$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft File: vpuQTrdssFxgw-LDeeL6SJoOF3I.mft (raw, json) Hash identifier: +Le6OGUOL66bWjfZpWqMEkIXuc3y71GwULhK+gokI0k= Subject key identifier: AF:B0:93:76:5A:18:7F:9F:C1:B8:63:BD:D8:C1:24:DF:BA:FE:E0:41 Authority key identifier: BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72 Certificate issuer: /CN=A91E5832/serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft Manifest number: 73 Signing time: Sat 23 Aug 2025 07:04:34 +0000 Manifest this update: Sat 23 Aug 2025 07:04:33 +0000 Manifest next update: Sat 30 Aug 2025 07:04:33 +0000 Files and hashes: 1: vpuQTrdssFxgw-LDeeL6SJoOF3I.crl (hash: tXyfJ7ee0DEA/Mavswl50pREzPaN6Meapq/vF0YyVrU=) 2: A9C0AECED0BA11EFB7A6B027C4F9AE02.roa (hash: vwuRFoQ8j2nxDneRxv7aNdc+Cd7umBY/3NvhL9KJqC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5832, serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772 Validity Not Before: Aug 23 07:04:33 2025 GMT Not After : Aug 30 07:04:33 2025 GMT Subject: CN=68a96801-54ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:95:dd:5a:00:9f:38:ce:45:97:66:4d:a7:43: 86:2a:50:08:b3:3c:b4:11:39:39:a0:ef:b8:07:12: 04:d5:db:9d:df:c9:66:aa:2b:32:4a:09:29:ea:86: 0c:f3:38:eb:85:e0:79:b0:8e:18:b3:a6:98:33:9f: 94:51:87:94:f2:ea:27:40:02:68:16:52:d5:2e:9d: 95:16:d4:73:b4:8e:de:56:86:da:65:6d:8f:de:b5: 9c:fb:cf:04:4e:75:56:00:cd:38:8b:f9:2a:4d:9a: 23:69:f5:19:b2:b4:5d:62:52:49:f8:7a:bc:72:a3: 3a:e4:68:bb:84:cb:ba:62:03:99:25:62:be:08:08: 47:e0:38:6f:d8:ee:b8:ec:32:4d:f4:61:a0:96:63: 6e:41:46:bd:f0:2f:e4:64:34:75:ef:e3:f2:f1:2d: 41:e1:8d:09:6a:1e:69:dd:37:71:61:8b:67:70:07: 2a:2e:ad:19:93:2c:3a:38:08:35:e5:8f:7e:0c:c9: 0c:83:ce:18:18:83:c0:fc:58:48:8a:04:e7:ca:a3: c6:37:0b:d3:72:76:66:12:ca:fa:83:12:23:1c:d5: 1e:26:fa:f3:40:62:5c:07:6d:da:c2:e4:22:fc:30: 2f:1c:95:c6:94:e6:d4:91:c7:07:10:1a:70:2b:f0: 69:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B0:93:76:5A:18:7F:9F:C1:B8:63:BD:D8:C1:24:DF:BA:FE:E0:41 X509v3 Authority Key Identifier: keyid:BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:01:40:4c:e0:df:dd:9d:2d:d6:10:f2:06:4c:d8:22:4a:ed: 46:fa:65:9e:aa:7a:f7:b7:b3:42:eb:de:18:ca:17:8f:d1:52: 56:1b:20:26:db:e4:7f:bf:4c:f9:f1:df:c3:0b:70:5e:76:75: 55:90:b7:66:66:12:ce:ee:c4:61:32:b2:5d:e5:2a:fc:e1:0e: 15:4f:d2:c7:fc:ad:ce:26:d2:77:66:87:0a:c7:92:64:6f:74: 9f:e2:8e:42:d8:c4:6e:22:66:67:54:c4:63:83:5f:dd:86:d2: 5a:a5:5e:70:82:26:12:95:3e:b2:97:e0:30:2b:fb:dc:f1:e1: bb:4f:92:a0:ef:af:a1:4e:d8:13:77:ba:21:80:f7:46:d4:17: 44:43:9e:a2:a1:8f:dd:ca:42:6e:e1:5d:78:a4:d9:7d:80:43: cd:23:d3:9c:57:54:50:9b:44:99:6b:c7:ae:c8:db:13:6b:26: 55:67:e8:a3:06:3f:4c:44:a1:8e:a2:11:ec:87:36:95:09:1b: 05:b6:51:6e:18:53:84:93:a9:3f:1a:4f:bd:c8:32:3a:60:2d: 6f:a0:b3:b6:bb:ef:d6:70:43:85:30:69:f5:f8:c1:08:2d:4e: a8:7a:b0:ac:0d:ee:dd:a7:b0:f9:88:b5:97:13:d2:38:aa:e0: 1e:35:19:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTgzMjExMC8GA1UEBRMoQkU5QjkwNEVCNzZDQjA1QzYwQzNFMkMzNzlFMkZBNDg5 QTBFMTc3MjAeFw0yNTA4MjMwNzA0MzNaFw0yNTA4MzAwNzA0MzNaMBgxFjAUBgNV BAMTDTY4YTk2ODAxLTU0ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxld1aAJ84zkWXZk2nQ4YqUAizPLQROTmg77gHEgTV253fyWaqKzJKCSnqhgzz OOuF4Hmwjhizppgzn5RRh5Ty6idAAmgWUtUunZUW1HO0jt5WhtplbY/etZz7zwRO dVYAzTiL+SpNmiNp9RmytF1iUkn4erxyozrkaLuEy7piA5klYr4ICEfgOG/Y7rjs Mk30YaCWY25BRr3wL+RkNHXv4/LxLUHhjQlqHmndN3Fhi2dwByourRmTLDo4CDXl j34MyQyDzhgYg8D8WEiKBOfKo8Y3C9NydmYSyvqDEiMc1R4m+vNAYlwHbdrC5CL8 MC8clcaU5tSRxwcQGnAr8GnxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUr7CTdloY f5/BuGO92MEk37r+4EEwHwYDVR0jBBgwFoAUvpuQTrdssFxgw+LDeeL6SJoOF3Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1ODMyLzI2RTU4MjU0RDBC QTExRUY4OTZDRDAyNkM0RjlBRTAyL3ZwdVFUcmRzc0Z4Z3ctTERlZUw2U0pvT0Yz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdnB1UVRyZHNzRnhndy1MRGVlTDZTSm9PRjNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 ODMyLzI2RTU4MjU0RDBCQTExRUY4OTZDRDAyNkM0RjlBRTAyL3ZwdVFUcmRzc0Z4 Z3ctTERlZUw2U0pvT0YzSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALMBQEzg392dLdYQ8gZM2CJK7Ub6ZZ6qeve3s0Lr3hjKF4/RUlYbICbb 5H+/TPnx38MLcF52dVWQt2ZmEs7uxGEysl3lKvzhDhVP0sf8rc4m0ndmhwrHkmRv dJ/ijkLYxG4iZmdUxGODX92G0lqlXnCCJhKVPrKX4DAr+9zx4btPkqDvr6FO2BN3 uiGA90bUF0RDnqKhj93KQm7hXXik2X2AQ80j05xXVFCbRJlrx67I2xNrJlVn6KMG P0xEoY6iEeyHNpUJGwW2UW4YU4STqT8aT73IMjpgLW+gs7a779ZwQ4UwafX4wQgt Tqh6sKwN7t2nsPmItZcT0jiq4B41GUc= -----END CERTIFICATE-----Generated at Sat Aug 23 15:57:04 2025 by rpki-client