$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft File: Vd1sG_HER988yGQNERKpasrh-Aw.mft (raw, json) Hash identifier: Phfw86We2zNFODP2sRFubZeBnadlfXn12mju2yJ2+n4= Subject key identifier: 6E:2A:33:8B:47:3C:9D:FA:7F:5F:A0:CD:F1:D2:3A:87:06:EA:11:FD Authority key identifier: 55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C Certificate issuer: /CN=A91C5CA9/serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft Manifest number: 24 Signing time: Sat 23 Aug 2025 08:02:45 +0000 Manifest this update: Sat 23 Aug 2025 08:02:45 +0000 Manifest next update: Sat 30 Aug 2025 08:02:45 +0000 Files and hashes: 1: Vd1sG_HER988yGQNERKpasrh-Aw.crl (hash: NVS3iQXGGD7WRzI9sJLDMSsEixxrCnQh7Hi8FrxnvEA=) 2: 36B587404B0F11F0A2359B4EC4F9AE02.roa (hash: Mp1JcqkdMAmbReGNCmp0QyS72nIBhDSCoOb/C1pLXic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5CA9, serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C Validity Not Before: Aug 23 08:02:45 2025 GMT Not After : Aug 30 08:02:45 2025 GMT Subject: CN=68a975a5-7392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:eb:9b:c3:d8:12:7e:02:f1:cb:8a:49:93:ce: 71:21:7b:fa:24:a9:07:49:e4:df:f6:e6:f9:c2:d3: 41:36:ca:65:4e:02:e5:4d:cc:0d:52:1c:22:5a:76: a2:47:e8:bc:50:a6:1a:f5:b0:b5:4d:08:cb:f2:4b: 70:90:34:a7:7d:57:15:34:ee:89:0c:bd:66:35:69: d3:53:10:d6:c4:3b:ff:fe:ce:33:e8:df:79:e8:41: 82:76:b0:23:d8:47:2b:75:e4:85:36:32:94:f4:d3: d3:77:e5:d7:a3:2a:5b:77:64:f7:f1:a0:e8:81:06: 5d:61:e3:58:71:a2:b2:d2:de:18:58:7d:71:56:83: 12:12:83:5d:42:f5:bc:6c:c6:40:3c:2c:76:04:8e: 39:f9:78:f3:4d:95:28:37:dc:7d:ef:d3:c8:0e:b5: 8e:03:5b:bd:af:f1:93:16:74:7d:83:f0:8c:44:5d: 68:39:6f:47:4f:f6:ff:2d:fb:ab:88:d3:ef:43:af: 53:47:7a:cf:2c:9c:9b:7d:79:84:ce:b1:69:ea:f3: 00:93:1b:2b:05:04:a4:7f:d1:d2:79:d1:b8:7c:89: c4:cc:a5:18:32:6b:f9:58:ec:79:ac:67:c6:9d:c3: e5:ac:8c:cc:98:ed:15:f4:68:a1:0d:62:72:72:8b: 53:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2A:33:8B:47:3C:9D:FA:7F:5F:A0:CD:F1:D2:3A:87:06:EA:11:FD X509v3 Authority Key Identifier: keyid:55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:10:be:3d:c8:04:e4:09:cc:7e:cb:bc:66:81:6a:43:2c:d8: e7:db:12:0b:d3:c7:36:e2:a4:6b:ea:49:72:67:15:66:99:dd: 89:b8:e8:77:32:a7:b4:ec:ff:4b:f4:a0:32:ed:ce:58:2b:b5: e4:31:68:f4:e5:70:b6:f3:ab:69:df:2d:cd:02:78:2d:aa:65: 1c:8b:ca:75:b6:ac:54:05:42:31:b7:09:59:75:ea:da:b1:c5: 82:e9:19:f8:60:61:e1:88:67:71:d5:7c:33:39:50:24:d4:a4: 81:53:1a:76:f8:1a:ca:36:80:99:9c:ef:d9:b5:51:fe:2b:02: 7f:8e:99:6e:5f:58:33:b2:bf:85:ef:a8:54:cb:99:f7:8c:d3: 97:5c:32:8e:f5:4d:4f:64:ae:f9:7f:7a:fa:59:05:fa:e1:b0: b0:ef:0a:b8:a5:b5:e5:c7:05:cd:1f:10:c1:17:75:33:91:d2: b0:ee:9f:46:2e:db:5f:b5:65:15:65:68:81:61:71:16:dd:65: 98:be:97:4d:a4:7d:99:47:58:b5:af:99:80:99:d4:07:59:f9: 69:75:0a:92:b3:32:ae:48:7b:99:9f:14:d0:a7:d6:03:65:1b: 29:c1:1d:ba:28:58:8d:0f:cc:9c:ad:3c:39:85:0e:db:95:cd: 6e:b2:dc:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NUNBOTExMC8GA1UEBRMoNTVERDZDMUJGMUM0NDdERjNDQzg2NDBEMTExMkE5NkFD QUUxRjgwQzAeFw0yNTA4MjMwODAyNDVaFw0yNTA4MzAwODAyNDVaMBgxFjAUBgNV BAMTDTY4YTk3NWE1LTczOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ65vD2BJ+AvHLikmTznEhe/okqQdJ5N/25vnC00E2ymVOAuVNzA1SHCJadqJH 6LxQphr1sLVNCMvyS3CQNKd9VxU07okMvWY1adNTENbEO//+zjPo33noQYJ2sCPY Ryt15IU2MpT009N35dejKlt3ZPfxoOiBBl1h41hxorLS3hhYfXFWgxISg11C9bxs xkA8LHYEjjn5ePNNlSg33H3v08gOtY4DW72v8ZMWdH2D8IxEXWg5b0dP9v8t+6uI 0+9Dr1NHes8snJt9eYTOsWnq8wCTGysFBKR/0dJ50bh8icTMpRgya/lY7HmsZ8ad w+WsjMyY7RX0aKENYnJyi1MXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbiozi0c8 nfp/X6DN8dI6hwbqEf0wHwYDVR0jBBgwFoAUVd1sG/HER988yGQNERKpasrh+Aww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1Q0E5Lzk2RDYxMUQwNEIw QTExRjBBQjU0MjAxRUM0RjlBRTAyL1ZkMXNHX0hFUjk4OHlHUU5FUktwYXNyaC1B dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVmQxc0dfSEVSOTg4eUdRTkVSS3Bhc3JoLUF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 Q0E5Lzk2RDYxMUQwNEIwQTExRjBBQjU0MjAxRUM0RjlBRTAyL1ZkMXNHX0hFUjk4 OHlHUU5FUktwYXNyaC1Bdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADIQvj3IBOQJzH7LvGaBakMs2OfbEgvTxzbipGvqSXJnFWaZ3Ym46Hcy p7Ts/0v0oDLtzlgrteQxaPTlcLbzq2nfLc0CeC2qZRyLynW2rFQFQjG3CVl16tqx xYLpGfhgYeGIZ3HVfDM5UCTUpIFTGnb4Gso2gJmc79m1Uf4rAn+OmW5fWDOyv4Xv qFTLmfeM05dcMo71TU9krvl/evpZBfrhsLDvCrilteXHBc0fEMEXdTOR0rDun0Yu 21+1ZRVlaIFhcRbdZZi+l02kfZlHWLWvmYCZ1AdZ+Wl1CpKzMq5Ie5mfFNCn1gNl GynBHbooWI0PzJytPDmFDtuVzW6y3OI= -----END CERTIFICATE-----Generated at Sat Aug 23 21:04:55 2025 by rpki-client