$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft File: vxobyMAsIDYtD9n5K8AGoolejIA.mft (raw, json) Hash identifier: NyoBjiTvu5irzB37uYp1A2JM5SfIcnvB5d5bEFa/k7A= Subject key identifier: 9D:26:0B:46:CD:08:C3:7A:B2:E8:6D:18:4A:47:39:9F:99:7A:3D:FC Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80 Certificate issuer: /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80 Certificate serial: 07C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft Manifest number: 07C3 Signing time: Fri 22 Aug 2025 21:19:26 +0000 Manifest this update: Fri 22 Aug 2025 21:19:25 +0000 Manifest next update: Fri 29 Aug 2025 21:19:25 +0000 Files and hashes: 1: vxobyMAsIDYtD9n5K8AGoolejIA.crl (hash: 48O2y+CtxCEfk7SIQkzP8JwOZzkMehNP7mAwHLdmDg0=) 2: ABD5003E079C11EBA7C04832C4F9AE02.roa (hash: 1LIqaLcLd8sIbPgwe6w2+ZfDiBIad4OGJXBnSw3QIfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1992 (0x7c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A423B, serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80 Validity Not Before: Aug 22 21:19:25 2025 GMT Not After : Aug 29 21:19:25 2025 GMT Subject: CN=68a8dedd-b1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:8b:69:f7:ac:17:6d:57:70:af:4f:59:27: e8:03:a3:92:0a:87:36:5f:cd:b0:84:0c:10:ce:ec: 8c:01:73:f3:04:ab:2d:51:d4:ca:02:8d:c1:3a:9d: 74:31:e7:84:a8:f6:ff:a6:0a:3b:b4:e7:2c:5f:10: 8e:64:7f:e7:a9:87:a5:be:18:00:48:fc:48:40:5b: 32:c7:f7:b8:1b:50:35:51:1e:23:e4:72:26:59:33: b4:11:63:81:cb:d3:ae:e2:03:ef:6d:f2:13:e4:c8: 30:f5:dc:a4:c4:ae:bd:7f:12:85:e3:8e:a1:44:9b: d2:7b:89:ca:37:8c:cf:09:d6:98:80:c2:03:b7:d9: 67:75:0c:65:a7:7c:4c:7a:68:5a:cc:8d:ba:98:ff: c8:ae:02:da:27:8d:ff:e6:0e:27:91:8a:ce:d2:0a: c4:9f:49:ed:9b:9b:de:f0:c2:96:92:b6:0b:52:72: 11:2b:66:0f:ef:51:9c:fc:11:3b:09:be:f8:74:3a: 0b:31:5c:7e:28:1a:9b:9a:3e:d7:3d:22:1d:6e:35: 6b:ea:74:57:c8:34:73:33:f8:65:9b:d3:24:98:42: 07:9d:c9:8a:c1:22:8b:47:94:90:03:af:13:01:8b: ed:1d:5b:b2:8d:a3:bb:b1:3c:3f:ca:3a:2b:1f:8c: 9b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:26:0B:46:CD:08:C3:7A:B2:E8:6D:18:4A:47:39:9F:99:7A:3D:FC X509v3 Authority Key Identifier: keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:25:f6:3d:80:2d:14:b1:42:ce:3c:98:95:1f:1e:ac:04:a5: b3:bd:4a:da:4b:f7:2c:97:87:b3:ef:17:cc:06:fa:6c:02:98: 7d:18:73:35:d8:44:d5:0d:93:eb:0c:18:1e:ab:5b:4b:21:6b: 63:38:21:5b:5f:68:2b:f3:02:20:bb:c3:dc:52:74:e8:58:76: 03:83:11:27:c7:a6:aa:80:43:be:85:75:a5:3e:29:73:b8:e7: 17:80:a9:ad:1f:c9:3a:06:f9:4e:7c:10:4a:06:75:0c:20:59: 1c:d7:ea:39:40:38:0f:9c:8a:3e:0d:db:1a:ff:a3:a9:11:e5: 00:9b:29:66:06:b0:11:53:ca:4b:61:97:a5:e2:f0:ce:5e:42: 38:a2:a2:22:c7:ed:38:10:a2:ca:fa:9a:fc:5d:7e:86:7e:1a: ca:64:3d:0d:50:99:dc:e1:5e:49:49:91:ea:ac:66:81:08:d2: b7:29:a0:a8:20:64:1d:cb:87:01:0b:38:39:25:45:18:a7:d3: 9d:c6:f4:b0:fc:b8:87:3e:50:67:3d:60:5d:32:bd:74:ed:35: 8f:8b:0f:19:a8:a8:39:66:79:26:a0:73:6b:9d:5c:4b:c3:1c: 0c:08:3c:24:49:1e:44:f7:a4:91:ca:c9:13:59:f7:c8:08:df: 95:c1:33:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyM0IxMTAvBgNVBAUTKEJGMUExQkM4QzAyQzIwMzYyRDBGRDlGOTJCQzAwNkEy ODk1RThDODAwHhcNMjUwODIyMjExOTI1WhcNMjUwODI5MjExOTI1WjAYMRYwFAYD VQQDEw02OGE4ZGVkZC1iMWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHKLafesF21XcK9PWSfoA6OSCoc2X82whAwQzuyMAXPzBKstUdTKAo3BOp10 MeeEqPb/pgo7tOcsXxCOZH/nqYelvhgASPxIQFsyx/e4G1A1UR4j5HImWTO0EWOB y9Ou4gPvbfIT5Mgw9dykxK69fxKF446hRJvSe4nKN4zPCdaYgMIDt9lndQxlp3xM emhazI26mP/IrgLaJ43/5g4nkYrO0grEn0ntm5ve8MKWkrYLUnIRK2YP71Gc/BE7 Cb74dDoLMVx+KBqbmj7XPSIdbjVr6nRXyDRzM/hlm9MkmEIHncmKwSKLR5SQA68T AYvtHVuyjaO7sTw/yjorH4yb9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0mC0bN CMN6suhtGEpHOZ+Zej38MB8GA1UdIwQYMBaAFL8aG8jALCA2LQ/Z+SvABqKJXoyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDIzQi9BRjc1NkI5NDA3 OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lEWXREOW41SzhBR29vbGVq SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z4b2J5TUFzSURZdEQ5bjVLOEFHb29sZWpJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDIzQi9BRjc1NkI5NDA3OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lE WXREOW41SzhBR29vbGVqSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHJfY9gC0UsULOPJiVHx6sBKWzvUraS/csl4ez7xfMBvpsAph9GHM1 2ETVDZPrDBgeq1tLIWtjOCFbX2gr8wIgu8PcUnToWHYDgxEnx6aqgEO+hXWlPilz uOcXgKmtH8k6BvlOfBBKBnUMIFkc1+o5QDgPnIo+Ddsa/6OpEeUAmylmBrARU8pL YZel4vDOXkI4oqIix+04EKLK+pr8XX6GfhrKZD0NUJnc4V5JSZHqrGaBCNK3KaCo IGQdy4cBCzg5JUUYp9OdxvSw/LiHPlBnPWBdMr107TWPiw8ZqKg5ZnkmoHNrnVxL wxwMCDwkSR5E96SRyskTWffICN+VwTPd -----END CERTIFICATE-----Generated at Sat Aug 23 16:41:31 2025 by rpki-client