$ rpki-client -vvf rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft File: vYeFXLaB4jNZv-waNPGZK2ceXu4.mft (raw, json) Hash identifier: KtbDK9O7Xie36eptDnH2mVq0Zf8zOfUyCVTv9JNLA5k= Subject key identifier: 08:31:92:3F:0A:7C:20:A4:D0:F4:3D:DB:E0:A2:6C:39:B3:6E:63:2B Authority key identifier: BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE Certificate issuer: /CN=A9127726/serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE Certificate serial: 351C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft Manifest number: 34E2 Signing time: Fri 22 Aug 2025 15:15:55 +0000 Manifest this update: Fri 22 Aug 2025 15:15:54 +0000 Manifest next update: Fri 29 Aug 2025 15:15:54 +0000 Files and hashes: 1: vYeFXLaB4jNZv-waNPGZK2ceXu4.crl (hash: EM5GSlguTjjHwpR9FsoS+5pt4pWyse+m01tcRIaHl50=) 2: 264A19E27A3D11E99D212E62C4F9AE02.roa (hash: kaUlqr3b8A7no1oe3E82H4SD9C+VUB4JZZk+4clJWRg=) 3: AF976FA2023311ED945EBE12C4F9AE02.roa (hash: VG6uEFBAKDNWG5jrp+h5u5H00t+QV3JS7QeUIT589uA=) 4: 9D03023EA86E11EDABA1FA2AC4F9AE02.roa (hash: LAU2JxX8T47cr50yu6tjbJf0N73aEylHsaRmxgaBsa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13596 (0x351c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127726, serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE Validity Not Before: Aug 22 15:15:54 2025 GMT Not After : Aug 29 15:15:54 2025 GMT Subject: CN=68a889aa-b9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c2:70:fa:ed:f0:af:66:f1:e4:a0:a4:39:65: df:d9:cf:5b:c2:1e:e3:89:e3:fe:25:cf:de:eb:4d: d3:fc:43:10:e8:22:70:60:de:07:4b:5f:9f:3b:c2: da:36:4e:47:8e:b3:a3:04:f2:95:a4:9c:cb:82:6d: a0:e8:97:4f:6c:bc:00:df:4d:b6:fc:9a:76:1f:60: 04:d5:28:75:c2:92:63:0f:0e:99:3d:c1:c4:33:f4: a0:8b:d8:c3:0f:ec:41:be:83:be:0f:c6:77:73:75: 1e:12:34:0b:0f:6a:83:96:e3:88:0f:3a:fc:ab:d9: 46:23:f6:f8:25:a6:6c:c2:fe:c8:6d:97:fa:d8:2a: 2a:4b:db:36:55:c1:fa:a8:90:72:d7:5d:7c:79:55: 53:d1:97:e5:b9:27:45:f8:46:16:a1:eb:da:18:84: 5a:fb:58:08:33:77:c6:3a:c8:60:93:3f:da:38:f0: ce:ed:de:90:5e:b8:c8:0b:ab:b0:08:51:43:fe:54: f7:53:10:e7:6e:74:a2:cf:ef:c8:1c:32:11:ef:ea: 96:d2:3b:2a:97:7c:5e:7e:23:7d:42:75:6f:4f:6f: 8a:c4:e8:d2:66:fc:ec:65:38:e7:3d:3b:1c:1d:7f: 51:85:59:1c:1f:3f:4b:bd:fd:1f:52:09:61:70:b3: 2b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:31:92:3F:0A:7C:20:A4:D0:F4:3D:DB:E0:A2:6C:39:B3:6E:63:2B X509v3 Authority Key Identifier: