$ rpki-client -vvf rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft File: VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft (raw, json) Hash identifier: yHZ3asIgzeA1b1VnTqsgejGPI+0BrodPzw7GdoJnsYc= Subject key identifier: BC:3E:FE:90:C1:06:E4:75:5F:50:72:B9:6A:CC:90:D5:6D:7B:98:4D Authority key identifier: 54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD Certificate issuer: /CN=A91790C3/serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD Certificate serial: 06A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft Manifest number: 0692 Signing time: Fri 22 Aug 2025 22:29:18 +0000 Manifest this update: Fri 22 Aug 2025 22:29:17 +0000 Manifest next update: Fri 29 Aug 2025 22:29:17 +0000 Files and hashes: 1: VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl (hash: J046SyZbvJffPAPFSNbaJjNfjQ1HHTNCkqpCU2u7fRM=) 2: C437B01282C211EBBB08B280C4F9AE02.roa (hash: jFt3e40+ALQhrJp6OJZEoPNCJM/tKBFq4PlGOIsp684=) 3: C3AD861C82C211EBBB08B280C4F9AE02.roa (hash: ExeORiGRCNK8jvuw56sySZxqK+GOSBQ3JY3+3QQDiXc=) 4: 9EA2D73236D311EF89295180C4F9AE02.roa (hash: f2ke3ZBYV1Ribvo8r5rmx6HoUBDp7E1lgqZwRkmtN9g=) 5: C310545082C211EBBB08B280C4F9AE02.roa (hash: +qteBc7xk/iNE1OmAmAugB8Y+ErzQcUywqF9mnDTvtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:29:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91790C3, serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD Validity Not Before: Aug 22 22:29:17 2025 GMT Not After : Aug 29 22:29:17 2025 GMT Subject: CN=68a8ef3d-76b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:c2:6b:17:ef:17:79:d8:5d:21:5f:af:90: 0a:68:07:13:4a:f3:0f:dc:70:b3:3b:e2:ce:c7:cc: 30:47:07:46:1c:72:c7:53:72:81:b1:59:ce:b3:cc: 6e:09:7e:49:3a:df:b6:97:88:a8:f2:ac:c7:ba:8f: e5:e5:4d:97:c7:b7:59:d1:63:fc:6f:f4:05:f7:7f: 9b:d0:cd:ff:28:e6:6f:1c:d2:d5:9c:a6:19:63:bf: 1b:df:0a:7d:e7:f6:dc:61:68:7d:a3:48:f3:2d:f5: 72:bc:a6:d8:ba:61:af:2d:bb:b3:ac:b3:a3:c4:de: 12:02:f1:de:1b:1b:00:47:20:c0:db:56:e6:de:d9: 26:aa:47:b6:39:5f:1f:06:22:70:c4:51:41:6b:6e: 4b:5f:34:13:57:e5:93:b1:c9:bb:8a:4e:7e:62:4b: e4:38:e8:96:57:68:a4:51:48:97:d1:23:0c:1d:b1: d4:c4:56:36:99:12:c4:c2:0a:42:62:61:c8:48:35: f5:a2:6d:db:41:fc:b0:ec:7b:86:a6:b1:f5:6e:1a: 03:90:8a:67:f2:a7:b3:4a:e6:31:94:e5:1a:1b:93: a5:6d:b5:f1:b4:5d:56:d9:39:88:84:bd:6c:04:f8: 88:52:c7:ff:6e:3d:4f:a0:e4:b5:22:c8:ff:70:d9: ed:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3E:FE:90:C1:06:E4:75:5F:50:72:B9:6A:CC:90:D5:6D:7B:98:4D