$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft File: Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft (raw, json) Hash identifier: /5qe7mO/NTdBsUab5QUXyCszycfgNUsrlLN/ua17B28= Subject key identifier: CD:8E:5A:8C:4C:4A:56:63:1E:9F:6D:47:7C:B3:6C:84:0A:C6:8F:2F Authority key identifier: 56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00 Certificate issuer: /CN=A91ADB98/serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800 Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft Manifest number: 0226 Signing time: Sat 23 Aug 2025 02:12:21 +0000 Manifest this update: Sat 23 Aug 2025 02:12:20 +0000 Manifest next update: Sat 30 Aug 2025 02:12:20 +0000 Files and hashes: 1: Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl (hash: 2XJv3wgp/38WchHXtbG2hINX0zMa+gUHh14KMR3PytM=) 2: 310AEC7A5B7C11EDAAFAB831C4F9AE02.roa (hash: LZXk13HoV3M3PJSIAKsfySeBLEgNErX9ux8+6mN8duA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800 Validity Not Before: Aug 23 02:12:20 2025 GMT Not After : Aug 30 02:12:20 2025 GMT Subject: CN=68a92385-02d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:84:2c:c7:1a:38:41:e2:64:b1:8a:14:7e:75: b9:a6:fe:f1:cd:04:ee:5b:58:6f:00:de:12:e5:4e: 87:d1:b5:3b:66:d3:e1:bf:0c:4a:05:ef:6e:d2:f8: b1:07:e4:2e:e2:b5:31:67:f2:c5:39:a9:b1:58:fc: d2:91:f6:30:5c:92:a9:83:a3:f5:16:66:c4:9f:35: 55:6f:72:d9:26:af:c8:2c:62:27:01:34:2e:58:5f: 2c:93:02:a4:94:53:f3:81:05:21:fa:64:53:23:11: fb:b2:8e:c3:d8:1e:4a:ac:03:3e:0b:bc:33:f8:0c: 41:03:2d:b4:ad:2c:50:f2:d3:b4:b5:9c:5c:76:0a: 97:16:8d:e5:59:17:ca:be:c7:f5:f2:69:1a:fa:0e: 36:21:dd:e2:ed:38:6f:fb:33:9b:9f:7f:c2:d7:80: bd:d4:f7:47:01:73:e7:6b:aa:77:29:61:89:b5:5c: 49:d6:90:9e:97:cc:5e:66:9e:2f:e7:97:9d:c5:3b: 66:6c:49:5e:9a:39:d9:fe:92:b1:2e:88:a3:83:b4: e4:10:54:4c:93:d3:bd:c6:9f:bc:c8:e8:18:fc:d8: 01:46:41:3f:1b:d3:e0:b5:ad:d1:6c:8e:00:20:87: 30:dd:59:f2:97:41:ef:eb:ac:46:cc:88:bf:0a:67: e3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8E:5A:8C:4C:4A:56:63:1E:9F:6D:47:7C:B3:6C:84:0A:C6:8F:2F X509v3 Authority Key Identifier: keyid:56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ee:f5:d1:99:7a:f9:72:21:b2:f2:96:7f:20:c3:85:3f:e4: a6:d5:bf:4a:48:7b:24:22:fa:23:e2:ee:1c:06:a7:fe:cc:80: bd:e8:08:57:54:4a:9d:5c:b7:54:68:d5:78:39:b4:5d:d3:78: 89:6f:22:9e:66:77:eb:f5:35:21:c8:f3:52:c1:b7:05:e0:bb: 8b:ac:74:24:4c:42:a1:97:ad:6e:b7:a1:d3:fe:28:a5:a7:ac: 0f:23:ff:04:4e:7d:a8:73:b8:1b:71:d9:83:0a:c0:ef:75:08: 57:08:ff:f4:04:33:5a:2b:24:9c:25:82:eb:82:e2:68:41:0c: ed:53:64:26:88:37:95:cb:56:e8:36:04:09:c2:1f:32:47:d3: 45:e1:9c:78:58:94:2b:71:29:ea:ee:a6:46:37:e2:b6:c0:b1: c3:c2:d1:3e:32:72:26:23:01:46:d6:48:73:eb:f7:ea:5d:50: 31:ed:d0:45:00:e6:15:12:3a:f7:90:f6:63:ee:dc:c8:39:3d: 04:ea:55:77:ce:f1:b0:2b:85:03:6e:12:02:fc:9d:16:5d:dd: 0e:0e:f1:c2:33:8b:db:81:1b:39:74:5a:a7:88:6e:ca:12:e5: ea:7f:d8:f1:90:46:89:44:a0:d9:25:39:29:12:ae:36:10:e2: f0:9e:2b:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDU2N0Y5QUIyQjJDNzk2OTI2ODVDMDMwNTVBRjk2OUU2 MEI2NkI4MDAwHhcNMjUwODIzMDIxMjIwWhcNMjUwODMwMDIxMjIwWjAYMRYwFAYD VQQDEw02OGE5MjM4NS0wMmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoQsxxo4QeJksYoUfnW5pv7xzQTuW1hvAN4S5U6H0bU7ZtPhvwxKBe9u0vix B+Qu4rUxZ/LFOamxWPzSkfYwXJKpg6P1FmbEnzVVb3LZJq/ILGInATQuWF8skwKk lFPzgQUh+mRTIxH7so7D2B5KrAM+C7wz+AxBAy20rSxQ8tO0tZxcdgqXFo3lWRfK vsf18mka+g42Id3i7Thv+zObn3/C14C91PdHAXPna6p3KWGJtVxJ1pCel8xeZp4v 55edxTtmbElemjnZ/pKxLoijg7TkEFRMk9O9xp+8yOgY/NgBRkE/G9Pgta3RbI4A IIcw3Vnyl0Hv66xGzIi/CmfjhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2OWoxM SlZjHp9tR3yzbIQKxo8vMB8GA1UdIwQYMBaAFFZ/mrKyx5aSaFwDBVr5aeYLZrgA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9FMkRBODUxODQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9Wbi1hc3JMSGxwSm9YQU1GV3ZscDVndG11 QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZuLWFzckxIbHBKb1hBTUZXdmxwNWd0bXVBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9FMkRBODUxODQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9Wbi1hc3JMSGxw Sm9YQU1GV3ZscDVndG11QUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh7vXRmXr5ciGy8pZ/IMOFP+Sm1b9KSHskIvoj4u4cBqf+zIC96AhX VEqdXLdUaNV4ObRd03iJbyKeZnfr9TUhyPNSwbcF4LuLrHQkTEKhl61ut6HT/iil p6wPI/8ETn2oc7gbcdmDCsDvdQhXCP/0BDNaKyScJYLrguJoQQztU2QmiDeVy1bo NgQJwh8yR9NF4Zx4WJQrcSnq7qZGN+K2wLHDwtE+MnImIwFG1khz6/fqXVAx7dBF AOYVEjr3kPZj7tzIOT0E6lV3zvGwK4UDbhIC/J0WXd0ODvHCM4vbgRs5dFqniG7K EuXqf9jxkEaJRKDZJTkpEq42EOLwniso -----END CERTIFICATE-----Generated at Sat Aug 23 16:18:39 2025 by rpki-client