$ rpki-client -vvf rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft File: VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft (raw, json) Hash identifier: CMfvR88TaNsPSkb0tGmIeq+YZMqv0PyB1vb/TukURnU= Subject key identifier: B8:AF:42:33:C2:5B:44:5D:F9:F4:4B:CD:9B:BD:AA:49:E5:EF:A7:79 Authority key identifier: 56:D5:24:19:D5:6A:AC:DF:7D:00:5B:A1:5D:9D:DB:8F:14:2E:3A:D0 Certificate issuer: /CN=A912F592/serialNumber=56D52419D56AACDF7D005BA15D9DDB8F142E3AD0 Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft Manifest number: 0218 Signing time: Sat 23 Aug 2025 02:12:59 +0000 Manifest this update: Sat 23 Aug 2025 02:12:59 +0000 Manifest next update: Sat 30 Aug 2025 02:12:59 +0000 Files and hashes: 1: VtUkGdVqrN99AFuhXZ3bjxQuOtA.crl (hash: 7gBzrdmIwiCG6XDnH1PwColi9W2Fn2s8LtYfQTRZ4JI=) 2: 20BFA0B64A4911EDACB7AB0CC4F9AE02.roa (hash: fM0f1U3uv8elOOSoakvi5zas2tW7Yg5J98LgfW+bqBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.crl rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:12:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F592, serialNumber=56D52419D56AACDF7D005BA15D9DDB8F142E3AD0 Validity Not Before: Aug 23 02:12:59 2025 GMT Not After : Aug 30 02:12:59 2025 GMT Subject: CN=68a923ab-98e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:21:e2:f8:ef:7a:59:c4:f4:47:96:fb:10:0e: c2:e8:58:5a:cd:00:1a:46:26:6b:a0:a2:9e:2c:07: fb:ee:b0:4a:c2:b2:09:2e:e3:8e:2f:ba:0b:84:9d: 00:7a:ac:a5:31:a3:1c:d4:99:97:b4:17:7a:78:1e: bd:0c:44:26:53:7c:27:8d:ad:ed:e0:0f:9e:4c:a3: b1:c5:7f:36:4e:4e:fa:8f:2a:3a:38:b0:ca:17:f5: c8:41:8d:ce:99:44:3e:8b:b5:87:00:75:e8:56:4e: fc:76:f2:2b:b9:da:2e:0a:15:b1:9c:9c:e8:9c:81: 19:45:13:28:69:83:64:83:00:6e:ee:96:ee:6c:5c: 7a:95:c9:3c:cd:82:04:07:73:98:a1:57:b1:a0:9e: 27:80:57:c4:8d:2f:61:c6:2c:33:57:ad:19:d9:0f: 50:ac:51:75:78:23:ef:6c:13:19:2b:f1:eb:2c:96: 32:24:86:89:86:c9:ac:70:31:dc:5d:7e:c1:fd:04: e1:53:c2:86:83:83:43:a3:0d:8b:7c:c5:de:d6:70: f9:20:6e:39:82:88:f0:97:94:2b:7f:2d:f7:20:21: 03:63:84:47:bc:7a:d9:ed:83:f8:b9:09:28:03:f0: 54:7e:a7:b8:a2:83:9f:78:3d:89:3c:82:59:82:1f: 42:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AF:42:33:C2:5B:44:5D:F9:F4:4B:CD:9B:BD:AA:49:E5:EF:A7:79 X509v3 Authority Key Identifier: keyid:56:D5:24:19:D5:6A:AC:DF:7D:00:5B:A1:5D:9D:DB:8F:14:2E:3A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:7c:bb:b5:b8:36:ee:7c:7d:96:82:e7:0d:56:5e:4f:5c:c9: