$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft File: VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft (raw, json) Hash identifier: ovQjcQISsMAofjc+R0s07N3g1E1EjT0FlSEIqrmGp18= Subject key identifier: D2:D7:EA:11:AE:52:38:B7:A0:04:31:78:19:96:C8:5A:6A:D5:3A:C7 Authority key identifier: 54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 Certificate issuer: /CN=A916DAC0/serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft Manifest number: 0114 Signing time: Sat 23 Aug 2025 05:03:42 +0000 Manifest this update: Sat 23 Aug 2025 05:03:42 +0000 Manifest next update: Sat 30 Aug 2025 05:03:42 +0000 Files and hashes: 1: VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl (hash: gmsvQY2eYksuXRX2bU0a0YjbJONiaMZQwJuiD7BTkRQ=) 2: 2C06DFA22C4C11EFB6974530C4F9AE02.roa (hash: x0R7/aV5SAgSCY1aeBWFVSWK6YKsQh3+SMh4O+dO85w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DAC0, serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Validity Not Before: Aug 23 05:03:42 2025 GMT Not After : Aug 30 05:03:42 2025 GMT Subject: CN=68a94bae-9140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2c:24:c4:97:10:9c:a5:ec:68:96:0a:aa:46: 65:88:06:55:b3:32:b8:0b:e6:99:b7:eb:bc:66:c3: 67:39:f2:50:f3:52:e7:82:3d:f4:eb:11:63:74:c5: f5:66:37:dd:52:63:59:ce:fd:ef:c0:8c:2c:5f:66: 90:f2:7c:f3:fd:7a:cc:b8:01:58:44:54:6f:2f:53: a7:0f:3c:c4:10:33:8e:e2:47:e2:3b:02:4a:ba:de: f0:6f:a9:02:4a:3f:08:88:33:bd:47:8a:23:2e:31: b9:a2:4f:6f:24:76:44:c1:63:a8:8f:33:94:92:b7: 2c:e5:52:07:60:f8:54:a9:c7:6f:35:47:79:ae:3f: 63:f9:99:59:84:d1:66:ae:3e:84:2d:1e:bb:14:f8: f7:0d:4a:ab:cc:57:04:00:ca:05:23:e0:35:26:a3: 4f:4a:ac:40:39:b6:76:74:59:85:f0:d5:17:d7:af: b4:3d:c8:8f:d1:1b:4e:6c:86:0a:b8:f4:6e:00:05: 80:9c:dd:1c:35:a7:ce:f9:69:9c:54:49:f0:24:36: 5b:8d:ec:40:e6:36:bb:a2:a6:bb:c7:0c:7e:7a:45: 83:4d:13:61:9d:83:ff:ea:c1:fd:6d:17:59:45:bc: 45:21:f1:3d:46:12:bb:74:20:b1:b8:83:a1:df:eb: d3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D7:EA:11:AE:52:38:B7:A0:04:31:78:19:96:C8:5A:6A:D5:3A:C7 X509v3 Authority Key Identifier: keyid:54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:40:63:d5:be:ea:e1:89:63:d1:ed:64:a4:4e:aa:ab:ea:55: a0:98:3a:bb:29:50:92:ff:95:de:73:b8:d6:91:6f:90:dd:a0: bf:f3:cd:eb:8e:58:c0:53:80:ae:28:c4:5c:4a:69:d6:70:7d: 9f:2d:bd:db:4b:1b:bb:9f:1d:c7:22:35:5e:84:83:80:47:df: d0:2d:b0:b4:7c:a7:9f:8f:36:ff:6c:1d:29:b4:da:b8:87:53: e2:55:62:b2:22:7e:2e:c1:c8:f6:9a:0c:5c:20:8b:b7:36:9e: d4:e3:66:c7:9e:3c:eb:2b:21:6e:5e:61:10:c8:56:41:86:dc: 59:f7:8c:4d:36:8a:9a:74:ec:9d:24:f3:02:9a:b6:d4:1b:21: ca:6e:0a:b8:2a:8b:1f:7f:e0:d2:31:f7:63:d9:56:82:30:96: 6c:83:98:ff:bd:65:1b:6a:8a:50:09:8d:a9:44:d1:2d:52:35: cb:c9:59:d3:d0:3b:78:bb:e7:b7:85:83:04:7b:86:c7:3f:87: 69:cd:94:60:f3:7a:70:1d:74:e7:61:a1:29:c0:f0:f7:e9:68: 43:f4:0a:b5:67:42:2d:ae:b6:82:2a:a2:19:a8:eb:61:ea:de: 08:3c:ad:3e:78:a1:c8:6b:dc:96:b5:17:d3:bf:27:33:35:c1: 6d:ca:87:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBQzAxMTAvBgNVBAUTKDU0Qjk2NkFEOEI1NzMxNjQxNjUyOTUwN0Y1QkNBOUMw MEUxMTgxQjkwHhcNMjUwODIzMDUwMzQyWhcNMjUwODMwMDUwMzQyWjAYMRYwFAYD VQQDEw02OGE5NGJhZS05MTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SwkxJcQnKXsaJYKqkZliAZVszK4C+aZt+u8ZsNnOfJQ81Lngj306xFjdMX1 ZjfdUmNZzv3vwIwsX2aQ8nzz/XrMuAFYRFRvL1OnDzzEEDOO4kfiOwJKut7wb6kC Sj8IiDO9R4ojLjG5ok9vJHZEwWOojzOUkrcs5VIHYPhUqcdvNUd5rj9j+ZlZhNFm rj6ELR67FPj3DUqrzFcEAMoFI+A1JqNPSqxAObZ2dFmF8NUX16+0PciP0RtObIYK uPRuAAWAnN0cNafO+WmcVEnwJDZbjexA5ja7oqa7xwx+ekWDTRNhnYP/6sH9bRdZ RbxFIfE9RhK7dCCxuIOh3+vT7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLX6hGu Uji3oAQxeBmWyFpq1TrHMB8GA1UdIwQYMBaAFFS5Zq2LVzFkFlKVB/W8qcAOEYG5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REFDMC9FNzYzQUE4QURF ODgxMUVFOTNEOUE3NDRDNEY5QUUwMi9WTGxtcll0WE1XUVdVcFVIOWJ5cHdBNFJn YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZMbG1yWXRYTVdRV1VwVUg5Ynlwd0E0Umdiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REFDMC9FNzYzQUE4QURFODgxMUVFOTNEOUE3NDRDNEY5QUUwMi9WTGxtcll0WE1X UVdVcFVIOWJ5cHdBNFJnYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiQGPVvurhiWPR7WSkTqqr6lWgmDq7KVCS/5Xec7jWkW+Q3aC/883r jljAU4CuKMRcSmnWcH2fLb3bSxu7nx3HIjVehIOAR9/QLbC0fKefjzb/bB0ptNq4 h1PiVWKyIn4uwcj2mgxcIIu3Np7U42bHnjzrKyFuXmEQyFZBhtxZ94xNNoqadOyd JPMCmrbUGyHKbgq4Kosff+DSMfdj2VaCMJZsg5j/vWUbaopQCY2pRNEtUjXLyVnT 0Dt4u+e3hYMEe4bHP4dpzZRg83pwHXTnYaEpwPD36WhD9Aq1Z0ItrraCKqIZqOth 6t4IPK0+eKHIa9yWtRfTvyczNcFtyoc5 -----END CERTIFICATE-----Generated at Sun Aug 24 04:34:58 2025 by rpki-client