$ rpki-client -vvf rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft File: VB4KZv5g86rAJQLO8eSOYnpi90E.mft (raw, json) Hash identifier: cYw0mMvzGZ0mfe389ndhsF/7zyisLZ5y0WW9pu0Siy8= Subject key identifier: B0:18:87:8C:C6:84:03:B7:11:2B:84:99:CE:FE:BE:EC:8B:18:99:0E Authority key identifier: 54:1E:0A:66:FE:60:F3:AA:C0:25:02:CE:F1:E4:8E:62:7A:62:F7:41 Certificate issuer: /CN=A91288D9/serialNumber=541E0A66FE60F3AAC02502CEF1E48E627A62F741 Certificate serial: 0B39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft Manifest number: 0B31 Signing time: Fri 22 Aug 2025 19:21:20 +0000 Manifest this update: Fri 22 Aug 2025 19:21:19 +0000 Manifest next update: Fri 29 Aug 2025 19:21:19 +0000 Files and hashes: 1: VB4KZv5g86rAJQLO8eSOYnpi90E.crl (hash: XCRqNM5VyNkMyNLXpctHbY5tNDRfKxdYM3VXj/7YEeE=) 2: E0FCE614425811EAADEA3B45C4F9AE02.roa (hash: 4i/qRxDxm1IhOaEBUeWCrIN1RXkz58rViMQa88EFEXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.crl rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2873 (0xb39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91288D9, serialNumber=541E0A66FE60F3AAC02502CEF1E48E627A62F741 Validity Not Before: Aug 22 19:21:19 2025 GMT Not After : Aug 29 19:21:19 2025 GMT Subject: CN=68a8c32f-a225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:62:6a:82:96:fc:6f:3c:8b:f1:91:e2:93:fd: 3e:66:0b:cd:a0:b5:48:4d:43:9d:6c:31:e1:c8:ba: e6:d7:b0:a0:df:f1:e5:ba:da:1f:1b:f8:90:06:ad: 4f:09:9c:65:bf:dc:49:ab:f4:b9:bf:07:bf:44:91: 05:97:df:e8:91:68:da:a1:97:b1:db:f0:9c:95:77: 8d:6e:bb:96:e0:38:c2:38:18:fd:c6:f9:6b:09:8b: b7:a8:84:2d:91:4f:b8:be:ef:1e:af:18:34:cf:f9: 77:3d:1f:f1:79:b8:10:e0:66:70:c7:22:5e:14:57: e9:47:6d:a6:eb:cc:7e:3a:6a:17:b8:ce:24:d9:d8: 50:54:ac:58:02:a4:df:07:6b:a7:57:85:4d:91:e3: 9b:22:8d:46:81:93:d8:e9:63:b2:5e:6f:93:a4:68: 7c:bc:15:38:85:a6:6a:0f:ff:2d:a7:3f:df:d5:9d: b2:38:92:c8:d7:79:06:51:78:46:58:f3:00:26:7d: f8:f8:d1:d3:ee:f4:ac:e1:85:40:73:ae:32:16:bf: 8c:9f:b1:99:7d:bc:91:82:b9:89:76:01:7e:27:3a: 00:c9:dd:e0:db:6b:4d:a9:47:3b:0a:fa:84:83:aa: e8:05:df:ce:ed:22:03:66:9d:61:1a:d8:73:f1:6b: 80:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:18:87:8C:C6:84:03:B7:11:2B:84:99:CE:FE:BE:EC:8B:18:99:0E X509v3 Authority Key Identifier: keyid:54:1E:0A:66:FE:60:F3:AA:C0:25:02:CE:F1:E4:8E:62:7A:62:F7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:0f:5a:cf:0f:95:55:a5:63:d8:b8:e0:c8:db:90:ed:ed:a1: