$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft File: VzWraqwyeVRCT5_oyoUzQpnde8I.mft (raw, json) Hash identifier: vzFidfurxGK94rJw4kqapfTyRecuR+hX9jjvZ1AAFgw= Subject key identifier: A4:4F:52:09:FC:A3:23:A7:B2:18:42:B6:31:F7:41:B1:21:C4:96:CB Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 Certificate issuer: /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Certificate serial: 0F84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft Manifest number: 0F79 Signing time: Fri 22 Aug 2025 17:40:45 +0000 Manifest this update: Fri 22 Aug 2025 17:40:44 +0000 Manifest next update: Fri 29 Aug 2025 17:40:44 +0000 Files and hashes: 1: VzWraqwyeVRCT5_oyoUzQpnde8I.crl (hash: bHVvy9y/mOAw12710LeXwg8Je/qnZvdDWH176F5pzu4=) 2: F27C04B8779E11E997C0204AC4F9AE02.roa (hash: DZGyjsonfYGjBw4hHPzT7rTakbn4N6VzJZPth34e8Gc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3972 (0xf84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE392, serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Validity Not Before: Aug 22 17:40:44 2025 GMT Not After : Aug 29 17:40:44 2025 GMT Subject: CN=68a8ab9c-bf08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6d:32:ee:bc:ca:0b:94:fc:58:f5:a8:06:80: 72:82:0a:61:80:f4:be:ca:9b:41:b4:4a:8c:ed:62: f5:46:a1:62:97:c6:da:2f:f5:42:d9:93:a2:c3:30: 15:3b:66:80:03:ce:31:21:5c:76:bf:20:5f:92:1a: 6b:a3:48:40:3c:45:c3:ae:16:40:f6:15:f0:d3:6a: db:ed:ed:4a:82:9d:75:a6:fc:4c:d5:71:a5:28:b6: 8e:a7:e4:01:79:75:89:53:71:94:2f:c7:69:a3:40: d9:62:98:cc:0f:03:b3:12:81:78:fe:04:52:6b:b8: 60:80:fb:34:4b:c7:ce:85:28:43:41:a0:af:d6:fc: d7:8a:97:7f:5d:e9:73:64:2e:ba:34:ec:af:44:96: c8:24:9b:12:52:15:92:d1:66:a5:43:8a:ea:55:fb: 58:21:f7:ee:bd:a1:41:79:2b:f6:24:10:58:7f:b7: c0:44:12:9b:3b:0d:25:3c:d2:35:24:94:2d:d2:32: aa:6c:f7:b0:4d:0e:77:0d:66:4a:41:e1:3a:97:4d: 9d:bb:1f:3e:0b:ba:6f:a2:2e:e2:34:68:7a:30:d0: 8f:a5:82:6b:d6:20:1f:40:ec:45:7c:9d:d9:b4:f4: 86:e9:f2:8f:59:c1:a7:90:b6:7c:7d:e6:22:c3:64: 77:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4F:52:09:FC:A3:23:A7:B2:18:42:B6:31:F7:41:B1:21:C4:96:CB X509v3 Authority Key Identifier: keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:43:3f:50:2c:21:ed:7c:f4:cc:7b:2f:40:b3:fa:16:ac:7e: 17:d1:d2:b5:7b:98:82:47:e5:fe:b0:2c:de:09:f9:5d:d4:53: 11:4c:0f:6b:50:06:5c:81:6d:d4:86:3c:9b:e7:fa:c4:c9:a1: 73:51:11:c5:83:f3:50:ee:8d:c0:b7:92:8b:cb:7a:82:7b:59: bf:3b:92:fb:4a:41:13:81:aa:f2:b8:a5:86:87:ef:05:00:95: a2:6e:89:8c:3b:41:55:ad:5e:28:c7:d1:83:4f:f6:aa:eb:f8: 71:56:c3:fa:9d:ac:8b:90:b2:a0:f5:8e:5d:89:7e:4f:d3:52: 4c:c6:16:2f:b6:4c:68:83:61:c1:c0:36:39:b5:dc:56:4c:bc: 61:5f:53:6d:75:af:3d:18:53:ea:a7:92:69:71:47:cf:e4:e4: 4e:da:df:c7:d0:8a:80:ac:88:51:dc:83:a0:1b:56:63:17:43: d5:e5:91:ae:86:46:25:d3:12:97:38:73:42:bb:df:cb:34:73: 8a:98:9b:e0:b6:04:a0:0e:26:c6:4e:60:e8:62:3a:a4:2f:ec: 53:9d:7e:cf:c8:83:79:43:5b:33:97:eb:83:ea:e7:49:31:a0: 18:83:5c:96:dc:92:ad:dc:f3:db:ef:d2:0d:3c:8b:93:4a:38: 4f:64:26:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOTIxMTAvBgNVBAUTKDU3MzVBQjZBQUMzMjc5NTQ0MjRGOUZFOENBODUzMzQy OTlERDdCQzIwHhcNMjUwODIyMTc0MDQ0WhcNMjUwODI5MTc0MDQ0WjAYMRYwFAYD VQQDEw02OGE4YWI5Yy1iZjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlm0y7rzKC5T8WPWoBoByggphgPS+yptBtEqM7WL1RqFil8baL/VC2ZOiwzAV O2aAA84xIVx2vyBfkhpro0hAPEXDrhZA9hXw02rb7e1Kgp11pvxM1XGlKLaOp+QB eXWJU3GUL8dpo0DZYpjMDwOzEoF4/gRSa7hggPs0S8fOhShDQaCv1vzXipd/Xelz ZC66NOyvRJbIJJsSUhWS0WalQ4rqVftYIffuvaFBeSv2JBBYf7fARBKbOw0lPNI1 JJQt0jKqbPewTQ53DWZKQeE6l02dux8+C7pvoi7iNGh6MNCPpYJr1iAfQOxFfJ3Z tPSG6fKPWcGnkLZ8feYiw2R3VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRPUgn8 oyOnshhCtjH3QbEhxJbLMB8GA1UdIwQYMBaAFFc1q2qsMnlUQk+f6MqFM0KZ3XvC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Mi82RDZBMkEyODZD RDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVWUkNUNV9veW9VelFwbmRl OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z6V3JhcXd5ZVZSQ1Q1X295b1V6UXBuZGU4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Mi82RDZBMkEyODZDRDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVW UkNUNV9veW9VelFwbmRlOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZQz9QLCHtfPTMey9As/oWrH4X0dK1e5iCR+X+sCzeCfld1FMRTA9r UAZcgW3Uhjyb5/rEyaFzURHFg/NQ7o3At5KLy3qCe1m/O5L7SkETgaryuKWGh+8F AJWibomMO0FVrV4ox9GDT/aq6/hxVsP6nayLkLKg9Y5diX5P01JMxhYvtkxog2HB wDY5tdxWTLxhX1Ntda89GFPqp5JpcUfP5ORO2t/H0IqArIhR3IOgG1ZjF0PV5ZGu hkYl0xKXOHNCu9/LNHOKmJvgtgSgDibGTmDoYjqkL+xTnX7PyIN5Q1szl+uD6udJ MaAYg1yW3JKt3PPb79INPIuTSjhPZCap -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:18 2025 by rpki-client