$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft File: vAv4-dc7foz8yOpen0LXqFUjPXw.mft (raw, json) Hash identifier: PprkczujHvPK8cRcZz8IY1lsFvasGh3uxHHf0TS6p+4= Subject key identifier: B0:3F:38:18:FF:0A:C1:89:F8:6A:D0:46:EF:3C:5C:1C:FD:BA:B9:9B Authority key identifier: BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C Certificate issuer: /CN=A9163EB9/serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft Manifest number: C5 Signing time: Sat 23 Aug 2025 05:55:51 +0000 Manifest this update: Sat 23 Aug 2025 05:55:51 +0000 Manifest next update: Sat 30 Aug 2025 05:55:51 +0000 Files and hashes: 1: vAv4-dc7foz8yOpen0LXqFUjPXw.crl (hash: EORkQvQ5dJ8jjG8a2FJBIKbNdpZJgFwS0hI/frW4Mwo=) 2: 710FB354979E11EF99310B40C4F9AE02.roa (hash: bruRF8XqvNXc2lROOKilx3DJEF2Mi08/zHCfWANPCjg=) 3: 27AEE7D0979D11EFB1426839C4F9AE02.roa (hash: FRD/IGf5tsKizstdT15eHvBke9+NzOwPHHiU7wEzleM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EB9, serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C Validity Not Before: Aug 23 05:55:51 2025 GMT Not After : Aug 30 05:55:51 2025 GMT Subject: CN=68a957e7-77ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0f:01:89:00:86:de:49:6a:2a:95:7e:2e:01: 81:4b:16:ec:a9:9c:da:07:6a:39:a3:d4:fb:1b:9e: bb:3d:69:26:71:e8:c4:fc:b5:ca:98:3b:98:cf:11: cc:f7:8d:27:5e:59:a8:1a:8b:6b:3e:a8:38:ab:23: 9a:a2:81:c3:df:a1:ce:40:7e:18:85:da:1d:b2:77: 8f:6e:bc:76:97:ab:51:02:5e:50:8c:4b:6f:d7:20: 36:c6:c8:e8:6b:30:80:4f:b4:71:9c:92:1e:6e:70: c8:56:cc:ae:2a:7d:30:32:03:27:44:6c:7b:2b:e9: d1:8e:10:37:34:46:0a:d2:fe:96:3f:64:43:26:3e: 19:09:25:3b:ee:0c:d9:9e:7c:83:a0:f4:23:60:f9: 42:42:90:2d:c5:0d:77:9b:42:b5:e2:07:9d:3d:e7: ce:4a:c5:3e:72:71:d3:47:c8:81:28:13:42:65:b6: 0a:12:69:3b:1d:54:f8:03:09:f4:3e:54:0d:b1:9c: 1b:b9:60:d1:52:e4:b0:87:73:69:06:32:82:41:bb: 74:97:9e:63:71:fd:f0:5a:d3:1a:04:48:8c:9c:49: 46:ca:16:56:5e:b8:28:84:3d:c4:8f:9f:dd:d0:ca: 23:97:74:08:b4:20:0f:1f:94:e7:ba:45:b0:0a:d0: 84:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3F:38:18:FF:0A:C1:89:F8:6A:D0:46:EF:3C:5C:1C:FD:BA:B9:9B X509v3 Authority Key Identifier: keyid:BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:6f:4c:69:fc:db:9d:ab:8b:b2:c2:3c:57:80:3d:2c:aa:61: fe:da:b6:a0:7d:87:c4:28:bb:52:47:97:19:3b:fa:29:de:e1: