$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft File: N-24AKVpn6hX9211S38vQXXuqF0.mft (raw, json) Hash identifier: ITuFoKSjNjhDxP1jrMcFoha63dRzoGvrlU9jzBPm87A= Subject key identifier: 7E:8A:3E:0F:37:8F:F3:11:CF:FB:30:B9:AC:B8:0A:C9:1E:3D:BD:09 Authority key identifier: 37:ED:B8:00:A5:69:9F:A8:57:F7:6D:75:4B:7F:2F:41:75:EE:A8:5D Certificate issuer: /CN=A91E6F07/serialNumber=37EDB800A5699FA857F76D754B7F2F4175EEA85D Certificate serial: 087C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft Manifest number: 14DD Signing time: Fri 22 Aug 2025 18:29:59 +0000 Manifest this update: Fri 22 Aug 2025 18:29:58 +0000 Manifest next update: Fri 29 Aug 2025 18:29:58 +0000 Files and hashes: 1: N-24AKVpn6hX9211S38vQXXuqF0.crl (hash: UNCcThag7Oso9VXLns1GfXBpPwmXDbvXpI9CIl6PKr0=) 2: 6E570966CD1B11EA9613AA1DC4F9AE02.roa (hash: ohLcJGiw9Qpz+3q7Qq1rXsYI1VYW0bgcQ/ITvPJhtyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.crl rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2172 (0x87c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6F07, serialNumber=37EDB800A5699FA857F76D754B7F2F4175EEA85D Validity Not Before: Aug 22 18:29:58 2025 GMT Not After : Aug 29 18:29:58 2025 GMT Subject: CN=68a8b726-3c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:22:56:91:f5:49:ee:59:06:47:22:56:87:a5: 79:90:e4:99:75:d5:9e:28:90:56:fe:69:2b:02:4b: 12:c0:7d:57:e8:cf:eb:1d:7c:f7:e6:cf:d4:c0:a2: 76:93:25:de:8f:3e:37:b6:ad:ff:0a:29:be:37:32: c6:30:a8:10:6b:77:42:d6:32:32:cd:a0:dd:8c:cd: 93:b8:50:e2:23:03:72:5b:68:af:55:58:86:41:46: ab:fe:13:e9:78:3a:ea:04:12:f9:71:a3:2d:93:3c: 4a:67:89:f5:70:35:3b:2a:42:2c:14:31:9f:53:b9: 49:a9:ea:d2:e6:da:eb:94:70:a6:12:8b:08:18:a9: c2:76:9e:d5:0a:bc:07:9a:b8:51:bf:71:96:db:30: a7:3e:22:0b:81:8a:70:f4:1c:6b:06:54:46:9b:fe: 91:35:66:07:26:65:e1:de:55:89:04:1a:ec:35:7e: 38:f0:74:6a:00:99:f3:3c:97:8a:9a:00:0d:0e:29: 82:39:7f:09:e7:d6:68:40:e8:94:6d:db:9a:95:0b: 9c:74:9f:c3:06:66:cf:52:51:96:ca:62:7f:83:1f: 67:28:b9:be:65:80:23:9f:aa:e9:41:02:65:8f:a4: f6:0b:af:a6:d3:54:08:a3:a9:7b:0a:e7:49:d2:24: 8b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8A:3E:0F:37:8F:F3:11:CF:FB:30:B9:AC:B8:0A:C9:1E:3D:BD:09 X509v3 Authority Key Identifier: keyid:37:ED:B8:00:A5:69:9F:A8:57:F7:6D:75:4B:7F:2F:41:75:EE:A8:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:57:04:e5:30:d2:26:ca:d2:bd:01:38:96:47:9f:e6:97:10: 