$ rpki-client -vvf rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft File: VFiH13GXSLRp0FP_MWpqV6uZYjM.mft (raw, json) Hash identifier: /P3sgtPZRRz6PGyb06fUGH9AleAW7lAuOZIsamnIdpk= Subject key identifier: CA:B1:C0:67:08:27:01:6D:45:80:5C:E1:CB:5C:62:F3:F7:3E:9F:2D Authority key identifier: 54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 Certificate issuer: /CN=A91173B6/serialNumber=545887D7719748B469D053FF316A6A57AB996233 Certificate serial: 083C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft Manifest number: 0831 Signing time: Fri 22 Aug 2025 20:56:21 +0000 Manifest this update: Fri 22 Aug 2025 20:56:21 +0000 Manifest next update: Fri 29 Aug 2025 20:56:21 +0000 Files and hashes: 1: VFiH13GXSLRp0FP_MWpqV6uZYjM.crl (hash: 0GftMK5CfPU1QtTvH1OHbgQrpH88tpsKv+NMJsp6pKc=) 2: CA290E34341311EFA3C99F09C4F9AE02.roa (hash: i/g/3tYg+cOFFmeFmf1wzVIm1860HHoYX7kFrZIFYhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2108 (0x83c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91173B6, serialNumber=545887D7719748B469D053FF316A6A57AB996233 Validity Not Before: Aug 22 20:56:21 2025 GMT Not After : Aug 29 20:56:21 2025 GMT Subject: CN=68a8d975-0344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ca:2b:6b:42:a8:d1:9e:41:26:0c:db:a9:aa: d4:c9:3d:3d:5f:91:12:83:96:9f:8d:86:bb:cf:1a: 49:b1:f5:a7:c6:1b:ea:ca:04:43:73:15:c2:e5:65: 24:21:7e:2e:11:20:9e:72:87:36:97:a3:14:90:6d: 39:99:7b:c8:49:16:0f:7a:d9:d4:8b:2f:30:3f:0d: 8a:78:81:3e:cb:ba:37:30:5b:83:53:ec:5b:47:81: d5:e8:dd:db:fd:48:c3:65:e5:d5:3d:6c:0a:d7:23: a4:18:a1:2d:97:97:e3:e2:38:18:53:1c:38:fe:11: e2:08:51:fb:a5:45:ee:6c:ec:34:12:23:8e:1d:4e: 89:7b:b9:94:55:5d:1c:b6:85:0b:60:66:ca:20:99: 81:ad:35:92:54:e0:60:05:a2:bc:31:89:37:b7:47: 22:9e:0e:1a:4a:c1:d9:5b:d6:63:a5:bd:f1:94:14: 28:f5:4b:1b:e7:b1:3a:ce:2d:b5:a0:0b:d4:1a:a7: b9:67:29:eb:7b:5f:31:49:3e:74:7b:ca:c5:2c:54: 04:a3:68:10:98:6d:be:41:4f:60:5f:98:c4:4e:93: 3b:f2:bc:b4:c1:d5:42:93:61:76:d7:ad:12:f3:ed: db:7a:ad:e4:8b:6c:64:89:4f:72:14:dc:7b:3c:88: cf:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B1:C0:67:08:27:01:6D:45:80:5C:E1:CB:5C:62:F3:F7:3E:9F:2D X509v3 Authority Key Identifier: keyid:54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:6b:52:7c:fd:cd:ec:4f:55:4a:3e:58:38:e8:7f:0b:4c:de: fe:fc:df:a5:69:5b:36:0a:37:8e:37:1e:4f:47:4f:13:4b:5f: a0:b3:a0:ac:a5:66:31:b9:05:b3:8e:68:aa:97:03:d5:c6:b3: 8b:9d:0e:b6:54:7b:fb:23:16:31:24:fe:5f:b3:db:5d:b7:d1: e8:18:2a:57:b0:91:eb:61:36:79:75:cd:cc:04:95:fc:20:11: d7:78:aa:78:a8:a6:4c:3e:ef:1a:1b:40:c3:79:fa:32:17:fd: 99:a9:bb:bd:84:02:76:44:9b:40:5e:20:08:c9:36:08:b5:e2: ba:60:f9:f2:c1:4b:10:62:1d:d5:4a:82:c5:01:17:2e:20:d4: f8:93:74:7d:9b:9b:11:f2:d5:5c:12:1c:e2:cf:78:91:c5:fe: 87:80:9e:fb:4b:5b:d2:97:58:f9:30:67:0f:2f:dc:58:56:03: 40:4c:d9:20:19:e4:62:7d:f7:4d:87:bb:9e:e2:44:72:5b:7d: 9c:c7:73:38:f8:bd:77:d4:37:42:28:98:0e:74:8a:3c:c6:93: 86:ef:ee:76:7e:d7:7e:13:a1:79:04:fc:9e:47:58:20:cb:3e: 56:ff:ad:97:b8:d7:bb:6b:c1:a7:db:86:63:b0:e2:ea:51:d1: 0d:56:25:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTczQjYxMTAvBgNVBAUTKDU0NTg4N0Q3NzE5NzQ4QjQ2OUQwNTNGRjMxNkE2QTU3 QUI5OTYyMzMwHhcNMjUwODIyMjA1NjIxWhcNMjUwODI5MjA1NjIxWjAYMRYwFAYD VQQDEw02OGE4ZDk3NS0wMzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8ora0Ko0Z5BJgzbqarUyT09X5ESg5afjYa7zxpJsfWnxhvqygRDcxXC5WUk IX4uESCecoc2l6MUkG05mXvISRYPetnUiy8wPw2KeIE+y7o3MFuDU+xbR4HV6N3b /UjDZeXVPWwK1yOkGKEtl5fj4jgYUxw4/hHiCFH7pUXubOw0EiOOHU6Je7mUVV0c toULYGbKIJmBrTWSVOBgBaK8MYk3t0cing4aSsHZW9Zjpb3xlBQo9Usb57E6zi21 oAvUGqe5Zynre18xST50e8rFLFQEo2gQmG2+QU9gX5jETpM78ry0wdVCk2F2160S 8+3beq3ki2xkiU9yFNx7PIjP8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqxwGcI JwFtRYBc4ctcYvP3Pp8tMB8GA1UdIwQYMBaAFFRYh9dxl0i0adBT/zFqalermWIz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzNCNi8xMEY0ODQ4NkUx OUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNMUnAwRlBfTVdwcVY2dVpZ ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGaUgxM0dYU0xScDBGUF9NV3BxVjZ1WllqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzNCNi8xMEY0ODQ4NkUxOUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNM UnAwRlBfTVdwcVY2dVpZak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAra1J8/c3sT1VKPlg46H8LTN7+/N+laVs2CjeONx5PR08TS1+gs6Cs pWYxuQWzjmiqlwPVxrOLnQ62VHv7IxYxJP5fs9tdt9HoGCpXsJHrYTZ5dc3MBJX8 IBHXeKp4qKZMPu8aG0DDefoyF/2Zqbu9hAJ2RJtAXiAIyTYIteK6YPnywUsQYh3V SoLFARcuINT4k3R9m5sR8tVcEhziz3iRxf6HgJ77S1vSl1j5MGcPL9xYVgNATNkg GeRiffdNh7ue4kRyW32cx3M4+L131DdCKJgOdIo8xpOG7+52ftd+E6F5BPyeR1gg yz5W/62XuNe7a8Gn24ZjsOLqUdENViXi -----END CERTIFICATE-----Generated at Sat Aug 23 19:24:49 2025 by rpki-client