$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft File: vdXpp28axMjlF5fs6Z49zuzudJM.mft (raw, json) Hash identifier: COfMNf3ITa0ueqLJk0V0pT889ltHF+H680iA/jy8PFM= Subject key identifier: E8:70:1E:14:6E:8A:23:04:6B:CB:D8:48:50:2E:89:76:D8:EE:70:A2 Authority key identifier: BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 Certificate issuer: /CN=A9186E8A/serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Certificate serial: 080D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft Manifest number: 07C2 Signing time: Fri 22 Aug 2025 21:45:12 +0000 Manifest this update: Fri 22 Aug 2025 21:45:12 +0000 Manifest next update: Fri 29 Aug 2025 21:45:12 +0000 Files and hashes: 1: vdXpp28axMjlF5fs6Z49zuzudJM.crl (hash: 2H2DxnSC9yAbURWE1d1CxYPchYKt6gUi8T5tD9LJ0hw=) 2: 9A2EC0AA6BF011F0A7327D86C4F9AE02.roa (hash: q4XD/AQqfkjB0bWd2cAwQj0LVcqgF9IjAclvpli5BAw=) 3: B95187FC2FB811EBBF9A864BC4F9AE02.roa (hash: 7LNQOsT6W5YF7PbwLpdxc+PNq2qTTKmlTXDNMzrKzkc=) 4: DF70A63C6BF111F0A9181236C4F9AE02.roa (hash: q7i3CsKTp0yL6iYZiFHlx/5hnnt+XvM120dMmxFLBaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2061 (0x80d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186E8A, serialNumber=BDD5E9A76F1AC4C8E51797ECE99E3DCEECEE7493 Validity Not Before: Aug 22 21:45:12 2025 GMT Not After : Aug 29 21:45:12 2025 GMT Subject: CN=68a8e4e8-c004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:58:8c:ed:0b:ae:99:f8:db:85:b3:ae:ec:8b: 0b:37:e0:17:d4:79:de:9f:74:e6:14:c5:ef:3d:e3: b1:78:78:f8:2b:75:62:35:4a:a4:3f:e2:88:55:dd: 9b:52:45:db:84:52:5a:64:03:e2:7f:86:76:c4:ed: 91:57:15:10:00:39:72:2a:26:99:91:8c:78:ba:9f: 81:70:04:08:ea:dc:d8:bc:e5:22:30:4f:e9:51:29: 23:6f:01:4e:bb:4f:14:f5:ee:7f:e5:3c:2c:de:24: 89:ac:66:b5:80:1f:46:1e:dc:71:47:df:96:e8:86: c7:50:86:27:25:cb:f7:89:ef:30:3d:3c:68:d8:2e: 39:fb:92:4d:ed:55:af:d7:98:d5:19:09:4b:1b:5f: 87:90:94:a7:22:c6:09:65:b2:2f:28:22:1c:8e:7a: 21:80:ea:16:ca:67:d8:8d:a2:87:1d:10:b8:7b:51: 99:1c:ca:c2:4d:7e:ea:fd:a5:83:45:b2:e6:e5:bc: a7:1b:47:83:69:29:ae:6b:58:2f:7b:e1:3e:e3:c1: 6f:5b:fd:32:97:10:9b:95:fe:90:38:18:57:3c:6b: 4f:9b:19:b2:cc:54:3f:d4:50:9a:f6:5b:a6:b1:6e: d9:2d:55:04:d3:01:b6:90:5f:f0:ca:d9:40:3d:ca: a0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:70:1E:14:6E:8A:23:04:6B:CB:D8:48:50:2E:89:76:D8:EE:70:A2 X509v3 Authority Key Identifier: