$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft File: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft (raw, json) Hash identifier: NibNzyjWJx7rEwY0j6CHh+j/j3TXJ5+ry1pzUJu9+Ks= Subject key identifier: 1D:BA:71:6A:A8:2E:9A:CF:99:A3:93:D1:5C:1B:C1:80:95:8C:25:52 Authority key identifier: 54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39 Certificate issuer: /CN=A9195AA2/serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39 Certificate serial: 0C65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft Manifest number: 1465 Signing time: Fri 22 Aug 2025 18:33:13 +0000 Manifest this update: Fri 22 Aug 2025 18:33:13 +0000 Manifest next update: Fri 29 Aug 2025 18:33:13 +0000 Files and hashes: 1: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl (hash: olGmJ4WXfEPzxvNVi6I6jTPPKY2j0oBsI8ZPqK1FZeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3173 (0xc65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195AA2, serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39 Validity Not Before: Aug 22 18:33:13 2025 GMT Not After : Aug 29 18:33:13 2025 GMT Subject: CN=68a8b7e9-6322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4d:b7:11:54:56:4c:9e:50:1f:b0:cd:3d:e6: 9c:73:87:c9:7c:50:c7:33:50:4d:a1:bf:04:e9:7b: 57:af:cb:c5:0a:63:b0:f9:8b:2c:2f:78:8e:c2:96: 19:4f:f5:8f:77:45:26:40:76:6b:68:f0:dd:3b:fd: a1:14:d3:9b:c5:ab:65:51:d0:43:de:e2:83:86:16: 07:6b:91:38:f7:8c:7b:49:36:c9:7d:33:95:c1:38: 1f:e3:b5:1e:38:9a:14:f4:01:53:b8:07:ee:82:a7: 6e:be:da:08:0e:f2:a3:3a:a5:26:97:98:69:20:e5: 6e:c4:ca:51:5d:df:81:ad:50:2e:b2:a2:fd:a5:aa: d1:22:d1:3b:6f:b6:3f:8f:da:07:c8:b3:56:e1:e5: f8:e3:92:30:b9:60:27:cb:b8:3d:9e:8d:ad:42:50: 84:7e:7a:f1:a5:3a:4d:ab:92:c2:15:02:8b:b6:cd: 57:46:50:bd:63:7c:17:ec:c8:30:a6:98:67:79:16: 3a:62:73:63:d2:67:3e:d4:ab:9b:e9:9d:09:a5:37: e2:4a:20:fc:53:5b:7e:77:e0:a1:8e:85:58:ac:e3: 6f:2b:b7:e5:6f:55:c7:ff:dc:59:db:ec:b0:cc:03: 41:03:99:e0:89:3f:7c:24:a0:61:b2:a2:92:6b:d7: 9b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BA:71:6A:A8:2E:9A:CF:99:A3:93:D1:5C:1B:C1:80:95:8C:25:52 X509v3 Authority Key Identifier: keyid:54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:a3:18:1d:2a:81:0d:5f:b9:c0:bf:6e:0d:8d:20:72:8d:14: d1:59:84:2e:92:85:8c:f0:b9:d3:e0:cc:91:c0:12:91:8e:2a: 14:d1:87:c2:e4:fd:f0:57:4b:9f:63:e9:31:cd:68:eb:0a:82: 5c:d1:28:3f:25:ba:1c:f0:13:0e:f1:99:3f:dc:e1:2d:56:96: bd:1e:8f:30:d1:89:e3:a9:0d:ec:9c:53:1a:99:98:1e:69:3e: 89:05:2a:38:a1:7a:8b:7d:58:bf:a5:97:1c:57:63:a9:11:47: 44:ce:24:73:77:6f:77:07:af:16:87:7b:f5:75:39:fa:12:55: da:9d:f3:0d:5c:f9:97:a0:a7:85:56:f4:46:44:ac:67:70:30: 1f:ae:04:86:a5:b6:75:11:56:1a:ac:10:b4:51:a5:0a:b3:82: 5f:db:da:c9:6d:f2:2a:b6:bf:8e:ba:26:ee:9d:10:ae:d2:31: b0:c2:d7:48:6b:ac:10:a0:1a:e6:8a:7f:cf:ac:8b:fd:fc:42: 68:95:8d:6e:e1:e3:b6:e4:50:e6:e5:1c:f9:cb:d7:2e:20:b5: ea:6e:16:8a:77:a4:51:1d:35:c0:37:be:af:9b:98:00:39:ce: b6:2c:ae:3f:bf:1b:f8:4e:99:9b:2c:33:d5:7b:dc:8d:e9:ba: 2a:46:3c:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBQTIxMTAvBgNVBAUTKDU0NTgzQzI5QkJGQjUwMDlEQjlDQzA1NjE0RjYzRDYy QkNCNzdDMzkwHhcNMjUwODIyMTgzMzEzWhcNMjUwODI5MTgzMzEzWjAYMRYwFAYD VQQDEw02OGE4YjdlOS02MzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvE23EVRWTJ5QH7DNPeacc4fJfFDHM1BNob8E6XtXr8vFCmOw+YssL3iOwpYZ T/WPd0UmQHZraPDdO/2hFNObxatlUdBD3uKDhhYHa5E494x7STbJfTOVwTgf47Ue OJoU9AFTuAfugqduvtoIDvKjOqUml5hpIOVuxMpRXd+BrVAusqL9parRItE7b7Y/ j9oHyLNW4eX445IwuWAny7g9no2tQlCEfnrxpTpNq5LCFQKLts1XRlC9Y3wX7Mgw pphneRY6YnNj0mc+1Kub6Z0JpTfiSiD8U1t+d+ChjoVYrONvK7flb1XH/9xZ2+yw zANBA5ngiT98JKBhsqKSa9ebMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB26cWqo LprPmaOT0VwbwYCVjCVSMB8GA1UdIwQYMBaAFFRYPCm7+1AJ25zAVhT2PWK8t3w5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2 QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VBbmJuTUJXRlBZOVlyeTNm RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGZzhLYnY3VUFuYm5NQldGUFk5WXJ5M2ZEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VB bmJuTUJXRlBZOVlyeTNmRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBoxgdKoENX7nAv24NjSByjRTRWYQukoWM8LnT4MyRwBKRjioU0YfC 5P3wV0ufY+kxzWjrCoJc0Sg/Jboc8BMO8Zk/3OEtVpa9Ho8w0YnjqQ3snFMamZge aT6JBSo4oXqLfVi/pZccV2OpEUdEziRzd293B68Wh3v1dTn6ElXanfMNXPmXoKeF VvRGRKxncDAfrgSGpbZ1EVYarBC0UaUKs4Jf29rJbfIqtr+OuibunRCu0jGwwtdI a6wQoBrmin/PrIv9/EJolY1u4eO25FDm5Rz5y9cuILXqbhaKd6RRHTXAN76vm5gA Oc62LK4/vxv4TpmbLDPVe9yN6boqRjzh -----END CERTIFICATE-----Generated at Sat Aug 23 19:42:02 2025 by rpki-client