$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft File: VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft (raw, json) Hash identifier: K0P9Yv2mDcENNwsKzwRFdLzmRlzJm6QjO3itw682VbY= Subject key identifier: 1A:15:E9:92:ED:7B:51:F0:4F:3C:6B:FC:C3:C8:54:E9:C3:C8:B4:E9 Authority key identifier: 56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A Certificate issuer: /CN=A91D6F2B/serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A Certificate serial: 0382 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft Manifest number: 037D Signing time: Sat 23 Aug 2025 01:05:55 +0000 Manifest this update: Sat 23 Aug 2025 01:05:55 +0000 Manifest next update: Sat 30 Aug 2025 01:05:55 +0000 Files and hashes: 1: VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl (hash: clczNHuF1wu0hdPU5LIpHRSo5LX7Lbxpra/GXGqRvEw=) 2: 2A22D2FCB6CB11ECA43EEE87C4F9AE02.roa (hash: KlAC54soZmN85lgdd13wHGCcsR/XbE59aQyhJMVb4zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 898 (0x382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6F2B, serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A Validity Not Before: Aug 23 01:05:55 2025 GMT Not After : Aug 30 01:05:55 2025 GMT Subject: CN=68a913f3-02fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:01:8f:e4:68:f5:f9:cd:98:53:36:fd:9d:29: 41:ff:59:9f:6a:ae:70:79:89:6c:a6:34:7e:f9:83: bd:a9:46:ab:2e:25:72:6b:8a:4e:80:05:e9:a9:09: 1a:ac:9a:5e:3b:21:06:a0:60:37:68:e3:db:a8:d4: ab:97:3b:8d:56:b1:a7:c5:b3:19:cc:63:65:6b:62: 4d:a8:2c:2c:61:1b:2b:bd:29:3b:c5:bb:99:ae:9f: b1:5d:31:1b:c0:40:ff:df:fd:9f:ba:17:73:a3:a6: ad:04:65:88:c3:fd:34:61:60:fd:df:6f:30:c5:f9: c7:f3:3c:91:0c:72:74:35:48:90:91:4d:80:c6:38: 0a:21:fa:e0:0e:35:98:dc:4b:8d:0a:6a:0b:fc:bc: 9b:0f:94:8e:32:b5:60:4d:3d:63:ba:42:2e:81:69: f9:a6:e6:ed:61:3b:be:86:7d:56:a0:47:21:e2:20: b3:e9:29:e2:26:34:aa:27:96:04:59:cc:c6:83:59: 38:e1:d9:e7:44:f2:e7:cb:4f:cc:80:66:71:9f:e6: 6d:e2:d1:99:2f:4f:23:d8:e8:4d:e1:9e:23:19:de: 0d:ec:a8:1d:81:3d:0f:d1:75:78:2e:02:1f:07:d1: 69:ac:f7:39:15:19:59:cc:ee:14:07:4a:69:63:dc: f9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:15:E9:92:ED:7B:51:F0:4F:3C:6B:FC:C3:C8:54:E9:C3:C8:B4:E9 X509v3 Authority Key Identifier: keyid:56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:a8:53:38:aa:d7:16:5b:2f:45:17:02:7f:e2:a6:9b:b1:79: b0:a8:18:b5:ad:8f:87:bf:60:31:4b:b4:18:50:8d:2d:9a:e8: e4:5d:d2:20:fd:8d:2b:ff:02:dd:ff:3c:3a:de:22:68:00:5b: c2:6e:03:1c:a7:ff:0d:fc:32:b8:29:3a:ac:ff:0b:7a:ed:08: 89:7e:33:19:91:25:39:1e:b3:43:d1:48:cc:12:93:fb:b1:47: 8a:df:00:bb:2e:08:8f:42:4f:98:d9:ab:01:9f:84:3b:f6:52: fb:78:63:2e:bf:dc:2a:90:48:a5:95:86:fc:66:6e:a7:fd:a9: 71:e5:69:2c:7b:b7:8f:d8:1b:de:56:cd:3f:b5:62:bd:46:fc: 86:76:29:34:2a:3d:ef:15:93:53:ab:f9:f4:0a:fd:5a:5a:cb: ee:18:2a:f4:23:66:51:76:9b:71:e9:30:ba:09:94:e2:a0:65: 42:69:83:44:1c:c6:f4:8d:21:1c:9d:6f:20:0e:4e:db:a7:22: 80:5c:c3:60:83:5a:09:39:1f:db:c6:76:5f:b1:80:a8:3b:76: 15:e0:72:6e:75:a4:a6:d3:9c:07:88:15:9c:de:b5:a4:4b:5e: a1:10:7a:56:d4:30:72:16:76:61:5e:98:ce:ec:b3:62:ef:49: d4:21:1f:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZGMkIxMTAvBgNVBAUTKDU2MzhDQjFFMjZEMTE5OURBQkU4QjhDN0VEMjJCMDND NENFOEM4MEEwHhcNMjUwODIzMDEwNTU1WhcNMjUwODMwMDEwNTU1WjAYMRYwFAYD VQQDEw02OGE5MTNmMy0wMmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgGP5Gj1+c2YUzb9nSlB/1mfaq5weYlspjR++YO9qUarLiVya4pOgAXpqQka rJpeOyEGoGA3aOPbqNSrlzuNVrGnxbMZzGNla2JNqCwsYRsrvSk7xbuZrp+xXTEb wED/3/2fuhdzo6atBGWIw/00YWD9328wxfnH8zyRDHJ0NUiQkU2AxjgKIfrgDjWY 3EuNCmoL/LybD5SOMrVgTT1jukIugWn5pubtYTu+hn1WoEch4iCz6SniJjSqJ5YE WczGg1k44dnnRPLny0/MgGZxn+Zt4tGZL08j2OhN4Z4jGd4N7KgdgT0P0XV4LgIf B9FprPc5FRlZzO4UB0ppY9z5RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoV6ZLt e1HwTzxr/MPIVOnDyLTpMB8GA1UdIwQYMBaAFFY4yx4m0Rmdq+i4x+0isDxM6MgK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkYyQi8zMzg2Njc2NkI2 QzkxMUVDODlCREM2ODdDNEY5QUUwMi9WampMSGliUkdaMnI2TGpIN1NLd1BFem95 QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZqakxIaWJSR1oycjZMakg3U0t3UEV6b3lBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkYyQi8zMzg2Njc2NkI2QzkxMUVDODlCREM2ODdDNEY5QUUwMi9WampMSGliUkda MnI2TGpIN1NLd1BFem95QW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIqFM4qtcWWy9FFwJ/4qabsXmwqBi1rY+Hv2AxS7QYUI0tmujkXdIg /Y0r/wLd/zw63iJoAFvCbgMcp/8N/DK4KTqs/wt67QiJfjMZkSU5HrND0UjMEpP7 sUeK3wC7LgiPQk+Y2asBn4Q79lL7eGMuv9wqkEillYb8Zm6n/alx5Wkse7eP2Bve Vs0/tWK9RvyGdik0Kj3vFZNTq/n0Cv1aWsvuGCr0I2ZRdptx6TC6CZTioGVCaYNE HMb0jSEcnW8gDk7bpyKAXMNgg1oJOR/bxnZfsYCoO3YV4HJudaSm05wHiBWc3rWk S16hEHpW1DByFnZhXpjO7LNi70nUIR9c -----END CERTIFICATE-----Generated at Sat Aug 23 15:17:43 2025 by rpki-client