keyid:BD:D5:E9:A7:6F:1A:C4:C8:E5:17:97:EC:E9:9E:3D:CE:EC:EE:74:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vdXpp28axMjlF5fs6Z49zuzudJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3148DC9E2DFF11EB868A9135C4F9AE02/vdXpp28axMjlF5fs6Z49zuzudJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:5e:90:34:86:eb:2a:ef:da:dd:0b:6f:de:2c:ce:3d:b7:d9: b6:6a:cd:1f:a1:3b:eb:7d:4d:48:68:38:be:96:37:e5:0f:b4: 23:31:12:c4:3a:79:1a:74:c1:11:83:dc:0e:85:1f:f8:38:30: 27:2f:0f:e8:84:9f:21:53:ec:b6:5e:74:ae:35:e5:27:6b:f2: fe:33:5b:d4:83:0b:d6:54:c2:a6:53:8f:0b:dc:cf:34:29:c7: df:84:d4:19:1d:b5:98:c2:e9:aa:77:95:d6:6a:b5:18:a2:57: 5d:e1:60:33:e3:42:4f:df:44:7b:2a:2e:17:95:01:da:85:3e: 99:eb:01:d2:02:cf:5e:46:04:bd:f9:c2:fc:86:94:22:39:66: 19:63:74:4a:c3:51:55:01:8e:0e:32:76:0c:1c:0c:d8:a9:09: 00:c3:5d:73:16:a6:05:7f:30:a2:3c:de:27:29:19:8d:84:ff: 57:10:c6:e8:f3:c2:61:95:ff:12:9d:d9:42:78:c4:b8:9e:60: 11:3b:d6:41:57:93:2a:74:b5:5c:44:a4:5f:c8:7f:4f:44:fe: 54:65:47:c6:46:cb:9e:de:82:c9:60:89:b6:84:e8:5e:c3:96: 52:0a:97:48:63:04:33:3c:bd:5d:af:71:71:5e:20:9f:cb:5b: c2:d5:ff:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZFOEExMTAvBgNVBAUTKEJERDVFOUE3NkYxQUM0QzhFNTE3OTdFQ0U5OUUzRENF RUNFRTc0OTMwHhcNMjUwODIyMjE0NTEyWhcNMjUwODI5MjE0NTEyWjAYMRYwFAYD VQQDEw02OGE4ZTRlOC1jMDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FiM7QuumfjbhbOu7IsLN+AX1Hnen3TmFMXvPeOxeHj4K3ViNUqkP+KIVd2b UkXbhFJaZAPif4Z2xO2RVxUQADlyKiaZkYx4up+BcAQI6tzYvOUiME/pUSkjbwFO u08U9e5/5Tws3iSJrGa1gB9GHtxxR9+W6IbHUIYnJcv3ie8wPTxo2C45+5JN7VWv 15jVGQlLG1+HkJSnIsYJZbIvKCIcjnohgOoWymfYjaKHHRC4e1GZHMrCTX7q/aWD RbLm5bynG0eDaSmua1gve+E+48FvW/0ylxCblf6QOBhXPGtPmxmyzFQ/1FCa9lum sW7ZLVUE0wG2kF/wytlAPcqgSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhwHhRu iiMEa8vYSFAuiXbY7nCiMB8GA1UdIwQYMBaAFL3V6advGsTI5ReX7OmePc7s7nST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zMTQ4REM5RTJE RkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhNamxGNWZzNlo0OXp1enVk Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZkWHBwMjhheE1qbEY1ZnM2WjQ5enV6dWRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkU4QS8zMTQ4REM5RTJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi92ZFhwcDI4YXhN amxGNWZzNlo0OXp1enVkSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5XpA0husq79rdC2/eLM49t9m2as0foTvrfU1IaDi+ljflD7QjMRLE OnkadMERg9wOhR/4ODAnLw/ohJ8hU+y2XnSuNeUna/L+M1vUgwvWVMKmU48L3M80 KcffhNQZHbWYwumqd5XWarUYoldd4WAz40JP30R7Ki4XlQHahT6Z6wHSAs9eRgS9 +cL8hpQiOWYZY3RKw1FVAY4OMnYMHAzYqQkAw11zFqYFfzCiPN4nKRmNhP9XEMbo 88Jhlf8SndlCeMS4nmARO9ZBV5MqdLVcRKRfyH9PRP5UZUfGRsue3oLJYIm2hOhe w5ZSCpdIYwQzPL1dr3FxXiCfy1vC1f/F -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:09 2025 by rpki-client