$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft File: vIx594SRodWqRdvkEzwMEPaTZK0.mft (raw, json) Hash identifier: W2S0Q6wd0pqVerlpQkpPTYxYjj5udlcsKM7/kvyX+Mk= Subject key identifier: C7:1D:A1:FE:0D:08:C4:F4:00:DA:FA:75:54:14:CB:27:55:B6:CB:A0 Authority key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD Certificate issuer: /CN=A911DB66/serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft Manifest number: 69 Signing time: Sat 23 Aug 2025 07:12:27 +0000 Manifest this update: Sat 23 Aug 2025 07:12:27 +0000 Manifest next update: Sat 30 Aug 2025 07:12:27 +0000 Files and hashes: 1: vIx594SRodWqRdvkEzwMEPaTZK0.crl (hash: ORoYoGbDJ9m0L7Tdxh051pwOVTZuQbr5iGgI7YOZ71w=) 2: D973E6FEF51D11EFAD3D042EC4F9AE02.roa (hash: u93MIpjxF46V825wNe89adLBqBtdyI8rJgiDXDAPRbk=) 3: DA673610F51D11EFAD3D042EC4F9AE02.roa (hash: Ditm9jS3Zsy5UK/tSQ4fwIyFAaD9ya5NTIds4DVaHEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DB66, serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD Validity Not Before: Aug 23 07:12:27 2025 GMT Not After : Aug 30 07:12:27 2025 GMT Subject: CN=68a969db-0511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8e:06:fd:25:8e:02:d3:0a:04:f9:8d:3c:a6: a6:84:5b:fb:7e:c7:49:27:6a:bb:df:63:f2:b8:e5: 5e:5a:d5:d5:28:66:86:6e:16:b2:54:15:3d:7d:d2: d1:4c:86:77:e0:97:64:c4:fc:2f:7b:8d:db:83:48: 5f:9d:32:3d:6d:e7:f3:3f:92:8b:88:d4:e3:35:1e: 0b:09:00:8b:5d:d4:98:f5:d6:74:3e:de:ca:8f:d1: 4a:66:c0:91:df:d7:05:12:a1:c5:b1:2e:ce:f5:39: f2:5e:e4:f4:78:2e:7b:91:bd:48:a9:7f:13:c4:e5: 10:02:15:d0:79:0c:1c:57:56:97:92:89:5f:ac:cc: 64:81:e9:f8:cf:12:e7:c4:bf:fc:2f:63:30:f8:3f: 85:72:1c:24:29:ab:5c:83:89:13:6d:52:da:a5:a1: 52:ee:0b:73:92:a8:19:e7:0f:44:b6:22:a9:e4:42: 86:a1:48:93:cf:dc:95:72:43:74:a5:d7:47:07:e6: 37:ca:99:fd:7e:0c:dc:6d:e6:96:19:7d:49:2c:96: 45:4c:18:30:ab:41:0d:1e:4a:56:f8:ec:84:6a:54: 45:90:05:b5:cd:a3:74:26:c5:db:95:63:4f:af:a5: 21:11:14:d3:b0:9b:84:c6:f6:02:3f:b8:6b:e2:ba: 09:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1D:A1:FE:0D:08:C4:F4:00:DA:FA:75:54:14:CB:27:55:B6:CB:A0 X509v3 Authority Key Identifier: keyid:BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:33:92:e3:fa:72:e9:c0:17:d8:ca:23:f1:aa:5e:a5:9f:b7: 10:a0:d2:66:aa:26:24:f4:6a:35:ec:2f:e3:0d:e5:a2:fb:6b: