$ rpki-client -vvf rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft File: VKJNxo3yZA57s_8PNreO-IQAww8.mft (raw, json) Hash identifier: r/SNCz2AJu8lSJszAKpniI3xMY2QrbnURxZE4xAWY1k= Subject key identifier: 8C:F8:9C:3A:13:7C:8D:1E:02:E2:F2:80:99:B1:AC:BC:9D:1B:C0:72 Authority key identifier: 54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F Certificate issuer: /CN=A91362EB/serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft Manifest number: 19 Signing time: Sat 23 Aug 2025 08:10:13 +0000 Manifest this update: Sat 23 Aug 2025 08:10:12 +0000 Manifest next update: Sat 30 Aug 2025 08:10:12 +0000 Files and hashes: 1: VKJNxo3yZA57s_8PNreO-IQAww8.crl (hash: Liel+oQolEMQYIJyqobEqttTnDTkC1b+JkSsFVq9vNY=) 2: 0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa (hash: /uTCkM+7T3MX4CR0F7TNTBgsSs4yKxKjHNmhUVycHRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91362EB, serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F Validity Not Before: Aug 23 08:10:12 2025 GMT Not After : Aug 30 08:10:12 2025 GMT Subject: CN=68a97765-74b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:df:7e:75:1e:b4:b8:8c:fe:db:78:b0:80:7e: ce:b7:f8:b2:72:18:03:8c:8e:ca:8d:25:79:11:b2: 1c:8e:ff:76:76:28:46:1a:94:8d:82:07:fa:21:20: 60:a1:e3:64:81:54:66:cb:f0:e8:2e:3f:f6:41:ff: 31:2e:20:98:8b:af:72:72:9c:55:29:27:52:39:c7: b2:bf:0c:b1:67:93:6a:5e:d8:cd:e1:f1:ee:85:e6: 75:9f:99:fb:f6:e5:39:69:45:89:85:62:21:e5:4f: 4d:dd:26:7e:2a:0a:c5:0a:09:93:19:52:92:71:57: 05:99:0f:de:f7:75:3b:57:eb:e2:ed:7d:aa:b5:5a: a3:d3:34:88:a3:fe:45:9a:a3:58:0f:62:4d:8e:73: 1b:cc:91:d2:88:f9:ae:18:1f:ad:45:6a:12:9c:c4: 0a:d2:09:5f:b2:f8:5f:5d:f7:a2:2c:51:d9:a4:9a: 63:e3:ca:74:6c:61:c4:8b:ee:35:25:8a:49:e0:af: b7:ef:98:8f:76:cd:34:e7:75:30:2d:20:72:76:60: ad:d9:af:29:a3:55:7d:f5:ee:f9:a5:84:c2:b9:56: 7b:c5:4f:cb:55:22:ef:c4:7c:f3:e5:72:d5:d1:78: e4:5d:66:d3:7a:ff:ba:a8:2a:d6:c5:d9:23:a3:d7: 94:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F8:9C:3A:13:7C:8D:1E:02:E2:F2:80:99:B1:AC:BC:9D:1B:C0:72 X509v3 Authority Key Identifier: keyid:54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:10:06:ac:5f:24:dd:45:09:da:a0:e6:db:d2:79:dc:12:25: 52:81:45:7e:3f:00:86:a2:c4:14:da:85:6c:55:a1:22:69:a5: dd:b3:ec:91:16:45:d6:02:93:74:c1:2f:00:87:9f:f9:d3:11: ed:b1:38:1d:77:f7:6e:a6:ef:c3:cb:30:a6:a1:6f:70:43:65: 71:f5:92:7a:23:0a:2e:92:2b:ef:af:2d:12:da:ff:fe:0d:ef: 78:b1:b5:52:63:05:ca:14:b8:da:65:33:d7:53:2c:27:1a:fb: d1:79:d9:0a:b4:05:08:d1:b1:70:f8:e7:92:d6:da:a9:37:33: 49:29:33:a7:4d:26:17:77:f8:2a:16:d8:2e:52:5a:da:eb:0e: 1d:bd:45:60:15:f2:29:1e:22:51:c8:bd:12:c1:00:a5:df:93: 1a:7d:ac:8f:4e:61:a5:bd:af:7f:ab:50:bb:84:1f:80:63:50: 1f:e1:ea:5e:ad:c5:99:c3:32:dd:f3:d3:ef:01:38:f5:ca:f4: 71:fe:ba:c0:eb:90:0a:16:32:84:98:c5:d8:8c:c4:62:39:be: 4b:e0:57:00:8f:b2:c6:3c:16:db:46:ff:f7:61:cb:6d:d5:34: 72:fd:f6:d7:a8:47:88:12:da:04:27:08:31:6a:ac:fe:69:69: ef:0c:e6:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjJFQjExMC8GA1UEBRMoNTRBMjREQzY4REYyNjQwRTdCQjNGRjBGMzZCNzhFRjg4 NDAwQzMwRjAeFw0yNTA4MjMwODEwMTJaFw0yNTA4MzAwODEwMTJaMBgxFjAUBgNV BAMTDTY4YTk3NzY1LTc0YjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY3351HrS4jP7beLCAfs63+LJyGAOMjsqNJXkRshyO/3Z2KEYalI2CB/ohIGCh 42SBVGbL8OguP/ZB/zEuIJiLr3JynFUpJ1I5x7K/DLFnk2pe2M3h8e6F5nWfmfv2 5TlpRYmFYiHlT03dJn4qCsUKCZMZUpJxVwWZD973dTtX6+Ltfaq1WqPTNIij/kWa o1gPYk2OcxvMkdKI+a4YH61FahKcxArSCV+y+F9d96IsUdmkmmPjynRsYcSL7jUl ikngr7fvmI92zTTndTAtIHJ2YK3ZrymjVX317vmlhMK5VnvFT8tVIu/EfPPlctXR eORdZtN6/7qoKtbF2SOj15T7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjPicOhN8 jR4C4vKAmbGsvJ0bwHIwHwYDVR0jBBgwFoAUVKJNxo3yZA57s/8PNreO+IQAww8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MkVCL0RGNTQ1Q0M4NUM5 OTExRjBCNEJFMUUyMUM0RjlBRTAyL1ZLSk54bzN5WkE1N3NfOFBOcmVPLUlRQXd3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVktKTnhvM3laQTU3c184UE5yZU8tSVFBd3c4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 MkVCL0RGNTQ1Q0M4NUM5OTExRjBCNEJFMUUyMUM0RjlBRTAyL1ZLSk54bzN5WkE1 N3NfOFBOcmVPLUlRQXd3OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABUQBqxfJN1FCdqg5tvSedwSJVKBRX4/AIaixBTahWxVoSJppd2z7JEW RdYCk3TBLwCHn/nTEe2xOB13926m78PLMKahb3BDZXH1knojCi6SK++vLRLa//4N 73ixtVJjBcoUuNplM9dTLCca+9F52Qq0BQjRsXD455LW2qk3M0kpM6dNJhd3+CoW 2C5SWtrrDh29RWAV8ikeIlHIvRLBAKXfkxp9rI9OYaW9r3+rULuEH4BjUB/h6l6t xZnDMt3z0+8BOPXK9HH+usDrkAoWMoSYxdiMxGI5vkvgVwCPssY8FttG//dhy23V NHL99teoR4gS2gQnCDFqrP5pae8M5vA= -----END CERTIFICATE-----Generated at Sat Aug 23 20:27:36 2025 by rpki-client