$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft File: vz-8DaluLlE6qliBLGlLzQe43Xc.mft (raw, json) Hash identifier: ikdo0TR3aC6wpzKjwL+g4S9fku8g8KO+Fun50PyKwIo= Subject key identifier: B8:35:B6:56:36:5B:36:91:3A:D5:CA:07:89:36:10:9F:91:7B:CB:CB Authority key identifier: BF:3F:BC:0D:A9:6E:2E:51:3A:AA:58:81:2C:69:4B:CD:07:B8:DD:77 Certificate issuer: /CN=A91C7AC5/serialNumber=BF3FBC0DA96E2E513AAA58812C694BCD07B8DD77 Certificate serial: 08BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft Manifest number: 08B3 Signing time: Fri 22 Aug 2025 20:39:07 +0000 Manifest this update: Fri 22 Aug 2025 20:39:07 +0000 Manifest next update: Fri 29 Aug 2025 20:39:07 +0000 Files and hashes: 1: vz-8DaluLlE6qliBLGlLzQe43Xc.crl (hash: N7og5Z0MhRNFBdLos85cIbg02NoxBYfUZCWIOq+tu8c=) 2: 5BC42F286E9F11EC90A66E2BC4F9AE02.roa (hash: lBT7uRCySISPj1eQO8mZRZSLeeGbhioMqzJ80ai10hM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.crl rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:39:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2239 (0x8bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7AC5, serialNumber=BF3FBC0DA96E2E513AAA58812C694BCD07B8DD77 Validity Not Before: Aug 22 20:39:07 2025 GMT Not After : Aug 29 20:39:07 2025 GMT Subject: CN=68a8d56b-4329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:85:57:99:73:fe:93:36:11:8f:4e:fd:b6:f4: 2e:dc:0a:22:83:7f:7b:60:9f:02:0e:72:b8:24:b3: fd:3e:ba:a5:8e:6d:72:1c:c8:12:68:55:9f:9a:04: ea:59:1c:ef:89:e8:bc:ec:ee:03:b9:fc:4a:4c:b7: 7d:6c:21:7f:44:4b:ae:4b:63:22:17:91:06:6d:21: a9:8a:10:b6:bb:f0:52:11:91:28:06:85:7a:8b:ba: 8c:a1:75:74:f4:a2:35:39:00:23:b5:b0:4f:7d:4c: 35:f9:07:4f:45:6a:23:f6:f2:d6:a0:4f:7b:94:5c: e0:86:28:f7:7e:1d:9d:11:1d:9a:75:99:ec:a2:a3: 86:5a:2f:ea:8f:b4:4c:f8:6a:84:7f:46:16:c2:81: 6b:3f:bb:58:f2:57:16:5b:43:e9:6c:7a:ca:63:71: 9f:1d:8f:de:f3:e9:3c:f7:ee:2b:02:c2:58:6a:dc: c6:7a:a8:5a:e2:0d:ab:78:38:0c:91:f7:ed:ef:08: be:f1:0b:9c:7e:60:0a:c0:ec:8d:3a:e7:77:b5:04: 5d:ce:fb:b2:30:09:92:99:91:08:de:b5:4f:a2:97: 4c:50:02:32:0f:91:42:5a:41:f3:59:d2:40:8e:0b: a5:07:a1:1e:0d:47:6c:65:72:61:f1:fe:0a:0c:80: 38:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:35:B6:56:36:5B:36:91:3A:D5:CA:07:89:36:10:9F:91:7B:CB:CB X509v3 Authority Key Identifier: keyid:BF:3F:BC:0D:A9:6E:2E:51:3A:AA:58:81:2C:69:4B:CD:07:B8:DD:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:a7:4d:40:90:ab:a7:48:a2:76:6c:fb:25:1c:ce:58:bc:ac: 