keyid:BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:1b:0a:de:fb:c1:f0:d2:86:f1:46:de:a2:2c:c5:25:5d:d2: 51:0f:af:17:1c:52:5e:4a:28:e8:f6:cc:de:d8:5e:8f:35:94: 93:4a:3b:d6:9f:d7:57:3a:35:b0:b0:c5:0f:71:e3:4b:fa:be: b0:76:c2:7d:1a:2b:c5:b6:61:4e:ec:07:15:9a:24:b0:91:7c: 18:64:27:a0:7e:02:ca:ca:0d:86:2b:8b:6b:5a:69:71:de:b1: 2a:a6:ed:74:4b:cf:c5:ae:81:85:58:fa:82:42:d9:f0:25:da: 53:77:48:5f:38:0b:4f:7f:10:04:b9:df:54:6c:b5:41:72:5f: 8d:24:51:9e:d4:fa:06:ff:97:01:77:0b:6e:d0:6d:1d:b9:cb: ab:c6:32:bd:81:2b:d4:8b:b7:db:84:5e:28:a4:b8:b9:4e:ef: a5:9c:1a:23:aa:92:64:f1:33:a1:fa:f5:90:62:ba:aa:5a:fe: 8f:33:c6:d1:9a:37:23:0d:3e:68:2b:10:2f:c0:eb:18:75:70: c7:24:7c:c5:e6:65:09:02:8a:b4:9b:24:58:29:01:ee:f6:d2: fb:0b:96:c8:d4:71:6a:f8:11:d4:36:be:2a:f8:a6:dd:8c:a5: 03:27:a5:68:83:1b:c8:07:56:3b:ab:1f:e4:56:75:02:0c:55: 1b:fd:e4:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc3MjYxMTAvBgNVBAUTKEJEODc4NTVDQjY4MUUyMzM1OUJGRUMxQTM0RjE5OTJC NjcxRTVFRUUwHhcNMjUwODIyMTUxNTU0WhcNMjUwODI5MTUxNTU0WjAYMRYwFAYD VQQDEw02OGE4ODlhYS1iOWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcJw+u3wr2bx5KCkOWXf2c9bwh7jieP+Jc/e603T/EMQ6CJwYN4HS1+fO8La Nk5HjrOjBPKVpJzLgm2g6JdPbLwA3022/Jp2H2AE1Sh1wpJjDw6ZPcHEM/Sgi9jD D+xBvoO+D8Z3c3UeEjQLD2qDluOIDzr8q9lGI/b4JaZswv7IbZf62CoqS9s2VcH6 qJBy1118eVVT0ZfluSdF+EYWoevaGIRa+1gIM3fGOshgkz/aOPDO7d6QXrjIC6uw CFFD/lT3UxDnbnSiz+/IHDIR7+qW0jsql3xefiN9QnVvT2+KxOjSZvzsZTjnPTsc HX9RhVkcHz9Lvf0fUglhcLMrDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgxkj8K fCCk0PQ92+CibDmzbmMrMB8GA1UdIwQYMBaAFL2HhVy2geIzWb/sGjTxmStnHl7u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzcyNi9GOUZGRjZBQzFE QTcxMUUyOTYzQUZBQTEwOEIwMkNEMi92WWVGWExhQjRqTlp2LXdhTlBHWksyY2VY dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZZZUZYTGFCNGpOWnYtd2FOUEdaSzJjZVh1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzcyNi9GOUZGRjZBQzFEQTcxMUUyOTYzQUZBQTEwOEIwMkNEMi92WWVGWExhQjRq Tlp2LXdhTlBHWksyY2VYdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXGwre+8Hw0obxRt6iLMUlXdJRD68XHFJeSijo9sze2F6PNZSTSjvW n9dXOjWwsMUPceNL+r6wdsJ9GivFtmFO7AcVmiSwkXwYZCegfgLKyg2GK4trWmlx 3rEqpu10S8/FroGFWPqCQtnwJdpTd0hfOAtPfxAEud9UbLVBcl+NJFGe1PoG/5cB dwtu0G0ducurxjK9gSvUi7fbhF4opLi5Tu+lnBojqpJk8TOh+vWQYrqqWv6PM8bR mjcjDT5oKxAvwOsYdXDHJHzF5mUJAoq0myRYKQHu9tL7C5bI1HFq+BHUNr4q+Kbd jKUDJ6VogxvIB1Y7qx/kVnUCDFUb/eRH -----END CERTIFICATE-----Generated at Sun Aug 24 00:17:58 2025 by rpki-client