$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft File: vrUOQRzD4sQGA7FqkWCepNQGZJU.mft (raw, json) Hash identifier: Gsmc8Qj7QYV73WRc1ozvbyXtWtj6ZHJdKMVWaJ0bP5g= Subject key identifier: D0:7B:12:E2:62:07:A7:F1:38:D7:21:DB:FE:37:93:1C:0B:40:71:8D Authority key identifier: BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 Certificate issuer: /CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Certificate serial: 0DF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft Manifest number: 0DF0 Signing time: Fri 22 Aug 2025 17:59:22 +0000 Manifest this update: Fri 22 Aug 2025 17:59:22 +0000 Manifest next update: Fri 29 Aug 2025 17:59:22 +0000 Files and hashes: 1: vrUOQRzD4sQGA7FqkWCepNQGZJU.crl (hash: 7MKh/iTjMOjBlzyLqDvyvF/EDXICMm7MAUvF49lNVRE=) 2: 4BECBAFCB99811E98000600AC4F9AE02.roa (hash: rqASzwwK7FbCaVAYTK88nCqRcfP1vi7cp+uLy8ucquU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3576 (0xdf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B2F8, serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Validity Not Before: Aug 22 17:59:22 2025 GMT Not After : Aug 29 17:59:22 2025 GMT Subject: CN=68a8affa-f205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:14:e5:6d:b0:8b:9b:59:80:e6:e8:29:34:67: 20:7e:68:5e:b4:34:62:e6:6d:c8:16:15:9e:dc:71: d1:3f:c6:6d:db:ed:4f:4a:6a:fd:41:11:86:38:bd: 02:65:8e:a4:cd:05:d5:3f:6b:fc:51:be:87:e7:5a: f5:80:1d:92:16:e1:0f:72:77:98:66:f9:1e:d5:36: f7:08:68:66:5e:c9:9b:98:6f:7c:d4:77:87:35:9d: 86:0d:d8:19:68:1c:07:ec:a4:98:9a:33:eb:98:cd: 22:49:81:38:f8:9c:0f:8e:50:8d:8d:98:f5:11:e7: 70:e5:19:00:83:0c:09:b3:c5:30:14:90:a6:ef:26: 37:a5:a1:f8:75:b0:89:03:6e:22:8a:88:a4:bf:09: 94:60:95:a9:c2:82:7f:15:3c:da:1f:76:8d:47:64: a2:f3:3d:1a:e4:a4:b8:5c:63:31:8b:02:ab:b0:49: a4:d6:31:5f:1b:4f:be:78:76:9e:17:d8:76:af:ea: ef:be:7c:2c:3e:2c:34:97:d1:38:4f:6f:ba:63:8a: f7:5f:d2:d4:bd:c9:58:78:1e:ec:c5:c4:9e:f6:67: 4c:97:37:f5:0d:17:f6:65:40:df:ca:aa:8c:8c:9c: 4d:b5:42:16:82:dc:60:90:2a:bb:ff:73:d9:ed:29: fe:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7B:12:E2:62:07:A7:F1:38:D7:21:DB:FE:37:93:1C:0B:40:71:8D X509v3 Authority Key Identifier: keyid:BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:0a:a7:83:8a:52:6e:b4:fc:9d:7b:ff:ca:af:7b:ba:75:28: 87:b2:3c:fc:9e:f7:4b:f8:3e:df:ab:1b:81:34:57:cf:2c:ef: c0:dc:9b:1a:84:84:fb:3a:f9:41:0a:ed:e2:3b:7c:53:f2:e8: dd:28:49:8d:ec:95:54:01:cc:0c:84:7c:d3:d5:54:c8:98:7c: 9d:da:55:7f:1d:58:41:53:71:1b:ff:87:54:59:f9:bb:6d:79: 48:d7:6b:99:74:e8:d6:62:0b:c3:13:4c:d3:56:cb:ed:2e:f5: 29:a6:69:44:e8:89:68:43:b7:cb:d9:eb:7c:cb:f9:79:9a:d8: e2:d0:4b:14:05:fe:4d:44:b4:6d:25:09:40:9e:a3:81:13:02: 04:b0:eb:b7:b6:17:ea:9f:e3:ff:bc:53:80:75:ed:e9:05:7d: cd:64:0d:fd:a7:00:71:b0:68:c3:31:95:78:1f:1e:06:80:62: 7b:ff:9b:44:c9:87:1c:bc:ee:1e:0d:35:9b:d0:6d:ba:6e:24: 3a:7d:4f:2e:90:1a:c8:7f:cf:90:b3:36:81:72:28:5e:a9:ea: 73:04:4b:83:ca:f0:aa:c9:17:2c:c2:ee:58:30:57:6a:a7:e3: ad:17:9c:8f:3d:fb:0a:c6:af:4d:8f:bc:f8:29:6f:63:c8:19: a7:c4:d8:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyRjgxMTAvBgNVBAUTKEJFQjUwRTQxMUNDM0UyQzQwNjAzQjE2QTkxNjA5RUE0 RDQwNjY0OTUwHhcNMjUwODIyMTc1OTIyWhcNMjUwODI5MTc1OTIyWjAYMRYwFAYD VQQDEw02OGE4YWZmYS1mMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxTlbbCLm1mA5ugpNGcgfmhetDRi5m3IFhWe3HHRP8Zt2+1PSmr9QRGGOL0C ZY6kzQXVP2v8Ub6H51r1gB2SFuEPcneYZvke1Tb3CGhmXsmbmG981HeHNZ2GDdgZ aBwH7KSYmjPrmM0iSYE4+JwPjlCNjZj1Eedw5RkAgwwJs8UwFJCm7yY3paH4dbCJ A24iioikvwmUYJWpwoJ/FTzaH3aNR2Si8z0a5KS4XGMxiwKrsEmk1jFfG0++eHae F9h2r+rvvnwsPiw0l9E4T2+6Y4r3X9LUvclYeB7sxcSe9mdMlzf1DRf2ZUDfyqqM jJxNtUIWgtxgkCq7/3PZ7Sn+CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNB7EuJi B6fxONch2/43kxwLQHGNMB8GA1UdIwQYMBaAFL61DkEcw+LEBgOxapFgnqTUBmSV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjJGOC9ERkVFNjFERUI5 OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRzUUdBN0Zxa1dDZXBOUUda SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyVU9RUnpENHNRR0E3RnFrV0NlcE5RR1pKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjJGOC9ERkVFNjFERUI5OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRz UUdBN0Zxa1dDZXBOUUdaSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnCqeDilJutPyde//Kr3u6dSiHsjz8nvdL+D7fqxuBNFfPLO/A3Jsa hIT7OvlBCu3iO3xT8ujdKEmN7JVUAcwMhHzT1VTImHyd2lV/HVhBU3Eb/4dUWfm7 bXlI12uZdOjWYgvDE0zTVsvtLvUppmlE6IloQ7fL2et8y/l5mtji0EsUBf5NRLRt JQlAnqOBEwIEsOu3thfqn+P/vFOAde3pBX3NZA39pwBxsGjDMZV4Hx4GgGJ7/5tE yYccvO4eDTWb0G26biQ6fU8ukBrIf8+QszaBciheqepzBEuDyvCqyRcswu5YMFdq p+OtF5yPPfsKxq9Nj7z4KW9jyBmnxNi1 -----END CERTIFICATE-----Generated at Sun Aug 24 03:10:35 2025 by rpki-client