$ rpki-client -vvf rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft File: vkMB4qQLT2pH4YWmdX2abo18dEI.mft (raw, json) Hash identifier: G0drbBbE2TXRD5s9V+fByrZF+t7X2+8i09O97WUhJ4s= Subject key identifier: 46:A7:A8:BF:BA:7E:60:DC:B6:93:B6:5D:16:D7:58:25:4A:D6:66:F9 Authority key identifier: BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42 Certificate issuer: /CN=A919318C/serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft Manifest number: 1D Signing time: Sat 23 Aug 2025 08:14:08 +0000 Manifest this update: Sat 23 Aug 2025 08:14:07 +0000 Manifest next update: Sat 30 Aug 2025 08:14:07 +0000 Files and hashes: 1: vkMB4qQLT2pH4YWmdX2abo18dEI.crl (hash: IfLlFrKRJk5ciPinc0LIJ79WzHNhlgVY8amO4fg2yPQ=) 2: 99DC33DA621D11F0B3B28C17C4F9AE02.roa (hash: 9kelna+bn4AOokX7+VNhCMprSYcOppK0alNOtL2P1j4=) 3: 9FB4CD9462DB11F0B8A4FE59C4F9AE02.roa (hash: qjbaR5DPgSKsm7fnzDHbXrkez/bN/PhLzRqIXdA5oKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919318C, serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442 Validity Not Before: Aug 23 08:14:07 2025 GMT Not After : Aug 30 08:14:07 2025 GMT Subject: CN=68a97850-9fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cd:bc:44:64:e2:ff:8a:b5:7a:b8:7d:bb:1e: 00:1b:7d:5c:ce:36:fa:f8:bc:7c:e2:03:4c:5c:f0: 5c:bd:44:07:0e:c3:be:33:bf:ed:66:ec:a7:89:86: 7a:ee:5c:12:3c:b1:39:48:0b:d8:c3:58:41:89:7f: 6a:22:f2:48:4e:0e:4c:c4:ec:04:e4:ee:a6:08:61: c8:0e:19:47:1b:ae:82:23:80:23:f5:d6:62:2a:5b: 56:85:dc:d5:fb:8b:bf:e1:4f:5b:31:35:fd:08:a4: c1:57:d6:a0:4b:28:99:9d:08:79:bf:44:29:d3:7c: 4e:c4:67:0e:93:c1:fc:0c:a2:80:34:26:a8:83:cf: cb:e3:3b:a2:94:42:03:c1:00:74:7d:d1:38:d5:b9: e0:05:63:d4:aa:b7:e4:80:ff:94:6d:0b:42:58:7a: 10:ce:e9:d0:f0:c1:a3:75:14:61:98:80:54:3b:4b: a3:d2:0e:7b:db:19:c6:c4:d4:4e:cf:bb:88:2b:c0: 6b:16:26:d3:ed:95:90:35:1f:09:6e:9d:77:87:84: d3:6d:ab:10:cf:75:e3:b0:65:17:7a:b6:30:5a:36: c7:82:15:70:67:f1:40:1c:62:96:e2:ca:24:75:87: 94:c9:85:9e:5c:dd:62:2a:84:a5:30:3d:6a:d4:3c: 1f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A7:A8:BF:BA:7E:60:DC:B6:93:B6:5D:16:D7:58:25:4A:D6:66:F9 X509v3 Authority Key Identifier: keyid:BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:7b:fb:09:09:44:cd:41:65:06:70:bd:47:1c:93:5e:6c:a4: f1:36:af:ad:ed:eb:c8:c1:6f:44:21:e4:d2:ce:a4:69:7e:61: 