$ rpki-client -vvf rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft File: vIlHKy_1NJ5Maoqwmc745o3XuZU.mft (raw, json) Hash identifier: EcKyGPwoWKvE6/wPoimBN7vRXjGDM1F9bulPPqLj19I= Subject key identifier: 8D:81:1F:0B:03:D9:FC:54:E1:CC:73:DC:ED:76:C5:B8:47:03:09:90 Authority key identifier: BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 Certificate issuer: /CN=A91495CF/serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Certificate serial: 0813 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft Manifest number: 080D Signing time: Fri 22 Aug 2025 21:00:53 +0000 Manifest this update: Fri 22 Aug 2025 21:00:52 +0000 Manifest next update: Fri 29 Aug 2025 21:00:52 +0000 Files and hashes: 1: vIlHKy_1NJ5Maoqwmc745o3XuZU.crl (hash: zEBDKBpheIlelYwp+vyMU1MMh7dv0rvBj8geR8EBHN4=) 2: 27DCF5D6EBAC11EAA7A0FB1FC4F9AE02.roa (hash: g+6S4S2dxNtg0BGxl2vF4MpJIveeS58PPReJPs/GBY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2067 (0x813) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91495CF, serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Validity Not Before: Aug 22 21:00:52 2025 GMT Not After : Aug 29 21:00:52 2025 GMT Subject: CN=68a8da85-5d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3b:e3:42:f0:ed:b6:6d:0a:ae:b7:7b:76:81: e8:be:fe:76:56:fe:e0:d6:1a:53:b1:e6:b2:d0:57: 8d:5a:c8:f5:91:6f:35:cc:74:a7:ad:5a:25:1e:e8: cf:cc:b8:1f:de:5d:46:34:c9:e2:2e:6d:16:f1:2c: 7c:b2:e9:3c:c9:50:68:23:96:be:cd:dd:80:59:7b: 8f:98:69:b1:10:9d:72:eb:38:b4:9d:ef:ef:60:f5: 35:36:04:3e:0d:33:c9:a4:54:d3:fe:cf:38:9c:5c: d1:f8:6c:22:a9:84:60:ed:17:71:ae:bf:2c:d6:95: b9:b6:1e:07:80:f8:89:72:c9:4f:d5:ef:98:f8:84: 97:b3:db:7f:fb:c4:ee:44:7b:8b:c8:2f:a1:79:d7: 91:0a:ed:fb:37:9d:3d:de:0e:ae:07:0d:e1:e3:1a: 49:b0:20:88:2a:4f:2f:fa:fe:6d:06:e8:6d:f6:b0: 81:e9:3f:cc:05:b8:5b:c3:6c:5b:aa:4d:eb:19:8d: ae:1a:13:f5:42:c6:f2:15:19:51:94:7f:45:96:6e: 32:6a:ff:39:65:48:97:34:a2:ca:67:a6:54:8d:11: 71:3a:d2:4e:ce:ff:c2:6c:af:63:79:ae:46:58:f8: d0:fe:7b:f0:db:b4:8d:b7:32:5a:7d:34:f6:e2:ca: 03:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:81:1F:0B:03:D9:FC:54:E1:CC:73:DC:ED:76:C5:B8:47:03:09:90 X509v3 Authority Key Identifier: keyid:BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:63:38:86:d0:ce:ce:e1:df:00:98:42:85:8f:1f:df:7e:ce: 04:2e:e0:3e:66:80:d2:dc:03:10:42:b0:57:83:73:29:0a:67: e0:e2:76:a5:8f:10:dd:05:20:e5:0b:41:9a:b8:29:79:b3:9d: f4:86:04:ee:da:9e:a8:c4:ac:40:ec:7e:46:00:91:db:ac:e5: bd:88:30:06:a9:b0:d4:56:ad:c5:9c:d2:b2:b7:3c:42:46:f3: 27:58:2d:00:f4:da:5c:2f:bb:73:03:32:31:b9:d3:ba:bf:f0: a6:b7:9d:31:4a:a1:2e:9c:b9:fd:bf:a3:fb:c6:2e:fc:af:e2: 4b:bb:dd:8a:1b:16:a9:8a:08:34:91:4c:20:c3:b5:52:fb:58: d0:48:e9:3a:6c:ef:c6:fe:5b:26:46:52:4d:40:1d:3c:2f:5a: 2a:73:72:31:d9:30:f1:f6:cd:33:fc:5a:5a:2b:4d:e1:61:a2: 87:46:d8:8a:65:37:58:fe:05:5d:fa:82:bd:76:ed:9b:9d:25: f5:e9:77:26:7c:63:2e:9e:07:93:d3:c2:18:5f:d5:9e:f5:8a: 80:05:36:ec:6c:4c:60:34:2d:6d:fa:55:a2:b4:32:53:a1:bf: 41:ee:b8:1b:23:1e:a7:a0:84:80:1d:97:b3:35:e0:06:fb:b4: aa:2d:31:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk1Q0YxMTAvBgNVBAUTKEJDODk0NzJCMkZGNTM0OUU0QzZBOEFCMDk5Q0VGOEU2 OEREN0I5OTUwHhcNMjUwODIyMjEwMDUyWhcNMjUwODI5MjEwMDUyWjAYMRYwFAYD VQQDEw02OGE4ZGE4NS01ZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2DvjQvDttm0Krrd7doHovv52Vv7g1hpTseay0FeNWsj1kW81zHSnrVolHujP zLgf3l1GNMniLm0W8Sx8suk8yVBoI5a+zd2AWXuPmGmxEJ1y6zi0ne/vYPU1NgQ+ DTPJpFTT/s84nFzR+GwiqYRg7Rdxrr8s1pW5th4HgPiJcslP1e+Y+ISXs9t/+8Tu RHuLyC+hedeRCu37N5093g6uBw3h4xpJsCCIKk8v+v5tBuht9rCB6T/MBbhbw2xb qk3rGY2uGhP1QsbyFRlRlH9Flm4yav85ZUiXNKLKZ6ZUjRFxOtJOzv/CbK9jea5G WPjQ/nvw27SNtzJafTT24soDKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2BHwsD 2fxU4cxz3O12xbhHAwmQMB8GA1UdIwQYMBaAFLyJRysv9TSeTGqKsJnO+OaN17mV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTVDRi8yQTUxMDY5Q0VC QUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5KNU1hb3F3bWM3NDVvM1h1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJbEhLeV8xTko1TWFvcXdtYzc0NW8zWHVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTVDRi8yQTUxMDY5Q0VCQUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5K NU1hb3F3bWM3NDVvM1h1WlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXYziG0M7O4d8AmEKFjx/ffs4ELuA+ZoDS3AMQQrBXg3MpCmfg4nal jxDdBSDlC0GauCl5s530hgTu2p6oxKxA7H5GAJHbrOW9iDAGqbDUVq3FnNKytzxC RvMnWC0A9NpcL7tzAzIxudO6v/Cmt50xSqEunLn9v6P7xi78r+JLu92KGxapigg0 kUwgw7VS+1jQSOk6bO/G/lsmRlJNQB08L1oqc3Ix2TDx9s0z/FpaK03hYaKHRtiK ZTdY/gVd+oK9du2bnSX16XcmfGMungeT08IYX9We9YqABTbsbExgNC1t+lWitDJT ob9B7rgbIx6noISAHZezNeAG+7SqLTFI -----END CERTIFICATE-----Generated at Sun Aug 24 00:04:44 2025 by rpki-client