$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft File: vcSlFjMX9zCX8CejQrhgp5LX8dw.mft (raw, json) Hash identifier: d+tY6rUbxVc5eFaWRLOZ5mwmQrYnWVhGKv2SSO1MNX8= Subject key identifier: 90:EF:BF:12:E4:B9:70:E2:E4:CB:A6:69:51:1F:5E:E9:0D:E0:96:72 Authority key identifier: BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC Certificate issuer: /CN=A9179F64/serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft Manifest number: BE Signing time: Sat 23 Aug 2025 06:07:21 +0000 Manifest this update: Sat 23 Aug 2025 06:07:21 +0000 Manifest next update: Sat 30 Aug 2025 06:07:21 +0000 Files and hashes: 1: vcSlFjMX9zCX8CejQrhgp5LX8dw.crl (hash: aiWTFCFSxL7mu0ioEHlzTYa8Lsjl0iTv/zycizpzHu8=) 2: AB4A60EECBA311EFB9E20E13C4F9AE02.roa (hash: Xcy4MFhRyr2k/5Jm4R5iv0t1VBaS/P+wq9LQCj1UUVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F64, serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC Validity Not Before: Aug 23 06:07:21 2025 GMT Not After : Aug 30 06:07:21 2025 GMT Subject: CN=68a95a99-1aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1c:db:9b:55:71:4c:fa:4c:9d:0e:b3:3b:44: 3e:bd:ee:71:74:8d:be:7a:8f:3b:bd:9c:11:ef:03: 0c:b3:ae:ea:28:1b:02:9a:e8:dc:a8:e6:27:9d:93: ac:71:80:89:35:e7:fd:d6:6d:f7:86:f8:b0:bf:ec: 62:0b:1a:7a:74:3b:b2:25:2d:15:74:a6:96:95:c4: 5a:75:49:33:84:eb:00:2c:14:86:a8:ba:be:c3:b7: 4c:5c:88:6a:45:5b:34:40:97:59:6b:d7:20:11:8b: 07:c3:7e:c6:89:a0:ef:d2:36:98:9d:7c:9a:c7:b5: db:23:56:9b:83:42:41:48:38:c6:b4:99:1a:50:9a: 2e:60:c9:5a:ff:dc:b8:ed:8b:29:fc:44:e2:28:ce: 20:69:51:38:7d:03:16:11:7d:a6:34:a0:33:7e:7a: 11:7a:d8:79:2b:7d:6c:b6:e4:e8:76:58:e4:f9:cf: a8:8d:75:a6:f6:2e:a5:11:36:08:98:d0:aa:79:cd: 26:e1:6d:01:0e:90:51:46:fa:41:60:fa:71:a8:59: 6b:fb:72:49:da:8c:55:f5:e9:9c:9b:2c:cb:73:8f: 93:33:7f:4a:ed:7a:cb:d3:48:75:e8:5a:0d:85:ec: 24:2a:bc:11:6b:90:95:ca:bc:72:18:ca:52:d8:e8: 9f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EF:BF:12:E4:B9:70:E2:E4:CB:A6:69:51:1F:5E:E9:0D:E0:96:72 X509v3 Authority Key Identifier: keyid:BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:8f:6c:94:20:11:f0:2a:a7:25:08:92:fe:34:ab:ae:c6:31: 65:14:66:0a:95:f5:ac:97:0c:16:87:4f:e5:61:69:67:8e:43: c6:d3:b5:9d:72:d7:49:e9:93:10:07:72:2d:c0:fc:8d:ed:7c: ba:ff:ca:0d:df:ef:b4:3e:83:e1:a9:40:8a:e6:b6:ac:ab:4e: 12:89:b7:8b:95:96:37:c6:f2:dc:a9:08:83:96:39:4a:73:26: 78:9e:ab:e0:ac:8f:d2:69:b0:a2:51:17:b5:c4:ec:c1:08:e8: c5:11:a0:12:bc:16:e0:c2:22:f8:12:bf:f1:20:79:39:d6:dc: 3d:4f:06:8a:c4:a2:13:ae:3c:18:01:96:a4:b6:f8:b1:22:fa: 1e:22:4c:8f:11:cc:9d:ef:5a:78:c7:ab:bf:ad:38:99:61:b7: 45:45:e1:cb:35:1b:28:83:94:c0:bf:7e:b4:ae:5f:32:b9:ab: b0:21:6d:38:12:f5:fa:86:d6:c7:3a:5d:cc:c4:e2:8e:59:26: 25:5d:57:19:1b:91:c1:34:d2:5a:be:d1:28:85:ce:6d:86:fb: 1c:8a:02:f8:ce:03:af:6f:f1:57:83:1f:16:8b:c1:75:4f:db: 41:67:21:f5:31:bb:c9:a3:42:80:6f:49:11:11:8d:83:be:59: 4a:2f:1c:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGNjQxMTAvBgNVBAUTKEJEQzRBNTE2MzMxN0Y3MzA5N0YwMjdBMzQyQjg2MEE3 OTJEN0YxREMwHhcNMjUwODIzMDYwNzIxWhcNMjUwODMwMDYwNzIxWjAYMRYwFAYD VQQDEw02OGE5NWE5OS0xYWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBzbm1VxTPpMnQ6zO0Q+ve5xdI2+eo87vZwR7wMMs67qKBsCmujcqOYnnZOs cYCJNef91m33hviwv+xiCxp6dDuyJS0VdKaWlcRadUkzhOsALBSGqLq+w7dMXIhq RVs0QJdZa9cgEYsHw37GiaDv0jaYnXyax7XbI1abg0JBSDjGtJkaUJouYMla/9y4 7Ysp/ETiKM4gaVE4fQMWEX2mNKAzfnoReth5K31stuTodljk+c+ojXWm9i6lETYI mNCqec0m4W0BDpBRRvpBYPpxqFlr+3JJ2oxV9emcmyzLc4+TM39K7XrL00h16FoN hewkKrwRa5CVyrxyGMpS2OifYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDvvxLk uXDi5MumaVEfXukN4JZyMB8GA1UdIwQYMBaAFL3EpRYzF/cwl/Ano0K4YKeS1/Hc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2NC84MDkzODQ2NDYy NEIxMUVGQUIxMjBGNEZDNEY5QUUwMi92Y1NsRmpNWDl6Q1g4Q2VqUXJoZ3A1TFg4 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZjU2xGak1YOXpDWDhDZWpRcmhncDVMWDhkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUY2NC84MDkzODQ2NDYyNEIxMUVGQUIxMjBGNEZDNEY5QUUwMi92Y1NsRmpNWDl6 Q1g4Q2VqUXJoZ3A1TFg4ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjj2yUIBHwKqclCJL+NKuuxjFlFGYKlfWslwwWh0/lYWlnjkPG07Wd ctdJ6ZMQB3ItwPyN7Xy6/8oN3++0PoPhqUCK5rasq04SibeLlZY3xvLcqQiDljlK cyZ4nqvgrI/SabCiURe1xOzBCOjFEaASvBbgwiL4Er/xIHk51tw9TwaKxKITrjwY AZaktvixIvoeIkyPEcyd71p4x6u/rTiZYbdFReHLNRsog5TAv360rl8yuauwIW04 EvX6htbHOl3MxOKOWSYlXVcZG5HBNNJavtEohc5thvscigL4zgOvb/FXgx8Wi8F1 T9tBZyH1MbvJo0KAb0kREY2DvllKLxxX -----END CERTIFICATE-----Generated at Sat Aug 23 21:30:18 2025 by rpki-client