73:e2:2e:5b:8c:63:e8:bc:ea:5a:5a:ad:ff:8e:b8:24:ab:15: cc:65:47:64:5b:4f:76:88:22:b3:20:ea:fc:1a:c5:39:ce:b8: f1:50:c2:96:4f:b4:55:5d:a7:00:dd:23:57:5e:24:2e:e6:9b: 3b:04:aa:f0:93:64:0b:8d:0c:4d:4f:8d:54:59:11:6b:98:7a: 2e:a3:8c:77:9f:3a:ca:6f:ed:39:a7:15:fe:b3:89:ed:f6:75: 63:bb:90:bd:d3:a6:cb:cb:c9:d5:e6:94:90:d8:45:c7:16:a8: 87:48:3b:9f:01:ad:a9:00:03:d7:3c:41:5c:7a:9c:16:ba:ea: 45:9b:7c:5e:c4:34:4d:79:b2:b9:9c:91:0d:ad:5f:81:bf:9a: 66:fd:74:79:bb:e7:b0:f4:7a:a7:ce:a3:6e:47:1c:b1:61:dc: 5f:50:5d:77:1f:99:15:d7:0a:e9:44:68:3d:91:bb:d3:1b:40: 47:3b:42:90:57:a0:82:b9:53:b1:ad:7c:d8:8b:e1:bd:d9:ba: 51:53:8e:9a:e2:7a:fc:a6:6d:35:0b:10:ba:6b:9e:1b:fa:19: 24:cd:16:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MzE4QzExMC8GA1UEBRMoQkU0MzAxRTJBNDBCNEY2QTQ3RTE4NUE2NzU3RDlBNkU4 RDdDNzQ0MjAeFw0yNTA4MjMwODE0MDdaFw0yNTA4MzAwODE0MDdaMBgxFjAUBgNV BAMTDTY4YTk3ODUwLTlmZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwzbxEZOL/irV6uH27HgAbfVzONvr4vHziA0xc8Fy9RAcOw74zv+1m7KeJhnru XBI8sTlIC9jDWEGJf2oi8khODkzE7ATk7qYIYcgOGUcbroIjgCP11mIqW1aF3NX7 i7/hT1sxNf0IpMFX1qBLKJmdCHm/RCnTfE7EZw6TwfwMooA0JqiDz8vjO6KUQgPB AHR90TjVueAFY9Sqt+SA/5RtC0JYehDO6dDwwaN1FGGYgFQ7S6PSDnvbGcbE1E7P u4grwGsWJtPtlZA1HwlunXeHhNNtqxDPdeOwZRd6tjBaNseCFXBn8UAcYpbiyiR1 h5TJhZ5c3WIqhKUwPWrUPB8bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURqeov7p+ YNy2k7ZdFtdYJUrWZvkwHwYDVR0jBBgwFoAUvkMB4qQLT2pH4YWmdX2abo18dEIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzMThDL0NFOUIwOUVFNjE1 NDExRjBCQjUwRkEzN0M0RjlBRTAyL3ZrTUI0cVFMVDJwSDRZV21kWDJhYm8xOGRF SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdmtNQjRxUUxUMnBINFlXbWRYMmFibzE4ZEVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz MThDL0NFOUIwOUVFNjE1NDExRjBCQjUwRkEzN0M0RjlBRTAyL3ZrTUI0cVFMVDJw SDRZV21kWDJhYm8xOGRFSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ97+wkJRM1BZQZwvUcck15spPE2r63t68jBb0Qh5NLOpGl+YXPiLluM Y+i86lparf+OuCSrFcxlR2RbT3aIIrMg6vwaxTnOuPFQwpZPtFVdpwDdI1deJC7m mzsEqvCTZAuNDE1PjVRZEWuYei6jjHefOspv7TmnFf6zie32dWO7kL3TpsvLydXm lJDYRccWqIdIO58BrakAA9c8QVx6nBa66kWbfF7ENE15srmckQ2tX4G/mmb9dHm7 57D0eqfOo25HHLFh3F9QXXcfmRXXCulEaD2Ru9MbQEc7QpBXoIK5U7GtfNiL4b3Z ulFTjprievymbTULELprnhv6GSTNFv8= -----END CERTIFICATE-----Generated at Sun Aug 24 05:02:59 2025 by rpki-client