$ rpki-client -vvf rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft File: vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft (raw, json) Hash identifier: Vwxn11vdZLfMEjf9KahJnGF77luF2zKPA4NRiHEeVlQ= Subject key identifier: 8D:9A:AB:D6:A6:84:13:DB:31:75:C0:28:81:2F:B5:C6:78:31:A9:50 Authority key identifier: BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6 Certificate issuer: /CN=A91B03C3/serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6 Certificate serial: 08C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft Manifest number: 08BF Signing time: Fri 22 Aug 2025 20:36:30 +0000 Manifest this update: Fri 22 Aug 2025 20:36:29 +0000 Manifest next update: Fri 29 Aug 2025 20:36:29 +0000 Files and hashes: 1: vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl (hash: /lklPM1HUGZNZWSZvfrkgsyZczFRuIhwCQweEwMrNhI=) 2: 1D0E6A7027FC11EDB69DF17AC4F9AE02.roa (hash: MbzDlkokZBR/aS6/hcoRXo43UcCAHhzz3LI8ih+FSVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2246 (0x8c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B03C3, serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6 Validity Not Before: Aug 22 20:36:29 2025 GMT Not After : Aug 29 20:36:29 2025 GMT Subject: CN=68a8d4cd-0d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a7:ce:01:98:81:da:c0:e1:1a:b9:4b:48:2d: b7:71:f2:9c:76:62:b8:b3:a2:5d:4f:a8:d7:78:6b: 9a:3d:fd:c4:22:04:20:bc:e8:e8:78:a7:8a:52:6d: b7:d0:2a:9d:4a:ee:97:1a:aa:3b:12:66:1b:ff:01: 02:51:05:1d:9b:c6:9c:ed:08:21:68:05:49:33:79: 16:92:92:99:c3:73:4b:9e:c9:cb:51:5c:a5:ac:19: 15:28:97:f1:11:3d:db:ee:d6:bd:10:c4:15:e5:6f: c3:f4:ae:74:b2:cd:d4:1a:77:25:99:ac:ad:00:d5: 7c:78:29:89:ba:7e:34:ad:24:05:ad:6b:68:07:e4: 09:38:eb:a8:a6:8c:7f:62:5c:e6:c0:43:36:14:7a: eb:74:df:fe:74:b8:c5:c3:14:72:38:1a:bd:3d:bf: 04:5c:83:f3:1a:c0:00:ab:08:27:6c:2d:81:4c:39: 27:e7:e2:cb:6d:6e:01:5e:39:a0:f9:67:54:d6:a7: 29:92:e0:b4:30:00:64:ce:1c:12:7f:c5:b7:30:da: 0d:70:03:d2:3a:0c:fa:4e:53:d5:74:f6:27:52:bc: df:7e:1e:a5:4b:81:05:67:6a:0b:21:86:6a:5b:2d: 59:68:af:c7:13:d7:03:fb:c2:41:a7:2b:b0:2d:e3: de:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9A:AB:D6:A6:84:13:DB:31:75:C0:28:81:2F:B5:C6:78:31:A9:50 X509v3 Authority Key Identifier: keyid:BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f0:0e:60:3f:6b:e8:1a:cf:c1:ab:69:88:28:08:08:00:0b: df:58:4d:6a:1e:90:04:6a:e7:58:5f:88:90:7a:81:23:a9:2a: 88:34:71:b4:2f:62:e0:d4:0c:3b:5a:1b:0e:6c:5f:c9:7b:3b: 10:29:b2:0d:2d:af:53:68:37:5c:d0:24:26:a4:dd:eb:07:70: 49:5f:04:8e:d3:12:6d:06:64:c6:e6:55:94:3c:81:d5:c3:26: c9:39:d7:b5:43:12:c5:70:11:da:73:bf:c8:0d:ea:60:99:de: e0:84:b7:07:f4:0a:09:4b:dd:2b:b2:1e:87:a9:c3:c3:98:15: 2b:3a:9d:45:55:ad:3d:0b:27:7d:f1:9a:fe:4c:6b:73:19:4d: 67:38:ca:83:1d:71:1f:36:51:54:d7:19:ac:ea:f8:83:e0:28: 03:ab:cc:a7:a5:7b:4b:29:c6:3a:dc:51:fa:94:2e:34:c4:0a: 4a:8c:45:ac:7d:a0:bb:5e:2b:ea:7d:43:d3:f2:fa:cc:f3:0d: c1:b1:db:e0:b4:59:78:78:5d:ac:8a:27:e3:55:f5:8e:22:71: 13:4a:80:88:6e:2b:80:7d:08:f5:48:c4:4d:f4:05:fd:b4:e6: 82:3d:e4:2e:fd:40:bc:04:c1:f5:c6:54:39:08:f2:cc:ba:9c: 3c:08:2b:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzQzMxMTAvBgNVBAUTKEJENjA5NjYzRTM5NjMyRTJFN0I3NEZEQ0QzNzJBN0RD QzVGMDI5QTYwHhcNMjUwODIyMjAzNjI5WhcNMjUwODI5MjAzNjI5WjAYMRYwFAYD VQQDEw02OGE4ZDRjZC0wZDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqfOAZiB2sDhGrlLSC23cfKcdmK4s6JdT6jXeGuaPf3EIgQgvOjoeKeKUm23 0CqdSu6XGqo7EmYb/wECUQUdm8ac7QghaAVJM3kWkpKZw3NLnsnLUVylrBkVKJfx ET3b7ta9EMQV5W/D9K50ss3UGnclmaytANV8eCmJun40rSQFrWtoB+QJOOuopox/ YlzmwEM2FHrrdN/+dLjFwxRyOBq9Pb8EXIPzGsAAqwgnbC2BTDkn5+LLbW4BXjmg +WdU1qcpkuC0MABkzhwSf8W3MNoNcAPSOgz6TlPVdPYnUrzffh6lS4EFZ2oLIYZq Wy1ZaK/HE9cD+8JBpyuwLePeyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2aq9am hBPbMXXAKIEvtcZ4MalQMB8GA1UdIwQYMBaAFL1glmPjljLi57dP3NNyp9zF8Cmm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDNDMy85OEQ4NTAwNkJD RTQxMUVBQjhENkQzNjJDNEY5QUUwMi92V0NXWS1PV011TG50MF9jMDNLbjNNWHdL YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZXQ1dZLU9XTXVMbnQwX2MwM0tuM01Yd0thWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDNDMy85OEQ4NTAwNkJDRTQxMUVBQjhENkQzNjJDNEY5QUUwMi92V0NXWS1PV011 TG50MF9jMDNLbjNNWHdLYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/8A5gP2voGs/Bq2mIKAgIAAvfWE1qHpAEaudYX4iQeoEjqSqINHG0 L2Lg1Aw7WhsObF/JezsQKbINLa9TaDdc0CQmpN3rB3BJXwSO0xJtBmTG5lWUPIHV wybJOde1QxLFcBHac7/IDepgmd7ghLcH9AoJS90rsh6HqcPDmBUrOp1FVa09Cyd9 8Zr+TGtzGU1nOMqDHXEfNlFU1xms6viD4CgDq8ynpXtLKcY63FH6lC40xApKjEWs faC7XivqfUPT8vrM8w3BsdvgtFl4eF2siifjVfWOInETSoCIbiuAfQj1SMRN9AX9 tOaCPeQu/UC8BMH1xlQ5CPLMupw8CCtC -----END CERTIFICATE-----Generated at Sat Aug 23 20:28:15 2025 by rpki-client