$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft File: VFjEVinBBKqnpYcoaG-NHihyqSo.mft (raw, json) Hash identifier: TDGd2dkf9w0jTPgjkiMN/TimPmAS1OJK7YmtpnhmWgY= Subject key identifier: 11:6A:D2:20:A1:4B:28:96:13:C2:38:49:95:2E:A8:9E:B8:15:08:09 Authority key identifier: 54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A Certificate issuer: /CN=A9153C27/serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Certificate serial: 0C8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft Manifest number: 0C87 Signing time: Fri 22 Aug 2025 18:22:31 +0000 Manifest this update: Fri 22 Aug 2025 18:22:30 +0000 Manifest next update: Fri 29 Aug 2025 18:22:30 +0000 Files and hashes: 1: VFjEVinBBKqnpYcoaG-NHihyqSo.crl (hash: VsY3GUyMpqOCalhMQCoXJJWI+LUtjafp586V6o1HUy8=) 2: DB020E9C010D11EAA82AD83CC4F9AE02.roa (hash: +/HgExCatPcRmJalycUeFMmwknrCCg9dQk/HjuFZjUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3215 (0xc8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C27, serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Validity Not Before: Aug 22 18:22:30 2025 GMT Not After : Aug 29 18:22:30 2025 GMT Subject: CN=68a8b567-15ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c9:9e:93:e3:32:42:13:fc:fe:8e:7a:b8:fe: 63:be:6b:09:82:69:e9:9e:32:ae:e8:02:61:3c:ea: 47:92:78:be:d5:5e:83:a3:e4:2b:ad:e7:35:de:a8: 7f:cc:f5:b8:b6:ee:ce:1b:cf:2a:58:ce:f1:3f:c9: ea:3b:98:3d:a0:7f:13:e5:79:95:82:7c:89:cd:f0: 89:23:61:d7:28:5d:db:0b:d4:66:b9:27:7b:e8:f0: ff:7c:b2:fb:86:86:66:26:ad:4c:50:95:8e:1f:f8: ef:54:5f:a4:3b:3e:3a:36:66:43:32:7b:73:1b:4b: 3f:e4:63:4e:6b:69:35:6e:e0:f2:dc:18:ca:ff:4b: 0f:54:8d:0e:94:d2:37:69:dd:38:6d:53:46:53:3c: 17:4d:46:4c:c4:62:fe:ff:fa:48:75:1b:91:9d:b4: d7:8c:44:77:08:92:ee:cb:30:e4:96:ff:cd:e2:09: 30:8b:5f:ae:0c:17:c9:aa:04:11:80:05:7f:23:ee: 03:74:80:15:b3:1d:3e:9a:53:2a:0e:4f:16:16:63: b4:d1:7d:ca:62:2b:21:a8:86:f5:9b:d2:46:1a:3f: 65:fa:98:f4:0b:4f:9f:6d:7b:fe:95:62:93:b2:6a: a5:90:62:82:86:c7:4a:d3:a0:e5:a7:14:ce:03:e1: 04:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6A:D2:20:A1:4B:28:96:13:C2:38:49:95:2E:A8:9E:B8:15:08:09 X509v3 Authority Key Identifier: keyid:54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:e7:a3:de:49:2f:93:25:ef:46:c2:fa:ac:1f:f3:83:1e:36: 97:0b:9b:c4:58:e7:f1:9b:dc:7b:0b:8e:e0:8d:3b:0b:db:54: 1f:80:7d:45:5f:fb:ee:f5:6d:c1:7d:63:b0:6f:76:5e:0a:31: f4:66:ee:6b:f9:bc:24:04:78:99:34:ee:e0:af:f7:e1:c4:f5: 3b:b2:89:7e:45:8c:b0:1b:5c:b6:d0:73:e2:28:a0:ca:d3:4e: 3e:b6:f8:10:9b:de:b3:a4:7d:e2:6f:46:ad:63:9f:77:a0:b7: 74:7b:7c:5e:6c:13:66:27:17:28:3f:bb:c8:88:cd:ef:9f:cb: 94:49:b9:a4:f8:8e:39:8f:43:49:2b:68:77:ad:45:6d:94:50: b8:df:00:89:fa:84:28:da:2b:03:bc:0c:ba:63:f9:30:ec:cc: d7:c3:d8:32:35:3e:48:ce:3e:33:47:43:f7:46:91:40:a8:33: 4c:0c:ac:d5:3d:84:0b:7c:b9:7e:96:9e:5a:7a:e2:ac:7c:54: 03:43:66:5f:21:45:cb:e8:64:92:89:7e:da:7b:89:54:84:46: 0e:d6:78:ea:38:9c:e1:d7:b0:fc:fd:10:ac:bd:85:8e:41:72: 1d:d7:0d:b6:49:03:f5:ad:d5:12:df:eb:51:19:c2:6d:d5:ec: 57:56:07:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDMjcxMTAvBgNVBAUTKDU0NThDNDU2MjlDMTA0QUFBN0E1ODcyODY4NkY4RDFF Mjg3MkE5MkEwHhcNMjUwODIyMTgyMjMwWhcNMjUwODI5MTgyMjMwWjAYMRYwFAYD VQQDEw02OGE4YjU2Ny0xNWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmMmek+MyQhP8/o56uP5jvmsJgmnpnjKu6AJhPOpHkni+1V6Do+Qrrec13qh/ zPW4tu7OG88qWM7xP8nqO5g9oH8T5XmVgnyJzfCJI2HXKF3bC9RmuSd76PD/fLL7 hoZmJq1MUJWOH/jvVF+kOz46NmZDMntzG0s/5GNOa2k1buDy3BjK/0sPVI0OlNI3 ad04bVNGUzwXTUZMxGL+//pIdRuRnbTXjER3CJLuyzDklv/N4gkwi1+uDBfJqgQR gAV/I+4DdIAVsx0+mlMqDk8WFmO00X3KYishqIb1m9JGGj9l+pj0C0+fbXv+lWKT smqlkGKChsdK06DlpxTOA+EE0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFq0iCh SyiWE8I4SZUuqJ64FQgJMB8GA1UdIwQYMBaAFFRYxFYpwQSqp6WHKGhvjR4ocqkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0MyNy82NUJCNDg5QzAw NEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJLcW5wWWNvYUctTkhpaHlx U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGakVWaW5CQktxbnBZY29hRy1OSGloeXFTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0MyNy82NUJCNDg5QzAwNEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJL cW5wWWNvYUctTkhpaHlxU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR56PeSS+TJe9GwvqsH/ODHjaXC5vEWOfxm9x7C47gjTsL21QfgH1F X/vu9W3BfWOwb3ZeCjH0Zu5r+bwkBHiZNO7gr/fhxPU7sol+RYywG1y20HPiKKDK 004+tvgQm96zpH3ib0atY593oLd0e3xebBNmJxcoP7vIiM3vn8uUSbmk+I45j0NJ K2h3rUVtlFC43wCJ+oQo2isDvAy6Y/kw7MzXw9gyNT5Izj4zR0P3RpFAqDNMDKzV PYQLfLl+lp5aeuKsfFQDQ2ZfIUXL6GSSiX7ae4lUhEYO1njqOJzh17D8/RCsvYWO QXId1w22SQP1rdUS3+tRGcJt1exXVgeA -----END CERTIFICATE-----Generated at Sat Aug 23 21:40:39 2025 by rpki-client