$ rpki-client -vvf rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft File: vxurTPDVSTDgAbctJPMLPtaK4rM.mft (raw, json) Hash identifier: VT04UVoln8T/+axxYv6HFXgzVqy8B0XycXou9sUs6Cs= Subject key identifier: 8F:F3:D8:40:88:30:06:32:1A:A2:E1:D4:B1:65:EE:B3:84:04:73:A7 Authority key identifier: BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3 Certificate issuer: /CN=A916F95E/serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3 Certificate serial: 10E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft Manifest number: 10DB Signing time: Fri 22 Aug 2025 17:25:34 +0000 Manifest this update: Fri 22 Aug 2025 17:25:33 +0000 Manifest next update: Fri 29 Aug 2025 17:25:33 +0000 Files and hashes: 1: vxurTPDVSTDgAbctJPMLPtaK4rM.crl (hash: x9afyLCVAmzDBVawYMdpkZBMO6LlHo0TMe4Zgy9OjOQ=) 2: 1BB160C225EB11E9ADD6867FC4F9AE02.roa (hash: 8YN4HjFnFIcDaShQHDoigKa3LLkHGTw5fy+IJogcxeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4324 (0x10e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F95E, serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3 Validity Not Before: Aug 22 17:25:33 2025 GMT Not After : Aug 29 17:25:33 2025 GMT Subject: CN=68a8a80d-7257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ab:11:7d:ef:a3:81:13:56:bf:53:97:dc:63: 42:b9:ed:29:c1:45:fb:40:ba:8c:18:f8:12:81:4a: 7b:f2:f0:90:37:8c:0f:aa:d5:36:a9:81:03:1c:af: 4f:9e:7d:01:61:01:b8:5c:8a:ae:3a:25:04:19:eb: 35:4b:5d:ec:6b:f5:36:76:38:f2:4c:4e:02:fb:0a: af:11:13:18:b4:54:da:92:db:93:03:2e:e0:ef:9a: 8b:2c:0e:a0:d9:08:13:7e:fc:4f:d8:ff:76:c5:6d: 23:48:e5:40:1d:61:ab:80:c6:34:ee:b5:f5:09:c0: df:14:6c:b1:70:ce:6e:b0:a3:e9:4f:26:79:f3:c4: aa:40:cb:c0:dd:ad:a3:8a:43:b4:bf:f4:ae:d4:78: e3:02:ba:46:ca:ec:2b:a2:8f:9a:e4:b7:34:71:16: 59:ee:5f:e9:57:d9:81:5a:2a:20:9f:7b:e6:b9:53: d4:50:56:e4:d1:1a:e1:33:4c:e1:23:8d:04:95:3a: e2:e5:bd:73:25:8a:21:fa:c5:cc:d9:70:41:ec:ab: d9:4a:d6:44:5e:8a:c3:68:91:de:53:21:5c:f3:0c: 4b:38:74:04:e3:1f:02:15:c3:fa:d2:4e:28:ff:00: 4c:bd:27:09:43:e6:1d:67:26:9f:3e:cc:c5:4e:48: 8f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F3:D8:40:88:30:06:32:1A:A2:E1:D4:B1:65:EE:B3:84:04:73:A7 X509v3 Authority Key Identifier: keyid:BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:1d:31:3b:f8:05:3b:00:df:68:c7:83:f2:73:29:30:6c:f1: