$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft File: VJnONj3wXJSTIjSIKXmbEO_x05I.mft (raw, json) Hash identifier: 3Hv79M91UCeHbEkUse4iZMd8bFPrs4Mi6ne70wLwTnY= Subject key identifier: 1E:3C:D7:3E:C4:22:08:AF:3F:72:3C:6E:D1:99:D4:42:02:33:BA:C7 Authority key identifier: 54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92 Certificate issuer: /CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392 Certificate serial: 02EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft Manifest number: 02DE Signing time: Sat 23 Aug 2025 01:36:10 +0000 Manifest this update: Sat 23 Aug 2025 01:36:09 +0000 Manifest next update: Sat 30 Aug 2025 01:36:09 +0000 Files and hashes: 1: VJnONj3wXJSTIjSIKXmbEO_x05I.crl (hash: SYB75Wks8pMZifrLltHiG/PRKQzU7torf61e2l65mi0=) 2: 8698FF1E541811F0A468570BC4F9AE02.roa (hash: lt0lWEwyc0zSVnjcDugVvrMstEgK43kjh39ECWh3xXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 747 (0x2eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DB83, serialNumber=5499CE363DF05C949322348829799B10EFF1D392 Validity Not Before: Aug 23 01:36:09 2025 GMT Not After : Aug 30 01:36:09 2025 GMT Subject: CN=68a91b0a-25aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d4:94:0a:f6:a9:96:fc:72:08:c6:b1:76:e6: 72:f9:4e:fd:00:d7:68:a9:b9:f2:34:be:26:87:7c: 5a:56:44:ab:b0:5d:38:5e:2b:ed:9a:78:b9:14:0e: a8:e6:98:14:be:82:b3:02:2f:bf:88:c3:d6:3c:84: 4f:2b:3c:05:27:f1:28:8e:9e:f8:24:02:71:ad:5b: 9f:65:eb:c4:cf:09:b4:2e:13:6e:34:83:77:cf:22: 8e:ce:47:1e:68:cb:12:c3:9b:e9:d3:26:37:9e:99: 92:53:8e:4b:93:9e:c1:78:a9:5d:04:cd:d1:ce:45: 04:78:5f:4b:f3:c6:1d:14:80:0f:27:2d:2a:c7:6f: 31:7b:ed:d7:e1:65:0a:a5:4e:91:6a:b9:4b:51:e0: 56:8c:e2:a1:43:3c:65:15:d8:32:76:61:ce:eb:13: f2:3b:df:b7:57:b9:eb:f1:21:5a:dd:e0:64:00:b6: 9a:26:d1:98:9f:1a:6d:ad:94:d3:db:fc:58:5c:db: fd:8e:bd:5d:ce:dc:d4:7d:24:9c:87:3e:6a:0d:d4: 4b:ed:ad:70:86:8a:c9:3a:fe:43:28:80:5e:89:6b: 2f:3b:a3:da:16:84:8c:a3:b5:26:7d:49:92:f1:72: a8:31:09:77:5f:f7:34:5d:d1:d7:c6:ad:13:a3:43: c1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3C:D7:3E:C4:22:08:AF:3F:72:3C:6E:D1:99:D4:42:02:33:BA:C7 X509v3 Authority Key Identifier: keyid:54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:47:eb:3f:fd:8b:0d:33:14:bf:ce:c6:7a:cc:0c:94:c4:c6: 91:d6:9a:cf:93:16:62:26:bd:50:03:26:bb:6c:6f:04:ef:4a: c6:8e:39:6d:da:c5:c6:df:87:30:b6:e3:0a:af:d3:bf:22:1b: 9b:6f:8a:10:34:f9:82:d8:ae:ef:5d:68:39:10:9d:ce:e6:38: d6:51:3d:f4:b9:3c:ef:d4:bd:11:4f:94:4a:54:da:5a:8b:5e: 4d:bb:c3:83:48:63:80:9d:40:e3:27:de:4d:53:6c:bc:b3:d4: 6a:b1:76:07:8a:9e:f5:3f:31:7b:e0:ab:6f:68:63:c2:cd:d1: c1:0f:ba:99:65:0e:58:ca:72:71:c2:95:b0:1d:b4:97:88:71: b2:fb:27:7a:b7:e0:d1:d4:40:b6:56:2e:a5:08:4c:f7:36:3d: 96:dd:6c:54:7f:08:1c:8c:69:70:39:a9:64:42:ba:fb:a4:47: f9:03:07:e4:10:9a:6b:df:3c:08:66:5b:02:e1:f4:88:78:c5: 81:56:84:b8:e7:fd:0f:18:dc:e3:d6:79:b6:b0:7d:c5:67:8d: 48:99:04:84:f3:fe:d2:a1:49:cc:34:85:e7:9d:e3:75:78:79: 79:ae:10:61:02:06:2f:08:5e:86:ab:66:c5:86:54:10:37:87: 7b:2d:b1:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRCODMxMTAvBgNVBAUTKDU0OTlDRTM2M0RGMDVDOTQ5MzIyMzQ4ODI5Nzk5QjEw RUZGMUQzOTIwHhcNMjUwODIzMDEzNjA5WhcNMjUwODMwMDEzNjA5WjAYMRYwFAYD VQQDEw02OGE5MWIwYS0yNWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9SUCvaplvxyCMaxduZy+U79ANdoqbnyNL4mh3xaVkSrsF04Xivtmni5FA6o 5pgUvoKzAi+/iMPWPIRPKzwFJ/Eojp74JAJxrVufZevEzwm0LhNuNIN3zyKOzkce aMsSw5vp0yY3npmSU45Lk57BeKldBM3RzkUEeF9L88YdFIAPJy0qx28xe+3X4WUK pU6RarlLUeBWjOKhQzxlFdgydmHO6xPyO9+3V7nr8SFa3eBkALaaJtGYnxptrZTT 2/xYXNv9jr1dztzUfSSchz5qDdRL7a1whorJOv5DKIBeiWsvO6PaFoSMo7UmfUmS 8XKoMQl3X/c0XdHXxq0To0PBSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB481z7E IgivP3I8btGZ1EICM7rHMB8GA1UdIwQYMBaAFFSZzjY98FyUkyI0iCl5mxDv8dOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI4My8xRUZFMjkyQ0ZC NUQxMUVDQkI2MTBDODVDNEY5QUUwMi9WSm5PTmozd1hKU1RJalNJS1htYkVPX3gw NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZKbk9OajN3WEpTVElqU0lLWG1iRU9feDA1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REI4My8xRUZFMjkyQ0ZCNUQxMUVDQkI2MTBDODVDNEY5QUUwMi9WSm5PTmozd1hK U1RJalNJS1htYkVPX3gwNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgR+s//YsNMxS/zsZ6zAyUxMaR1prPkxZiJr1QAya7bG8E70rGjjlt 2sXG34cwtuMKr9O/Ihubb4oQNPmC2K7vXWg5EJ3O5jjWUT30uTzv1L0RT5RKVNpa i15Nu8ODSGOAnUDjJ95NU2y8s9RqsXYHip71PzF74KtvaGPCzdHBD7qZZQ5YynJx wpWwHbSXiHGy+yd6t+DR1EC2Vi6lCEz3Nj2W3WxUfwgcjGlwOalkQrr7pEf5Awfk EJpr3zwIZlsC4fSIeMWBVoS45/0PGNzj1nm2sH3FZ41ImQSE8/7SoUnMNIXnneN1 eHl5rhBhAgYvCF6Gq2bFhlQQN4d7LbH7 -----END CERTIFICATE-----Generated at Sat Aug 23 18:59:41 2025 by rpki-client