$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft File: vaPoqCMceH9rfxi8FGuV-1wDjtk.mft (raw, json) Hash identifier: 8/sMysv5tpi/P7luKTCPAulj3goKTNkt9D+YVe9wOHQ= Subject key identifier: F8:AC:45:75:E1:FC:A9:69:5B:37:FF:F2:F3:73:ED:7C:98:E3:4D:C3 Authority key identifier: BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9 Certificate issuer: /CN=A91AE8D7/serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft Manifest number: 58 Signing time: Sat 23 Aug 2025 07:24:07 +0000 Manifest this update: Sat 23 Aug 2025 07:24:07 +0000 Manifest next update: Sat 30 Aug 2025 07:24:07 +0000 Files and hashes: 1: vaPoqCMceH9rfxi8FGuV-1wDjtk.crl (hash: 8so+EG9PmH1fG+wj6RitIMruNkW/WxitZuskAIS/USo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE8D7, serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9 Validity Not Before: Aug 23 07:24:07 2025 GMT Not After : Aug 30 07:24:07 2025 GMT Subject: CN=68a96c97-a33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8b:0d:dc:a7:6d:5b:91:92:e7:38:cc:2f:a4: ad:09:e2:21:fd:5f:8e:ba:29:0b:71:22:24:b0:2a: ca:40:26:80:3e:93:ac:fe:7a:b4:16:14:7f:43:cf: 11:82:b1:d4:85:59:1d:6d:3d:a4:54:07:5c:9f:20: 49:68:f7:f4:c6:01:95:19:f4:62:f3:89:05:b3:f2: 3b:ed:fa:ec:c7:44:f6:63:60:00:60:89:c5:c6:79: 16:5d:a0:fe:c2:c0:6c:10:d5:1c:47:b3:8f:47:f5: 01:c7:14:71:1d:b3:ad:a6:47:7f:74:a0:5f:09:3a: 8a:66:23:11:8c:4a:c7:b9:b3:9b:c3:4a:27:bf:f3: 88:2e:c4:fa:7f:e6:78:65:26:b7:77:62:59:a3:0f: bc:39:58:c9:f0:2a:d8:a8:d7:1c:7e:f5:29:e9:75: 3d:2c:9e:67:e6:fd:47:ab:78:a4:65:e5:84:60:4f: e6:43:ba:f2:4b:aa:19:97:f9:bd:ed:f5:58:33:6d: 6d:ca:37:3e:05:69:d7:be:83:ca:91:f2:f5:66:b9: 1a:44:40:12:3f:52:ef:d8:c4:1b:f7:a3:6d:1e:34: 20:4f:a9:85:88:4f:bb:68:c3:84:69:71:87:b7:b9: 33:73:1b:b9:9a:d1:06:92:da:06:c7:a0:e9:75:3e: ba:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AC:45:75:E1:FC:A9:69:5B:37:FF:F2:F3:73:ED:7C:98:E3:4D:C3 X509v3 Authority Key Identifier: keyid:BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:06:e0:23:28:47:89:5d:e1:12:f1:fb:21:33:1a:74:bc:07: b6:97:a9:8f:4b:b3:cd:5b:4a:36:1a:4a:4a:c5:e9:20:23:18: 19:37:43:00:b2:8a:db:55:80:e2:4d:8b:dc:cf:90:af:53:18: 07:37:de:28:31:98:82:14:cb:28:8a:58:a0:79:2d:04:9d:c6: 67:38:9c:c0:2e:8f:90:dc:3e:54:e2:24:1d:e8:9b:2c:5a:9a: 5e:16:43:7c:4b:6d:70:8b:6a:7d:42:c8:e2:3e:ad:2d:dd:24: 82:69:4e:d4:d6:f3:a1:6a:05:c3:71:75:72:41:69:9f:b0:87: 54:59:c7:25:8f:62:8d:17:42:ba:d6:f7:dd:c4:27:72:65:9d: 9e:53:f1:4a:a7:c3:4f:b4:91:a4:ac:4a:f3:35:65:50:b7:66: cc:d7:9b:0c:98:48:5c:e6:de:8e:4f:4e:01:ef:0f:8f:27:3a: 3f:d0:4c:19:07:f2:d7:07:ec:de:f4:02:2a:66:a4:12:a3:28: ec:d6:d1:66:7a:6f:de:b4:c2:b8:ac:c5:eb:7f:80:c4:7f:fe: 21:2c:8a:88:1f:f1:c9:39:7f:37:6a:ea:cd:d4:8c:dc:c7:08: 93:6b:ab:0f:9c:6a:d5:5f:49:90:23:78:e2:d5:78:5f:9f:b4: 79:24:7a:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RThENzExMC8GA1UEBRMoQkRBM0U4QTgyMzFDNzg3RjZCN0YxOEJDMTQ2Qjk1RkI1 QzAzOEVEOTAeFw0yNTA4MjMwNzI0MDdaFw0yNTA4MzAwNzI0MDdaMBgxFjAUBgNV BAMTDTY4YTk2Yzk3LWEzM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFiw3cp21bkZLnOMwvpK0J4iH9X466KQtxIiSwKspAJoA+k6z+erQWFH9DzxGC sdSFWR1tPaRUB1yfIElo9/TGAZUZ9GLziQWz8jvt+uzHRPZjYABgicXGeRZdoP7C wGwQ1RxHs49H9QHHFHEds62mR390oF8JOopmIxGMSse5s5vDSie/84guxPp/5nhl Jrd3YlmjD7w5WMnwKtio1xx+9SnpdT0snmfm/UereKRl5YRgT+ZDuvJLqhmX+b3t 9VgzbW3KNz4Fade+g8qR8vVmuRpEQBI/Uu/YxBv3o20eNCBPqYWIT7tow4RpcYe3 uTNzG7ma0QaS2gbHoOl1ProtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+KxFdeH8 qWlbN//y83PtfJjjTcMwHwYDVR0jBBgwFoAUvaPoqCMceH9rfxi8FGuV+1wDjtkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFOEQ3LzRCMDFDNEE2Rjkz RjExRUZCN0VBQjQyNUM0RjlBRTAyL3ZhUG9xQ01jZUg5cmZ4aThGR3VWLTF3RGp0 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdmFQb3FDTWNlSDlyZnhpOEZHdVYtMXdEanRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF OEQ3LzRCMDFDNEE2RjkzRjExRUZCN0VBQjQyNUM0RjlBRTAyL3ZhUG9xQ01jZUg5 cmZ4aThGR3VWLTF3RGp0ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALQG4CMoR4ld4RLx+yEzGnS8B7aXqY9Ls81bSjYaSkrF6SAjGBk3QwCy ittVgOJNi9zPkK9TGAc33igxmIIUyyiKWKB5LQSdxmc4nMAuj5DcPlTiJB3omyxa ml4WQ3xLbXCLan1CyOI+rS3dJIJpTtTW86FqBcNxdXJBaZ+wh1RZxyWPYo0XQrrW 993EJ3JlnZ5T8Uqnw0+0kaSsSvM1ZVC3ZszXmwyYSFzm3o5PTgHvD48nOj/QTBkH 8tcH7N70AipmpBKjKOzW0WZ6b960wrisxet/gMR//iEsiogf8ck5fzdq6s3UjNzH CJNrqw+catVfSZAjeOLVeF+ftHkkeqs= -----END CERTIFICATE-----Generated at Sat Aug 23 12:27:56 2025 by rpki-client