$ rpki-client -vvf rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft File: vJfyb7J4ln3TyjnFndCMaiwjBvk.mft (raw, json) Hash identifier: g5flBdvjkTHkwSsmk9Haz1cOoMY+M/Dfy6YRyfPthgE= Subject key identifier: 27:20:B4:7A:E2:EE:09:7D:D2:4F:F6:9E:C4:3B:E4:F6:26:9F:41:3E Authority key identifier: BC:97:F2:6F:B2:78:96:7D:D3:CA:39:C5:9D:D0:8C:6A:2C:23:06:F9 Certificate issuer: /CN=A9171845/serialNumber=BC97F26FB278967DD3CA39C59DD08C6A2C2306F9 Certificate serial: 050B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft Manifest number: 0503 Signing time: Fri 22 Aug 2025 23:51:39 +0000 Manifest this update: Fri 22 Aug 2025 23:51:38 +0000 Manifest next update: Fri 29 Aug 2025 23:51:38 +0000 Files and hashes: 1: vJfyb7J4ln3TyjnFndCMaiwjBvk.crl (hash: PgSJylRcAXmUYgaUnPU1nRjCsL3188jBg7MBtSHpTSQ=) 2: 8B91EDB420CD11EC97292B78C4F9AE02.roa (hash: eIj7A9yHm5UyaDqD5wlEFgtzeqxaYRyGJ855/hLNbFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.crl rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1291 (0x50b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171845, serialNumber=BC97F26FB278967DD3CA39C59DD08C6A2C2306F9 Validity Not Before: Aug 22 23:51:38 2025 GMT Not After : Aug 29 23:51:38 2025 GMT Subject: CN=68a9028b-e9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:cd:9b:83:02:f1:2d:1e:c1:73:98:5c:7c: 32:e2:cc:92:60:a8:c6:a9:77:1b:1f:00:85:59:33: 89:72:70:80:60:2f:ef:02:94:28:a0:0d:83:bf:52: a8:a4:27:2b:a1:37:0b:35:d0:d3:56:11:ea:a5:c6: ff:e1:d1:25:90:4b:42:2a:5b:16:ec:bd:7d:5d:89: 8c:c5:ee:fe:e5:3f:ff:8f:fc:a5:d7:1d:94:33:83: 3a:7c:6d:8a:0d:31:52:b1:7d:78:c1:71:d6:76:7a: 80:74:ff:a1:63:56:26:d9:a2:64:7d:a2:10:02:d7: c9:0b:77:82:aa:e8:80:17:d9:bc:15:76:81:7d:6b: 94:40:95:58:ae:ab:b3:8a:a9:b7:12:c3:88:25:6b: 7d:ac:90:65:54:7b:73:e7:a4:7c:e1:3f:a0:13:3b: 87:c5:42:76:61:51:e8:6a:f8:ad:f0:bc:b1:75:ce: d0:06:1b:47:46:9c:68:43:95:ff:ee:72:d1:c1:13: d5:ab:8e:a6:ac:69:7f:6d:02:2a:3b:da:48:3e:dd: ad:36:8e:60:d9:36:d9:97:72:e1:4f:aa:f5:5f:4f: 11:19:b0:9d:e6:94:44:77:78:a0:ad:0a:5a:7b:b5: 61:b0:90:9c:70:f8:9a:e8:26:4c:47:0a:05:73:b1: 42:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:20:B4:7A:E2:EE:09:7D:D2:4F:F6:9E:C4:3B:E4:F6:26:9F:41:3E X509v3 Authority Key Identifier: keyid:BC:97:F2:6F:B2:78:96:7D:D3:CA:39:C5:9D:D0:8C:6A:2C:23:06:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:89:75:4e:88:11:00:69:22:9e:90:c6:46:26:b1:8c:2f:2d: 