$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft File: VngmFidUtGDLWGbawxSIDHA1Rh0.mft (raw, json) Hash identifier: Vgqmfyu4dizfi3Qy3avuzOSisklQUb3qcMGPegQJCrE= Subject key identifier: E1:9A:3D:DD:EC:77:C2:56:74:CF:D8:31:18:DE:FD:0F:D1:A3:E7:35 Authority key identifier: 56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D Certificate issuer: /CN=A917D9B8/serialNumber=567826162754B460CB5866DAC314880C7035461D Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft Manifest number: F8 Signing time: Sat 23 Aug 2025 05:22:33 +0000 Manifest this update: Sat 23 Aug 2025 05:22:33 +0000 Manifest next update: Sat 30 Aug 2025 05:22:33 +0000 Files and hashes: 1: VngmFidUtGDLWGbawxSIDHA1Rh0.crl (hash: gtdAgxcPZYpKozB3cvt1hL5DcZdRBbOvyHlWubAE2Xk=) 2: DFDEC4D007A411EFAB20A473C4F9AE02.roa (hash: hQsClVPo6k6KSQkrPXRux2ZE6YMvDs1XKFlnN0n+rhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.crl rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9B8, serialNumber=567826162754B460CB5866DAC314880C7035461D Validity Not Before: Aug 23 05:22:33 2025 GMT Not After : Aug 30 05:22:33 2025 GMT Subject: CN=68a95019-9055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:57:42:eb:74:52:59:d9:ff:81:4e:90:a8:e4: 91:9c:d5:95:e2:16:91:10:0a:2a:42:03:66:97:c1: bd:33:45:6b:ac:4b:c2:eb:ec:d7:32:bc:ca:80:ef: 4a:72:5f:d5:ec:ac:66:85:ba:d8:08:d2:73:5c:54: e9:2a:22:a5:a8:78:0a:4b:f7:39:94:ad:bb:11:4f: 1b:a6:23:96:09:2f:8e:3a:f2:e6:9d:e1:55:53:43: 17:28:8f:ec:a4:74:25:1c:b1:a5:2c:3b:51:a6:2f: 70:ac:55:ff:84:f8:d9:9d:79:a2:3d:d8:48:fc:de: 52:50:14:7c:a1:9c:94:20:86:20:14:67:17:05:08: 5f:a8:3f:b7:38:ee:e6:2c:27:5f:7e:4a:d9:83:4e: ea:d4:c2:c0:af:d9:78:e4:cc:2d:12:37:cd:7d:8b: e9:ee:45:9c:63:25:06:e1:c4:fd:51:01:21:bb:d4: 22:b8:fd:12:d2:69:f2:11:6f:48:87:43:ac:51:38: 99:25:70:bf:36:df:be:e7:32:96:4f:e4:35:74:19: 90:c6:ad:12:1a:c4:c0:60:92:e4:1e:e6:35:c3:77: 9a:03:2d:ef:f5:ad:08:ac:07:28:43:22:57:6a:52: 4e:69:7c:3d:d4:a2:16:2c:16:0d:79:e0:63:24:29: db:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9A:3D:DD:EC:77:C2:56:74:CF:D8:31:18:DE:FD:0F:D1:A3:E7:35 X509v3 Authority Key Identifier: keyid:56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:3e:f5:4c:40:90:fb:18:12:2b:6b:e8:2d:09:8a:fa:db:0b: fe:ca:53:81:40:9a:08:01:96:b9:1f:5c:1b:df:dc:2a:07:0b: e2:0c:0d:58:44:95:9c:03:75:0b:9a:90:69:18:ad:74:cf:28: 21:58:e1:61:6b:fe:97:49:85:d5:6f:dd:2c:03:c0:58:d4:4e: bc:b1:8d:d5:13:c9:0c:08:b3:46:75:98:70:ec:35:1a:e5:bd: b8:bf:28:9f:32:af:39:25:de:c7:67:9f:ca:db:ab:50:02:a9: 70:53:b2:78:99:a0:ae:bc:3d:85:9d:20:04:ac:03:79:ed:b5: e0:a9:dc:21:49:0e:15:bc:98:d4:a6:da:9e:b0:f0:83:42:03: 9f:36:08:6b:e8:41:fb:b0:b1:b9:97:e8:e0:38:04:a6:92:7d: 38:8d:81:0d:6b:5e:e8:2f:9e:98:cd:58:1f:3f:39:24:a8:89: fc:6d:0c:57:76:2c:2e:f3:1f:1a:95:06:a3:14:8d:78:6b:ba: b9:2f:00:31:96:a4:d8:94:ea:0c:3e:e9:d5:e0:e7:7e:36:64: d0:a8:4d:b0:3c:16:84:7a:e6:82:83:65:36:f7:5e:cb:76:16: 3f:cd:2d:ea:8b:bf:0b:34:79:46:0d:fe:30:d6:a8:e1:50:49: 03:02:bd:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5QjgxMTAvBgNVBAUTKDU2NzgyNjE2Mjc1NEI0NjBDQjU4NjZEQUMzMTQ4ODBD NzAzNTQ2MUQwHhcNMjUwODIzMDUyMjMzWhcNMjUwODMwMDUyMjMzWjAYMRYwFAYD VQQDEw02OGE5NTAxOS05MDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7VdC63RSWdn/gU6QqOSRnNWV4haREAoqQgNml8G9M0VrrEvC6+zXMrzKgO9K cl/V7KxmhbrYCNJzXFTpKiKlqHgKS/c5lK27EU8bpiOWCS+OOvLmneFVU0MXKI/s pHQlHLGlLDtRpi9wrFX/hPjZnXmiPdhI/N5SUBR8oZyUIIYgFGcXBQhfqD+3OO7m LCdffkrZg07q1MLAr9l45MwtEjfNfYvp7kWcYyUG4cT9UQEhu9QiuP0S0mnyEW9I h0OsUTiZJXC/Nt++5zKWT+Q1dBmQxq0SGsTAYJLkHuY1w3eaAy3v9a0IrAcoQyJX alJOaXw91KIWLBYNeeBjJCnbJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGaPd3s d8JWdM/YMRje/Q/Ro+c1MB8GA1UdIwQYMBaAFFZ4JhYnVLRgy1hm2sMUiAxwNUYd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlCOC9DOEIxRDQ0RTA3 QTExMUVGODRGM0QyNkFDNEY5QUUwMi9WbmdtRmlkVXRHRExXR2Jhd3hTSURIQTFS aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZuZ21GaWRVdEdETFdHYmF3eFNJREhBMVJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDlCOC9DOEIxRDQ0RTA3QTExMUVGODRGM0QyNkFDNEY5QUUwMi9WbmdtRmlkVXRH RExXR2Jhd3hTSURIQTFSaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpPvVMQJD7GBIra+gtCYr62wv+ylOBQJoIAZa5H1wb39wqBwviDA1Y RJWcA3ULmpBpGK10zyghWOFha/6XSYXVb90sA8BY1E68sY3VE8kMCLNGdZhw7DUa 5b24vyifMq85Jd7HZ5/K26tQAqlwU7J4maCuvD2FnSAErAN57bXgqdwhSQ4VvJjU ptqesPCDQgOfNghr6EH7sLG5l+jgOASmkn04jYENa17oL56YzVgfPzkkqIn8bQxX diwu8x8alQajFI14a7q5LwAxlqTYlOoMPunV4Od+NmTQqE2wPBaEeuaCg2U2917L dhY/zS3qi78LNHlGDf4w1qjhUEkDAr31 -----END CERTIFICATE-----Generated at Sat Aug 23 20:27:23 2025 by rpki-client