$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft File: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft (raw, json) Hash identifier: mlJVaaTrSaTG3dlxcw5O095MIIs1snigljHGgH/4mro= Subject key identifier: 21:EA:D7:FE:6D:17:70:BF:61:1E:12:9A:CF:AA:82:87:8D:B1:D5:57 Authority key identifier: BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B Certificate issuer: /CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft Manifest number: 0152 Signing time: Sat 23 Aug 2025 04:18:54 +0000 Manifest this update: Sat 23 Aug 2025 04:18:53 +0000 Manifest next update: Sat 30 Aug 2025 04:18:53 +0000 Files and hashes: 1: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl (hash: ZJ62YFlgitHqai+bhuZSnM/1OMH9o+l1z66KjYrW4D8=) 2: 453686A272BA11F09A607433C4F9AE02.roa (hash: q2MSp4Q8sWvUE8k/uBLa7fJOiAjxmo9DC7/S2PYD4Tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E9D, serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Validity Not Before: Aug 23 04:18:53 2025 GMT Not After : Aug 30 04:18:53 2025 GMT Subject: CN=68a9412e-affe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e2:9c:c8:db:ef:8b:83:3d:e9:dc:ee:c0:21: 96:b8:a8:83:80:a0:c3:3d:bf:1e:b7:ea:1d:d8:01: bf:22:68:05:98:c9:c7:49:80:7b:46:09:ca:33:73: c4:44:8f:cf:b1:3d:1e:6c:a2:c6:2f:3f:2b:73:c9: f6:39:a7:c2:28:f9:18:1c:04:f5:e1:d9:c9:70:6a: 98:d1:48:62:45:4b:1a:25:82:ad:00:41:08:f9:95: c7:ea:bc:0f:82:70:14:98:20:3a:79:c0:04:cb:d2: ad:0b:0a:b5:5b:00:15:49:18:e4:cc:5b:1c:00:6c: 01:f6:02:ce:72:0e:a4:e7:3f:93:5d:c6:74:f4:51: aa:a6:d7:12:f5:0b:b4:77:c6:51:98:93:f4:53:ac: 85:d2:70:b6:a3:f9:df:36:3c:e9:3e:4b:51:81:30: 39:5a:a7:8e:69:5e:0c:d8:1e:ee:8f:53:81:a5:d5: b7:6d:09:5f:0b:a0:fd:9f:93:26:33:69:a5:f3:7e: 7f:96:f3:c8:06:7d:3c:1b:86:70:85:c7:e8:65:72: 92:30:09:e5:c0:82:82:f8:2d:de:2d:d1:93:96:f1: 2e:f4:52:2d:36:13:f6:bd:7f:1d:cc:e9:77:91:b6: cf:f0:e3:40:4b:53:cb:26:8d:c5:12:8e:ba:ea:ea: 4f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EA:D7:FE:6D:17:70:BF:61:1E:12:9A:CF:AA:82:87:8D:B1:D5:57 X509v3 Authority Key Identifier: keyid:BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d4:5f:36:fb:9b:a0:6c:65:74:81:11:1f:08:c6:49:47:a3: aa:14:84:dc:2f:0e:82:14:c8:17:71:2d:e0:ca:81:f5:12:39: f5:72:8d:b3:48:74:5f:ac:4c:b5:7a:39:3c:4f:b2:fa:32:9e: 63:83:2b:b5:82:56:f3:84:b4:ad:88:8f:4e:53:44:c4:2c:05: 9d:19:c2:f8:9a:3a:da:88:5b:ad:66:83:ee:e5:a3:6e:63:bd: 29:1d:fd:40:9f:44:52:6d:ae:c0:3f:a8:50:3d:e2:83:2b:a2: 4e:bf:82:45:eb:40:37:d0:49:f9:09:ee:8c:b6:de:e1:35:6d: 9a:74:2a:d2:f6:9c:b4:f7:ab:16:94:c8:cb:14:ca:36:ed:1f: 5c:dc:96:c2:b5:ea:4f:85:40:ea:29:04:d4:cb:8d:2e:fb:b8: a9:f6:32:92:9c:97:8a:c0:79:16:1c:ea:26:ac:5b:5c:2d:27: 9d:6f:d3:32:72:b6:cd:ef:1a:6c:42:eb:fe:9d:40:11:4d:36: 6d:73:1c:2e:c9:95:51:ae:57:bd:3e:89:50:87:79:5d:d2:01: 5d:9c:a2:6b:b3:ad:88:3d:ad:26:ef:a6:8d:2b:3a:f8:b2:93: fc:76:f1:2c:94:d6:d7:2b:e3:91:90:6a:df:dd:be:3d:5b:aa: 33:3b:5d:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFOUQxMTAvBgNVBAUTKEJFMDE5MTM3QTgxRDdFOUNEOUFGNTZDRDkxQzU4N0My RUYwNkU5M0IwHhcNMjUwODIzMDQxODUzWhcNMjUwODMwMDQxODUzWjAYMRYwFAYD VQQDEw02OGE5NDEyZS1hZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuKcyNvvi4M96dzuwCGWuKiDgKDDPb8et+od2AG/ImgFmMnHSYB7RgnKM3PE RI/PsT0ebKLGLz8rc8n2OafCKPkYHAT14dnJcGqY0UhiRUsaJYKtAEEI+ZXH6rwP gnAUmCA6ecAEy9KtCwq1WwAVSRjkzFscAGwB9gLOcg6k5z+TXcZ09FGqptcS9Qu0 d8ZRmJP0U6yF0nC2o/nfNjzpPktRgTA5WqeOaV4M2B7uj1OBpdW3bQlfC6D9n5Mm M2ml835/lvPIBn08G4ZwhcfoZXKSMAnlwIKC+C3eLdGTlvEu9FItNhP2vX8dzOl3 kbbP8ONAS1PLJo3FEo666upPNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHq1/5t F3C/YR4Sms+qgoeNsdVXMB8GA1UdIwQYMBaAFL4BkTeoHX6c2a9WzZHFh8LvBuk7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUU5RC81MjgyOEIyQTdC ODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZwelpyMWJOa2NXSHd1OEc2 VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnR1JONmdkZnB6WnIxYk5rY1dId3U4RzZUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUU5RC81MjgyOEIyQTdCODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZw elpyMWJOa2NXSHd1OEc2VHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK1F82+5ugbGV0gREfCMZJR6OqFITcLw6CFMgXcS3gyoH1Ejn1co2z SHRfrEy1ejk8T7L6Mp5jgyu1glbzhLStiI9OU0TELAWdGcL4mjraiFutZoPu5aNu Y70pHf1An0RSba7AP6hQPeKDK6JOv4JF60A30En5Ce6Mtt7hNW2adCrS9py096sW lMjLFMo27R9c3JbCtepPhUDqKQTUy40u+7ip9jKSnJeKwHkWHOomrFtcLSedb9My crbN7xpsQuv+nUARTTZtcxwuyZVRrle9PolQh3ld0gFdnKJrs62IPa0m76aNKzr4 spP8dvEslNbXK+ORkGrf3b49W6ozO11E -----END CERTIFICATE-----Generated at Sun Aug 24 00:14:30 2025 by rpki-client