b0:fe:b6:ee:e8:24:be:29:b4:bf:7f:51:51:57:54:39:04:25: 8a:d2:6d:a3:99:53:02:8a:99:72:58:cb:f3:08:2a:99:36:7a: fb:56:26:c9:e7:d0:e6:9b:c0:5f:34:25:c6:1c:56:84:d3:7c: 7a:4d:9c:d6:71:39:e8:f2:42:b5:6c:e9:7a:c0:6f:6f:1b:29: 72:c4:0e:7b:23:09:37:eb:8f:e3:87:f6:c8:f4:f3:03:8c:ae: 9e:01:d8:b2:d5:21:b5:c4:a5:21:48:cf:16:1e:84:a9:e4:e4: e2:12:c0:82:94:bd:95:db:87:22:0c:b5:fe:0d:40:5c:a8:69: e0:ed:56:43:ff:26:ce:49:87:53:3e:0d:f9:27:8f:00:fc:3a: 7f:17:61:59:85:ed:75:7b:7e:d8:9e:b5:90:3a:3f:99:bc:91: 31:fe:01:d1:d4:42:76:85:ac:a5:bb:12:6b:c4:1e:63:8b:6e: 08:4c:f9:15:79:66:0e:01:7d:6a:14:5f:00:86:c9:74:a3:d6: f8:8b:b5:29:8d:b8:f1:eb:6b:3d:0b:27:2e:8c:97:25:6a:df: 35:b5:a0:64:a6:6f:f2:22:c0:36:a0:48:f7:0f:61:4e:c6:6b: 1b:97:ef:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY5NUUxMTAvBgNVBAUTKEJGMUJBQjRDRjBENTQ5MzBFMDAxQjcyRDI0RjMwQjNF RDY4QUUyQjMwHhcNMjUwODIyMTcyNTMzWhcNMjUwODI5MTcyNTMzWjAYMRYwFAYD VQQDEw02OGE4YTgwZC03MjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKsRfe+jgRNWv1OX3GNCue0pwUX7QLqMGPgSgUp78vCQN4wPqtU2qYEDHK9P nn0BYQG4XIquOiUEGes1S13sa/U2djjyTE4C+wqvERMYtFTaktuTAy7g75qLLA6g 2QgTfvxP2P92xW0jSOVAHWGrgMY07rX1CcDfFGyxcM5usKPpTyZ588SqQMvA3a2j ikO0v/Su1HjjArpGyuwroo+a5Lc0cRZZ7l/pV9mBWiogn3vmuVPUUFbk0RrhM0zh I40ElTri5b1zJYoh+sXM2XBB7KvZStZEXorDaJHeUyFc8wxLOHQE4x8CFcP60k4o /wBMvScJQ+YdZyafPszFTkiPLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/z2ECI MAYyGqLh1LFl7rOEBHOnMB8GA1UdIwQYMBaAFL8bq0zw1Ukw4AG3LSTzCz7WiuKz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Rjk1RS9CNzA4Nzk2ODI1 RTkxMUU5QkUzMUQ0N0RDNEY5QUUwMi92eHVyVFBEVlNURGdBYmN0SlBNTFB0YUs0 ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z4dXJUUERWU1REZ0FiY3RKUE1MUHRhSzRyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Rjk1RS9CNzA4Nzk2ODI1RTkxMUU5QkUzMUQ0N0RDNEY5QUUwMi92eHVyVFBEVlNU RGdBYmN0SlBNTFB0YUs0ck0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADHTE7+AU7AN9ox4PycykwbPGw/rbu6CS+KbS/f1FRV1Q5BCWK0m2j mVMCiplyWMvzCCqZNnr7VibJ59Dmm8BfNCXGHFaE03x6TZzWcTno8kK1bOl6wG9v GylyxA57Iwk364/jh/bI9PMDjK6eAdiy1SG1xKUhSM8WHoSp5OTiEsCClL2V24ci DLX+DUBcqGng7VZD/ybOSYdTPg35J48A/Dp/F2FZhe11e37YnrWQOj+ZvJEx/gHR 1EJ2hayluxJrxB5ji24ITPkVeWYOAX1qFF8Ahsl0o9b4i7Upjbjx62s9CycujJcl at81taBkpm/yIsA2oEj3D2FOxmsbl+8M -----END CERTIFICATE-----Generated at Sun Aug 24 03:03:01 2025 by rpki-client