$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft File: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft (raw, json) Hash identifier: xubCLRXDbOk71KSv5yEdkWSXkdFfWhpbFrivO49B5lI= Subject key identifier: CC:96:08:62:32:1D:F4:BC:8D:8A:76:36:B8:5D:5B:07:0E:4F:BA:F3 Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34 Certificate issuer: /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134 Certificate serial: 0576 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft Manifest number: 056A Signing time: Fri 22 Aug 2025 23:31:01 +0000 Manifest this update: Fri 22 Aug 2025 23:31:01 +0000 Manifest next update: Fri 29 Aug 2025 23:31:01 +0000 Files and hashes: 1: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl (hash: 2o5pbfW+6qrw6BjQd6R3j2ueRJOn87PxvSC9yZU7jYc=) 2: 7FBF284EF5B211EB8419A23AC4F9AE02.roa (hash: edmH+zoE3tcqcciZuFe0JER5V1TWvNXJvKg0Me+DQ90=) 3: 0EF4DA3A38D011EC936A8C4FC4F9AE02.roa (hash: amAbeNg9WhoR9LiBcCPddN+usabEY60TrC7LxRq3i34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1398 (0x576) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7C21, serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134 Validity Not Before: Aug 22 23:31:01 2025 GMT Not After : Aug 29 23:31:01 2025 GMT Subject: CN=68a8fdb5-f4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:94:ff:bb:be:27:ee:8a:81:49:a0:e3:44: 57:65:4e:20:b2:5b:5a:5b:9e:19:b6:ab:17:4e:dc: 38:85:e8:c3:56:7e:3c:21:12:a2:83:21:7f:06:b2: 1f:09:f5:3d:a2:b4:55:8b:cc:f7:b1:01:72:4c:69: e1:54:08:47:e3:9f:a3:84:1f:fe:b4:25:cb:da:f5: a3:05:1a:16:62:92:ce:c1:49:ed:fd:d8:78:d4:3c: 98:a7:d1:e3:6d:d3:3f:5b:32:f2:87:c5:eb:ad:48: a5:2e:6e:95:d7:bc:dd:cd:c8:ad:2b:16:56:4c:b9: bc:cd:ca:da:78:99:07:2a:46:dc:d9:74:ed:a9:10: 7e:2c:c2:f0:ac:da:94:e8:fb:6f:61:81:72:24:47: 98:23:2a:d4:f3:56:cc:3a:5a:60:09:ce:e8:a7:75: ff:2b:b3:28:e2:d8:4e:ff:7d:3f:a5:25:b9:04:2b: 24:6c:d3:b8:82:6a:cd:3f:3f:b6:c7:39:9a:56:d1: fc:4f:6d:20:1a:ae:92:18:83:73:86:fc:d8:bd:f5: 9d:91:38:f4:1c:1c:0e:b2:ac:d3:55:d3:64:3f:fc: 26:e8:82:43:52:a7:51:18:8a:15:e6:7a:b2:36:5f: 80:4e:fb:34:2a:5c:f8:8a:23:84:c4:21:26:26:7e: 2a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:96:08:62:32:1D:F4:BC:8D:8A:76:36:B8:5D:5B:07:0E:4F:BA:F3 X509v3 Authority Key Identifier: keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:47:c8:8c:df:7c:f4:43:6b:5b:78:5f:19:00:d7:9b:ca:48: 26:cb:67:a6:67:4c:e3:3f:0c:97:66:b5:a5:dd:7c:ec:e4:60: 53:84:dd:c1:b6:17:4f:6d:32:52:a1:06:d2:8b:16:32:c8:df: 25:b8:93:48:55:11:05:44:4d:12:47:f5:54:69:56:52:d6:99: 11:2f:d5:4f:fc:28:3d:4e:13:33:89:95:e1:88:b2:6f:1f:36: ea:f6:05:c2:96:0a:55:40:a0:c2:b9:8c:8f:1b:6f:14:fc:88: 82:7c:e6:19:fc:7c:95:2d:12:42:80:71:de:28:a8:c6:a6:82: f6:a8:10:42:b9:ea:25:73:ef:a1:8c:73:08:b5:4d:1e:36:93: 35:c5:60:b4:b9:aa:30:f8:e6:63:e1:91:b1:6e:65:5b:be:fa: 33:fe:f7:af:fc:d1:9c:14:55:f5:b8:33:a0:9a:96:b5:51:4b: 96:45:32:cf:03:4a:e4:35:90:af:83:a9:7e:d0:ee:95:0d:0a: 15:76:37:8b:61:58:b6:fc:1a:21:14:51:9f:bc:52:b1:9e:f8: 20:6c:ac:b3:31:0b:76:fb:e8:6d:34:d1:e5:1b:3a:f3:41:4d: 3b:60:86:12:49:30:20:cd:ed:96:2a:d9:1d:6e:74:cd:b4:e1: 3d:52:8c:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdDMjExMTAvBgNVBAUTKEJDMkRBMzVDQjU2NTEzQTk0QTY4QjU5MUREMkM3NkM1 MUQ4MTExMzQwHhcNMjUwODIyMjMzMTAxWhcNMjUwODI5MjMzMTAxWjAYMRYwFAYD VQQDEw02OGE4ZmRiNS1mNGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAte6U/7u+J+6KgUmg40RXZU4gsltaW54ZtqsXTtw4hejDVn48IRKigyF/BrIf CfU9orRVi8z3sQFyTGnhVAhH45+jhB/+tCXL2vWjBRoWYpLOwUnt/dh41DyYp9Hj bdM/WzLyh8XrrUilLm6V17zdzcitKxZWTLm8zcraeJkHKkbc2XTtqRB+LMLwrNqU 6PtvYYFyJEeYIyrU81bMOlpgCc7op3X/K7Mo4thO/30/pSW5BCskbNO4gmrNPz+2 xzmaVtH8T20gGq6SGINzhvzYvfWdkTj0HBwOsqzTVdNkP/wm6IJDUqdRGIoV5nqy Nl+ATvs0Klz4iiOExCEmJn4qoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyWCGIy HfS8jYp2NrhdWwcOT7rzMB8GA1UdIwQYMBaAFLwto1y1ZROpSmi1kd0sdsUdgRE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0MyMS8zQkNEMDA3NEY1 QUUxMUVCOEUzRUZCMzNDNEY5QUUwMi92QzJqWExWbEU2bEthTFdSM1N4MnhSMkJF VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZDMmpYTFZsRTZsS2FMV1IzU3gyeFIyQkVUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0MyMS8zQkNEMDA3NEY1QUUxMUVCOEUzRUZCMzNDNEY5QUUwMi92QzJqWExWbEU2 bEthTFdSM1N4MnhSMkJFVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeR8iM33z0Q2tbeF8ZANebykgmy2emZ0zjPwyXZrWl3Xzs5GBThN3B thdPbTJSoQbSixYyyN8luJNIVREFRE0SR/VUaVZS1pkRL9VP/Cg9ThMziZXhiLJv Hzbq9gXClgpVQKDCuYyPG28U/IiCfOYZ/HyVLRJCgHHeKKjGpoL2qBBCueolc++h jHMItU0eNpM1xWC0uaow+OZj4ZGxbmVbvvoz/vev/NGcFFX1uDOgmpa1UUuWRTLP A0rkNZCvg6l+0O6VDQoVdjeLYVi2/BohFFGfvFKxnvggbKyzMQt2++htNNHlGzrz QU07YIYSSTAgze2WKtkdbnTNtOE9UowH -----END CERTIFICATE-----Generated at Sun Aug 24 01:01:55 2025 by rpki-client