$ rpki-client -vvf rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft File: VU0O_yINZrbppAkPDcy6milc3bU.mft (raw, json) Hash identifier: 1x48oe8IC1rrUHyE/4IarjrXkXmF5foL+i70DXXX8y8= Subject key identifier: AD:8F:F1:AD:4A:81:A0:F8:52:CB:FC:1C:58:65:21:36:F6:0C:D3:49 Authority key identifier: 55:4D:0E:FF:22:0D:66:B6:E9:A4:09:0F:0D:CC:BA:9A:29:5C:DD:B5 Certificate issuer: /CN=A914A514/serialNumber=554D0EFF220D66B6E9A4090F0DCCBA9A295CDDB5 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft Manifest number: 42 Signing time: Sat 23 Aug 2025 07:43:22 +0000 Manifest this update: Sat 23 Aug 2025 07:43:22 +0000 Manifest next update: Sat 30 Aug 2025 07:43:22 +0000 Files and hashes: 1: VU0O_yINZrbppAkPDcy6milc3bU.crl (hash: 5xdvZS6f5F2q7X9K26cbzzEY41fpnxRHR2NQbO4A0gQ=) 2: 4499D9921F4A11F0AF06577CC4F9AE02.roa (hash: 22OD3LRGDCNECXd/CFSHge2YqhsRF1PsexljEXFJrwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.crl rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A514, serialNumber=554D0EFF220D66B6E9A4090F0DCCBA9A295CDDB5 Validity Not Before: Aug 23 07:43:22 2025 GMT Not After : Aug 30 07:43:22 2025 GMT Subject: CN=68a9711a-eb1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ae:5c:6a:6c:58:02:63:e7:a1:e4:fe:39:bd: 9b:4c:19:0e:ab:b0:0c:91:db:61:25:d4:01:2c:09: 26:76:a3:84:a5:1b:a2:c4:26:64:9c:50:05:76:89: 85:4a:49:7e:05:84:1f:14:3a:99:13:b9:6c:3c:57: 07:61:17:c3:16:87:ac:a2:ae:d2:3d:a5:60:a2:f0: b8:01:7a:a2:23:9c:db:0e:f7:ac:fb:7d:31:cb:a6: 9e:d0:fb:55:68:dd:b2:e1:ae:45:c6:19:18:75:31: 30:20:95:43:f7:70:4d:da:9f:24:0b:fd:55:a7:a5: 6b:9f:a6:66:24:2f:eb:01:5d:ee:71:29:63:50:a7: 5f:be:6d:77:c9:a1:d6:66:d9:0b:b4:cf:1b:1a:97: e3:e1:72:98:72:79:b0:71:25:c4:bc:3c:88:5c:4c: 40:30:a4:d2:8f:04:5c:15:06:c6:0f:0d:36:65:09: 2d:5e:08:99:d8:d4:85:26:06:60:09:c7:8c:50:6e: 5f:51:db:d3:45:7e:42:e6:a5:ce:96:0a:33:fa:a2: df:38:27:05:18:2f:de:5c:0a:4c:b6:ee:74:33:44: 87:82:b5:47:4f:53:72:e7:4a:3d:85:86:20:de:2f: f8:c9:ff:a8:82:7a:f1:aa:50:3b:0c:1c:99:66:8f: 3f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8F:F1:AD:4A:81:A0:F8:52:CB:FC:1C:58:65:21:36:F6:0C:D3:49 X509v3 Authority Key Identifier: keyid:55:4D:0E:FF:22:0D:66:B6:E9:A4:09:0F:0D:CC:BA:9A:29:5C:DD:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:50:e6:ac:10:59:3e:0a:1d:46:4f:ea:c5:18:c1:d0:15:b0: