$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft File: VN6ZlQt_yVgf6KyWHze3iY81zcM.mft (raw, json) Hash identifier: Na9bYhYd7n4e7q+eQhEOCLUwUvJX6CeovzjA9HuurKw= Subject key identifier: 05:E0:94:F1:3B:E4:20:EE:C5:D8:A1:79:03:7B:50:1F:FF:C0:8E:20 Authority key identifier: 54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3 Certificate issuer: /CN=A917E458/serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft Manifest number: 35 Signing time: Sat 23 Aug 2025 07:50:38 +0000 Manifest this update: Sat 23 Aug 2025 07:50:38 +0000 Manifest next update: Sat 30 Aug 2025 07:50:38 +0000 Files and hashes: 1: VN6ZlQt_yVgf6KyWHze3iY81zcM.crl (hash: Yp0XtoAH5VfYJIUpEOO1SK/RP+1PsB2j9+5Vpzs2pvQ=) 2: 8F8A915C590C11F0AC0A3639C4F9AE02.roa (hash: 65bo4JvkKG1LiWSEJwhJil93bHGvwvvTBpuZe2kaGMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E458, serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3 Validity Not Before: Aug 23 07:50:38 2025 GMT Not After : Aug 30 07:50:38 2025 GMT Subject: CN=68a972ce-d34a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ec:a8:0a:fd:d2:50:34:64:bd:a0:e6:7a:49: af:bb:03:b5:b0:e6:cb:59:cf:47:33:be:59:0c:da: 51:55:93:40:9d:81:5a:12:e3:c3:e3:38:1e:92:c4: c9:db:5b:cf:83:86:ed:14:e8:6c:85:f2:42:ba:a4: 32:0c:1e:55:ec:11:ad:79:cf:80:47:23:d1:18:82: c2:87:ef:5a:a1:db:c2:6b:3d:ed:09:64:95:17:aa: 6f:81:86:1c:77:6d:8b:f3:b2:a5:f6:30:d3:01:4c: 49:37:0b:ff:b1:b1:9c:c9:08:d1:47:49:fa:c9:8f: 65:7d:35:30:17:fb:40:2b:ca:53:62:e1:4a:8e:22: eb:30:30:16:3b:aa:17:7d:b1:3c:70:8d:ad:db:10: 85:24:fb:08:79:6a:af:68:5d:63:bb:cf:16:15:37: 05:09:06:0e:bd:20:99:b9:1a:39:73:cc:77:b4:2c: 95:c3:54:9f:32:aa:43:cf:48:23:1a:9f:58:c5:cc: 97:0e:22:f1:0a:d5:e1:b7:75:28:10:5f:1d:d9:bc: 09:56:e2:11:5b:ba:bc:06:d9:cd:05:a2:64:12:71: 50:13:40:15:03:56:99:9f:2a:3a:77:af:f0:8b:d9: b0:58:68:32:53:25:a7:52:b0:a3:74:e4:ad:25:bc: 39:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E0:94:F1:3B:E4:20:EE:C5:D8:A1:79:03:7B:50:1F:FF:C0:8E:20 X509v3 Authority Key Identifier: keyid:54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:9d:28:29:81:e4:0e:aa:34:a4:4f:43:3f:2d:37:0b:91:6f: ec:c1:4b:48:3f:aa:70:aa:c7:95:79:a6:24:c3:cd:6c:b7:e5: 1a:2a:00:cc:d0:f5:c7:3b:05:e5:e0:72:31:7d:2b:f4:50:a8: cc:8e:ce:5e:75:8b:2c:f8:07:1f:0c:74:dd:42:40:57:98:68: 86:1f:3a:19:4c:d0:43:93:94:89:b6:1f:6b:28:06:01:77:64: f7:c3:54:ae:a3:29:fa:77:e6:d6:37:db:97:a4:6b:f6:17:a8: 39:3f:cf:4b:35:85:3c:c9:0a:4e:b1:04:35:81:ce:10:06:07: f4:2a:fa:2a:a9:5f:8b:5c:f9:50:1c:aa:97:14:c1:5f:b9:c3: 20:e9:f6:10:2f:69:2a:cb:77:e4:76:f8:17:83:9a:f8:83:44: b5:06:ac:76:2a:73:24:c5:6a:f2:d0:b7:f0:49:7d:b0:40:e3: 58:9b:c5:70:30:a2:2e:4c:f0:ef:12:dc:02:ca:4c:b8:7d:c1: 00:b4:85:64:71:25:61:76:15:e0:ba:e3:5e:04:1a:46:e4:1b: 15:ed:03:bb:f0:a9:39:39:c6:b8:c8:18:42:cf:9c:3c:02:d6: 76:53:74:9b:a3:df:83:19:72:bb:a5:d9:c4:cc:29:04:37:ea: 78:87:2b:bc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTQ1ODExMC8GA1UEBRMoNTRERTk5OTUwQjdGQzk1ODFGRThBQzk2MUYzN0I3ODk4 RjM1Q0RDMzAeFw0yNTA4MjMwNzUwMzhaFw0yNTA4MzAwNzUwMzhaMBgxFjAUBgNV BAMTDTY4YTk3MmNlLWQzNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDd7KgK/dJQNGS9oOZ6Sa+7A7Ww5stZz0czvlkM2lFVk0CdgVoS48PjOB6SxMnb W8+Dhu0U6GyF8kK6pDIMHlXsEa15z4BHI9EYgsKH71qh28JrPe0JZJUXqm+Bhhx3 bYvzsqX2MNMBTEk3C/+xsZzJCNFHSfrJj2V9NTAX+0ArylNi4UqOIuswMBY7qhd9 sTxwja3bEIUk+wh5aq9oXWO7zxYVNwUJBg69IJm5GjlzzHe0LJXDVJ8yqkPPSCMa n1jFzJcOIvEK1eG3dSgQXx3ZvAlW4hFburwG2c0FomQScVATQBUDVpmfKjp3r/CL 2bBYaDJTJadSsKN05K0lvDmzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBeCU8Tvk IO7F2KF5A3tQH//AjiAwHwYDVR0jBBgwFoAUVN6ZlQt/yVgf6KyWHze3iY81zcMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNDU4LzFFQzcyRjIyMzBE ODExRjBBN0JFMkU0RkM0RjlBRTAyL1ZONlpsUXRfeVZnZjZLeVdIemUzaVk4MXpj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVk42WmxRdF95VmdmNkt5V0h6ZTNpWTgxemNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF NDU4LzFFQzcyRjIyMzBEODExRjBBN0JFMkU0RkM0RjlBRTAyL1ZONlpsUXRfeVZn ZjZLeVdIemUzaVk4MXpjTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJWdKCmB5A6qNKRPQz8tNwuRb+zBS0g/qnCqx5V5piTDzWy35RoqAMzQ 9cc7BeXgcjF9K/RQqMyOzl51iyz4Bx8MdN1CQFeYaIYfOhlM0EOTlIm2H2soBgF3 ZPfDVK6jKfp35tY325eka/YXqDk/z0s1hTzJCk6xBDWBzhAGB/Qq+iqpX4tc+VAc qpcUwV+5wyDp9hAvaSrLd+R2+BeDmviDRLUGrHYqcyTFavLQt/BJfbBA41ibxXAw oi5M8O8S3ALKTLh9wQC0hWRxJWF2FeC6414EGkbkGxXtA7vwqTk5xrjIGELPnDwC 1nZTdJuj34MZcrul2cTMKQQ36niHK7w= -----END CERTIFICATE-----Generated at Sun Aug 24 00:06:26 2025 by rpki-client