$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft File: VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft (raw, json) Hash identifier: /3nqyMoPGEzqDexOIja52QqXLrm9IkzQAssqEzXH8FY= Subject key identifier: A1:54:9E:AC:97:AB:9C:B9:5C:26:CC:B3:C3:AF:F9:F2:74:14:23:A8 Authority key identifier: 54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14 Certificate issuer: /CN=A91AEBFF/serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014 Certificate serial: 048D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft Manifest number: 0487 Signing time: Sat 23 Aug 2025 00:15:44 +0000 Manifest this update: Sat 23 Aug 2025 00:15:44 +0000 Manifest next update: Sat 30 Aug 2025 00:15:44 +0000 Files and hashes: 1: VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl (hash: ei8MIsfkNlvDI3kR8g0zYlivitTZvr+6zVjQgvqVPg0=) 2: FEE1AED6C77311EEB751AE2CC4F9AE02.roa (hash: VVFFKCHYbosvaaLrPx2vqSUqYAflv5w/HG528t1OXHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1165 (0x48d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEBFF, serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014 Validity Not Before: Aug 23 00:15:44 2025 GMT Not After : Aug 30 00:15:44 2025 GMT Subject: CN=68a90830-9922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e4:73:b2:bb:ce:ed:ee:30:0d:33:fc:6b:ce: 36:68:55:92:ed:f6:89:87:2d:37:39:1e:d3:99:79: 2b:53:7a:fc:5d:ba:54:c9:62:8f:92:a1:93:a2:ea: 8a:51:14:db:bc:f7:3b:70:b1:58:9c:95:d5:07:c6: 2b:27:30:69:07:58:f2:95:52:21:2b:1e:3a:7c:f3: cd:75:44:c7:0b:14:e4:52:5b:95:22:35:30:9a:94: b9:7a:b9:9c:b9:2f:7f:f6:88:b5:6a:88:b0:4b:3b: fa:1e:c4:6e:6b:50:7e:a3:65:f8:71:f0:df:2e:11: 0e:e8:a2:1a:e3:2e:c4:69:c3:df:f4:e0:38:31:93: ac:28:92:0f:87:50:d4:fd:5b:82:ad:4f:4a:8d:21: 38:94:56:d9:3d:95:f4:06:b0:89:46:f7:4b:a9:66: 1a:24:e6:b5:b8:30:c7:2e:df:4f:fc:3c:b9:34:2b: 2e:96:2b:5a:55:dc:ab:df:ed:8b:7b:f8:a0:42:cf: 4b:5d:88:49:6b:49:b1:90:ed:0b:07:6a:be:7b:65: 94:87:b2:e7:0b:be:ce:42:ca:e6:73:ef:9b:42:af: c4:cc:9b:a8:3e:ed:af:6c:3a:58:24:d5:d0:63:89: 6b:48:9a:72:47:94:5d:f9:0d:e6:04:fb:89:57:73: e0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:54:9E:AC:97:AB:9C:B9:5C:26:CC:B3:C3:AF:F9:F2:74:14:23:A8 X509v3 Authority Key Identifier: keyid:54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:53:91:da:49:7f:99:9e:7c:5e:19:68:25:64:1e:5e:99:7e: 7e:df:30:c8:77:97:e7:ca:5c:8c:fa:0a:d0:96:5a:00:14:eb: 68:6b:a2:9c:8e:d7:9a:24:de:54:a2:6d:a2:32:d0:11:71:43: e3:1f:b1:bb:c0:48:6d:1f:e9:f5:82:9d:a1:41:ea:64:98:40: 1b:74:fd:2d:0d:e0:3b:75:90:5f:65:f1:5c:b8:d1:95:a1:dc: 62:91:0d:34:d8:cf:c2:f7:f8:c8:5b:bd:4e:68:8d:ec:db:3a: 82:9e:95:db:73:72:2f:3e:0a:b7:7f:33:27:0f:35:f8:4c:0c: 88:91:9b:19:35:ee:a5:71:6d:db:74:1f:0d:c6:57:11:06:26: eb:5a:03:fb:6b:13:a5:4c:47:d1:01:11:e7:70:2e:4e:d5:31: 31:f8:f8:62:9d:87:d5:9a:94:60:af:9e:60:36:84:7a:8f:61: 66:18:70:f9:03:a9:fe:90:a3:84:e1:f8:68:0d:40:be:f4:30: 76:78:65:ee:7f:dd:0d:70:db:25:74:87:55:3c:99:75:46:e3: 76:70:b9:e6:be:b0:c4:cd:30:51:22:5b:4e:e9:56:1a:78:bc: 7d:e0:a6:16:ef:6c:c4:9c:20:e8:56:1e:b5:12:c9:0f:f4:97: 8c:0f:48:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVCRkYxMTAvBgNVBAUTKDU0NDExRkU3MzMyRDJFRjRGRjI3NUU1OUQ1REVGRUQx Q0NFOTYwMTQwHhcNMjUwODIzMDAxNTQ0WhcNMjUwODMwMDAxNTQ0WjAYMRYwFAYD VQQDEw02OGE5MDgzMC05OTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouRzsrvO7e4wDTP8a842aFWS7faJhy03OR7TmXkrU3r8XbpUyWKPkqGTouqK URTbvPc7cLFYnJXVB8YrJzBpB1jylVIhKx46fPPNdUTHCxTkUluVIjUwmpS5ermc uS9/9oi1aoiwSzv6HsRua1B+o2X4cfDfLhEO6KIa4y7EacPf9OA4MZOsKJIPh1DU /VuCrU9KjSE4lFbZPZX0BrCJRvdLqWYaJOa1uDDHLt9P/Dy5NCsulitaVdyr3+2L e/igQs9LXYhJa0mxkO0LB2q+e2WUh7LnC77OQsrmc++bQq/EzJuoPu2vbDpYJNXQ Y4lrSJpyR5Rd+Q3mBPuJV3PgnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFUnqyX q5y5XCbMs8Ov+fJ0FCOoMB8GA1UdIwQYMBaAFFRBH+czLS70/ydeWdXe/tHM6WAU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUJGRi9FM0RDMjlFNjUw REMxMUVDOUJGOTBFMzFDNEY5QUUwMi9WRUVmNXpNdEx2VF9KMTVaMWQ3LTBjenBZ QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZFRWY1ek10THZUX0oxNVoxZDctMGN6cFlCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUJGRi9FM0RDMjlFNjUwREMxMUVDOUJGOTBFMzFDNEY5QUUwMi9WRUVmNXpNdEx2 VF9KMTVaMWQ3LTBjenBZQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeU5HaSX+ZnnxeGWglZB5emX5+3zDId5fnylyM+grQlloAFOtoa6Kc jteaJN5Uom2iMtARcUPjH7G7wEhtH+n1gp2hQepkmEAbdP0tDeA7dZBfZfFcuNGV odxikQ002M/C9/jIW71OaI3s2zqCnpXbc3IvPgq3fzMnDzX4TAyIkZsZNe6lcW3b dB8NxlcRBibrWgP7axOlTEfRARHncC5O1TEx+PhinYfVmpRgr55gNoR6j2FmGHD5 A6n+kKOE4fhoDUC+9DB2eGXuf90NcNsldIdVPJl1RuN2cLnmvrDEzTBRIltO6VYa eLx94KYW72zEnCDoVh61EskP9JeMD0jO -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:42 2025 by rpki-client