$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft File: vrCjIjTRl23j3iJaVReALbYTqLY.mft (raw, json) Hash identifier: Xt3/cELrPeDkMcx3zbjvnwZxxFoaDrUuEUUg0oTih4A= Subject key identifier: D6:2B:0A:38:B4:5C:D8:64:DA:70:A5:21:D6:80:ED:C2:A5:0D:7F:A4 Authority key identifier: BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6 Certificate issuer: /CN=A91AF17B/serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6 Certificate serial: 05E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft Manifest number: 05DE Signing time: Fri 22 Aug 2025 23:10:58 +0000 Manifest this update: Fri 22 Aug 2025 23:10:58 +0000 Manifest next update: Fri 29 Aug 2025 23:10:58 +0000 Files and hashes: 1: vrCjIjTRl23j3iJaVReALbYTqLY.crl (hash: gJhqhUV5fEsH/C000PsiDBCM2szc+hTJlWyFb6chpGc=) 2: 9C955450C77E11EB9DF68B6AC4F9AE02.roa (hash: 3VhvbAFpyQFgzK9qGDlGhCPjLIqfMEiNUYNuSiAIv58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1508 (0x5e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF17B, serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6 Validity Not Before: Aug 22 23:10:58 2025 GMT Not After : Aug 29 23:10:58 2025 GMT Subject: CN=68a8f902-d0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7d:2a:7b:d6:68:96:b1:2a:fc:61:88:74:8b: 1c:9b:b5:18:2f:3c:80:32:bd:35:47:ff:7b:12:7d: 7e:f5:e7:a4:b8:cf:43:08:ad:93:56:ad:32:14:8b: eb:e8:49:93:e4:82:3e:75:e1:03:4c:57:28:e6:af: 61:1a:91:ba:10:e5:35:04:1e:3b:da:a0:b6:5b:05: b2:94:72:d7:c8:6e:c2:2b:71:31:e5:99:82:22:fe: 75:83:51:fa:08:39:55:34:90:5f:dc:e2:9d:d3:e1: 08:e6:eb:57:6d:08:67:6c:dd:88:5c:b7:bb:ff:9e: 41:db:ae:e2:72:8a:66:85:fb:81:63:3a:0e:8f:be: 81:fd:65:cb:88:0f:76:5d:ca:7b:53:be:10:7f:6e: 44:53:3b:83:d2:c0:63:9c:b8:84:04:11:02:0d:55: e9:4d:05:8f:b6:80:38:29:84:c1:e9:60:a6:7f:9e: a0:9f:48:f7:b9:d2:f5:0b:09:d6:59:54:2d:be:1b: 4d:b5:6e:47:76:5c:5e:c2:f6:7a:25:d5:21:42:32: 68:52:ac:b2:70:85:38:d8:f9:62:6e:ad:08:05:f7: 6d:b4:17:83:9a:a7:f6:19:7b:b4:a9:0f:29:af:56: 85:08:ba:fb:fe:77:82:d3:4f:a5:5b:cf:2d:99:9b: dc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2B:0A:38:B4:5C:D8:64:DA:70:A5:21:D6:80:ED:C2:A5:0D:7F:A4 X509v3 Authority Key Identifier: keyid:BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:82:5b:86:dc:4a:da:8a:78:7f:f8:c1:2c:1a:61:5b:ec:62: 73:c5:42:5d:b7:18:aa:1a:12:d4:f6:be:a6:57:c3:e8:72:e6: 61:0f:48:11:1c:2e:6a:dd:1e:d7:5d:84:ba:0b:26:be:15:37: 76:a3:92:a6:ab:f7:9f:9d:f6:78:e6:93:55:e8:6d:20:ce:77: 34:a4:e4:76:13:b1:92:27:c0:93:b1:ea:da:7a:cd:a2:b0:78: f2:f7:5d:00:cc:fc:96:d1:64:bc:e5:40:56:ea:1f:65:44:5e: 5f:bb:2d:1b:68:bd:7c:5a:b0:e2:08:06:b4:ef:a6:1f:16:83: 89:56:f3:93:78:b3:91:bd:65:3d:9f:79:a2:cb:11:db:ea:b7: a1:dc:be:49:42:5c:61:a2:93:f8:98:d8:dd:c1:78:4e:6c:5d: 72:51:bd:71:1d:11:d6:e2:56:eb:af:ba:6c:7c:e9:f2:06:18: 5a:64:81:ff:19:0e:21:97:29:9c:49:64:0a:75:ed:31:d9:2c: 55:d4:cf:90:55:55:23:8d:fe:47:06:d6:36:d6:8a:f5:4e:cd: 73:8f:59:98:5b:ce:c5:ea:49:01:40:c5:17:20:7f:f0:b8:ac: a1:64:9b:ee:03:e3:8a:bb:02:c5:c3:05:71:c1:92:01:27:ce: 58:4e:94:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxN0IxMTAvBgNVBAUTKEJFQjBBMzIyMzREMTk3NkRFM0RFMjI1QTU1MTc4MDJE QjYxM0E4QjYwHhcNMjUwODIyMjMxMDU4WhcNMjUwODI5MjMxMDU4WjAYMRYwFAYD VQQDEw02OGE4ZjkwMi1kMGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtn0qe9ZolrEq/GGIdIscm7UYLzyAMr01R/97En1+9eekuM9DCK2TVq0yFIvr 6EmT5II+deEDTFco5q9hGpG6EOU1BB472qC2WwWylHLXyG7CK3Ex5ZmCIv51g1H6 CDlVNJBf3OKd0+EI5utXbQhnbN2IXLe7/55B267icopmhfuBYzoOj76B/WXLiA92 Xcp7U74Qf25EUzuD0sBjnLiEBBECDVXpTQWPtoA4KYTB6WCmf56gn0j3udL1CwnW WVQtvhtNtW5HdlxewvZ6JdUhQjJoUqyycIU42Plibq0IBfdttBeDmqf2GXu0qQ8p r1aFCLr7/neC00+lW88tmZvcrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYrCji0 XNhk2nClIdaA7cKlDX+kMB8GA1UdIwQYMBaAFL6woyI00Zdt494iWlUXgC22E6i2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE3Qi9FQjAyNzdGQ0M3 N0ExMUVCQkI4MEI4NzhDNEY5QUUwMi92ckNqSWpUUmwyM2ozaUphVlJlQUxiWVRx TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyQ2pJalRSbDIzajNpSmFWUmVBTGJZVHFMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE3Qi9FQjAyNzdGQ0M3N0ExMUVCQkI4MEI4NzhDNEY5QUUwMi92ckNqSWpUUmwy M2ozaUphVlJlQUxiWVRxTFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBggluG3Erainh/+MEsGmFb7GJzxUJdtxiqGhLU9r6mV8PocuZhD0gR HC5q3R7XXYS6Cya+FTd2o5Kmq/efnfZ45pNV6G0gznc0pOR2E7GSJ8CTseraes2i sHjy910AzPyW0WS85UBW6h9lRF5fuy0baL18WrDiCAa076YfFoOJVvOTeLORvWU9 n3miyxHb6reh3L5JQlxhopP4mNjdwXhObF1yUb1xHRHW4lbrr7psfOnyBhhaZIH/ GQ4hlymcSWQKde0x2SxV1M+QVVUjjf5HBtY21or1Ts1zj1mYW87F6kkBQMUXIH/w uKyhZJvuA+OKuwLFwwVxwZIBJ85YTpTb -----END CERTIFICATE-----Generated at Sat Aug 23 20:33:16 2025 by rpki-client