$ rpki-client -vvf rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft File: vLFqiHOxvhMm61zbkLGGEV2nTWc.mft (raw, json) Hash identifier: k8q5CGUXKWpuFt3GmjL+0UryQ+c9IbEoH0ZuKD/Fl9o= Subject key identifier: 50:0D:F6:FA:51:C2:E9:A3:BD:27:43:4A:40:D2:7C:EA:C9:A4:BF:46 Authority key identifier: BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67 Certificate issuer: /CN=A9194715/serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67 Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft Manifest number: 021B Signing time: Sat 23 Aug 2025 02:10:23 +0000 Manifest this update: Sat 23 Aug 2025 02:10:22 +0000 Manifest next update: Sat 30 Aug 2025 02:10:22 +0000 Files and hashes: 1: vLFqiHOxvhMm61zbkLGGEV2nTWc.crl (hash: oJA+G43F6WSJIw119/BVor22SN2qgVnmMpkB/ZUJHa8=) 2: A8A940C6429811EDBB392C35C4F9AE02.roa (hash: us+hXVbT4+IxuDXf1t8Zy0IqvnZFy688N7EVgUtl4FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194715, serialNumber=BCB16A8873B1BE1326EB5CDB90B186115DA74D67 Validity Not Before: Aug 23 02:10:22 2025 GMT Not After : Aug 30 02:10:22 2025 GMT Subject: CN=68a9230e-8b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f9:0e:1a:19:a5:4e:a8:c5:da:96:bc:a7:79: ba:54:5b:7c:18:28:fa:49:67:8c:72:1a:8d:c7:1f: fe:1a:3d:db:18:6e:65:a9:ae:47:b4:a0:26:c6:cf: 0f:36:9f:03:9a:f5:cc:28:36:40:d0:61:6d:15:48: 5c:91:b3:c1:7f:58:f7:74:14:85:b6:05:90:6f:57: 70:3e:06:5e:32:f8:5c:1e:e2:ee:39:bc:16:78:04: b5:a9:ef:a5:b9:5d:97:80:12:e3:74:ee:7c:31:28: ce:06:46:a3:40:1c:af:f5:eb:d0:62:ee:8d:bf:38: dd:f9:6a:f5:ca:48:12:e3:7a:1a:4a:51:e9:c9:6b: cf:d6:40:ca:bc:4b:cb:9c:c2:4f:a0:8d:01:8b:4e: e8:30:91:13:97:ed:dc:7a:54:ea:c8:03:ff:72:cb: 31:55:ae:dd:52:3e:19:37:f0:7a:54:63:69:0e:0d: e8:20:6b:52:76:77:89:d5:92:e7:a2:b9:b3:9c:e0: d0:9d:68:29:85:d1:2a:92:5b:37:5a:ba:09:28:fa: 08:6d:ef:4f:fa:5d:17:30:34:5e:51:dc:11:e0:74: a6:63:46:71:52:bc:4c:4e:b1:31:a5:12:a5:57:7f: 6c:50:34:17:17:12:31:1d:a4:9d:cf:18:d8:40:0c: 78:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0D:F6:FA:51:C2:E9:A3:BD:27:43:4A:40:D2:7C:EA:C9:A4:BF:46 X509v3 Authority Key Identifier: keyid:BC:B1:6A:88:73:B1:BE:13:26:EB:5C:DB:90:B1:86:11:5D:A7:4D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vLFqiHOxvhMm61zbkLGGEV2nTWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194715/698B963A429511EDBDD97881C4F9AE02/vLFqiHOxvhMm61zbkLGGEV2nTWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d3:4e:e5:3d:33:4c:81:f8:0d:d3:b3:22:b7:66:6f:9b:54: