$ rpki-client -vvf rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft File: vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft (raw, json) Hash identifier: GuyM1vsMT0CJah3VKUun2Nm4+nsdzzfU3jAD+NGmvRA= Subject key identifier: 89:1A:73:38:17:F4:A0:AA:C3:98:19:1D:AC:C9:37:6E:5A:7E:DC:46 Authority key identifier: BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8 Certificate issuer: /CN=A91B36DC/serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8 Certificate serial: 07B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft Manifest number: 07A1 Signing time: Fri 22 Aug 2025 21:33:44 +0000 Manifest this update: Fri 22 Aug 2025 21:33:43 +0000 Manifest next update: Fri 29 Aug 2025 21:33:43 +0000 Files and hashes: 1: vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl (hash: c76hHOeyDQq5nA3yBOGE/OFz656efiPX0HGabxD4gxM=) 2: 1714A7D489BD11EC9550C184C4F9AE02.roa (hash: 17PUaNinV45JUoeDuEzM2gIqTYacZZ8Nc7vPAw8wlsY=) 3: FEA1EB7219FA11EBA0F82851C4F9AE02.roa (hash: Wckb8TWjJLJRdDl4+GoL8AkidPynBfPxz8z2YoV99xc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1974 (0x7b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B36DC, serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8 Validity Not Before: Aug 22 21:33:43 2025 GMT Not After : Aug 29 21:33:43 2025 GMT Subject: CN=68a8e237-7cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3f:18:8d:86:4f:a3:c9:f4:00:9a:97:4b:0f: c4:6f:60:b8:39:1c:8d:66:d2:84:35:07:6e:2a:0c: bc:55:ea:4c:f7:69:ed:c2:52:c9:42:25:39:ca:21: 5c:fe:83:e5:6f:be:15:b5:61:61:7c:d4:bc:61:5d: 86:e2:c9:51:06:de:c5:cb:4e:b2:30:9d:ab:c6:d2: 39:e8:e7:56:10:62:7b:53:f8:4e:08:74:b8:47:34: 1c:19:74:c3:cd:5f:5e:04:55:21:c8:76:a0:45:6b: ce:02:9a:aa:5c:0b:81:bb:b5:c9:24:83:b2:4d:0b: a9:2e:e7:2e:72:99:be:4f:21:18:72:91:14:a1:b1: 02:e3:5b:a6:3b:a2:be:44:4a:57:30:84:b0:9e:f1: 7b:68:c5:b2:d6:4c:2a:6d:5a:02:34:bd:30:55:16: 38:b7:5e:cb:3e:ab:d2:08:9a:d6:3a:44:16:64:74: 08:17:ab:a3:a9:38:ea:52:34:c1:c1:de:fb:32:2f: f0:8f:aa:d9:7e:cf:82:3e:30:ce:10:81:55:2f:c8: 86:52:85:56:9c:e3:13:7c:72:47:80:af:ec:d2:a2: a8:9f:50:74:09:6f:f2:1c:73:be:f6:43:22:17:c9: f8:08:aa:0d:8b:91:e5:ed:a6:37:69:b0:4b:3c:52: 61:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:1A:73:38:17:F4:A0:AA:C3:98:19:1D:AC:C9:37:6E:5A:7E:DC:46 X509v3 Authority Key Identifier: