$ rpki-client -vvf rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft File: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft (raw, json) Hash identifier: jkSvE/5aNOIbV9QOn1yBJTxkiE6ohVd7W+6HMWNl5RU= Subject key identifier: 2D:B0:8C:B0:A8:A3:E6:F4:33:2D:E8:6C:65:07:78:FE:40:4C:BE:DF Authority key identifier: 56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA Certificate issuer: /CN=A914F22A/serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA Certificate serial: 13A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft Manifest number: 1399 Signing time: Fri 22 Aug 2025 17:05:46 +0000 Manifest this update: Fri 22 Aug 2025 17:05:46 +0000 Manifest next update: Fri 29 Aug 2025 17:05:46 +0000 Files and hashes: 1: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl (hash: grRV5E2qUhel35aVWZSu4ACmiOoe9sQpZICchQi9beI=) 2: 8B2E3BA270BD11ED970C535FC4F9AE02.roa (hash: 5VH2eBCf4hkjUtJHqHQPv/5yN4SkQaCzRWcunhO07pE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5025 (0x13a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F22A, serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA Validity Not Before: Aug 22 17:05:46 2025 GMT Not After : Aug 29 17:05:46 2025 GMT Subject: CN=68a8a36a-367b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c1:4e:a5:f6:69:11:7a:f6:a7:fd:c0:a3:56: 55:fc:04:b7:e4:4c:b2:12:e2:2c:20:7e:f7:46:40: 6f:44:e6:03:ba:d8:b6:82:90:38:18:30:59:88:b6: f8:ae:85:42:7a:39:d9:62:e9:d7:5b:5b:da:2c:38: fc:e3:c0:d4:b7:73:8d:27:1c:32:41:5c:84:9a:a7: 9b:41:4c:ad:41:53:62:b6:40:43:fc:8d:ca:23:df: 03:68:98:6d:45:79:12:9a:6b:f9:4e:e1:46:20:a4: 4a:be:45:17:84:98:42:cb:2e:32:7f:5b:e3:c4:27: 25:2c:ec:2c:5d:a7:dc:14:38:5f:32:b2:a8:32:fa: d3:1a:98:36:af:51:87:e5:0f:69:de:f1:38:58:f5: 46:84:c2:31:89:f9:17:d6:36:e1:87:c5:05:df:85: 1b:de:77:f8:5e:a9:50:27:ad:61:3f:e3:a3:a4:ba: 38:65:39:f9:63:05:46:d9:64:0e:7c:d0:5f:23:26: a8:cd:7f:2f:a2:c6:4f:33:b7:85:6c:56:f4:c9:f5: 74:f0:90:1c:c3:5b:61:01:27:d5:d5:dc:50:eb:6e: 90:0a:51:15:56:fc:4b:a5:d0:b4:9f:69:3d:04:d2: e6:d4:e4:1d:59:8f:5b:80:bc:3b:81:16:5d:35:9c: 7c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B0:8C:B0:A8:A3:E6:F4:33:2D:E8:6C:65:07:78:FE:40:4C:BE:DF X509v3 Authority Key Identifier: keyid:56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:b1:96:fc:16:76:a6:87:2f:7f:00:3e:2f:04:50:fa:bc:0e: c5:7c:1a:df:24:be:d7:89:09:4c:88:28:95:78:e0:fd:7a:54: 8e:04:8e:55:3a:2c:e1:6a:54:9f:88:79:dc:d1:5d:92:7c:ec: a6:04:56:64:8e:a1:b3:cd:7b:5c:df:62:c0:50:0b:64:d9:a2: 97:e4:0f:e2:0d:c1:d5:a2:f8:c6:21:f2:48:63:f5:cd:a7:35: a3:61:46:fa:ce:41:a8:8e:92:ba:36:12:de:6c:3d:ce:79:29: c8:0a:da:06:c0:7e:79:b7:33:b0:cc:a1:4b:21:52:dc:dc:58: 35:d5:c7:aa:91:4d:b2:e1:17:f3:05:5c:15:23:64:04:61:ac: 22:56:98:d4:6f:3e:d4:22:50:a2:e7:3a:1f:63:86:c8:f4:25: 59:08:f5:b7:ca:2e:61:e8:9f:c1:50:c7:67:73:12:7b:20:1d: 9d:a3:25:53:32:73:73:7c:dc:31:5e:11:f6:fb:b3:cf:ff:46: 65:2e:bf:2a:6c:3d:28:ed:9e:3b:09:38:72:82:f0:e0:71:a2: e1:57:03:df:f8:58:92:3a:7b:ce:5d:ac:a6:47:25:03:f5:ee: 43:6b:18:e8:bd:4b:be:9b:79:ba:8e:d9:54:a2:e1:28:80:b5: 9f:77:c7:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYyMkExMTAvBgNVBAUTKDU2QUYxQ0QwQjRFMDdEMDAwQzY0QUIwMTZDMzNGNzg2 QTBERDkwRkEwHhcNMjUwODIyMTcwNTQ2WhcNMjUwODI5MTcwNTQ2WjAYMRYwFAYD VQQDEw02OGE4YTM2YS0zNjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9sFOpfZpEXr2p/3Ao1ZV/AS35EyyEuIsIH73RkBvROYDuti2gpA4GDBZiLb4 roVCejnZYunXW1vaLDj848DUt3ONJxwyQVyEmqebQUytQVNitkBD/I3KI98DaJht RXkSmmv5TuFGIKRKvkUXhJhCyy4yf1vjxCclLOwsXafcFDhfMrKoMvrTGpg2r1GH 5Q9p3vE4WPVGhMIxifkX1jbhh8UF34Ub3nf4XqlQJ61hP+OjpLo4ZTn5YwVG2WQO fNBfIyaozX8vosZPM7eFbFb0yfV08JAcw1thASfV1dxQ626QClEVVvxLpdC0n2k9 BNLm1OQdWY9bgLw7gRZdNZx8ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2wjLCo o+b0My3obGUHeP5ATL7fMB8GA1UdIwQYMBaAFFavHNC04H0ADGSrAWwz94ag3ZD6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjIyQS83RUVDMUU0QzlD RDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZRQU1aS3NCYkRQM2hxRGRr UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZxOGMwTFRnZlFBTVpLc0JiRFAzaHFEZGtQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjIyQS83RUVDMUU0QzlDRDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZR QU1aS3NCYkRQM2hxRGRrUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCssZb8Fnamhy9/AD4vBFD6vA7FfBrfJL7XiQlMiCiVeOD9elSOBI5V OizhalSfiHnc0V2SfOymBFZkjqGzzXtc32LAUAtk2aKX5A/iDcHVovjGIfJIY/XN pzWjYUb6zkGojpK6NhLebD3OeSnICtoGwH55tzOwzKFLIVLc3Fg11ceqkU2y4Rfz BVwVI2QEYawiVpjUbz7UIlCi5zofY4bI9CVZCPW3yi5h6J/BUMdncxJ7IB2doyVT MnNzfNwxXhH2+7PP/0ZlLr8qbD0o7Z47CThygvDgcaLhVwPf+FiSOnvOXaymRyUD 9e5DaxjovUu+m3m6jtlUouEogLWfd8d+ -----END CERTIFICATE-----Generated at Sat Aug 23 13:20:46 2025 by rpki-client