$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft File: vDqLsM3Qi243IbLB0hqBcUw7IUI.mft (raw, json) Hash identifier: vXwLCgwU8XOrLU/wonZP1KDi9uaSIKLJOcw+3+Fvnc8= Subject key identifier: 9A:5F:80:8C:C8:85:36:04:B5:CB:CF:ED:5E:33:97:41:04:12:85:91 Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 Certificate issuer: /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Certificate serial: 03A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft Manifest number: 0387 Signing time: Sat 23 Aug 2025 01:09:29 +0000 Manifest this update: Sat 23 Aug 2025 01:09:29 +0000 Manifest next update: Sat 30 Aug 2025 01:09:29 +0000 Files and hashes: 1: vDqLsM3Qi243IbLB0hqBcUw7IUI.crl (hash: WpEn8TQrwmQV0+yNzC0uAu0kmP4EeAm60wZiCf+0lBE=) 2: 83CA50563C2311F0AEBA313AC4F9AE02.roa (hash: 8dEWz6BA19noWs2zWuUBCRCZchx4qTK4G3VWLV+hIMw=) 3: B7E47C68C02511EC93BB8865C4F9AE02.roa (hash: 8/pe/NkCfmi8GQHtZeDvbdeiM83VXVuijM5zx0eXnx8=) 4: 2998A0E0F99011EF89B2363DC4F9AE02.roa (hash: KstFse9DL+Lpk2UJhsRfTukB1/IV52HFgYreP0UKdGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 930 (0x3a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3731, serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142 Validity Not Before: Aug 23 01:09:29 2025 GMT Not After : Aug 30 01:09:29 2025 GMT Subject: CN=68a914c9-0eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cc:68:f2:ee:2e:12:ca:8a:da:14:85:aa:2c: ad:ce:e0:71:5d:fd:48:69:34:27:15:b0:b6:f4:d6: e6:e9:5a:78:2a:80:16:11:29:4d:bc:23:04:2f:c3: 7a:54:c7:f1:b2:20:34:ec:e3:49:f3:f2:7f:7c:d6: 79:16:f1:de:c0:7e:c2:fa:a4:a5:37:4f:b7:d6:0f: 2d:66:c5:f5:a1:bb:38:67:54:0d:ea:f8:7e:e7:6a: a5:01:12:6a:cf:f6:8a:37:9c:ec:59:53:38:34:d1: af:d4:d0:78:f4:17:a2:5d:e9:83:83:d0:54:19:8d: 7c:3e:d8:18:c8:cb:26:a4:36:b9:06:4e:de:0c:e0: 7f:07:5d:8a:58:b4:39:28:72:1b:55:11:8a:57:4e: c7:07:4e:99:da:63:36:a4:ad:a6:11:ed:4d:89:7b: a7:4f:bf:74:de:00:c6:ef:3a:9e:52:53:c5:13:20: c7:f5:80:7b:72:f7:58:71:7f:51:79:a5:5d:1d:2b: fe:d3:08:75:7f:86:e6:57:39:66:0d:40:15:a1:30: e1:52:ed:e7:ab:36:be:41:c4:ed:40:82:b4:a9:c3: be:5a:9f:8b:80:ef:96:3b:4c:ca:4c:79:31:a7:68: 6c:7a:f6:07:f8:5d:15:fa:d7:cf:ee:d2:be:cb:91: 85:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5F:80:8C:C8:85:36:04:B5:CB:CF:ED:5E:33:97:41:04:12:85:91 X509v3 Authority Key Identifier: keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:93:c2:af:f3:22:84:79:4b:3d:a4:7f:93:4e:2c:7f:3a:bb: f8:da:10:4b:38:e6:60:95:66:ea:12:7f:bb:3a:83:36:ef:80: f0:55:2d:41:07:68:fa:bc:72:29:0c:fb:53:a5:0c:be:ac:4b: 79:e2:1a:db:56:ce:2c:a2:55:d5:91:3b:0d:42:af:3d:9d:82: 81:0d:18:72:bd:c8:a6:e1:1c:00:27:5c:c8:53:18:c9:b0:a2: 4b:bd:36:2a:27:6c:66:0d:c4:4e:e4:ed:2f:ca:46:bc:99:88: b8:61:ce:bf:9b:6c:39:cb:84:b2:92:52:48:03:34:55:34:97: 7c:fa:b1:39:a0:31:23:cb:e1:ae:a5:41:d9:4c:80:76:02:e2: 92:ab:b5:a6:3f:1b:60:5f:16:79:be:c9:0f:de:ee:08:33:2d: e2:77:10:33:05:6f:72:a8:07:5b:fd:20:ec:bd:40:49:8f:f1: e2:ba:00:9c:2b:db:98:99:ea:2f:0e:c5:91:a4:36:f4:e3:43: 56:f5:ef:77:b0:ac:52:ba:c3:68:81:45:5a:2d:6d:77:6b:fe: 30:05:6e:95:4d:f6:54:91:20:9a:4f:14:ef:31:42:d5:3d:16: 98:7d:8a:fb:1b:6f:e9:a5:f1:b3:ad:9d:b7:ef:99:80:de:b1: 38:5c:0f:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3MzExMTAvBgNVBAUTKEJDM0E4QkIwQ0REMDhCNkUzNzIxQjJDMUQyMUE4MTcx NEMzQjIxNDIwHhcNMjUwODIzMDEwOTI5WhcNMjUwODMwMDEwOTI5WjAYMRYwFAYD VQQDEw02OGE5MTRjOS0wZWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMxo8u4uEsqK2hSFqiytzuBxXf1IaTQnFbC29Nbm6Vp4KoAWESlNvCMEL8N6 VMfxsiA07ONJ8/J/fNZ5FvHewH7C+qSlN0+31g8tZsX1obs4Z1QN6vh+52qlARJq z/aKN5zsWVM4NNGv1NB49BeiXemDg9BUGY18PtgYyMsmpDa5Bk7eDOB/B12KWLQ5 KHIbVRGKV07HB06Z2mM2pK2mEe1NiXunT7903gDG7zqeUlPFEyDH9YB7cvdYcX9R eaVdHSv+0wh1f4bmVzlmDUAVoTDhUu3nqza+QcTtQIK0qcO+Wp+LgO+WO0zKTHkx p2hsevYH+F0V+tfP7tK+y5GFCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpfgIzI hTYEtcvP7V4zl0EEEoWRMB8GA1UdIwQYMBaAFLw6i7DN0ItuNyGywdIagXFMOyFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzczMS81NUIyMjNFQUMw MjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWkyNDNJYkxCMGhxQmNVdzdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZEcUxzTTNRaTI0M0liTEIwaHFCY1V3N0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzczMS81NUIyMjNFQUMwMjIxMUVDOTI2NURBNURDNEY5QUUwMi92RHFMc00zUWky NDNJYkxCMGhxQmNVdzdJVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEk8Kv8yKEeUs9pH+TTix/Orv42hBLOOZglWbqEn+7OoM274DwVS1B B2j6vHIpDPtTpQy+rEt54hrbVs4solXVkTsNQq89nYKBDRhyvcim4RwAJ1zIUxjJ sKJLvTYqJ2xmDcRO5O0vyka8mYi4Yc6/m2w5y4SyklJIAzRVNJd8+rE5oDEjy+Gu pUHZTIB2AuKSq7WmPxtgXxZ5vskP3u4IMy3idxAzBW9yqAdb/SDsvUBJj/HiugCc K9uYmeovDsWRpDb040NW9e93sKxSusNogUVaLW13a/4wBW6VTfZUkSCaTxTvMULV PRaYfYr7G2/ppfGzrZ2375mA3rE4XA/4 -----END CERTIFICATE-----Generated at Sat Aug 23 15:14:45 2025 by rpki-client