keyid:BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ef:e5:21:16:2d:a3:58:04:ee:71:a7:3c:14:0a:30:00:ef: 85:72:07:e7:15:70:cb:15:11:7d:00:a8:9c:d3:8a:6c:d4:bd: b4:15:55:56:42:33:37:3e:29:f5:49:d8:63:b0:e0:af:e3:c0: 46:16:e8:13:ae:07:e5:85:1c:6f:f3:28:1f:3b:78:69:5a:f7: f9:60:a4:e3:7f:e3:2b:db:dc:e8:f6:7a:bd:be:55:73:de:41: 8a:8e:f1:0f:db:9f:88:6a:ca:18:c7:48:4b:7a:11:7c:95:19: ca:a2:45:e6:68:5f:9a:7e:17:86:c7:34:6c:c2:3f:3c:04:4b: d1:b2:a0:c2:be:58:c4:47:d9:2e:2a:c4:6e:61:a1:49:61:3f: 57:68:e3:b7:36:98:38:a0:85:76:39:fb:55:4f:56:68:63:a0: a7:3c:b3:9d:26:76:e6:51:2f:83:82:12:a9:b8:ee:9b:a1:aa: ab:d5:67:07:b2:92:e0:da:f2:4a:a8:2d:36:4a:17:3c:56:a1: ad:f3:94:0e:7c:34:6d:f9:3d:6d:96:d3:8e:31:ed:48:0d:cd: a2:0d:dd:e6:84:d5:03:85:08:8b:46:ec:f5:5a:c4:aa:76:e4: c7:cc:d6:39:61:9d:ac:b6:c7:34:d6:15:6f:d5:ce:86:47:79: 36:e7:2e:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM2REMxMTAvBgNVBAUTKEJDMDJCMDA1Q0NBQTA0NTNGQzlCODE3QkI3OENCQTkx NUYyN0MyQTgwHhcNMjUwODIyMjEzMzQzWhcNMjUwODI5MjEzMzQzWjAYMRYwFAYD VQQDEw02OGE4ZTIzNy03Y2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApT8YjYZPo8n0AJqXSw/Eb2C4ORyNZtKENQduKgy8VepM92ntwlLJQiU5yiFc /oPlb74VtWFhfNS8YV2G4slRBt7Fy06yMJ2rxtI56OdWEGJ7U/hOCHS4RzQcGXTD zV9eBFUhyHagRWvOApqqXAuBu7XJJIOyTQupLucucpm+TyEYcpEUobEC41umO6K+ REpXMISwnvF7aMWy1kwqbVoCNL0wVRY4t17LPqvSCJrWOkQWZHQIF6ujqTjqUjTB wd77Mi/wj6rZfs+CPjDOEIFVL8iGUoVWnOMTfHJHgK/s0qKon1B0CW/yHHO+9kMi F8n4CKoNi5Hl7aY3abBLPFJhtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkaczgX 9KCqw5gZHazJN25aftxGMB8GA1UdIwQYMBaAFLwCsAXMqgRT/JuBe7eMupFfJ8Ko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzZEQy9CMDQzNjQ3QTE5 RjkxMUVCQjhDREVENEZDNEY5QUUwMi92QUt3QmN5cUJGUDhtNEY3dDR5NmtWOG53 cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZBS3dCY3lxQkZQOG00Rjd0NHk2a1Y4bndxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzZEQy9CMDQzNjQ3QTE5RjkxMUVCQjhDREVENEZDNEY5QUUwMi92QUt3QmN5cUJG UDhtNEY3dDR5NmtWOG53cWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv7+UhFi2jWATucac8FAowAO+FcgfnFXDLFRF9AKic04ps1L20FVVW QjM3Pin1SdhjsOCv48BGFugTrgflhRxv8ygfO3hpWvf5YKTjf+Mr29zo9nq9vlVz 3kGKjvEP25+IasoYx0hLehF8lRnKokXmaF+afheGxzRswj88BEvRsqDCvljER9ku KsRuYaFJYT9XaOO3Npg4oIV2OftVT1ZoY6CnPLOdJnbmUS+DghKpuO6boaqr1WcH spLg2vJKqC02Shc8VqGt85QOfDRt+T1tltOOMe1IDc2iDd3mhNUDhQiLRuz1WsSq duTHzNY5YZ2stsc01hVv1c6GR3k25y5Z -----END CERTIFICATE-----Generated at Sat Aug 23 20:39:11 2025 by rpki-client