f0:d7:39:31:86:99:90:2e:48:23:dd:00:39:b2:56:f5:57:c0: df:58:34:8c:55:cb:31:3d:db:e6:45:da:2c:33:c1:fe:de:e9: aa:44:b3:0e:b8:9a:a1:ea:6e:75:b1:21:af:f9:17:7a:22:c3: a2:2b:56:18:31:f7:ae:65:eb:32:eb:46:31:2e:c2:c5:bb:07: 5d:f6:39:bc:9f:67:81:59:74:30:17:96:bd:7a:a3:d5:e3:fa: bb:67:22:f1:22:51:b2:f3:1e:1b:f7:61:53:cb:75:99:ca:1d: 3d:02:2c:df:0d:ed:43:59:7c:2d:17:58:ea:8c:88:78:c8:3c: 7e:57:d5:81:ca:79:53:4b:61:92:04:4a:e2:cf:39:fc:58:4a: 73:ac:27:fc:62:80:bb:a8:69:a5:64:b7:76:93:89:7c:88:f3: a7:d4:8d:33:b7:9e:14:80:74:b6:1b:bb:3f:e6:79:c6:4d:ee: 71:04:22:0f:4b:18:2e:6a:6e:99:37:7e:d3:01:c5:20:7c:70: be:d3:42:83:6a:3f:9a:a4:d0:69:e4:f4:68:cc:c5:aa:38:04: db:e2:6c:0c:6e:ae:cc:93:c7:e3:22:47:d0:fa:b6:4c:2b:59: 03:6b:28:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1OTIxMTAvBgNVBAUTKDU2RDUyNDE5RDU2QUFDREY3RDAwNUJBMTVEOUREQjhG MTQyRTNBRDAwHhcNMjUwODIzMDIxMjU5WhcNMjUwODMwMDIxMjU5WjAYMRYwFAYD VQQDEw02OGE5MjNhYi05OGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviHi+O96WcT0R5b7EA7C6FhazQAaRiZroKKeLAf77rBKwrIJLuOOL7oLhJ0A eqylMaMc1JmXtBd6eB69DEQmU3wnja3t4A+eTKOxxX82Tk76jyo6OLDKF/XIQY3O mUQ+i7WHAHXoVk78dvIrudouChWxnJzonIEZRRMoaYNkgwBu7pbubFx6lck8zYIE B3OYoVexoJ4ngFfEjS9hxiwzV60Z2Q9QrFF1eCPvbBMZK/HrLJYyJIaJhsmscDHc XX7B/QThU8KGg4NDow2LfMXe1nD5IG45gojwl5Qrfy33ICEDY4RHvHrZ7YP4uQko A/BUfqe4ooOfeD2JPIJZgh9CSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLivQjPC W0Rd+fRLzZu9qknl76d5MB8GA1UdIwQYMBaAFFbVJBnVaqzffQBboV2d248ULjrQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjU5Mi9GQTU5MTJERTRB NDUxMUVEOTUzQjQxODZDNEY5QUUwMi9WdFVrR2RWcXJOOTlBRnVoWFozYmp4UXVP dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z0VWtHZFZxck45OUFGdWhYWjNianhRdU90QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjU5Mi9GQTU5MTJERTRBNDUxMUVEOTUzQjQxODZDNEY5QUUwMi9WdFVrR2RWcXJO OTlBRnVoWFozYmp4UXVPdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEfLu1uDbufH2WgucNVl5PXMnw1zkxhpmQLkgj3QA5slb1V8DfWDSM VcsxPdvmRdosM8H+3umqRLMOuJqh6m51sSGv+Rd6IsOiK1YYMfeuZesy60YxLsLF uwdd9jm8n2eBWXQwF5a9eqPV4/q7ZyLxIlGy8x4b92FTy3WZyh09AizfDe1DWXwt F1jqjIh4yDx+V9WBynlTS2GSBErizzn8WEpzrCf8YoC7qGmlZLd2k4l8iPOn1I0z t54UgHS2G7s/5nnGTe5xBCIPSxguam6ZN37TAcUgfHC+00KDaj+apNBp5PRozMWq OATb4mwMbq7Mk8fjIkfQ+rZMK1kDaygo -----END CERTIFICATE-----Generated at Sun Aug 24 00:51:34 2025 by rpki-client