$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft File: vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft (raw, json) Hash identifier: vGlR9RVcxlnwEPvvg6GtL+bC54bP7MEVEvI7LAcBfso= Subject key identifier: F6:89:30:D4:92:15:93:A5:24:B4:7D:66:11:28:5F:A7:1F:6B:1F:5B Authority key identifier: BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF Certificate issuer: /CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF Certificate serial: 0C57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft Manifest number: 0C51 Signing time: Fri 22 Aug 2025 18:37:56 +0000 Manifest this update: Fri 22 Aug 2025 18:37:56 +0000 Manifest next update: Fri 29 Aug 2025 18:37:56 +0000 Files and hashes: 1: vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl (hash: PYs8Erflm4WClDDvcZ+Up0hrcJncf25FLtc1WwnlKAY=) 2: 674009AE09D811EA9BCFCE1EC4F9AE02.roa (hash: 6L60AAj2lTmMuUfie+8gmkdZ9wTJGKc1X+KnYu5hWQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3159 (0xc57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACC41, serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF Validity Not Before: Aug 22 18:37:56 2025 GMT Not After : Aug 29 18:37:56 2025 GMT Subject: CN=68a8b904-798c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:63:54:bd:1c:6b:bb:3e:eb:d2:d7:c0:61:85: 29:0e:52:2a:37:c7:e5:09:b6:f1:64:a8:91:29:3e: 8a:b2:64:87:f3:c6:fb:85:41:46:ac:b5:12:42:17: 0e:e3:be:18:ff:b3:5c:61:fc:96:d5:5a:7d:19:51: e3:f1:ce:58:2c:02:05:8d:fe:bb:54:f0:f8:42:d4: 45:ee:86:68:45:d4:0d:0c:76:60:52:37:b3:55:24: 00:a7:8f:2b:0e:a9:90:6a:03:4a:c5:bb:f9:c7:55: 33:1e:f5:db:c7:f9:0f:99:03:6e:6a:69:a8:09:c2: 84:d3:4b:3b:62:67:2f:e9:82:09:ba:3a:1b:2d:fd: 94:a6:86:82:c1:af:f5:ed:12:3e:53:5c:7a:29:1b: dd:49:2b:9b:83:ac:52:45:10:e8:f7:1b:f4:9e:d6: 34:eb:21:d6:67:97:f4:35:4e:a0:06:8e:2e:1d:be: 30:5a:0b:ad:05:2b:66:e9:52:de:da:97:18:79:c8: 42:cc:c5:0c:d7:3a:4b:f7:16:d2:0e:8c:60:b7:02: e6:94:ca:bb:aa:03:ef:59:e5:c4:58:93:f8:87:8f: 6e:b6:3b:f8:67:a0:78:63:ad:7c:7b:1b:78:db:9b: d1:03:53:e3:7f:47:bd:66:7f:68:64:87:25:a1:4c: 97:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:89:30:D4:92:15:93:A5:24:B4:7D:66:11:28:5F:A7:1F:6B:1F:5B X509v3 Authority Key Identifier: keyid:BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:34:d8:df:af:91:92:6a:37:dc:69:87:69:f3:10:3a:5d:75: 81:03:72:5e:38:17:42:79:6a:66:cb:35:5f:27:63:5b:d4:e5: 54:e7:44:ef:f3:3d:b1:0c:70:b0:0a:3b:f2:d9:a6:ef:52:43: d9:af:ca:ba:f6:c8:2c:ca:94:2b:38:f7:f0:44:75:c2:46:d5: cf:ed:31:cb:a9:89:83:b9:f7:dd:dd:1a:bd:8e:ce:70:85:0c: be:1a:82:a9:79:f1:1a:5c:3f:34:75:ed:31:fa:74:ab:b4:f6: 59:bc:b6:47:86:6c:87:fd:ac:26:ff:8c:69:a3:91:48:b5:eb: 8e:23:4a:31:91:27:05:03:60:33:a3:53:a0:8f:04:1a:18:48: d4:9a:24:c6:f9:74:4f:bc:2f:7f:68:9b:04:1d:88:a9:8a:08: 02:fa:e1:89:e7:55:33:f7:89:b9:ab:bb:d7:66:5f:e8:77:88: a4:80:89:fa:af:b1:03:af:fd:50:82:07:e0:ff:01:67:e4:80: a8:21:b4:0b:cf:0b:27:54:f2:3d:93:57:a8:48:5e:20:01:a0: 10:82:e3:c6:71:42:01:ce:bf:ba:71:a5:5a:58:fd:c3:d1:56: 84:4c:57:b2:7f:36:f1:44:86:cb:25:a5:44:c6:0c:e7:1b:18: c1:57:7b:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNDNDExMTAvBgNVBAUTKEJERDVFQjE1NjMzODM5M0Q3NDREQUUyRkM1MzJENTgz MkJDNzg1QkYwHhcNMjUwODIyMTgzNzU2WhcNMjUwODI5MTgzNzU2WjAYMRYwFAYD VQQDEw02OGE4YjkwNC03OThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWNUvRxruz7r0tfAYYUpDlIqN8flCbbxZKiRKT6KsmSH88b7hUFGrLUSQhcO 474Y/7NcYfyW1Vp9GVHj8c5YLAIFjf67VPD4QtRF7oZoRdQNDHZgUjezVSQAp48r DqmQagNKxbv5x1UzHvXbx/kPmQNuammoCcKE00s7Ymcv6YIJujobLf2UpoaCwa/1 7RI+U1x6KRvdSSubg6xSRRDo9xv0ntY06yHWZ5f0NU6gBo4uHb4wWgutBStm6VLe 2pcYechCzMUM1zpL9xbSDoxgtwLmlMq7qgPvWeXEWJP4h49utjv4Z6B4Y618ext4 25vRA1Pjf0e9Zn9oZIcloUyXRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPaJMNSS FZOlJLR9ZhEoX6cfax9bMB8GA1UdIwQYMBaAFL3V6xVjODk9dE2uL8Uy1YMrx4W/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0M0MS9FNkJBNTQ0ODA5 RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9UMTBUYTR2eFRMVmd5dkho YjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZkWHJGV000T1QxMFRhNHZ4VExWZ3l2SGhiOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0M0MS9FNkJBNTQ0ODA5RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9U MTBUYTR2eFRMVmd5dkhoYjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8NNjfr5GSajfcaYdp8xA6XXWBA3JeOBdCeWpmyzVfJ2Nb1OVU50Tv 8z2xDHCwCjvy2abvUkPZr8q69sgsypQrOPfwRHXCRtXP7THLqYmDuffd3Rq9js5w hQy+GoKpefEaXD80de0x+nSrtPZZvLZHhmyH/awm/4xpo5FIteuOI0oxkScFA2Az o1OgjwQaGEjUmiTG+XRPvC9/aJsEHYipiggC+uGJ51Uz94m5q7vXZl/od4ikgIn6 r7EDr/1Qggfg/wFn5ICoIbQLzwsnVPI9k1eoSF4gAaAQguPGcUIBzr+6caVaWP3D 0VaETFeyfzbxRIbLJaVExgznGxjBV3sD -----END CERTIFICATE-----Generated at Sat Aug 23 04:28:16 2025 by rpki-client