$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft File: VNOpVcw0GoQYFajN6hkK6lEC384.mft (raw, json) Hash identifier: WU+GuvPdVGFrIAo0Wje+EHu8s53lwh/VUfhXnkVx7bM= Subject key identifier: 5F:F8:80:C2:0B:27:D3:52:99:CA:4E:F5:26:27:A1:45:05:7D:F8:2F Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE Certificate issuer: /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Certificate serial: 0C6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft Manifest number: 0C67 Signing time: Fri 22 Aug 2025 18:31:59 +0000 Manifest this update: Fri 22 Aug 2025 18:31:58 +0000 Manifest next update: Fri 29 Aug 2025 18:31:58 +0000 Files and hashes: 1: VNOpVcw0GoQYFajN6hkK6lEC384.crl (hash: gsaxSL43LJeJChBne14tqdkFtGhZwjVbaAyywi4jJUU=) 2: 86B7FE9005FF11EAB499A845C4F9AE02.roa (hash: zdVWhh1fLYpRD960eUnMlAOzWPZg7F1+V76js4O1Hfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3181 (0xc6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FAC, serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Validity Not Before: Aug 22 18:31:58 2025 GMT Not After : Aug 29 18:31:58 2025 GMT Subject: CN=68a8b79e-2ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:dc:d4:29:d1:8c:f7:7c:83:15:9b:c8:90:4b: 2c:8a:c7:37:80:d3:a9:33:9e:6e:41:b2:9f:88:cf: bf:65:45:4e:f5:8d:62:2c:7d:73:98:a2:13:14:88: 34:21:57:a7:cc:7a:46:e9:d0:1b:52:c9:5e:1d:6e: 40:f4:ce:e5:f3:d0:7f:74:92:4a:fd:af:cd:ce:5a: bb:39:76:56:3d:be:11:69:f7:4d:08:0d:04:9a:40: 5f:16:01:6b:0d:37:e0:b7:a4:15:d7:a8:01:26:04: 10:35:b8:29:d5:f4:02:69:5e:3c:eb:14:a8:ff:f7: bf:67:a8:02:3d:1f:2f:cd:20:81:99:2f:de:45:56: 05:dd:00:58:fe:7d:a6:e3:c5:d9:c7:2e:ed:6e:fa: 61:67:a5:55:1a:8d:53:92:19:ce:33:4e:c8:51:78: 0e:fb:13:70:ae:ac:d1:88:35:dc:63:5a:d1:85:26: 3d:2a:89:6f:a2:37:13:51:80:4d:3d:46:cf:69:6c: 9c:08:ca:7e:89:2d:f6:6e:be:e7:55:c1:ef:79:e4: c1:75:c8:bf:4c:cc:7f:98:40:7b:6e:44:2a:19:8b: 10:04:3a:cd:14:c6:11:4c:13:ef:04:5e:cd:da:ba: 82:73:63:18:fb:fe:39:b4:a4:bb:4b:dd:0d:cd:be: 7b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F8:80:C2:0B:27:D3:52:99:CA:4E:F5:26:27:A1:45:05:7D:F8:2F X509v3 Authority Key Identifier: keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:ae:f7:72:02:60:dd:33:22:5d:1b:7b:76:74:d5:5e:1d:c3: 9f:3c:8a:63:c1:8c:2a:cb:bb:c3:fc:e8:7c:da:e7:bd:f9:c2: c3:d5:9d:53:bb:2f:5e:c4:d7:93:3f:49:60:4e:78:9a:c6:35: 1a:14:67:7f:3d:3e:38:2b:80:f3:a7:4e:f1:5a:ca:46:2b:23: 75:0f:df:4e:72:69:8c:cc:78:e5:b4:96:eb:38:4c:5f:55:e7: 65:6b:7a:22:27:b9:9d:a9:e3:07:f2:d7:1d:40:84:5c:5e:76: a0:49:02:87:47:13:61:88:08:de:3d:3d:8c:09:40:ab:3b:53: c5:df:8f:73:ae:db:e0:e3:cc:30:06:b3:d8:7a:dd:18:5e:68: aa:f7:9c:cf:eb:e8:92:8b:ca:e1:aa:4d:35:44:c5:85:47:ab: 83:b0:d1:98:36:4a:52:2d:e1:35:5f:19:59:ec:cc:96:fc:ba: e3:f8:2b:c9:fc:c7:f5:4c:8a:9f:0f:5a:52:68:bc:0d:bb:b4: 12:ee:b6:d8:eb:73:8f:50:a4:1c:6c:cb:67:66:82:24:71:d8: 00:be:28:e9:82:90:0c:f7:7a:40:6a:6e:f0:37:8b:99:29:b9: 06:6e:66:44:35:ea:df:ba:f6:fc:49:4e:1c:3d:6e:ab:4c:5f: cf:9d:2c:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQUMxMTAvBgNVBAUTKDU0RDNBOTU1Q0MzNDFBODQxODE1QThDREVBMTkwQUVB NTEwMkRGQ0UwHhcNMjUwODIyMTgzMTU4WhcNMjUwODI5MTgzMTU4WjAYMRYwFAYD VQQDEw02OGE4Yjc5ZS0yYmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4dzUKdGM93yDFZvIkEssisc3gNOpM55uQbKfiM+/ZUVO9Y1iLH1zmKITFIg0 IVenzHpG6dAbUsleHW5A9M7l89B/dJJK/a/Nzlq7OXZWPb4RafdNCA0EmkBfFgFr DTfgt6QV16gBJgQQNbgp1fQCaV486xSo//e/Z6gCPR8vzSCBmS/eRVYF3QBY/n2m 48XZxy7tbvphZ6VVGo1TkhnOM07IUXgO+xNwrqzRiDXcY1rRhSY9KolvojcTUYBN PUbPaWycCMp+iS32br7nVcHveeTBdci/TMx/mEB7bkQqGYsQBDrNFMYRTBPvBF7N 2rqCc2MY+/45tKS7S90Nzb57xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/4gMIL J9NSmcpO9SYnoUUFffgvMB8GA1UdIwQYMBaAFFTTqVXMNBqEGBWozeoZCupRAt/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBQy82ODE5QkY0MjA1 RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdvUVlGYWpONmhrSzZsRUMz ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZOT3BWY3cwR29RWUZhak42aGtLNmxFQzM4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZBQy82ODE5QkY0MjA1RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdv UVlGYWpONmhrSzZsRUMzODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHrvdyAmDdMyJdG3t2dNVeHcOfPIpjwYwqy7vD/Oh82ue9+cLD1Z1T uy9exNeTP0lgTniaxjUaFGd/PT44K4Dzp07xWspGKyN1D99OcmmMzHjltJbrOExf Vedla3oiJ7mdqeMH8tcdQIRcXnagSQKHRxNhiAjePT2MCUCrO1PF349zrtvg48ww BrPYet0YXmiq95zP6+iSi8rhqk01RMWFR6uDsNGYNkpSLeE1XxlZ7MyW/Lrj+CvJ /Mf1TIqfD1pSaLwNu7QS7rbY63OPUKQcbMtnZoIkcdgAvijpgpAM93pAam7wN4uZ KbkGbmZENerfuvb8SU4cPW6rTF/PnSy4 -----END CERTIFICATE-----Generated at Sat Aug 23 19:26:31 2025 by rpki-client