df:a1:8f:be:f8:01:e3:90:04:16:cf:f7:44:d6:16:f1:2b:8a: 0c:97:bb:40:ee:9d:42:07:84:ea:1d:72:b0:cb:b1:93:03:a0: 36:97:34:2e:93:ec:bc:d1:42:66:98:2b:7b:24:36:37:b0:6f: c5:67:13:ed:ef:04:28:52:ba:f3:92:24:bd:38:a0:77:6e:10: be:d4:60:63:7a:1f:04:a0:42:80:50:63:5e:2b:bd:68:ea:69: c5:9f:a1:22:63:83:28:b1:88:f9:ef:63:6f:a1:b7:55:d3:da: 2e:c4:27:44:3e:b9:72:aa:52:d4:a3:f3:e3:cf:90:f7:0f:53: 3f:a6:62:dd:4a:a1:a2:14:0b:ee:ed:9f:27:96:d4:f3:1f:45: 5b:d3:e5:19:5b:8a:c5:32:20:69:0a:33:8d:d6:71:c4:6d:16: 6f:d6:ce:70:8a:28:29:f4:1c:2a:88:7d:93:42:15:6c:66:2e: 07:20:01:2c:fd:2a:ef:1c:fb:fa:da:0c:73:b3:9e:99:fd:77: bd:bd:1d:4b:04:cf:bf:c7:bb:68:aa:a7:b9:f8:ba:37:a4:95: fb:b2:a7:8c:6b:49:0b:a8:59:3b:27:e6:c2:c0:a3:a0:69:d5: 2e:99:e5:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QTUxNDExMC8GA1UEBRMoNTU0RDBFRkYyMjBENjZCNkU5QTQwOTBGMERDQ0JBOUEy OTVDRERCNTAeFw0yNTA4MjMwNzQzMjJaFw0yNTA4MzAwNzQzMjJaMBgxFjAUBgNV BAMTDTY4YTk3MTFhLWViMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCurlxqbFgCY+eh5P45vZtMGQ6rsAyR22El1AEsCSZ2o4SlG6LEJmScUAV2iYVK SX4FhB8UOpkTuWw8VwdhF8MWh6yirtI9pWCi8LgBeqIjnNsO96z7fTHLpp7Q+1Vo 3bLhrkXGGRh1MTAglUP3cE3anyQL/VWnpWufpmYkL+sBXe5xKWNQp1++bXfJodZm 2Qu0zxsal+PhcphyebBxJcS8PIhcTEAwpNKPBFwVBsYPDTZlCS1eCJnY1IUmBmAJ x4xQbl9R29NFfkLmpc6WCjP6ot84JwUYL95cCky27nQzRIeCtUdPU3LnSj2FhiDe L/jJ/6iCevGqUDsMHJlmjz+bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrY/xrUqB oPhSy/wcWGUhNvYM00kwHwYDVR0jBBgwFoAUVU0O/yINZrbppAkPDcy6milc3bUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBNTE0LzNGRjI1QUZBMUY0 OTExRjA5NkY3QUU3QUM0RjlBRTAyL1ZVME9feUlOWnJicHBBa1BEY3k2bWlsYzNi VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVlUwT195SU5acmJwcEFrUERjeTZtaWxjM2JVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRB NTE0LzNGRjI1QUZBMUY0OTExRjA5NkY3QUU3QUM0RjlBRTAyL1ZVME9feUlOWnJi cHBBa1BEY3k2bWlsYzNiVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF9Q5qwQWT4KHUZP6sUYwdAVsN+hj774AeOQBBbP90TWFvErigyXu0Du nUIHhOodcrDLsZMDoDaXNC6T7LzRQmaYK3skNjewb8VnE+3vBChSuvOSJL04oHdu EL7UYGN6HwSgQoBQY14rvWjqacWfoSJjgyixiPnvY2+ht1XT2i7EJ0Q+uXKqUtSj 8+PPkPcPUz+mYt1KoaIUC+7tnyeW1PMfRVvT5RlbisUyIGkKM43WccRtFm/WznCK KCn0HCqIfZNCFWxmLgcgASz9Ku8c+/raDHOznpn9d729HUsEz7/Hu2iqp7n4ujek lfuyp4xrSQuoWTsn5sLAo6Bp1S6Z5XM= -----END CERTIFICATE-----Generated at Sun Aug 24 06:46:24 2025 by rpki-client