25:d5:7d:a8:d8:9b:80:92:4e:7d:d2:64:5a:f6:da:48:a3:3b: f9:e8:02:1f:37:09:0e:82:73:1e:7f:b9:f8:73:c8:a4:ed:54: 7f:ed:ca:29:61:6e:07:c1:3c:45:a3:4a:c7:88:82:b9:c0:5c: 93:83:ef:ff:de:07:57:10:93:22:62:ad:5b:42:73:e4:5a:96: 00:53:c7:6f:2f:52:1b:cc:e2:57:44:05:8a:99:da:f2:2a:a5: 9e:d6:8d:d9:ea:1b:90:d2:d5:37:5f:c7:f7:4e:d2:9e:c4:1d: 24:65:b1:e9:12:ee:79:2b:1a:9e:71:8e:53:27:8d:78:7f:25: 92:95:22:48:29:ad:cf:a8:e2:6d:13:0d:b5:17:77:43:6d:12: f3:73:a2:e0:69:c5:2a:77:d2:67:a2:67:22:3f:be:f1:77:c8: 39:1a:47:8f:c7:80:fa:d2:36:1a:5f:81:0c:4f:ed:be:b7:b6: 15:5b:8f:06:6d:bc:4d:cf:a9:c2:dd:9c:6a:1d:f9:18:13:48: 0e:f1:0c:77:47:64:45:56:72:95:08:41:e9:92:db:d4:73:4c: d2:b3:34:e9:49:2d:8d:75:a9:03:ce:8a:b3:e2:82:95:83:c3: 45:c0:53:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBQzUxMTAvBgNVBAUTKEJGM0ZCQzBEQTk2RTJFNTEzQUFBNTg4MTJDNjk0QkNE MDdCOERENzcwHhcNMjUwODIyMjAzOTA3WhcNMjUwODI5MjAzOTA3WjAYMRYwFAYD VQQDEw02OGE4ZDU2Yi00MzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IVXmXP+kzYRj079tvQu3Aoig397YJ8CDnK4JLP9Prqljm1yHMgSaFWfmgTq WRzviei87O4DufxKTLd9bCF/REuuS2MiF5EGbSGpihC2u/BSEZEoBoV6i7qMoXV0 9KI1OQAjtbBPfUw1+QdPRWoj9vLWoE97lFzghij3fh2dER2adZnsoqOGWi/qj7RM +GqEf0YWwoFrP7tY8lcWW0PpbHrKY3GfHY/e8+k89+4rAsJYatzGeqha4g2reDgM kfft7wi+8QucfmAKwOyNOud3tQRdzvuyMAmSmZEI3rVPopdMUAIyD5FCWkHzWdJA jgulB6EeDUdsZXJh8f4KDIA4YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLg1tlY2 WzaROtXKB4k2EJ+Re8vLMB8GA1UdIwQYMBaAFL8/vA2pbi5ROqpYgSxpS80HuN13 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0FDNS9BM0VCNUMwMEMw RDUxMUVBOTA4QzAxNzhDNEY5QUUwMi92ei04RGFsdUxsRTZxbGlCTEdsTHpRZTQz WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z6LThEYWx1TGxFNnFsaUJMR2xMelFlNDNYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0FDNS9BM0VCNUMwMEMwRDUxMUVBOTA4QzAxNzhDNEY5QUUwMi92ei04RGFsdUxs RTZxbGlCTEdsTHpRZTQzWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHp01AkKunSKJ2bPslHM5YvKwl1X2o2JuAkk590mRa9tpIozv56AIf NwkOgnMef7n4c8ik7VR/7copYW4HwTxFo0rHiIK5wFyTg+//3gdXEJMiYq1bQnPk WpYAU8dvL1IbzOJXRAWKmdryKqWe1o3Z6huQ0tU3X8f3TtKexB0kZbHpEu55Kxqe cY5TJ414fyWSlSJIKa3PqOJtEw21F3dDbRLzc6LgacUqd9JnomciP77xd8g5GkeP x4D60jYaX4EMT+2+t7YVW48GbbxNz6nC3ZxqHfkYE0gO8Qx3R2RFVnKVCEHpktvU c0zSszTpSS2NdakDzoqz4oKVg8NFwFMv -----END CERTIFICATE-----Generated at Sat Aug 23 16:29:58 2025 by rpki-client