$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft File: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft (raw, json) Hash identifier: 524luNBT9hsKJcD7bOtIiLNdGfZz0lhThqK7pB26pME= Subject key identifier: B0:FC:75:8B:7E:50:98:FF:1F:49:F9:0E:AD:24:90:99:EC:4C:3F:CB Authority key identifier: 56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC Certificate issuer: /CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC Certificate serial: 0DBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft Manifest number: 0DAD Signing time: Fri 22 Aug 2025 18:02:55 +0000 Manifest this update: Fri 22 Aug 2025 18:02:55 +0000 Manifest next update: Fri 29 Aug 2025 18:02:55 +0000 Files and hashes: 1: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl (hash: lgY8NknSLhhfv99QL6e8FoPIyJq7qum12lt3g0+4YQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3518 (0xdbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203DF, serialNumber=56790B8C9507D9D4F3900950D329E275747767AC Validity Not Before: Aug 22 18:02:55 2025 GMT Not After : Aug 29 18:02:55 2025 GMT Subject: CN=68a8b0cf-1bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:60:c7:90:72:33:37:40:54:f7:3a:5b:bc:a9: 68:19:31:7d:81:32:b8:c3:0b:c9:f7:5c:a5:45:c2: ad:fc:6d:ab:58:17:e5:87:ab:01:e8:c8:ac:d6:87: b5:66:7f:df:5e:96:ab:e2:b2:8e:e4:7d:ae:66:d0: c7:b6:83:2b:85:32:ee:22:dd:48:d6:38:a1:1a:fe: f7:09:44:c3:cf:fb:35:5e:96:7f:62:47:42:d6:f3: bf:1c:bf:74:b9:8d:f5:07:b1:ec:88:5e:08:62:73: 6a:72:94:39:16:f5:4d:f4:66:26:df:1f:94:0b:08: bc:ea:bb:96:fe:84:c5:94:25:7a:14:48:9b:9d:b9: c2:56:e1:dc:8e:6a:1a:4d:18:43:8f:83:0b:28:eb: b5:6a:d3:b5:d9:58:75:13:19:75:80:30:a3:ba:f5: e1:80:39:ac:c7:32:a4:a7:12:08:b7:64:74:22:c0: 6d:ff:77:ed:3a:1f:2f:6c:8d:f7:f4:9c:37:45:9b: d8:66:f9:e8:12:8a:80:45:25:80:02:11:07:21:51: b8:56:e8:a5:bc:5a:d8:32:70:67:b2:e8:43:e1:7a: 0a:46:38:2c:e5:58:b2:a2:0d:08:80:39:f5:45:bd: 0a:8a:c1:6f:2e:91:c0:d6:87:2d:9e:d2:b2:f7:44: 64:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FC:75:8B:7E:50:98:FF:1F:49:F9:0E:AD:24:90:99:EC:4C:3F:CB X509v3 Authority Key Identifier: keyid:56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:b4:76:d4:d7:21:fe:d6:50:ac:95:2b:02:fe:a9:8a:ae:dc: 34:cc:a9:b6:82:4a:c2:b1:62:7a:89:20:43:3c:80:54:dc:4d: d7:5d:d1:e8:d4:07:61:09:e3:96:a1:13:9f:16:bc:11:7a:02: c1:0b:13:6e:bf:5d:5a:83:f1:fd:ca:b7:94:fe:47:9e:11:5f: 7e:2f:3d:16:b3:d9:6d:8c:2d:fa:72:0d:86:fa:20:d8:d5:ce: 88:0b:0f:d6:f3:35:69:95:4d:ed:b5:b2:08:6a:67:5f:46:30: 08:64:98:33:61:49:37:1c:18:3a:30:88:22:22:24:e6:38:83: 72:47:58:59:b6:e4:dd:b0:b4:c7:a9:9d:87:e3:bb:a7:8e:94: 01:ec:0a:30:7a:c8:43:7d:ad:96:aa:94:7c:90:fd:de:fb:3e: 11:40:4d:74:c0:22:ed:34:f3:09:ff:ec:4e:b7:d1:a8:e7:2f: 4c:f0:43:30:1e:b1:28:1c:43:87:6d:d2:7f:5a:88:fb:b3:75: 65:42:f7:d8:19:43:2e:6d:f6:f4:10:8f:d8:f0:df:b0:83:89: cd:45:db:58:76:34:7a:46:a6:f3:52:23:30:6c:d1:ce:82:f9: 8e:96:ca:41:84:77:31:c9:50:55:d6:9d:6e:49:f2:23:e3:e2: 5f:31:24:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzREYxMTAvBgNVBAUTKDU2NzkwQjhDOTUwN0Q5RDRGMzkwMDk1MEQzMjlFMjc1 NzQ3NzY3QUMwHhcNMjUwODIyMTgwMjU1WhcNMjUwODI5MTgwMjU1WjAYMRYwFAYD VQQDEw02OGE4YjBjZi0xYmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4WDHkHIzN0BU9zpbvKloGTF9gTK4wwvJ91ylRcKt/G2rWBflh6sB6Mis1oe1 Zn/fXpar4rKO5H2uZtDHtoMrhTLuIt1I1jihGv73CUTDz/s1XpZ/YkdC1vO/HL90 uY31B7HsiF4IYnNqcpQ5FvVN9GYm3x+UCwi86ruW/oTFlCV6FEibnbnCVuHcjmoa TRhDj4MLKOu1atO12Vh1Exl1gDCjuvXhgDmsxzKkpxIIt2R0IsBt/3ftOh8vbI33 9Jw3RZvYZvnoEoqARSWAAhEHIVG4VuilvFrYMnBnsuhD4XoKRjgs5Viyog0IgDn1 Rb0KisFvLpHA1octntKy90RkBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLD8dYt+ UJj/H0n5Dq0kkJnsTD/LMB8GA1UdIwQYMBaAFFZ5C4yVB9nU85AJUNMp4nV0d2es MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNERi85MjczOTdCNENB MzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJkVHprQWxRMHluaWRYUjNa NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Zua0xqSlVIMmRUemtBbFEweW5pZFhSM1o2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNERi85MjczOTdCNENBMzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJk VHprQWxRMHluaWRYUjNaNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRtHbU1yH+1lCslSsC/qmKrtw0zKm2gkrCsWJ6iSBDPIBU3E3XXdHo 1AdhCeOWoROfFrwRegLBCxNuv11ag/H9yreU/keeEV9+Lz0Ws9ltjC36cg2G+iDY 1c6ICw/W8zVplU3ttbIIamdfRjAIZJgzYUk3HBg6MIgiIiTmOINyR1hZtuTdsLTH qZ2H47unjpQB7AoweshDfa2WqpR8kP3e+z4RQE10wCLtNPMJ/+xOt9Go5y9M8EMw HrEoHEOHbdJ/Woj7s3VlQvfYGUMubfb0EI/Y8N+wg4nNRdtYdjR6RqbzUiMwbNHO gvmOlspBhHcxyVBV1p1uSfIj4+JfMSQK -----END CERTIFICATE-----Generated at Sat Aug 23 17:23:45 2025 by rpki-client