d2:1a:4b:6c:95:a7:d4:7f:6c:53:18:be:3c:19:af:27:b2:88: 1a:32:4c:81:87:da:e6:de:46:14:24:21:41:b4:7f:4a:86:13: 38:22:58:93:11:3f:a3:b5:0f:90:88:53:16:8a:d8:fe:f4:e2: 45:c2:2b:c1:da:64:36:c9:6f:56:36:71:b2:ea:b3:b6:a8:3b: 69:3d:5b:88:4e:05:e2:09:c3:e9:45:53:aa:5c:ad:61:cd:f8: bb:16:64:a3:7c:10:9b:ef:aa:fb:25:08:38:5e:11:80:50:04: d9:c2:2c:e3:5f:1c:7a:c6:a4:7f:ba:63:22:d9:43:05:08:9e: c1:27:73:1b:5e:12:2b:16:ee:30:99:9b:86:34:62:29:61:03: 12:1f:96:3d:b2:06:90:31:3a:da:32:12:41:ac:f0:80:73:7b: 88:9f:80:94:a7:be:0a:f5:46:a1:21:e1:53:03:c5:21:ff:cf: 18:5b:36:d0:72:cf:1b:44:0c:2b:36:29:51:2d:45:3f:d9:62: a4:20:2c:f6:d9:eb:4c:28:a4:1e:bd:1d:0b:de:c0:0e:6c:56: 8f:68:c0:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REI2NjExMC8GA1UEBRMoQkM4Qzc5Rjc4NDkxQTFENUFBNDVEQkU0MTMzQzBDMTBG NjkzNjRBRDAeFw0yNTA4MjMwNzEyMjdaFw0yNTA4MzAwNzEyMjdaMBgxFjAUBgNV BAMTDTY4YTk2OWRiLTA1MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEjgb9JY4C0woE+Y08pqaEW/t+x0knarvfY/K45V5a1dUoZoZuFrJUFT190tFM hnfgl2TE/C97jduDSF+dMj1t5/M/kouI1OM1HgsJAItd1Jj11nQ+3sqP0UpmwJHf 1wUSocWxLs71OfJe5PR4LnuRvUipfxPE5RACFdB5DBxXVpeSiV+szGSB6fjPEufE v/wvYzD4P4VyHCQpq1yDiRNtUtqloVLuC3OSqBnnD0S2IqnkQoahSJPP3JVyQ3Sl 10cH5jfKmf1+DNxt5pYZfUkslkVMGDCrQQ0eSlb47IRqVEWQBbXNo3QmxduVY0+v pSERFNOwm4TG9gI/uGviugmBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxx2h/g0I xPQA2vp1VBTLJ1W2y6AwHwYDVR0jBBgwFoAUvIx594SRodWqRdvkEzwMEPaTZK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFEQjY2Lzc3QjYxOTlDRTA5 QTExRUZCNjNBODEzMEM0RjlBRTAyL3ZJeDU5NFNSb2RXcVJkdmtFendNRVBhVFpL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdkl4NTk0U1JvZFdxUmR2a0V6d01FUGFUWkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE QjY2Lzc3QjYxOTlDRTA5QTExRUZCNjNBODEzMEM0RjlBRTAyL3ZJeDU5NFNSb2RX cVJkdmtFendNRVBhVFpLMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALUzkuP6cunAF9jKI/GqXqWftxCg0maqJiT0ajXsL+MN5aL7a9IaS2yV p9R/bFMYvjwZryeyiBoyTIGH2ubeRhQkIUG0f0qGEzgiWJMRP6O1D5CIUxaK2P70 4kXCK8HaZDbJb1Y2cbLqs7aoO2k9W4hOBeIJw+lFU6pcrWHN+LsWZKN8EJvvqvsl CDheEYBQBNnCLONfHHrGpH+6YyLZQwUInsEncxteEisW7jCZm4Y0YilhAxIflj2y BpAxOtoyEkGs8IBze4ifgJSnvgr1RqEh4VMDxSH/zxhbNtByzxtEDCs2KVEtRT/Z YqQgLPbZ60wopB69HQvewA5sVo9owKw= -----END CERTIFICATE-----Generated at Sat Aug 23 20:29:26 2025 by rpki-client