$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft File: vvMhsD2CRd537IDdAzG_uo0IWdg.mft (raw, json) Hash identifier: hZpkXoLQr2TAIf8Svz8RVaqgkbntaldUHW/snG9blc0= Subject key identifier: 7F:5E:3D:66:52:E6:92:13:CE:85:B2:0E:BD:FC:26:50:85:D6:E8:4E Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 Certificate issuer: /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft Manifest number: 0309 Signing time: Sat 23 Aug 2025 02:35:31 +0000 Manifest this update: Sat 23 Aug 2025 02:35:31 +0000 Manifest next update: Sat 30 Aug 2025 02:35:31 +0000 Files and hashes: 1: vvMhsD2CRd537IDdAzG_uo0IWdg.crl (hash: 31Gqrd44M/6iHf/cUGxP9Nezjg90O2+/L4chgSYOHyQ=) 2: 5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (hash: Ds7R3+sBBZEG01JWJaEnAvs9QgVWz9hGRIlkayRqHKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE8AC, serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8 Validity Not Before: Aug 23 02:35:31 2025 GMT Not After : Aug 30 02:35:31 2025 GMT Subject: CN=68a928f3-574b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7c:5f:fc:31:c5:98:16:50:7c:7f:23:75:a8: c3:52:d1:44:27:00:6a:85:a4:43:d9:29:00:9b:9e: 77:81:ca:33:6d:44:82:44:46:93:d1:23:1d:44:e4: f5:80:23:56:80:5a:66:6a:b6:9a:b6:dc:78:e5:a7: 16:5d:67:6b:44:c9:d7:e0:8f:6d:5a:86:49:aa:12: 0b:b0:d6:9d:93:66:18:8c:57:4b:f9:95:f3:1c:dd: ce:fb:a8:87:1e:0c:96:d4:81:23:c4:bf:ab:e9:a5: 71:45:fb:16:09:39:8f:eb:e1:6f:ac:91:44:7c:29: 1f:38:79:a5:8b:9c:12:5d:35:4d:5b:78:c9:fb:9b: c6:77:45:c4:77:26:ab:98:a5:1b:22:bb:24:0d:32: 1e:24:3b:90:a3:8c:94:c6:4a:85:1b:1e:48:2e:0e: 26:cd:29:2f:0c:d3:f6:5c:04:48:98:1e:ac:85:6f: 1d:24:5a:09:75:72:9a:b2:d1:8a:c3:16:f8:ea:34: 10:f6:fb:40:45:96:36:43:54:a3:26:52:5b:a4:da: 1c:29:6e:e8:c1:16:d1:f4:a5:00:d8:4e:19:5a:1e: e0:81:d9:71:6e:dc:4b:36:6f:28:66:54:a4:26:d3: 12:49:dd:61:c0:21:cc:b0:08:ed:6c:0c:e1:a4:b8: cf:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5E:3D:66:52:E6:92:13:CE:85:B2:0E:BD:FC:26:50:85:D6:E8:4E X509v3 Authority Key Identifier: keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:bd:94:75:d5:53:7a:46:d5:87:7a:8f:35:37:ce:f3:6a:09: 2b:dc:a2:47:f0:41:dc:85:3f:e8:24:ac:90:3e:06:2b:6b:b8: 50:fa:06:8c:27:9b:0a:ac:75:7e:87:8a:de:73:01:0f:8b:b9: 3e:9d:0c:a8:89:89:db:06:55:8a:cc:61:d3:49:91:fb:11:c4: fd:27:ee:09:0c:60:08:d2:be:61:7f:2b:71:b3:a2:69:e1:16: 32:08:be:ba:21:97:1e:a4:77:f0:50:99:b5:e9:00:bb:40:35: a2:9c:a9:27:24:0b:16:51:b9:7c:02:23:ae:db:81:8a:75:aa: ed:2e:e7:32:9f:64:25:e1:c6:ae:b0:96:aa:51:a1:72:f4:f2: 01:98:d9:42:2f:b4:10:1d:b4:3e:32:94:bf:45:b6:05:de:14: 79:cd:5f:e2:46:bc:83:ec:96:66:e3:bc:a9:91:5d:03:48:96: b7:4a:9d:04:22:27:a5:c1:d8:be:91:71:62:5e:81:0a:7e:b4: 04:1c:db:9b:8b:57:c0:86:ea:b5:f8:04:34:d1:c8:08:5c:1e: cb:ee:7d:f8:e9:94:6a:7c:3f:5d:5e:71:d6:b8:fe:db:6e:74: a2:6d:6e:54:8e:78:87:1f:d3:70:4e:0f:4a:f3:46:21:71:40: de:4e:79:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU4QUMxMTAvBgNVBAUTKEJFRjMyMUIwM0Q4MjQ1REU3N0VDODBERDAzMzFCRkJB OEQwODU5RDgwHhcNMjUwODIzMDIzNTMxWhcNMjUwODMwMDIzNTMxWjAYMRYwFAYD VQQDEw02OGE5MjhmMy01NzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHxf/DHFmBZQfH8jdajDUtFEJwBqhaRD2SkAm553gcozbUSCREaT0SMdROT1 gCNWgFpmaraattx45acWXWdrRMnX4I9tWoZJqhILsNadk2YYjFdL+ZXzHN3O+6iH HgyW1IEjxL+r6aVxRfsWCTmP6+FvrJFEfCkfOHmli5wSXTVNW3jJ+5vGd0XEdyar mKUbIrskDTIeJDuQo4yUxkqFGx5ILg4mzSkvDNP2XARImB6shW8dJFoJdXKastGK wxb46jQQ9vtARZY2Q1SjJlJbpNocKW7owRbR9KUA2E4ZWh7ggdlxbtxLNm8oZlSk JtMSSd1hwCHMsAjtbAzhpLjP1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9ePWZS 5pITzoWyDr38JlCF1uhOMB8GA1UdIwQYMBaAFL7zIbA9gkXed+yA3QMxv7qNCFnY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRThBQy81MDM4RUM4QzdE RUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1JkNTM3SURkQXpHX3VvMElX ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z2TWhzRDJDUmQ1MzdJRGRBekdfdW8wSVdkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RThBQy81MDM4RUM4QzdERUIxMUVEQTdDQTRBN0VDNEY5QUUwMi92dk1oc0QyQ1Jk NTM3SURkQXpHX3VvMElXZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+vZR11VN6RtWHeo81N87zagkr3KJH8EHchT/oJKyQPgYra7hQ+gaM J5sKrHV+h4recwEPi7k+nQyoiYnbBlWKzGHTSZH7EcT9J+4JDGAI0r5hfytxs6Jp 4RYyCL66IZcepHfwUJm16QC7QDWinKknJAsWUbl8AiOu24GKdartLucyn2Ql4cau sJaqUaFy9PIBmNlCL7QQHbQ+MpS/RbYF3hR5zV/iRryD7JZm47ypkV0DSJa3Sp0E Iielwdi+kXFiXoEKfrQEHNubi1fAhuq1+AQ00cgIXB7L7n346ZRqfD9dXnHWuP7b bnSibW5UjniHH9NwTg9K80YhcUDeTnlr -----END CERTIFICATE-----Generated at Sat Aug 23 16:10:30 2025 by rpki-client