7f:b0:a6:1d:f4:39:d0:1e:d8:be:cd:90:45:70:25:73:6b:d1: f5:63:70:9b:be:07:94:de:01:65:cb:0b:b9:4b:96:4a:36:3b: 62:61:c2:f4:84:3f:be:9f:b5:cb:6f:d6:bd:9c:15:9d:f2:3d: a8:62:4b:a9:55:d4:c7:8f:a2:49:ca:47:9d:96:b8:ca:58:85: 80:e4:37:04:35:69:9c:2f:43:fd:51:af:81:99:ce:1d:03:39: 30:45:a8:1a:b6:b2:a1:1d:ac:01:46:21:b5:29:e5:0d:94:c2: e1:ad:a1:78:83:0d:67:80:d7:eb:31:b0:f2:23:d1:87:22:63: 72:81:cd:fd:38:c0:d9:2a:8d:14:15:ed:59:da:1e:ab:37:9c: c0:f8:de:95:38:8b:c2:81:c9:4c:da:bb:dc:88:7c:f0:40:7e: e5:7f:34:37:8a:02:0a:24:3e:b0:0d:4e:ea:2c:1f:72:2f:d6: 97:10:8a:c0:d9:5b:17:e3:f0:32:b6:b4:98:22:cf:00:d6:a3: d8:44:bc:44:29:11:dd:1d:75:e6:c5:d1:de:61:ac:7e:72:8a: 11:fb:a5:9c:63:4c:f6:81:96:54:ab:50:7f:1b:88:ca:22:d4: c0:3e:6a:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZGMDcxMTAvBgNVBAUTKDM3RURCODAwQTU2OTlGQTg1N0Y3NkQ3NTRCN0YyRjQx NzVFRUE4NUQwHhcNMjUwODIyMTgyOTU4WhcNMjUwODI5MTgyOTU4WjAYMRYwFAYD VQQDEw02OGE4YjcyNi0zYzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCJWkfVJ7lkGRyJWh6V5kOSZddWeKJBW/mkrAksSwH1X6M/rHXz35s/UwKJ2 kyXejz43tq3/Cim+NzLGMKgQa3dC1jIyzaDdjM2TuFDiIwNyW2ivVViGQUar/hPp eDrqBBL5caMtkzxKZ4n1cDU7KkIsFDGfU7lJqerS5trrlHCmEosIGKnCdp7VCrwH mrhRv3GW2zCnPiILgYpw9BxrBlRGm/6RNWYHJmXh3lWJBBrsNX448HRqAJnzPJeK mgANDimCOX8J59ZoQOiUbdualQucdJ/DBmbPUlGWymJ/gx9nKLm+ZYAjn6rpQQJl j6T2C6+m01QIo6l7CudJ0iSLiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6KPg83 j/MRz/swuay4CskePb0JMB8GA1UdIwQYMBaAFDftuAClaZ+oV/dtdUt/L0F17qhd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkYwNy9DMTNEODFEODA1 MjkxMUVBODJENzQzMzdDNEY5QUUwMi9OLTI0QUtWcG42aFg5MjExUzM4dlFYWHVx RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04tMjRBS1ZwbjZoWDkyMTFTMzh2UVhYdXFGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkYwNy9DMTNEODFEODA1MjkxMUVBODJENzQzMzdDNEY5QUUwMi9OLTI0QUtWcG42 aFg5MjExUzM4dlFYWHVxRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOVwTlMNImytK9ATiWR5/mlxB/sKYd9DnQHti+zZBFcCVza9H1Y3Cb vgeU3gFlywu5S5ZKNjtiYcL0hD++n7XLb9a9nBWd8j2oYkupVdTHj6JJykedlrjK WIWA5DcENWmcL0P9Ua+Bmc4dAzkwRagatrKhHawBRiG1KeUNlMLhraF4gw1ngNfr MbDyI9GHImNygc39OMDZKo0UFe1Z2h6rN5zA+N6VOIvCgclM2rvciHzwQH7lfzQ3 igIKJD6wDU7qLB9yL9aXEIrA2VsX4/AytrSYIs8A1qPYRLxEKRHdHXXmxdHeYax+ cooR+6WcY0z2gZZUq1B/G4jKItTAPmrQ -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:00 2025 by rpki-client