$ rpki-client -vvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft File: vbWSaolrtlGg51QKOYzV7wcUFx8.mft (raw, json) Hash identifier: suRa1LeColzIIuT1kXclKCeiNxxGYDkgJzFnovLm1/U= Subject key identifier: 39:A6:A5:EF:49:7E:12:30:AA:13:CD:1B:D7:82:14:E8:5A:C7:C9:BB Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F Certificate issuer: /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Certificate serial: 044B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft Manifest number: 0447 Signing time: Sat 23 Aug 2025 00:29:30 +0000 Manifest this update: Sat 23 Aug 2025 00:29:30 +0000 Manifest next update: Sat 30 Aug 2025 00:29:30 +0000 Files and hashes: 1: vbWSaolrtlGg51QKOYzV7wcUFx8.crl (hash: g2Isu67Y43uCyjFtrKOelYK7Y37ifLzO2j8/HPU/2tQ=) 2: 66864FCE688011ECAA829E31C4F9AE02.roa (hash: w5bL3BxYC2VJUK/MoXPR18n/PN4tqZHifWiPk20fkzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1099 (0x44b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A5CD, serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F Validity Not Before: Aug 23 00:29:30 2025 GMT Not After : Aug 30 00:29:30 2025 GMT Subject: CN=68a90b6a-3212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d2:e2:43:1d:9b:b6:f8:78:83:c2:43:c7:64: 2d:b2:48:8d:f4:e9:70:0f:09:08:3f:64:3b:a5:a9: 2c:ce:a0:b7:34:72:5c:ba:54:ca:5c:75:ea:5a:7b: 5c:00:fd:44:be:00:cd:2a:c6:f8:af:1c:3d:3b:02: 55:bc:a5:3a:ad:37:7a:aa:83:0c:2b:96:7a:a4:21: be:84:20:07:a3:bf:1e:c4:19:ab:80:f9:73:b7:7e: 54:6f:96:88:e8:2a:bf:92:e1:bb:59:0e:c3:73:dc: a3:6b:31:9d:f1:f4:50:3a:b8:ba:b8:9c:7b:b1:38: 4d:9a:26:d4:3f:31:3d:89:60:6f:9c:a3:b0:ea:bd: 9e:a4:26:68:df:23:95:7c:7f:6f:22:0c:d7:fe:f2: 84:58:ff:7a:09:41:3b:77:b8:f2:0d:09:ee:e0:42: 46:a1:c9:5a:ec:11:e8:50:da:03:32:d8:2b:17:25: 42:47:bb:30:40:0a:65:85:2f:92:62:7b:21:43:29: 36:f7:ff:6c:92:9c:b5:c6:0f:b1:7b:4e:53:38:7f: fa:7b:b1:60:91:65:7e:eb:24:1a:b4:ed:f3:4f:34: 0c:e0:0f:f7:b8:eb:14:f2:56:61:ce:c3:08:e9:e4: 83:ea:fa:80:bc:54:c2:36:48:ea:4d:d8:e2:1c:b3: 60:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A6:A5:EF:49:7E:12:30:AA:13:CD:1B:D7:82:14:E8:5A:C7:C9:BB X509v3 Authority Key Identifier: keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:ee:65:38:ae:62:70:34:a1:d4:41:ef:e1:9f:49:e9:95:b8: f2:5a:34:81:4f:23:61:43:25:27:44:03:76:69:9c:e2:9c:83: 4c:50:e1:bd:6e:44:7d:0f:44:8b:38:6e:9f:3a:c6:30:ec:c1: da:83:43:33:bb:2a:67:d7:85:44:ad:d8:19:f2:69:0d:a5:32: 10:17:4e:5b:bc:f7:8d:ac:ab:f4:61:b6:15:df:81:ba:27:7f: bc:15:e6:cd:1e:82:81:94:3c:6c:4a:5e:64:b1:de:95:af:02: dc:de:70:92:9a:26:56:37:d3:74:a8:92:7a:92:ea:5d:67:6c: 7a:a9:96:d2:08:e6:9a:b2:b3:65:7c:74:38:0e:21:07:fa:6b: 79:a4:65:c2:59:1d:b6:b0:c8:91:51:bc:b4:d5:d2:d4:9a:9a: 57:f8:5f:fe:d4:21:c8:24:81:4c:83:cc:6c:d7:f2:cf:7d:ab: 31:48:2c:4f:57:00:ad:ee:4a:b1:e4:04:99:89:2d:75:65:98: e0:7d:8f:d5:5e:bb:a7:7d:ff:cb:bc:90:29:ba:3d:21:e7:89: da:cd:05:2e:1b:29:bc:49:81:f1:fa:f5:bd:39:16:22:da:e8: 5f:48:a0:64:54:a8:fb:ff:e4:b9:42:4b:64:ef:29:e5:83:0e: 03:5f:90:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1Q0QxMTAvBgNVBAUTKEJEQjU5MjZBODk2QkI2NTFBMEU3NTQwQTM5OENENUVG MDcxNDE3MUYwHhcNMjUwODIzMDAyOTMwWhcNMjUwODMwMDAyOTMwWjAYMRYwFAYD VQQDEw02OGE5MGI2YS0zMjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdLiQx2btvh4g8JDx2QtskiN9OlwDwkIP2Q7pakszqC3NHJculTKXHXqWntc AP1EvgDNKsb4rxw9OwJVvKU6rTd6qoMMK5Z6pCG+hCAHo78exBmrgPlzt35Ub5aI 6Cq/kuG7WQ7Dc9yjazGd8fRQOri6uJx7sThNmibUPzE9iWBvnKOw6r2epCZo3yOV fH9vIgzX/vKEWP96CUE7d7jyDQnu4EJGocla7BHoUNoDMtgrFyVCR7swQAplhS+S YnshQyk29/9skpy1xg+xe05TOH/6e7FgkWV+6yQatO3zTzQM4A/3uOsU8lZhzsMI 6eSD6vqAvFTCNkjqTdjiHLNgFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmmpe9J fhIwqhPNG9eCFOhax8m7MB8GA1UdIwQYMBaAFL21kmqJa7ZRoOdUCjmM1e8HFBcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTVDRC8yOTQzNkZDRTY4 N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRsR2c1MVFLT1l6Vjd3Y1VG eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZiV1Nhb2xydGxHZzUxUUtPWXpWN3djVUZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTVDRC8yOTQzNkZDRTY4N0MxMUVDQUEyNkI5NTlDNEY5QUUwMi92YldTYW9scnRs R2c1MVFLT1l6Vjd3Y1VGeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDT7mU4rmJwNKHUQe/hn0nplbjyWjSBTyNhQyUnRAN2aZzinINMUOG9 bkR9D0SLOG6fOsYw7MHag0Mzuypn14VErdgZ8mkNpTIQF05bvPeNrKv0YbYV34G6 J3+8FebNHoKBlDxsSl5ksd6VrwLc3nCSmiZWN9N0qJJ6kupdZ2x6qZbSCOaasrNl fHQ4DiEH+mt5pGXCWR22sMiRUby01dLUmppX+F/+1CHIJIFMg8xs1/LPfasxSCxP VwCt7kqx5ASZiS11ZZjgfY/VXrunff/LvJApuj0h54nazQUuGym8SYHx+vW9ORYi 2uhfSKBkVKj7/+S5Qktk7ynlgw4DX5CL -----END CERTIFICATE-----Generated at Sat Aug 23 16:30:16 2025 by rpki-client