$ rpki-client -vvf rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft File: VIw8AL4pDBZz22aZmFINcjeERcs.mft (raw, json) Hash identifier: HUUcm+6kUutJJJLRPSr8B1sz4DCj4flxG7HCoi1DLGY= Subject key identifier: 5F:97:29:C9:F8:5F:A7:08:B0:E7:D5:A7:BF:72:A2:62:83:7A:18:DB Authority key identifier: 54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB Certificate issuer: /CN=A914B089/serialNumber=548C3C00BE290C1673DB669998520D72378445CB Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft Manifest number: 0131 Signing time: Sat 23 Aug 2025 04:39:32 +0000 Manifest this update: Sat 23 Aug 2025 04:39:32 +0000 Manifest next update: Sat 30 Aug 2025 04:39:32 +0000 Files and hashes: 1: VIw8AL4pDBZz22aZmFINcjeERcs.crl (hash: SqzgUd315mJQgCcxVb6qGU7Q2wnajdAZ1/+NMZriUfY=) 2: 55F7C16CABDE11EEA9B44639C4F9AE02.roa (hash: LRgZIPAfyXWSZXYxQKmagPCwrYM4gPhtoJaJVDq8z0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:39:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B089, serialNumber=548C3C00BE290C1673DB669998520D72378445CB Validity Not Before: Aug 23 04:39:32 2025 GMT Not After : Aug 30 04:39:32 2025 GMT Subject: CN=68a94604-dd34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d8:20:c1:44:36:29:ce:8e:b5:06:20:97:71: cb:4c:da:6b:39:bc:2f:9d:ec:7c:50:11:fc:e1:c9: 7e:53:bc:b5:93:ee:84:f8:be:c2:a7:5e:61:fc:d4: 48:53:c1:c0:cd:68:4a:6e:0a:f7:40:13:46:e5:ea: 28:de:68:80:6a:ce:6d:b2:ae:ff:78:60:3f:ee:90: 03:bf:2d:2c:ba:19:1e:71:55:a9:f0:b0:13:02:9d: 33:4f:cb:d8:35:89:db:38:ba:a2:9c:59:eb:c2:d0: c2:2a:bc:2d:d8:1f:b4:c0:58:e3:5a:b7:79:9a:4a: 6b:d9:6d:38:14:ed:92:97:ad:b9:17:98:2f:51:52: d6:0b:e7:2d:45:7b:db:a3:86:5b:4d:5a:e6:6a:4f: ff:83:54:a2:40:e6:b7:8e:e8:e0:04:92:53:4d:f2: dc:2e:06:f2:a8:66:85:6b:51:78:ec:e0:9f:92:d7: 4f:4a:4a:6b:68:05:94:72:d2:52:4a:db:a3:db:a5: df:24:14:99:88:94:c2:1e:eb:55:b4:93:e9:63:59: 13:9d:fe:9c:36:2d:65:d2:7f:0b:0c:27:c8:01:b2: 55:e3:d8:fe:25:4f:24:af:56:6d:f3:6d:6b:f8:d8: 3e:73:cc:54:24:b1:c4:53:76:ca:60:69:27:5b:c8: 03:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:97:29:C9:F8:5F:A7:08:B0:E7:D5:A7:BF:72:A2:62:83:7A:18:DB X509v3 Authority Key Identifier: keyid:54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:b6:45:1e:33:7f:d4:d5:69:b0:26:34:4f:2d:8f:de:33:7e: fa:7d:84:22:04:e4:21:89:b9:99:cd:d6:8c:28:b0:b1:53:21: bf:84:60:31:e5:d4:be:d4:a5:36:84:fb:da:38:14:8a:f0:13: cc:e7:de:a1:7e:92:18:f1:3f:68:be:24:a9:62:5c:ac:11:05: 3f:49:5c:bf:f5:b5:53:82:1e:ec:24:75:5e:51:64:52:7c:39: d8:de:c6:38:3b:52:a2:c5:4e:1b:43:7e:33:9c:7b:97:df:5e: df:93:bb:7d:79:23:06:b0:d2:38:cc:d3:fa:6b:45:b2:1b:dc: 9a:73:9c:4b:a4:90:3d:dc:11:36:97:9f:1a:a2:52:e6:24:9b: 84:37:19:85:91:f1:99:82:f2:9c:23:03:fc:83:33:0e:e4:2e: 28:3c:44:6e:8f:1c:74:30:7f:1b:c0:98:70:af:e2:75:f2:d4: 23:48:55:0c:00:25:c4:d3:a8:3d:e4:16:ae:0d:40:ae:70:09: d6:81:50:87:08:a9:47:fa:3c:6a:4a:94:8e:ff:ee:7f:0e:7b: 4e:ee:0e:88:78:4c:a2:98:ab:ac:41:de:93:8e:2b:7a:a9:ec: 19:65:9c:5c:fc:b2:69:1f:f9:97:cc:54:dd:19:2b:d7:99:71: 5d:95:ce:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwODkxMTAvBgNVBAUTKDU0OEMzQzAwQkUyOTBDMTY3M0RCNjY5OTk4NTIwRDcy Mzc4NDQ1Q0IwHhcNMjUwODIzMDQzOTMyWhcNMjUwODMwMDQzOTMyWjAYMRYwFAYD VQQDEw02OGE5NDYwNC1kZDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NggwUQ2Kc6OtQYgl3HLTNprObwvnex8UBH84cl+U7y1k+6E+L7Cp15h/NRI U8HAzWhKbgr3QBNG5eoo3miAas5tsq7/eGA/7pADvy0suhkecVWp8LATAp0zT8vY NYnbOLqinFnrwtDCKrwt2B+0wFjjWrd5mkpr2W04FO2Sl625F5gvUVLWC+ctRXvb o4ZbTVrmak//g1SiQOa3jujgBJJTTfLcLgbyqGaFa1F47OCfktdPSkpraAWUctJS Stuj26XfJBSZiJTCHutVtJPpY1kTnf6cNi1l0n8LDCfIAbJV49j+JU8kr1Zt821r +Ng+c8xUJLHEU3bKYGknW8gDbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+XKcn4 X6cIsOfVp79yomKDehjbMB8GA1UdIwQYMBaAFFSMPAC+KQwWc9tmmZhSDXI3hEXL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjA4OS8wRjg5NkFGQUFC REUxMUVFOUVGMERGMzhDNEY5QUUwMi9WSXc4QUw0cERCWnoyMmFabUZJTmNqZUVS Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJdzhBTDRwREJaejIyYVptRklOY2plRVJjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjA4OS8wRjg5NkFGQUFCREUxMUVFOUVGMERGMzhDNEY5QUUwMi9WSXc4QUw0cERC WnoyMmFabUZJTmNqZUVSY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1tkUeM3/U1WmwJjRPLY/eM376fYQiBOQhibmZzdaMKLCxUyG/hGAx 5dS+1KU2hPvaOBSK8BPM596hfpIY8T9oviSpYlysEQU/SVy/9bVTgh7sJHVeUWRS fDnY3sY4O1KixU4bQ34znHuX317fk7t9eSMGsNI4zNP6a0WyG9yac5xLpJA93BE2 l58aolLmJJuENxmFkfGZgvKcIwP8gzMO5C4oPERujxx0MH8bwJhwr+J18tQjSFUM ACXE06g95BauDUCucAnWgVCHCKlH+jxqSpSO/+5/DntO7g6IeEyimKusQd6Tjit6 qewZZZxc/LJpH/mXzFTdGSvXmXFdlc7m -----END CERTIFICATE-----Generated at Sat Aug 23 21:27:36 2025 by rpki-client