68:e2:a2:03:01:85:17:01:29:2a:d4:e0:eb:71:11:02:d0:32: 35:1d:50:f9:ee:b9:64:6f:d3:13:75:3e:18:90:13:65:03:49: 98:5b:01:5e:59:ef:5f:e6:c6:78:9b:b8:ac:6d:0d:1d:bb:12: cb:27:52:56:2d:b8:bd:fb:77:26:e6:21:76:35:8a:5b:96:15: 76:8d:07:e3:53:26:88:ea:95:ef:7d:c2:68:3c:ff:1a:78:f0: df:41:6d:05:39:53:9f:8d:8d:8b:f1:c4:5e:3f:ed:7e:19:83: 3f:d3:d6:ca:f5:4e:1c:7f:e8:55:06:17:31:c4:f6:f7:56:1c: bc:32:79:3a:9c:f8:50:b1:0b:a7:bb:57:90:af:8e:c0:56:46: 6b:93:29:e9:2c:ce:59:76:47:8c:a5:48:82:1e:b9:08:97:8d: d7:9f:5c:1d:85:40:e0:fe:15:05:b0:99:c2:14:29:bc:53:56: dc:10:d4:41:27:55:1d:f5:66:94:e6:f0:c2:6f:58:f3:f0:88: 25:4d:cc:e3:87:25:9d:35:40:1d:98:43:7c:1a:30:5b:f8:11: de:04:c1:c9:37:2c:2f:2e:3f:e3:04:12:16:1f:c4:60:ac:25: 09:5b:88:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE4NDUxMTAvBgNVBAUTKEJDOTdGMjZGQjI3ODk2N0REM0NBMzlDNTlERDA4QzZB MkMyMzA2RjkwHhcNMjUwODIyMjM1MTM4WhcNMjUwODI5MjM1MTM4WjAYMRYwFAYD VQQDEw02OGE5MDI4Yi1lOWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArl3Nm4MC8S0ewXOYXHwy4sySYKjGqXcbHwCFWTOJcnCAYC/vApQooA2Dv1Ko pCcroTcLNdDTVhHqpcb/4dElkEtCKlsW7L19XYmMxe7+5T//j/yl1x2UM4M6fG2K DTFSsX14wXHWdnqAdP+hY1Ym2aJkfaIQAtfJC3eCquiAF9m8FXaBfWuUQJVYrquz iqm3EsOIJWt9rJBlVHtz56R84T+gEzuHxUJ2YVHoavit8Lyxdc7QBhtHRpxoQ5X/ 7nLRwRPVq46mrGl/bQIqO9pIPt2tNo5g2TbZl3LhT6r1X08RGbCd5pREd3igrQpa e7VhsJCccPia6CZMRwoFc7FCpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcgtHri 7gl90k/2nsQ75PYmn0E+MB8GA1UdIwQYMBaAFLyX8m+yeJZ908o5xZ3QjGosIwb5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg0NS83QjYyQzgwODIw Q0ExMUVDQjY2QzE0NTJDNEY5QUUwMi92SmZ5YjdKNGxuM1R5am5GbmRDTWFpd2pC dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZKZnliN0o0bG4zVHlqbkZuZENNYWl3akJ2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTg0NS83QjYyQzgwODIwQ0ExMUVDQjY2QzE0NTJDNEY5QUUwMi92SmZ5YjdKNGxu M1R5am5GbmRDTWFpd2pCdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6iXVOiBEAaSKekMZGJrGMLy1o4qIDAYUXASkq1ODrcREC0DI1HVD5 7rlkb9MTdT4YkBNlA0mYWwFeWe9f5sZ4m7isbQ0duxLLJ1JWLbi9+3cm5iF2NYpb lhV2jQfjUyaI6pXvfcJoPP8aePDfQW0FOVOfjY2L8cReP+1+GYM/09bK9U4cf+hV BhcxxPb3Vhy8Mnk6nPhQsQunu1eQr47AVkZrkynpLM5ZdkeMpUiCHrkIl43Xn1wd hUDg/hUFsJnCFCm8U1bcENRBJ1Ud9WaU5vDCb1jz8IglTczjhyWdNUAdmEN8GjBb +BHeBMHJNywvLj/jBBIWH8RgrCUJW4iV -----END CERTIFICATE-----Generated at Sat Aug 23 12:39:59 2025 by rpki-client