$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft File: vm13JvnXOebsmvk0fs7LQhevej8.mft (raw, json) Hash identifier: oRu12N9DikrB5xeT1rb0168HD5M2qOsZYXgmwV6NLvk= Subject key identifier: B7:E8:58:20:87:BD:8E:DC:6A:1D:72:CE:80:E2:F0:5F:94:40:DA:C2 Authority key identifier: BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F Certificate issuer: /CN=A91ED35E/serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft Manifest number: 0133 Signing time: Sat 23 Aug 2025 04:39:39 +0000 Manifest this update: Sat 23 Aug 2025 04:39:39 +0000 Manifest next update: Sat 30 Aug 2025 04:39:39 +0000 Files and hashes: 1: vm13JvnXOebsmvk0fs7LQhevej8.crl (hash: BWJjoCHRZzc0iLcu6ZDbhR4lPd8Wt38KcuEJ5yg7hkc=) 2: 3AE10060B0F111EE9727201AC4F9AE02.roa (hash: KyJCsFenYj6fuJ23jzQVPwAa2Ss88E8BW4syF1uzypU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED35E, serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Validity Not Before: Aug 23 04:39:39 2025 GMT Not After : Aug 30 04:39:39 2025 GMT Subject: CN=68a9460b-c3c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4b:20:99:52:ec:5c:46:84:25:aa:b1:25:f1: 69:c0:8e:b1:e0:5f:8b:76:46:7c:c6:c4:aa:70:a6: ba:68:6e:8c:46:49:27:09:39:bc:36:f6:a8:3a:82: 29:3c:46:33:92:1c:ff:1f:8a:f1:60:d2:ec:03:0b: 15:73:e2:d7:3d:60:ab:8c:0e:38:17:16:6d:50:f1: f6:e7:e5:2d:bd:41:9c:82:1e:6a:96:ad:0d:cd:21: 8e:9e:ee:eb:60:a5:1d:17:51:f1:2d:75:c0:14:74: 43:ed:94:06:e8:3d:2a:f5:20:7d:ef:40:5e:67:da: a4:76:d5:15:77:24:70:d7:cd:2b:c7:b0:cc:28:d4: df:3c:2f:76:00:8d:ce:99:0d:b9:d9:17:22:75:94: ca:3e:f0:18:01:2c:44:a3:26:7b:fd:eb:18:8a:0f: 83:29:0d:11:4e:92:f9:6b:d7:81:4c:69:d1:04:af: 87:78:52:2c:ad:38:f3:28:a3:70:7a:ff:22:28:66: 84:c3:4c:dc:2c:d6:6c:e9:c3:49:90:20:42:3a:13: 2f:66:32:04:60:6b:0e:0e:1f:5b:19:84:94:c5:31: 54:e3:fc:fd:eb:91:08:65:a3:d4:36:ca:b8:a8:28: b5:43:a8:55:d6:1e:43:b1:17:5a:d5:00:7b:43:00: d3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E8:58:20:87:BD:8E:DC:6A:1D:72:CE:80:E2:F0:5F:94:40:DA:C2 X509v3 Authority Key Identifier: keyid:BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:a3:48:2d:72:f4:e7:3d:e5:6c:1c:78:a9:14:06:b9:9f:c6: f3:9d:36:ef:08:f6:b2:66:f2:18:14:ba:8c:75:d3:1f:16:ef: 23:7e:11:91:37:e1:f5:e0:7c:16:12:42:8f:14:7c:f8:04:2b: 21:4f:f1:d9:4b:76:13:00:22:c3:6e:43:e9:df:18:37:42:d0: 28:ea:d4:bd:4b:17:6d:8f:9d:07:22:af:8e:55:5a:3f:7a:6b: 7f:2c:e6:9f:0d:1f:83:df:5f:b9:99:57:d5:24:e9:be:6e:c1: fb:4e:f5:fe:a3:4d:ec:2c:78:8e:7a:13:ac:30:57:e8:63:5a: 24:49:8b:fc:d0:34:49:99:aa:a5:07:41:66:93:e4:66:0a:2b: d0:5b:bc:11:a8:07:e3:4e:3e:58:d1:8f:8e:c6:6b:1d:7b:fe: b9:83:af:58:11:0a:27:36:aa:f5:b3:db:20:80:90:b5:3d:57: 0f:80:02:d1:b2:32:3d:4b:0d:61:9f:0a:66:b8:fd:b6:5d:38: 12:18:78:dd:64:a3:1d:41:ba:ec:b9:16:df:fc:6e:a7:e8:21: 1b:02:11:a6:1c:6d:17:0f:95:c8:58:6c:98:43:03:2e:79:37: c6:6b:02:86:79:c6:9c:24:f5:5c:0a:9e:26:1c:06:51:f8:fc: 46:22:ce:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQzNUUxMTAvBgNVBAUTKEJFNkQ3NzI2RjlENzM5RTZFQzlBRjkzNDdFQ0VDQjQy MTdBRjdBM0YwHhcNMjUwODIzMDQzOTM5WhcNMjUwODMwMDQzOTM5WjAYMRYwFAYD VQQDEw02OGE5NDYwYi1jM2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUsgmVLsXEaEJaqxJfFpwI6x4F+LdkZ8xsSqcKa6aG6MRkknCTm8NvaoOoIp PEYzkhz/H4rxYNLsAwsVc+LXPWCrjA44FxZtUPH25+UtvUGcgh5qlq0NzSGOnu7r YKUdF1HxLXXAFHRD7ZQG6D0q9SB970BeZ9qkdtUVdyRw180rx7DMKNTfPC92AI3O mQ252RcidZTKPvAYASxEoyZ7/esYig+DKQ0RTpL5a9eBTGnRBK+HeFIsrTjzKKNw ev8iKGaEw0zcLNZs6cNJkCBCOhMvZjIEYGsODh9bGYSUxTFU4/z965EIZaPUNsq4 qCi1Q6hV1h5DsRda1QB7QwDTUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfoWCCH vY7cah1yzoDi8F+UQNrCMB8GA1UdIwQYMBaAFL5tdyb51znm7Jr5NH7Oy0IXr3o/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDM1RS8yMDhERkMzNkFD NDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9lYnNtdmswZnM3TFFoZXZl ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtMTNKdm5YT2Vic212azBmczdMUWhldmVqOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDM1RS8yMDhERkMzNkFDNDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9l YnNtdmswZnM3TFFoZXZlajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFo0gtcvTnPeVsHHipFAa5n8bznTbvCPayZvIYFLqMddMfFu8jfhGR N+H14HwWEkKPFHz4BCshT/HZS3YTACLDbkPp3xg3QtAo6tS9Sxdtj50HIq+OVVo/ emt/LOafDR+D31+5mVfVJOm+bsH7TvX+o03sLHiOehOsMFfoY1okSYv80DRJmaql B0Fmk+RmCivQW7wRqAfjTj5Y0Y+Oxmsde/65g69YEQonNqr1s9sggJC1PVcPgALR sjI9Sw1hnwpmuP22XTgSGHjdZKMdQbrsuRbf/G6n6CEbAhGmHG0XD5XIWGyYQwMu eTfGawKGecacJPVcCp4mHAZR+PxGIs4q -----END CERTIFICATE-----Generated at Sun Aug 24 05:02:13 2025 by rpki-client