$ rpki-client -vvf rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft File: vIYHvM59W9TtuRjN4bc0W4HmrR0.mft (raw, json) Hash identifier: tn230dTJRrsNEOLJKKpvsWDQ0jJ8+3glVoQGsSNBVos= Subject key identifier: F2:94:B9:3C:2E:13:A8:73:2B:3A:63:2D:A3:74:4B:AE:4E:E4:95:FF Authority key identifier: BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D Certificate issuer: /CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D Certificate serial: 0C93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft Manifest number: 0C8B Signing time: Sat 23 Aug 2025 06:22:18 +0000 Manifest this update: Sat 23 Aug 2025 06:22:18 +0000 Manifest next update: Sat 30 Aug 2025 06:22:18 +0000 Files and hashes: 1: vIYHvM59W9TtuRjN4bc0W4HmrR0.crl (hash: FVK0M8/loDKCXHg39HhxFH64f3OroLr8f9JlUykOjMU=) 2: 8325B5147FE911F09A568E85C4F9AE02.roa (hash: XqdQSfz9/Zl7eYUBAr06CP3dhexiFqvZGJN1XSM9VAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3219 (0xc93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B489, serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D Validity Not Before: Aug 23 06:22:18 2025 GMT Not After : Aug 30 06:22:18 2025 GMT Subject: CN=68a95e1a-1dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:84:f5:3b:03:f6:33:f7:7e:d5:54:36:1d:34: f7:41:0f:e8:5f:8a:e0:b8:dc:4e:dd:d2:48:a6:34: c5:30:cd:63:86:bd:68:11:80:85:35:04:db:64:5e: c8:75:42:54:e3:48:7b:04:b2:96:1c:b0:3a:7d:87: 68:2a:b8:71:ec:86:41:d4:78:68:6a:40:9a:29:e1: 66:35:9c:03:ba:f0:d1:7e:41:25:ee:6b:dd:b5:80: c0:fe:f1:9b:8b:02:b6:fe:bd:75:aa:93:a5:43:ca: 86:6c:7d:b4:bd:7c:e1:3f:45:14:5b:e0:00:cb:d6: ff:38:92:c2:06:fe:3b:3d:82:98:27:79:af:1a:d6: 91:c8:43:e7:05:d1:ce:18:f8:9a:f4:a4:5c:cd:e1: 5d:eb:a6:62:ee:14:ad:c9:aa:34:82:ce:97:d1:e3: 38:f8:74:08:b2:69:09:7a:82:47:0d:27:67:a8:5d: 2e:29:41:5e:73:ab:95:33:e4:cc:29:ea:84:1d:4b: 79:75:ec:aa:f0:0e:9a:00:e9:77:2c:29:3a:38:c0: 14:71:df:c8:95:b2:7f:43:3a:60:5b:7a:f5:dd:2c: 1b:da:93:be:62:fa:c9:14:e0:72:04:67:bb:d9:72: 21:8c:ab:27:99:49:10:92:10:98:e3:ee:16:41:7d: 9d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:94:B9:3C:2E:13:A8:73:2B:3A:63:2D:A3:74:4B:AE:4E:E4:95:FF X509v3 Authority Key Identifier: keyid:BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:5b:5b:ad:a9:a1:29:0e:bd:0a:61:75:fd:b1:c7:82:3f:fe: 5c:44:21:b3:b8:29:ec:91:a1:26:bd:ba:d1:a3:04:7f:1a:96: 37:6a:64:7d:bb:fa:14:7c:77:fa:af:51:fb:3a:d5:12:dd:97: d7:1f:d8:be:50:04:29:b4:0c:5f:45:29:56:cb:a8:b5:c9:86: fa:c8:82:f4:b4:dc:fd:84:8b:7f:73:83:7f:5c:03:c5:68:b5: 84:ba:2e:d6:cc:6d:7b:87:49:0c:a8:2d:3c:43:0a:ce:20:6c: 4b:b5:f1:50:58:9b:81:ec:53:36:2d:9f:ac:f8:ab:8a:05:aa: 0f:6c:fb:1c:68:0d:15:91:ef:14:9e:16:a0:a2:01:c6:69:c5: 43:97:6d:c3:8b:d7:37:8e:a9:64:52:00:e8:bb:6c:e1:a7:24: 22:f5:71:4f:6e:d6:9c:7e:ee:db:38:d0:75:66:fb:37:89:67: b2:3a:9d:f8:0e:01:af:d5:27:11:f2:dc:f5:10:bf:31:0e:c0: 22:4e:de:4e:e3:e2:63:8b:e8:5c:04:29:b7:a3:a4:4b:5a:1a: 13:74:cc:7c:4e:6a:95:ef:fc:ad:06:dc:39:a3:76:08:aa:b5: 6b:65:3a:75:9c:14:3a:a9:1f:e7:f4:81:21:10:9b:62:8e:09: 58:40:fe:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0ODkxMTAvBgNVBAUTKEJDODYwN0JDQ0U3RDVCRDRFREI5MThDREUxQjczNDVC ODFFNkFEMUQwHhcNMjUwODIzMDYyMjE4WhcNMjUwODMwMDYyMjE4WjAYMRYwFAYD VQQDEw02OGE5NWUxYS0xZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4T1OwP2M/d+1VQ2HTT3QQ/oX4rguNxO3dJIpjTFMM1jhr1oEYCFNQTbZF7I dUJU40h7BLKWHLA6fYdoKrhx7IZB1HhoakCaKeFmNZwDuvDRfkEl7mvdtYDA/vGb iwK2/r11qpOlQ8qGbH20vXzhP0UUW+AAy9b/OJLCBv47PYKYJ3mvGtaRyEPnBdHO GPia9KRczeFd66Zi7hStyao0gs6X0eM4+HQIsmkJeoJHDSdnqF0uKUFec6uVM+TM KeqEHUt5deyq8A6aAOl3LCk6OMAUcd/IlbJ/QzpgW3r13Swb2pO+YvrJFOByBGe7 2XIhjKsnmUkQkhCY4+4WQX2dEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKUuTwu E6hzKzpjLaN0S65O5JX/MB8GA1UdIwQYMBaAFLyGB7zOfVvU7bkYzeG3NFuB5q0d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjQ4OS8wQjM4NzlDQUZG OUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5VHR1UmpONGJjMFc0SG1y UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJWUh2TTU5VzlUdHVSak40YmMwVzRIbXJSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjQ4OS8wQjM4NzlDQUZGOUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5 VHR1UmpONGJjMFc0SG1yUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByW1utqaEpDr0KYXX9sceCP/5cRCGzuCnskaEmvbrRowR/GpY3amR9 u/oUfHf6r1H7OtUS3ZfXH9i+UAQptAxfRSlWy6i1yYb6yIL0tNz9hIt/c4N/XAPF aLWEui7WzG17h0kMqC08QwrOIGxLtfFQWJuB7FM2LZ+s+KuKBaoPbPscaA0Vke8U nhagogHGacVDl23Di9c3jqlkUgDou2zhpyQi9XFPbtacfu7bONB1Zvs3iWeyOp34 DgGv1ScR8tz1EL8xDsAiTt5O4+Jji+hcBCm3o6RLWhoTdMx8TmqV7/ytBtw5o3YI qrVrZTp1nBQ6qR/n9IEhEJtijglYQP4X -----END CERTIFICATE-----Generated at Sat Aug 23 19:34:46 2025 by rpki-client