$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft File: vIYhQTCXFsDk3Dff_zPlqwxVStA.mft (raw, json) Hash identifier: 7R1KrjjLdpTA53NfCBT+pvnaOfUbFlqK8V01vUGnvG4= Subject key identifier: 18:96:5E:0C:4C:02:EC:8F:4E:AD:47:2C:87:C4:F1:55:79:40:F2:C7 Authority key identifier: BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0 Certificate issuer: /CN=A911EA27/serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0 Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft Manifest number: 021C Signing time: Sat 23 Aug 2025 02:11:15 +0000 Manifest this update: Sat 23 Aug 2025 02:11:14 +0000 Manifest next update: Sat 30 Aug 2025 02:11:14 +0000 Files and hashes: 1: vIYhQTCXFsDk3Dff_zPlqwxVStA.crl (hash: 2F03WluENOdQtxDMD8TmDQWTECNTezND4WXJ7T1Q2TQ=) 2: 3DE0E9065F0811EDB42DC97FC4F9AE02.roa (hash: MoE7MEPCOyGB/9EMlTXV0tN9ZG/UinteAkee65hBGJ0=) 3: 3F2E65045F0811EDB42DC97FC4F9AE02.roa (hash: IgAv5ZJEhwoH7uEYAUCxosir/fX/9UUdUT7CtlM0EKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EA27, serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0 Validity Not Before: Aug 23 02:11:14 2025 GMT Not After : Aug 30 02:11:14 2025 GMT Subject: CN=68a92342-0f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0b:b4:85:98:a5:5c:e0:10:cb:4e:81:a5:36: 93:bd:ea:60:a8:9c:c5:22:a1:a9:f1:cd:3d:0a:c5: 1d:73:ab:dc:fb:0f:a4:98:b7:f5:82:2d:b3:23:2d: 16:8d:b9:a1:8a:33:45:c2:99:1d:94:11:22:7e:af: 7d:4b:8d:98:34:84:35:95:8d:6d:f0:d6:bb:ab:ac: ac:15:a2:f3:b9:1e:dd:dd:fb:18:5d:fd:c8:3a:ff: 62:e3:60:db:8c:31:8e:36:66:d5:a1:53:f4:24:91: 79:93:48:11:f2:92:b8:7f:1d:d9:ae:40:c5:be:13: 5c:e9:c2:31:3b:8a:e7:ca:fe:76:fc:3a:5e:9e:0c: bb:da:73:05:f1:8e:27:aa:33:29:7a:f7:2f:28:05: bc:2a:43:9e:51:10:42:3c:58:33:22:5d:af:2c:f0: 19:1f:68:6e:32:30:89:1f:02:22:eb:f6:d4:67:76: 19:9e:5a:30:25:f4:8c:ca:d1:ea:44:41:44:2a:fb: 5b:c2:1d:74:43:fd:06:af:35:20:c2:8c:91:ce:07: 88:fd:1d:c3:d0:73:ea:53:a9:80:d6:6b:c5:9e:d6: 33:44:de:b9:49:4b:9e:45:f0:56:ac:e6:7d:ad:83: 7c:31:66:d9:77:e5:b9:cc:f8:e7:35:60:79:42:a7: f7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:96:5E:0C:4C:02:EC:8F:4E:AD:47:2C:87:C4:F1:55:79:40:F2:C7 X509v3 Authority Key Identifier: keyid:BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:4f:04:f9:5e:5f:9a:87:6f:d3:b9:dc:77:93:40:5b:05:fb: