: aa:d1:c6:d6:ce:04:c9:d0:ce:f2:93:42:ce:2b:35: ef:11:31:45:c9:c4:0f:42:8b:79:83:94:90:64:68: 0e:f5:37:f9:f0:83:f2:8d:b3:af:51:bc:3d:eb:3c: 5d:a9:cf:6b:d0:db:79:8b:17:bb:8b:62:b3:30:b6: d2:99:54:b9:09:b2:2c:80:27:9e:0b:18:43:46:5e: d9:55:07:ce:41:67:12:1c:0b:c9:1f:a3:52:cd:45: 23:71:1c:bb:d6:5b:29:f4:48:df:a6:5f:ad:49:2a: 7f:e8:c5:b5:a1:65:05:ea:2c:86:1c:42:41:78:5c: d0:7b:5c:06:46:de:de:44:bf:7b:8d:3f:0f:11:6b: 06:06:04:fb:90:ea:b1:88:34:09:27:2a:f9:25:a3: 44:7c:13:34:24:e3:47:28:ae:01:30:c9:fd:59:00: 61:77:34:af:61:4e:e7:8d:e2:92:46:e6:24:f4:1e: e0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AA:F3:5D:CE:8E:5A:4A:ED:C6:E5:7C:F2:84:E9:C6:BB:08:40:38 X509v3 Authority Key Identifier: keyid:BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:ad:89:4a:1b:f0:8e:87:49:b1:55:61:a8:f5:60:1e:42:a3: c4:a3:96:3b:95:ce:ef:50:a4:fd:08:f4:bd:67:9a:a1:90:db: bc:35:32:29:a6:78:5a:19:57:4d:c3:e4:91:15:b1:ff:b6:8a: 97:b9:12:bb:36:5d:ad:68:80:66:ec:63:09:bd:41:94:3f:d0: f2:10:73:1a:bf:de:46:36:81:57:a3:7a:92:ce:30:28:29:ec: 63:48:5e:0c:ab:4e:58:7b:68:fb:ea:76:26:60:5b:69:09:61: f6:12:3c:7d:6f:92:b3:a4:cf:e3:0d:37:7c:40:e8:e3:3e:8e: d1:cc:04:a0:b5:b6:16:5a:ca:cc:f2:77:92:69:5b:4a:83:5b: 76:80:02:03:c6:88:52:3f:c1:1e:4a:87:5c:56:3c:d3:6b:65: 11:fa:8a:91:ae:b8:e8:2d:04:6a:ac:57:24:a8:2d:2c:d0:f0: 4f:b2:31:c7:72:11:57:8e:0e:ef:82:68:f6:54:a6:a5:c9:c1: 18:27:23:e4:e2:c4:94:86:8d:85:3d:dc:2a:64:51:e1:03:82: 8a:41:c1:8b:41:d4:36:48:1d:34:9e:a0:89:61:6c:df:78:7d: 1f:26:ca:62:db:ff:2e:b1:46:91:cd:c0:ec:53:4a:43:e9:17: 82:7a:51:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0MwMjExMC8GA1UEBRMoQkU3NjRFRkVGNTNEODY5QzQ0RjYwNzA5OTYxMTNFMEEx ODE4NDExQjAeFw0yNTA4MjIxNjI1MDlaFw0yNTA4MjkxNjI1MDlaMBgxFjAUBgNV BAMTDTY4YTg5OWU1LTZkMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjPbYzrSvyRB3jEwHDuluDrmJQNcubROSD+3jrNNvQDy3qkokblkSKoJxnT2xO 0YOwMH1rcNI+o2L/X24dNCEeel9hl4H6iKJ00qrRxtbOBMnQzvKTQs4rNe8RMUXJ xA9Ci3mDlJBkaA71N/nwg/KNs69RvD3rPF2pz2vQ23mLF7uLYrMwttKZVLkJsiyA J54LGENGXtlVB85BZxIcC8kfo1LNRSNxHLvWWyn0SN+mX61JKn/oxbWhZQXqLIYc QkF4XNB7XAZG3t5Ev3uNPw8RawYGBPuQ6rGINAknKvklo0R8EzQk40corgEwyf1Z AGF3NK9hTueN4pJG5iT0HuCXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6KrzXc6O WkrtxuV88oTpxrsIQDgwHwYDVR0jBBgwFoAUvnZO/vU9hpxE9gcJlhE+ChgYQRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQzAyLzRDNDA2RkI2NDA1 NjExRTdBRjA0MUEzNUM0RjlBRTAyL3ZuWk9fdlU5aHB4RTlnY0psaEUtQ2hnWVFS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdm5aT192VTlocHhFOWdjSmxoRS1DaGdZUVJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QzAyLzRDNDA2RkI2NDA1NjExRTdBRjA0MUEzNUM0RjlBRTAyL3ZuWk9fdlU5aHB4 RTlnY0psaEUtQ2hnWVFScy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKmtiUob8I6HSbFVYaj1YB5Co8SjljuVzu9QpP0I9L1nmqGQ27w1Mimm eFoZV03D5JEVsf+2ipe5Ers2Xa1ogGbsYwm9QZQ/0PIQcxq/3kY2gVejepLOMCgp 7GNIXgyrTlh7aPvqdiZgW2kJYfYSPH1vkrOkz+MNN3xA6OM+jtHMBKC1thZayszy d5JpW0qDW3aAAgPGiFI/wR5Kh1xWPNNrZRH6ipGuuOgtBGqsVySoLSzQ8E+yMcdy EVeODu+CaPZUpqXJwRgnI+TixJSGjYU93CpkUeEDgopBwYtB1DZIHTSeoIlhbN94 fR8mymLb/y6xRpHNwOxTSkPpF4J6US0= -----END CERTIFICATE-----Generated at Sun Aug 24 00:45:38 2025 by rpki-client