d0:1e:ed:12:d1:28:39:53:ef:50:99:fe:4b:bd:51:6b:1f:ee: 40:08:10:ca:c2:f2:15:4e:ef:2c:7c:75:37:09:e9:76:79:f8: 7d:fc:be:1d:85:90:df:07:9f:ed:a5:71:fc:17:63:30:02:12: f0:cd:eb:91:e1:fa:2e:5d:98:21:9d:1d:3a:63:7e:05:5f:7c: b0:58:d0:7c:96:c0:eb:e6:9a:cb:ce:30:85:1c:3f:57:c4:ab: eb:4f:f0:31:23:17:f9:43:f3:75:7c:23:3d:40:9f:f9:d9:6b: 10:55:70:83:c9:70:b5:e4:25:42:8d:9a:ae:0c:7e:18:b4:cf: e5:bd:ce:ac:70:fb:07:5b:14:72:b3:8f:5d:dc:5b:f6:38:62: 2b:81:ec:a4:6b:2c:75:eb:4a:43:c1:86:11:d9:e6:8c:48:86: a0:7b:cd:54:b8:8a:4a:25:95:3f:58:29:05:7f:53:6c:f3:3a: 5d:7f:06:8a:d9:a5:e0:33:1c:c3:2d:4e:d8:36:0c:79:c4:1f: 2b:09:2d:e4:e2:e1:c0:37:1a:97:c5:9a:ac:7f:99:ae:6d:d8: d4:5f:34:14:5c:3d:c1:14:0d:3f:18:f0:e2:f9:2c:a7:f2:38: 0c:4b:b8:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4RDkxMTAvBgNVBAUTKDU0MUUwQTY2RkU2MEYzQUFDMDI1MDJDRUYxRTQ4RTYy N0E2MkY3NDEwHhcNMjUwODIyMTkyMTE5WhcNMjUwODI5MTkyMTE5WjAYMRYwFAYD VQQDEw02OGE4YzMyZi1hMjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2Jqgpb8bzyL8ZHik/0+ZgvNoLVITUOdbDHhyLrm17Cg3/HlutofG/iQBq1P CZxlv9xJq/S5vwe/RJEFl9/okWjaoZex2/CclXeNbruW4DjCOBj9xvlrCYu3qIQt kU+4vu8erxg0z/l3PR/xebgQ4GZwxyJeFFfpR22m68x+OmoXuM4k2dhQVKxYAqTf B2unV4VNkeObIo1GgZPY6WOyXm+TpGh8vBU4haZqD/8tpz/f1Z2yOJLI13kGUXhG WPMAJn34+NHT7vSs4YVAc64yFr+Mn7GZfbyRgrmJdgF+JzoAyd3g22tNqUc7CvqE g6roBd/O7SIDZp1hGthz8WuAsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAYh4zG hAO3ESuEmc7+vuyLGJkOMB8GA1UdIwQYMBaAFFQeCmb+YPOqwCUCzvHkjmJ6YvdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODhEOS9CQTU5NTM1RTQy NTcxMUVBOEY4MzhBNDNDNEY5QUUwMi9WQjRLWnY1Zzg2ckFKUUxPOGVTT1lucGk5 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZCNEtadjVnODZyQUpRTE84ZVNPWW5waTkwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODhEOS9CQTU5NTM1RTQyNTcxMUVBOEY4MzhBNDNDNEY5QUUwMi9WQjRLWnY1Zzg2 ckFKUUxPOGVTT1lucGk5MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6D1rPD5VVpWPYuODI25Dt7aHQHu0S0Sg5U+9Qmf5LvVFrH+5ACBDK wvIVTu8sfHU3Cel2efh9/L4dhZDfB5/tpXH8F2MwAhLwzeuR4fouXZghnR06Y34F X3ywWNB8lsDr5prLzjCFHD9XxKvrT/AxIxf5Q/N1fCM9QJ/52WsQVXCDyXC15CVC jZquDH4YtM/lvc6scPsHWxRys49d3Fv2OGIrgeykayx160pDwYYR2eaMSIage81U uIpKJZU/WCkFf1Ns8zpdfwaK2aXgMxzDLU7YNgx5xB8rCS3k4uHANxqXxZqsf5mu bdjUXzQUXD3BFA0/GPDi+Syn8jgMS7id -----END CERTIFICATE-----Generated at Sat Aug 23 19:07:23 2025 by rpki-client