$ rpki-client -vvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft File: vadiHhrG4FsLoMLvFUF0yL5cE7k.mft (raw, json) Hash identifier: DIvnPMtF/HFzR9rwBm2ccUzyYEPcYOKUr7TPV5AuGuM= Subject key identifier: E5:9C:36:15:19:E4:F1:8C:51:DC:6D:D9:5B:09:0F:A0:41:51:C4:BF Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 Certificate issuer: /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft Manifest number: 0204 Signing time: Sat 23 Aug 2025 02:26:36 +0000 Manifest this update: Sat 23 Aug 2025 02:26:36 +0000 Manifest next update: Sat 30 Aug 2025 02:26:36 +0000 Files and hashes: 1: vadiHhrG4FsLoMLvFUF0yL5cE7k.crl (hash: OFoJHmH6ZOpGmCqWPWPtR2bPp196RWhA8E9V67ReXGA=) 2: 673F4DC6894911EEB032426EC4F9AE02.roa (hash: A4cWT1FQnbB1RV9fDjJNCe1bIriG2tb4PlUO0o2Lg90=) 3: A8A932CC894911EE8CA8D26EC4F9AE02.roa (hash: eI5qe3WuZ3ca7j939pJeQIuLSMWClo4MltkC7KKSMl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912885B, serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Validity Not Before: Aug 23 02:26:36 2025 GMT Not After : Aug 30 02:26:36 2025 GMT Subject: CN=68a926dc-73fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:73:79:c4:96:2d:bd:5e:80:aa:fb:bd:fb:e8: 72:b9:03:de:64:0e:36:d4:b3:cd:33:aa:1a:ab:c1: c8:56:27:6a:a6:dd:a3:7e:b2:ba:0a:e8:04:77:1d: 51:fb:5f:f5:a2:fa:aa:df:79:58:59:93:68:3e:98: 73:b6:e3:5f:62:50:86:64:68:24:07:e6:be:39:dc: 6d:d1:e0:88:14:6a:94:87:38:13:4f:c0:1f:32:74: 42:4d:01:07:b6:ba:91:a5:9c:e1:f3:0d:22:89:07: e4:ba:45:66:a9:e3:9a:b5:29:b9:8d:1e:bb:eb:10: 8b:95:4b:65:20:f6:fb:61:d5:87:9c:a6:09:e0:03: ec:eb:17:59:05:c6:ed:b8:b8:1b:64:6e:f3:8f:97: 3f:a2:36:a6:e0:51:98:2b:58:87:6e:07:fe:60:b8: a4:4c:47:f1:7c:d9:17:5e:ab:b4:3f:bc:65:c6:22: a5:d0:46:02:1b:30:d1:c5:c9:d7:46:4b:d6:99:67: 14:7e:ea:57:99:11:91:7a:9f:83:d0:f6:19:fd:3a: bc:65:4b:50:51:c9:02:f4:42:56:3e:08:bf:55:34: 6a:e1:0b:f2:17:7e:fb:46:2c:4f:03:b9:d7:e4:f8: 08:30:cc:34:f0:95:cd:79:f9:25:27:29:e6:34:65: f0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9C:36:15:19:E4:F1:8C:51:DC:6D:D9:5B:09:0F:A0:41:51:C4:BF X509v3 Authority Key Identifier: keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:ea:04:49:e6:b1:81:9b:3f:99:81:06:5e:ee:ef:2c:8e:d1: 52:a1:3c:e6:64:13:d0:b8:47:7b:fb:4e:59:e8:fa:f1:89:be: 4e:e1:73:73:8e:74:24:e6:69:ac:35:d1:bd:70:ec:c3:6a:21: 00:d0:49:20:ae:da:e0:bd:dd:cd:7d:37:d2:b0:0b:92:b4:3b: 5f:68:d5:25:b0:01:e5:5c:fe:cc:1a:7a:66:d1:20:a9:2c:d9: b3:ab:b3:34:52:6a:bc:1a:f4:a4:8a:07:ec:88:a7:79:3c:70: b3:87:94:f5:76:bb:37:c2:3f:34:3d:2e:b0:94:0f:02:57:6c: a8:5c:bc:5b:27:23:d8:a8:8b:01:f0:79:cf:6a:a8:70:a4:34: 30:4b:99:96:1e:cd:5a:3f:a7:fa:ea:be:a0:b2:9c:22:82:03: f7:b6:fc:bc:30:4f:8b:cf:b9:e2:7d:44:33:2a:de:3f:f1:6a: 78:f3:b9:1a:fc:82:bc:d2:a1:94:69:f4:8c:9d:a7:99:82:43: 74:dd:f3:e8:ab:fe:c5:85:bc:c2:8d:93:7b:50:a3:1f:70:94: 52:0d:b9:2e:3a:3c:83:4e:bc:a1:35:c9:3d:2c:41:de:34:7f: 5a:bc:4b:06:6f:cb:d7:73:1f:10:7e:a5:eb:db:1e:d7:2c:a3: 1b:4d:5a:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4NUIxMTAvBgNVBAUTKEJEQTc2MjFFMUFDNkUwNUIwQkEwQzJFRjE1NDE3NEM4 QkU1QzEzQjkwHhcNMjUwODIzMDIyNjM2WhcNMjUwODMwMDIyNjM2WjAYMRYwFAYD VQQDEw02OGE5MjZkYy03M2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHN5xJYtvV6Aqvu9++hyuQPeZA421LPNM6oaq8HIVidqpt2jfrK6CugEdx1R +1/1ovqq33lYWZNoPphztuNfYlCGZGgkB+a+Odxt0eCIFGqUhzgTT8AfMnRCTQEH trqRpZzh8w0iiQfkukVmqeOatSm5jR676xCLlUtlIPb7YdWHnKYJ4APs6xdZBcbt uLgbZG7zj5c/ojam4FGYK1iHbgf+YLikTEfxfNkXXqu0P7xlxiKl0EYCGzDRxcnX RkvWmWcUfupXmRGRep+D0PYZ/Tq8ZUtQUckC9EJWPgi/VTRq4QvyF377RixPA7nX 5PgIMMw08JXNefklJynmNGXwEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWcNhUZ 5PGMUdxt2VsJD6BBUcS/MB8GA1UdIwQYMBaAFL2nYh4axuBbC6DC7xVBdMi+XBO5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODg1Qi9BOTlDMTg5MDZD NzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRGc0xvTUx2RlVGMHlMNWNF N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZhZGlIaHJHNEZzTG9NTHZGVUYweUw1Y0U3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODg1Qi9BOTlDMTg5MDZDNzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRG c0xvTUx2RlVGMHlMNWNFN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp6gRJ5rGBmz+ZgQZe7u8sjtFSoTzmZBPQuEd7+05Z6Prxib5O4XNz jnQk5mmsNdG9cOzDaiEA0Ekgrtrgvd3NfTfSsAuStDtfaNUlsAHlXP7MGnpm0SCp LNmzq7M0Umq8GvSkigfsiKd5PHCzh5T1drs3wj80PS6wlA8CV2yoXLxbJyPYqIsB 8HnPaqhwpDQwS5mWHs1aP6f66r6gspwiggP3tvy8ME+Lz7nifUQzKt4/8Wp487ka /IK80qGUafSMnaeZgkN03fPoq/7FhbzCjZN7UKMfcJRSDbkuOjyDTryhNck9LEHe NH9avEsGb8vXcx8QfqXr2x7XLKMbTVrh -----END CERTIFICATE-----Generated at Sat Aug 23 18:15:25 2025 by rpki-client