$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft File: vFNsAPhfWQQdnEwpYfciQr9g1R4.mft (raw, json) Hash identifier: IrR33O21bIrlrEbhJOoKFzI8WuynPlERynOtPQ9vMsA= Subject key identifier: 22:6B:B5:54:BC:FF:05:E2:ED:71:9D:A6:00:FF:0F:FA:47:03:98:B2 Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Certificate serial: 128B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft Manifest number: 1255 Signing time: Fri 22 Aug 2025 17:16:41 +0000 Manifest this update: Fri 22 Aug 2025 17:16:41 +0000 Manifest next update: Fri 29 Aug 2025 17:16:41 +0000 Files and hashes: 1: vFNsAPhfWQQdnEwpYfciQr9g1R4.crl (hash: 1HPIvj24Pj9ZvDSlgLIScjtoZcHE38FLIundjc614+Q=) 2: DA505546B74C11ED916B5A6AC4F9AE02.roa (hash: 9RHwtONKgQdHSDennn4HM2Ikhdy+C6zf57qmecAxamQ=) 3: 3A9AD3CEDAD411EBB35DA50AC4F9AE02.roa (hash: EztUCIPqk3y/a6AcLfvax6DUhCHP6l9BEvQIvIo9iws=) 4: 57A84138605911EE8ABC9318C4F9AE02.roa (hash: ugTs/oyoKALkGSyMUkjHh2f/tiPGip4BWJ+dEzDMSyU=) 5: E0ACCAC4ECD211EFA6C15823C4F9AE02.roa (hash: /d3XQ565KopoANcg+pwgBZqGoqy8+pW8EGFbyyXXzys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4747 (0x128b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Validity Not Before: Aug 22 17:16:41 2025 GMT Not After : Aug 29 17:16:41 2025 GMT Subject: CN=68a8a5f9-041f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:47:85:cf:1c:71:38:17:86:69:c0:ed:09:ff: 90:6b:38:e5:de:35:32:e1:43:73:e1:5e:9a:dc:ca: 33:6b:24:0f:8c:0f:76:81:45:e5:e6:f5:d5:c8:38: 7c:61:e2:02:5a:4a:86:a3:10:f3:fc:62:61:64:ab: 99:fb:b2:a6:ea:c8:76:1d:a2:49:98:8d:34:47:b1: 61:23:94:09:b3:54:cb:4e:72:c9:bc:04:df:b2:b3: 54:90:70:de:27:06:ea:92:fd:ed:49:9c:99:36:68: ec:31:15:ff:11:45:fa:31:e8:d5:0d:97:c9:4b:e3: 08:2e:4d:82:0d:1f:a4:86:38:f6:35:78:17:7e:e9: e5:74:ff:7a:d5:2e:cc:2b:20:ce:f0:99:45:f3:b6: 50:87:95:cf:d1:3e:a1:db:f8:4a:63:37:32:e9:4a: 50:82:44:54:1f:17:fe:92:07:94:32:24:e4:62:05: 08:ea:83:b7:9c:c3:23:49:fa:ce:a6:c2:e1:d6:99: bc:b7:ff:30:54:d9:fd:de:81:7d:42:b6:a9:b2:c0: c0:03:a0:8b:93:9e:7c:02:1e:18:bf:e8:e3:17:fb: 4f:b6:8f:6c:8c:b4:32:61:f4:da:de:e5:7a:9b:af: b0:67:3d:0e:29:be:83:4a:3a:16:f0:b7:98:e2:8d: 46:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6B:B5:54:BC:FF:05:E2:ED:71:9D:A6:00:FF:0F:FA:47:03:98:B2 X509v3 Authority Key Identifier: keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:90:96:91:29:fa:c9:cc:51:f4:a0:c0:76:22:b6:c4:39:4c: 58:91:94:33:65:88:60:b3:df:33:22:8d:2e:c2:43:42:c6:9c: 13:77:12:bb:aa:58:74:02:ae:56:c0:e9:2e:41:60:df:77:dd: f6:51:03:5d:11:98:63:8d:fb:8c:cd:c0:33:5d:28:3c:35:98: c0:b3:c2:6b:7a:bf:14:26:20:3a:40:e6:49:29:cf:96:4e:7e: b8:1c:84:1e:0b:14:59:35:22:39:04:bb:79:0c:dc:ba:2f:23: 44:81:1b:ee:da:ea:83:22:16:d4:f0:30:f9:d7:35:5c:fd:a0: 67:80:33:bd:41:f2:e2:bb:b9:06:7b:73:a4:4b:68:35:a8:17: 8e:1a:bf:99:7f:ce:df:1d:d6:7d:d8:a3:5d:2d:88:39:0b:1b: 8d:4c:2d:da:2a:84:1d:d4:d7:f9:30:05:0b:c0:68:36:92:dc: f0:9b:94:ac:7e:91:8e:b1:58:a9:f8:1f:b1:78:f3:ae:45:e8: 5e:dd:86:18:87:6a:c8:9d:f4:f1:d7:0e:40:07:89:15:b7:43: a2:bd:42:fa:05:a5:0e:4f:3a:b5:3b:4b:1c:5e:93:83:9a:40: c6:a6:39:ae:2f:92:36:cb:86:c2:6d:80:09:4c:57:80:f2:32: ac:3b:c9:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy QkY2MEQ1MUUwHhcNMjUwODIyMTcxNjQxWhcNMjUwODI5MTcxNjQxWjAYMRYwFAYD VQQDEw02OGE4YTVmOS0wNDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0eFzxxxOBeGacDtCf+Qazjl3jUy4UNz4V6a3MozayQPjA92gUXl5vXVyDh8 YeICWkqGoxDz/GJhZKuZ+7Km6sh2HaJJmI00R7FhI5QJs1TLTnLJvATfsrNUkHDe Jwbqkv3tSZyZNmjsMRX/EUX6MejVDZfJS+MILk2CDR+khjj2NXgXfunldP961S7M KyDO8JlF87ZQh5XP0T6h2/hKYzcy6UpQgkRUHxf+kgeUMiTkYgUI6oO3nMMjSfrO psLh1pm8t/8wVNn93oF9QrapssDAA6CLk558Ah4Yv+jjF/tPto9sjLQyYfTa3uV6 m6+wZz0OKb6DSjoW8LeY4o1GdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJrtVS8 /wXi7XGdpgD/D/pHA5iyMB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5 NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDg2MC9CNDAxQzk4MkU5NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldR UWRuRXdwWWZjaVFyOWcxUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApkJaRKfrJzFH0oMB2IrbEOUxYkZQzZYhgs98zIo0uwkNCxpwTdxK7 qlh0Aq5WwOkuQWDfd932UQNdEZhjjfuMzcAzXSg8NZjAs8Jrer8UJiA6QOZJKc+W Tn64HIQeCxRZNSI5BLt5DNy6LyNEgRvu2uqDIhbU8DD51zVc/aBngDO9QfLiu7kG e3OkS2g1qBeOGr+Zf87fHdZ92KNdLYg5CxuNTC3aKoQd1Nf5MAULwGg2ktzwm5Ss fpGOsVip+B+xePOuRehe3YYYh2rInfTx1w5AB4kVt0OivUL6BaUOTzq1O0scXpOD mkDGpjmuL5I2y4bCbYAJTFeA8jKsO8mU -----END CERTIFICATE-----Generated at Sat Aug 23 10:42:19 2025 by rpki-client