$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft File: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft (raw, json) Hash identifier: YlkL+kGvO8iaMfGYUwQ/kHBjmLqB8RPx8TiHlp8ZNlU= Subject key identifier: E0:33:07:C1:CD:1F:45:AC:F5:CA:AF:B4:4C:98:C1:04:2C:87:FD:34 Authority key identifier: 56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29 Certificate issuer: /CN=A9136BD7/serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829 Certificate serial: 0628 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft Manifest number: 0623 Signing time: Fri 22 Aug 2025 22:56:46 +0000 Manifest this update: Fri 22 Aug 2025 22:56:46 +0000 Manifest next update: Fri 29 Aug 2025 22:56:46 +0000 Files and hashes: 1: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl (hash: DFn06v2CTlV/2oXVIn7fc2CrmdODAAnc4UeRBbETza4=) 2: E22BD636AC5011EBA37CCA28C4F9AE02.roa (hash: fdFSt8Mu6WuYnLA2fbE3V7b+qZmpKdHiBdsuXljNq4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1576 (0x628) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BD7, serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829 Validity Not Before: Aug 22 22:56:46 2025 GMT Not After : Aug 29 22:56:46 2025 GMT Subject: CN=68a8f5ae-4eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:74:60:06:f4:17:b3:a8:b3:da:3b:00:91:47: b4:a3:d6:12:e9:0d:11:b5:27:c7:46:bf:90:dc:4f: 4f:fe:86:88:47:6d:0c:e4:df:07:d1:82:e8:55:6e: d8:6e:a7:57:cc:7e:40:69:19:08:52:3d:30:4e:a4: af:14:ee:19:f0:af:cb:a2:d3:16:a8:69:a7:b7:5d: 85:8b:89:34:94:af:e4:e6:26:73:d1:75:7a:51:ab: 57:4f:b2:69:d1:58:2f:f7:e5:aa:41:6d:34:07:cb: 19:da:09:f7:aa:b2:77:75:c8:d7:5e:ec:6c:1d:94: df:e9:e3:91:a2:33:f9:b3:d5:91:f3:e8:f4:fe:a6: 89:45:51:c6:26:eb:a9:77:8b:93:2a:25:b2:d2:6f: 2f:8c:cd:79:a7:86:e3:60:fd:04:92:d9:58:91:17: 6d:80:f3:42:25:cf:49:54:b2:4f:b4:90:10:dc:0b: 8a:00:ee:33:21:db:67:22:db:89:99:92:bb:7e:9e: 5f:c3:87:8e:9b:a0:c1:6b:64:53:16:13:a1:d7:de: b5:ad:1c:2b:a0:c2:37:65:a1:ba:b0:37:b9:bb:be: 42:43:b2:1c:3f:02:6a:60:9e:a2:a6:96:16:60:b4: 04:fb:e1:8e:c8:52:36:90:18:9e:bc:ec:be:f6:1d: 63:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:33:07:C1:CD:1F:45:AC:F5:CA:AF:B4:4C:98:C1:04:2C:87:FD:34 X509v3 Authority Key Identifier: keyid:56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:01:cd:80:18:57:40:56:76:d6:18:86:40:3d:70:6e:f3:84: d3:c5:45:e4:2e:93:5b:d1:96:d0:5c:06:2a:29:30:4a:1b:17: 58:a2:70:52:e5:b9:5c:f7:16:4a:92:d0:41:c9:b2:c9:1f:e2: e1:b0:5f:0a:a1:bd:56:64:c9:ab:bb:21:60:e4:2e:a3:ed:08: 30:f0:ea:bf:85:ef:ec:1d:42:5e:31:e5:3f:89:dc:d2:be:b0: e3:09:5c:fe:97:af:3e:aa:d3:ce:1c:7e:85:f5:1b:07:84:75: 6e:55:68:cd:d5:2f:ea:62:6f:74:de:a1:d2:83:bf:e4:02:c3: 9f:4e:f8:ed:22:73:f9:6a:05:da:c6:e6:0c:81:c9:30:1c:5b: 4d:f8:ac:d1:a0:4b:8f:47:07:7a:ae:58:02:aa:69:38:19:fd: 74:ba:bd:2a:eb:e1:f5:2e:b2:2b:b6:74:e9:0c:6c:78:fc:99: 48:20:c8:14:10:47:8d:e6:37:e2:05:9e:2c:27:3f:91:47:01: 63:2c:3d:cf:32:ee:ac:d7:74:fe:8c:68:5a:99:bc:f8:69:50: c5:cb:27:4e:a0:7a:a9:64:99:84:7e:4e:47:ea:f5:81:b8:b9: 67:07:58:ca:6e:93:0a:5a:68:73:70:8d:a3:45:bf:52:85:59: da:da:f1:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRDcxMTAvBgNVBAUTKDU2QTAzMTY3RkFFMTJCMUJBMTRCQjg0NzRENDQyQjY3 NzBCQjk4MjkwHhcNMjUwODIyMjI1NjQ2WhcNMjUwODI5MjI1NjQ2WjAYMRYwFAYD VQQDEw02OGE4ZjVhZS00ZWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nRgBvQXs6iz2jsAkUe0o9YS6Q0RtSfHRr+Q3E9P/oaIR20M5N8H0YLoVW7Y bqdXzH5AaRkIUj0wTqSvFO4Z8K/LotMWqGmnt12Fi4k0lK/k5iZz0XV6UatXT7Jp 0Vgv9+WqQW00B8sZ2gn3qrJ3dcjXXuxsHZTf6eORojP5s9WR8+j0/qaJRVHGJuup d4uTKiWy0m8vjM15p4bjYP0EktlYkRdtgPNCJc9JVLJPtJAQ3AuKAO4zIdtnItuJ mZK7fp5fw4eOm6DBa2RTFhOh1961rRwroMI3ZaG6sDe5u75CQ7IcPwJqYJ6ippYW YLQE++GOyFI2kBievOy+9h1jMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAzB8HN H0Ws9cqvtEyYwQQsh/00MB8GA1UdIwQYMBaAFFagMWf64SsboUu4R01EK2dwu5gp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJENy9BNjUxQjQ3NEFD NEYxMUVCODNEMThFMjhDNEY5QUUwMi9WcUF4Wl9yaEt4dWhTN2hIVFVRclozQzdt Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZxQXhaX3JoS3h1aFM3aEhUVVFyWjNDN21Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkJENy9BNjUxQjQ3NEFDNEYxMUVCODNEMThFMjhDNEY5QUUwMi9WcUF4Wl9yaEt4 dWhTN2hIVFVRclozQzdtQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkAc2AGFdAVnbWGIZAPXBu84TTxUXkLpNb0ZbQXAYqKTBKGxdYonBS 5blc9xZKktBBybLJH+LhsF8Kob1WZMmruyFg5C6j7Qgw8Oq/he/sHUJeMeU/idzS vrDjCVz+l68+qtPOHH6F9RsHhHVuVWjN1S/qYm903qHSg7/kAsOfTvjtInP5agXa xuYMgckwHFtN+KzRoEuPRwd6rlgCqmk4Gf10ur0q6+H1LrIrtnTpDGx4/JlIIMgU EEeN5jfiBZ4sJz+RRwFjLD3PMu6s13T+jGhambz4aVDFyydOoHqpZJmEfk5H6vWB uLlnB1jKbpMKWmhzcI2jRb9ShVna2vFf -----END CERTIFICATE-----Generated at Sat Aug 23 15:46:57 2025 by rpki-client