$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft File: VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft (raw, json) Hash identifier: iurLLuNPgSyPiztf06bAnbbjDPfvGezQcPI3b3dQy14= Subject key identifier: 3C:07:34:EE:CD:8B:03:97:6C:0C:71:E2:98:2A:0B:24:DC:10:9E:4D Authority key identifier: 55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE Certificate issuer: /CN=A912FBD2/serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE Certificate serial: 043A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft Manifest number: 0436 Signing time: Sat 23 Aug 2025 00:31:28 +0000 Manifest this update: Sat 23 Aug 2025 00:31:28 +0000 Manifest next update: Sat 30 Aug 2025 00:31:28 +0000 Files and hashes: 1: VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl (hash: c2ojHOMtbWI9wHvrojunErx2AlgHuj9wBDvy8rJgvSs=) 2: 8A7E8D5C6F5511ECB5FAA20FC4F9AE02.roa (hash: +VP5NY/+4Z/8NphSit3psl/B3s8Rh2QC3KRRxPvmIp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1082 (0x43a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBD2, serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE Validity Not Before: Aug 23 00:31:28 2025 GMT Not After : Aug 30 00:31:28 2025 GMT Subject: CN=68a90be0-b8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:50:7f:e1:70:38:15:23:71:9b:21:4d:ba:81: 84:72:29:b4:1d:c3:a9:5c:5f:b6:2f:06:d4:0e:54: ba:d3:dd:87:23:6f:82:ec:f4:8e:af:d3:2d:ac:ca: e1:03:92:fc:d9:fe:e4:e6:59:09:27:2e:da:7b:92: 0f:04:10:60:c0:81:fa:38:b4:62:cc:54:e0:0a:2c: 1a:12:e9:9f:b7:31:2e:06:47:40:97:6a:71:96:16: e4:fa:5e:d3:68:10:7b:2d:f0:28:c9:28:bd:47:0a: f0:e4:d8:ed:a7:3d:18:cb:e7:0b:66:a2:f3:71:d0: 05:21:2b:b1:79:7b:6b:09:93:23:f7:91:e4:e8:94: a6:24:78:1b:ca:3f:cf:32:e5:50:b3:42:b9:51:69: f6:c0:5a:61:cc:1d:12:8e:e0:be:7e:48:a4:c1:02: 11:42:36:a3:87:6b:b0:34:0b:d5:f2:87:8b:80:c7: 02:24:d9:c5:ef:75:5a:62:f3:05:bd:9f:07:ca:fe: 79:d6:b3:cb:7e:37:cd:24:fe:2d:51:09:4d:8b:c4: 79:01:b6:2e:c3:35:65:f1:77:7e:a4:8d:14:5b:9b: ad:7a:29:f7:9e:ac:f0:c5:a2:9f:b1:56:5c:84:3f: 2e:23:78:ac:5f:0b:2d:da:02:14:14:03:77:c8:1d: 5a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:07:34:EE:CD:8B:03:97:6C:0C:71:E2:98:2A:0B:24:DC:10:9E:4D X509v3 Authority Key Identifier: keyid:55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:34:17:7f:5a:18:82:c6:9e:91:2f:94:fe:cc:94:27:a5:50: b5:99:0d:64:53:5a:0a:1c:84:b5:6f:4d:a1:d1:c9:47:33:3e: c4:88:f8:c6:e2:98:66:58:d2:98:4a:18:07:f0:19:af:0f:d5: 8a:f4:ca:09:af:fa:c8:6f:8b:24:ff:5f:17:59:6e:1c:b1:83: 3e:a7:34:a6:a8:fb:e5:e6:a4:8d:92:a3:7f:d3:e2:58:81:18: 54:56:37:0b:13:dd:5c:0e:f7:f9:75:a7:41:de:fb:a3:a3:6f: f0:d0:5a:90:59:31:a4:d5:62:3b:b6:39:92:21:48:71:4f:ad: 21:77:fd:0c:9b:4e:2e:ab:97:88:7e:29:c8:8e:38:60:49:9c: 1c:fc:bb:21:7e:2d:6a:f8:90:df:a7:18:b1:5c:24:29:81:07: ea:62:93:b7:95:1b:22:30:68:0c:43:1a:50:77:78:1b:0f:e4: cf:b5:e6:95:04:b6:70:82:97:5d:8c:61:d0:42:fc:0f:09:e8: 81:64:e8:5c:92:02:93:0d:74:23:3c:f3:60:ec:47:3f:80:1b: 37:86:14:db:66:e4:e0:c0:0c:06:fb:12:5a:b0:ab:57:01:4d: 10:05:ca:30:79:14:0b:6c:67:66:31:32:2e:49:ce:06:e1:3e: 28:72:dd:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCRDIxMTAvBgNVBAUTKDU1RTQ4NTE4OEM1QzlEMkUyNEM4MzQ1Qzk3QkMzNDYy NzIxQzk4Q0UwHhcNMjUwODIzMDAzMTI4WhcNMjUwODMwMDAzMTI4WjAYMRYwFAYD VQQDEw02OGE5MGJlMC1iOGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFB/4XA4FSNxmyFNuoGEcim0HcOpXF+2LwbUDlS6092HI2+C7PSOr9MtrMrh A5L82f7k5lkJJy7ae5IPBBBgwIH6OLRizFTgCiwaEumftzEuBkdAl2pxlhbk+l7T aBB7LfAoySi9Rwrw5Njtpz0Yy+cLZqLzcdAFISuxeXtrCZMj95Hk6JSmJHgbyj/P MuVQs0K5UWn2wFphzB0SjuC+fkikwQIRQjajh2uwNAvV8oeLgMcCJNnF73VaYvMF vZ8Hyv551rPLfjfNJP4tUQlNi8R5AbYuwzVl8Xd+pI0UW5utein3nqzwxaKfsVZc hD8uI3isXwst2gIUFAN3yB1aNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwHNO7N iwOXbAxx4pgqCyTcEJ5NMB8GA1UdIwQYMBaAFFXkhRiMXJ0uJMg0XJe8NGJyHJjO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJEMi82RDc0OTc4QzZG NTExMUVDOTY1MURBMDlDNEY5QUUwMi9WZVNGR0l4Y25TNGt5RFJjbDd3MFluSWNt TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZlU0ZHSXhjblM0a3lEUmNsN3cwWW5JY21NNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJEMi82RDc0OTc4QzZGNTExMUVDOTY1MURBMDlDNEY5QUUwMi9WZVNGR0l4Y25T NGt5RFJjbDd3MFluSWNtTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUNBd/WhiCxp6RL5T+zJQnpVC1mQ1kU1oKHIS1b02h0clHMz7EiPjG 4phmWNKYShgH8BmvD9WK9MoJr/rIb4sk/18XWW4csYM+pzSmqPvl5qSNkqN/0+JY gRhUVjcLE91cDvf5dadB3vujo2/w0FqQWTGk1WI7tjmSIUhxT60hd/0Mm04uq5eI finIjjhgSZwc/Lshfi1q+JDfpxixXCQpgQfqYpO3lRsiMGgMQxpQd3gbD+TPteaV BLZwgpddjGHQQvwPCeiBZOhckgKTDXQjPPNg7Ec/gBs3hhTbZuTgwAwG+xJasKtX AU0QBcoweRQLbGdmMTIuSc4G4T4oct0k -----END CERTIFICATE-----Generated at Sat Aug 23 20:37:37 2025 by rpki-client