X509v3 Authority Key Identifier: keyid:54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:dd:44:f1:31:d7:e3:2c:f1:33:40:38:c7:18:81:2d:16:06: dc:f6:78:7e:63:7c:00:a2:bb:0d:5f:d2:65:3f:99:34:6d:b6: a1:a8:d1:ff:fa:8e:2b:15:28:84:cc:5f:2b:1c:17:61:7b:0f: 8e:c6:f2:1e:e1:2e:4b:a2:0d:69:99:a7:c7:7e:df:0f:84:6c: fa:10:ee:f5:14:99:43:b9:58:5f:1b:50:99:a6:1a:f0:b9:cb: 44:1c:12:11:05:13:cb:e1:35:d7:00:54:62:db:e7:81:b5:e8: b5:05:25:28:3b:17:f1:af:e3:50:21:c4:d9:3e:65:e1:00:70: 22:35:38:af:f9:5e:f2:a7:57:55:36:88:32:ac:bc:d9:21:ba: ec:20:f0:84:9e:da:7a:81:22:43:57:10:40:50:00:6f:3a:7a: 1d:39:07:a4:4f:3e:4a:09:f6:65:a2:6b:9c:33:91:a3:32:01: 58:c3:10:c9:68:9c:6a:51:65:3b:20:68:52:9e:ca:df:1a:91: 05:20:81:37:39:eb:27:73:2c:3a:77:5f:ad:a6:af:17:fb:bc: a8:69:58:ab:5b:6d:1c:2f:38:46:c0:0a:f0:8a:2a:49:a2:13: eb:71:71:7d:53:05:95:29:b4:03:8b:68:d6:c7:34:95:c4:5b: 6f:54:6e:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzkwQzMxMTAvBgNVBAUTKDU0ODdCNjNGNDRENjkxRDQzNTY4OEFGRTNDOEFDMjdC RkQ5MTEyQUQwHhcNMjUwODIyMjIyOTE3WhcNMjUwODI5MjIyOTE3WjAYMRYwFAYD VQQDEw02OGE4ZWYzZC03NmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtbCaxfvF3nYXSFfr5AKaAcTSvMP3HCzO+LOx8wwRwdGHHLHU3KBsVnOs8xu CX5JOt+2l4io8qzHuo/l5U2Xx7dZ0WP8b/QF93+b0M3/KOZvHNLVnKYZY78b3wp9 5/bcYWh9o0jzLfVyvKbYumGvLbuzrLOjxN4SAvHeGxsARyDA21bm3tkmqke2OV8f BiJwxFFBa25LXzQTV+WTscm7ik5+YkvkOOiWV2ikUUiX0SMMHbHUxFY2mRLEwgpC YmHISDX1om3bQfyw7HuGprH1bhoDkIpn8qezSuYxlOUaG5OlbbXxtF1W2TmIhL1s BPiIUsf/bj1PoOS1Isj/cNntBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLw+/pDB BuR1X1ByuWrMkNVte5hNMB8GA1UdIwQYMBaAFFSHtj9E1pHUNWiK/jyKwnv9kRKt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTBDMy84NTUzMDVFMjgy QzAxMUVCQkFDRTJBN0JDNEY5QUUwMi9WSWUyUDBUV2tkUTFhSXItUElyQ2VfMlJF cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJZTJQMFRXa2RRMWFJci1QSXJDZV8yUkVxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTBDMy84NTUzMDVFMjgyQzAxMUVCQkFDRTJBN0JDNEY5QUUwMi9WSWUyUDBUV2tk UTFhSXItUElyQ2VfMlJFcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB3UTxMdfjLPEzQDjHGIEtFgbc9nh+Y3wAorsNX9JlP5k0bbahqNH/ +o4rFSiEzF8rHBdhew+OxvIe4S5Log1pmafHft8PhGz6EO71FJlDuVhfG1CZphrw uctEHBIRBRPL4TXXAFRi2+eBtei1BSUoOxfxr+NQIcTZPmXhAHAiNTiv+V7yp1dV NogyrLzZIbrsIPCEntp6gSJDVxBAUABvOnodOQekTz5KCfZlomucM5GjMgFYwxDJ aJxqUWU7IGhSnsrfGpEFIIE3Oesncyw6d1+tpq8X+7yoaVirW20cLzhGwArwiipJ ohPrcXF9UwWVKbQDi2jWxzSVxFtvVG6F -----END CERTIFICATE-----Generated at Sun Aug 24 00:07:29 2025 by rpki-client