e3:5e:b9:98:27:0d:52:16:7f:d9:f2:ff:4a:cb:ce:a0:12:01: 75:09:78:e4:f1:e4:cc:0a:46:44:ba:61:27:04:2a:6c:48:c8: 89:94:a5:5d:eb:fc:2b:d6:e0:ff:ed:81:37:eb:dd:e9:f5:81: d0:72:af:37:72:7f:d8:20:e0:04:3e:56:6f:9e:a4:fe:2b:9f: b3:d4:37:c6:4a:21:a4:be:21:86:46:62:ca:41:08:a1:7a:95: 86:14:3a:6d:f8:f4:94:e7:2c:7c:4f:7b:c1:d6:75:57:26:01: 6e:38:ff:a3:27:03:0a:10:b7:16:24:b2:74:be:ed:43:92:8e: c7:04:a3:bf:6e:42:38:e9:79:5d:d0:a7:bc:64:8f:df:80:9b: 05:b2:c9:b4:86:a8:b3:93:ca:3e:2b:86:af:b8:4b:10:93:34: 5e:d2:3b:15:47:7d:aa:69:1a:d9:46:3d:c8:ff:47:a8:4f:4a: c6:7a:c1:cb:f4:60:eb:e6:ad:51:59:81:80:c9:89:e9:36:d4: 9a:f1:9c:1a:94:d4:65:dc:01:b0:85:1b:35:94:4c:25:10:5e: 97:1f:21:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFQjkxMTAvBgNVBAUTKEJDMEJGOEY5RDczQjdFOENGQ0M4RUE1RTlGNDJEN0E4 NTUyMzNEN0MwHhcNMjUwODIzMDU1NTUxWhcNMjUwODMwMDU1NTUxWjAYMRYwFAYD VQQDEw02OGE5NTdlNy03N2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtA8BiQCG3klqKpV+LgGBSxbsqZzaB2o5o9T7G567PWkmcejE/LXKmDuYzxHM 940nXlmoGotrPqg4qyOaooHD36HOQH4YhdodsnePbrx2l6tRAl5QjEtv1yA2xsjo azCAT7RxnJIebnDIVsyuKn0wMgMnRGx7K+nRjhA3NEYK0v6WP2RDJj4ZCSU77gzZ nnyDoPQjYPlCQpAtxQ13m0K14gedPefOSsU+cnHTR8iBKBNCZbYKEmk7HVT4Awn0 PlQNsZwbuWDRUuSwh3NpBjKCQbt0l55jcf3wWtMaBEiMnElGyhZWXrgohD3Ej5/d 0Mojl3QItCAPH5TnukWwCtCERQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLA/OBj/ CsGJ+GrQRu88XBz9urmbMB8GA1UdIwQYMBaAFLwL+PnXO36M/MjqXp9C16hVIz18 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VCOS9GQ0Q1NUMwQTU0 OUYxMUVGODZBRTU5MjJDNEY5QUUwMi92QXY0LWRjN2Zvejh5T3BlbjBMWHFGVWpQ WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZBdjQtZGM3Zm96OHlPcGVuMExYcUZValBYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VCOS9GQ0Q1NUMwQTU0OUYxMUVGODZBRTU5MjJDNEY5QUUwMi92QXY0LWRjN2Zv ejh5T3BlbjBMWHFGVWpQWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbb0xp/Nudq4uywjxXgD0sqmH+2ragfYfEKLtSR5cZO/op3uHjXrmY Jw1SFn/Z8v9Ky86gEgF1CXjk8eTMCkZEumEnBCpsSMiJlKVd6/wr1uD/7YE3693p 9YHQcq83cn/YIOAEPlZvnqT+K5+z1DfGSiGkviGGRmLKQQihepWGFDpt+PSU5yx8 T3vB1nVXJgFuOP+jJwMKELcWJLJ0vu1Dko7HBKO/bkI46Xld0Ke8ZI/fgJsFssm0 hqizk8o+K4avuEsQkzRe0jsVR32qaRrZRj3I/0eoT0rGesHL9GDr5q1RWYGAyYnp NtSa8ZwalNRl3AGwhRs1lEwlEF6XHyFJ -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:25 2025 by rpki-client