c9:f7:3e:18:e9:ad:f7:d4:47:41:12:5b:fe:07:b9:76:9f:17: d8:c6:c2:1a:46:a0:62:cc:9f:4f:c2:5f:ac:bc:99:50:98:fa: 05:85:5b:6d:42:89:c2:0c:7d:45:66:a6:62:2c:29:d5:8e:9e: d1:05:60:e3:43:80:23:56:7d:08:18:f5:3d:ec:47:50:76:1a: 05:47:2f:ef:a9:8a:83:3b:a9:aa:c4:86:4f:f0:8f:9c:38:cd: 45:56:46:4b:0a:a8:19:84:ed:12:df:32:42:44:49:c7:6d:cf: 19:1e:1e:6a:29:18:56:18:8b:f2:79:14:29:13:26:b5:2d:7d: ae:6b:4a:e4:bf:a4:7d:0b:fa:9e:33:ba:53:2c:34:cf:41:4c: 75:bd:22:58:b2:50:06:7a:75:68:04:22:53:40:a4:e1:e2:60: 8a:6c:a3:3e:cc:07:5d:e6:cf:cb:13:bf:cf:7e:14:6d:a6:bf: 83:f0:82:12:df:d2:d7:5d:da:79:b1:ae:c8:dd:77:58:6b:d5: 54:2b:da:20:c0:83:8a:11:ce:00:80:b2:2c:0f:cf:44:8f:35: 75:f4:af:68:79:9b:06:ea:bd:d6:99:9b:bc:cc:f2:48:ab:28: 03:be:17:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3MTUxMTAvBgNVBAUTKEJDQjE2QTg4NzNCMUJFMTMyNkVCNUNEQjkwQjE4NjEx NURBNzRENjcwHhcNMjUwODIzMDIxMDIyWhcNMjUwODMwMDIxMDIyWjAYMRYwFAYD VQQDEw02OGE5MjMwZS04YjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/kOGhmlTqjF2pa8p3m6VFt8GCj6SWeMchqNxx/+Gj3bGG5lqa5HtKAmxs8P Np8DmvXMKDZA0GFtFUhckbPBf1j3dBSFtgWQb1dwPgZeMvhcHuLuObwWeAS1qe+l uV2XgBLjdO58MSjOBkajQByv9evQYu6Nvzjd+Wr1ykgS43oaSlHpyWvP1kDKvEvL nMJPoI0Bi07oMJETl+3celTqyAP/cssxVa7dUj4ZN/B6VGNpDg3oIGtSdneJ1ZLn ormznODQnWgphdEqkls3WroJKPoIbe9P+l0XMDReUdwR4HSmY0ZxUrxMTrExpRKl V39sUDQXFxIxHaSdzxjYQAx4XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAN9vpR wumjvSdDSkDSfOrJpL9GMB8GA1UdIwQYMBaAFLyxaohzsb4TJutc25CxhhFdp01n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDcxNS82OThCOTYzQTQy OTUxMUVEQkREOTc4ODFDNEY5QUUwMi92TEZxaUhPeHZoTW02MXpia0xHR0VWMm5U V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZMRnFpSE94dmhNbTYxemJrTEdHRVYyblRXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDcxNS82OThCOTYzQTQyOTUxMUVEQkREOTc4ODFDNEY5QUUwMi92TEZxaUhPeHZo TW02MXpia0xHR0VWMm5UV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe007lPTNMgfgN07Mit2Zvm1TJ9z4Y6a331EdBElv+B7l2nxfYxsIa RqBizJ9Pwl+svJlQmPoFhVttQonCDH1FZqZiLCnVjp7RBWDjQ4AjVn0IGPU97EdQ dhoFRy/vqYqDO6mqxIZP8I+cOM1FVkZLCqgZhO0S3zJCREnHbc8ZHh5qKRhWGIvy eRQpEya1LX2ua0rkv6R9C/qeM7pTLDTPQUx1vSJYslAGenVoBCJTQKTh4mCKbKM+ zAdd5s/LE7/PfhRtpr+D8IIS39LXXdp5sa7I3XdYa9VUK9ogwIOKEc4AgLIsD89E jzV19K9oeZsG6r3WmZu8zPJIqygDvhdn -----END CERTIFICATE-----Generated at Sat Aug 23 19:31:04 2025 by rpki-client