b8:e7:bd:c9:21:8d:ed:ce:11:6c:41:77:65:33:fc:c2:b3:85: 3a:10:b6:33:ca:f6:06:a3:cf:bc:2c:f8:33:5c:13:d8:18:4c: e5:aa:7c:b0:5e:99:b6:0c:27:80:69:ec:65:22:94:c3:23:86: 5e:63:a1:28:46:11:9f:a0:1b:03:37:22:20:02:fb:32:20:8e: 76:1b:18:c0:3c:1e:28:2f:9b:eb:77:84:ab:40:99:1f:a5:8b: cc:ff:d9:fd:de:03:c0:6c:a8:17:46:35:3b:6e:67:05:b5:6a: 6c:75:22:b9:0f:b2:9c:60:d1:e2:5f:43:e5:b3:37:da:80:d7: fb:46:92:7a:03:c0:86:0d:e3:ba:dc:3a:13:b3:aa:0e:18:74: e7:4b:25:aa:6f:3d:ef:3e:d3:9d:41:63:bb:d3:e9:36:42:aa: ea:8f:02:55:ca:ad:77:8b:f3:23:23:79:a0:91:40:25:29:3f: 42:22:99:59:1f:ad:d7:ea:6c:f3:7b:5d:68:fe:d5:91:87:05: 31:4b:ed:20:22:21:68:ff:69:3c:c5:de:e9:38:e4:ba:6b:23: d1:2b:b5:3c:eb:e9:1b:1b:07:71:9c:94:d2:96:62:4d:ce:fb: 11:34:86:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVBMjcxMTAvBgNVBAUTKEJDODYyMTQxMzA5NzE2QzBFNERDMzdERkZGMzNFNUFC MEM1NTRBRDAwHhcNMjUwODIzMDIxMTE0WhcNMjUwODMwMDIxMTE0WjAYMRYwFAYD VQQDEw02OGE5MjM0Mi0wZjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAu0hZilXOAQy06BpTaTvepgqJzFIqGp8c09CsUdc6vc+w+kmLf1gi2zIy0W jbmhijNFwpkdlBEifq99S42YNIQ1lY1t8Na7q6ysFaLzuR7d3fsYXf3IOv9i42Db jDGONmbVoVP0JJF5k0gR8pK4fx3ZrkDFvhNc6cIxO4rnyv52/Dpengy72nMF8Y4n qjMpevcvKAW8KkOeURBCPFgzIl2vLPAZH2huMjCJHwIi6/bUZ3YZnlowJfSMytHq REFEKvtbwh10Q/0GrzUgwoyRzgeI/R3D0HPqU6mA1mvFntYzRN65SUueRfBWrOZ9 rYN8MWbZd+W5zPjnNWB5Qqf3SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiWXgxM AuyPTq1HLIfE8VV5QPLHMB8GA1UdIwQYMBaAFLyGIUEwlxbA5Nw33/8z5asMVUrQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUEyNy82QThCRDA4QzQ0 NkYxMUVEOTA5NUQ1NjVDNEY5QUUwMi92SVloUVRDWEZzRGszRGZmX3pQbHF3eFZT dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJWWhRVENYRnNEazNEZmZfelBscXd4VlN0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUEyNy82QThCRDA4QzQ0NkYxMUVEOTA5NUQ1NjVDNEY5QUUwMi92SVloUVRDWEZz RGszRGZmX3pQbHF3eFZTdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGTwT5Xl+ah2/Tudx3k0BbBfu4573JIY3tzhFsQXdlM/zCs4U6ELYz yvYGo8+8LPgzXBPYGEzlqnywXpm2DCeAaexlIpTDI4ZeY6EoRhGfoBsDNyIgAvsy II52GxjAPB4oL5vrd4SrQJkfpYvM/9n93gPAbKgXRjU7bmcFtWpsdSK5D7KcYNHi X0PlszfagNf7RpJ6A8CGDeO63DoTs6oOGHTnSyWqbz3vPtOdQWO70+k2QqrqjwJV yq13i/MjI3mgkUAlKT9CIplZH63X6mzze11o/tWRhwUxS+0gIiFo/2k8xd7pOOS6 ayPRK7U86+kbGwdxnJTSlmJNzvsRNIbJ -----END CERTIFICATE-----Generated at Sat Aug 23 21:04:50 2025 by rpki-client