$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft File: VmpvNEQKySle2KAC1QSfV0zxbIg.mft (raw, json) Hash identifier: WOm+F3gP8ZT71Wh5pPuX2jaLhWKKgk1rBx5BBKSElE4= Subject key identifier: 53:C1:66:63:92:F1:02:14:5D:E6:FC:C0:8E:AE:B8:25:0A:00:98:73 Authority key identifier: 56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88 Certificate issuer: /CN=A91FA64C/serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft Manifest number: 01B1 Signing time: Sat 23 Aug 2025 03:20:10 +0000 Manifest this update: Sat 23 Aug 2025 03:20:10 +0000 Manifest next update: Sat 30 Aug 2025 03:20:10 +0000 Files and hashes: 1: VmpvNEQKySle2KAC1QSfV0zxbIg.crl (hash: VV9nXNqx4GbW364Eeba2XAiU0E/7a68mTCHuaZAvSDA=) 2: FFCE072E2B8111EE9BDEC079C4F9AE02.roa (hash: NxTIAEmzVEkhnPtaZCQQUJAnARHilUKNCFgj1AKD+gg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA64C, serialNumber=566A6F34440AC9295ED8A002D5049F574CF16C88 Validity Not Before: Aug 23 03:20:10 2025 GMT Not After : Aug 30 03:20:10 2025 GMT Subject: CN=68a9336a-2d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:42:7a:3e:b1:25:ea:80:c1:9f:24:0d:72:89: 74:9a:1e:9e:fe:de:c7:82:0e:2a:6d:30:12:6c:b3: c0:5f:5d:1d:b9:02:42:2c:a3:32:84:f7:5f:1d:e8: e1:cc:a6:72:a7:7c:6f:78:d8:5b:1b:e6:48:07:a1: 9e:e4:d8:28:ca:ca:fb:2d:35:98:89:a9:a4:e6:a8: 3d:ae:09:7b:ac:23:82:f8:5a:2f:83:dc:ac:a1:1d: d8:9e:e0:8f:fd:89:ee:91:89:e7:c4:01:a0:c1:33: 28:87:c4:ea:cd:ba:0b:80:11:20:7b:8c:f8:5a:16: 7d:d0:a4:22:db:21:8e:ce:c2:4f:ed:4a:fe:ef:34: e0:45:4e:12:c6:63:0e:73:46:35:fe:77:ca:16:2b: dc:dd:44:eb:af:d6:00:7d:c9:69:d0:e8:5c:a3:9c: 57:fb:98:db:f2:0b:50:58:72:b0:38:7b:7c:2f:74: 2a:6f:f3:7b:59:9e:6b:fa:1b:54:3b:c9:11:03:34: 84:1a:fc:37:04:61:53:c8:b6:47:20:d8:05:a0:44: ab:0d:63:b6:0e:81:f1:5e:b6:e6:57:10:f4:27:b7: 89:13:c9:cb:9e:16:00:e6:77:09:dd:5c:2d:85:0c: 66:b2:54:ca:34:40:6b:6e:6f:7b:cf:c8:a1:a8:2c: 7b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C1:66:63:92:F1:02:14:5D:E6:FC:C0:8E:AE:B8:25:0A:00:98:73 X509v3 Authority Key Identifier: keyid:56:6A:6F:34:44:0A:C9:29:5E:D8:A0:02:D5:04:9F:57:4C:F1:6C:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VmpvNEQKySle2KAC1QSfV0zxbIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA64C/E1A54626F79811ED96777124C4F9AE02/VmpvNEQKySle2KAC1QSfV0zxbIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:fe:29:46:f5:4e:58:e9:6f:82:4e:34:f1:a5:08:b7:fa:73: 1e:01:2c:dc:eb:e4:a4:d0:02:2c:6a:f5:07:7c:90:6c:bc:3a: 92:77:02:b1:2c:b5:e8:47:3e:2e:c1:78:04:bd:c6:b8:d2:6a: da:f4:ce:8b:c9:1f:73:13:22:0a:0f:83:18:64:ce:ec:58:fd: c4:a2:59:2b:e4:09:ad:5c:07:1f:11:72:8c:35:c8:b6:02:61: 75:f5:fe:b9:0c:2d:eb:33:ab:05:17:97:67:8f:31:90:26:8c: 3d:db:0b:0d:e0:c7:a9:28:ee:bc:10:c8:26:f3:af:d3:84:1e: ed:c3:fb:58:6e:a8:6c:39:41:31:56:9a:47:da:f1:46:64:5d: 72:2c:ac:d7:21:47:13:c5:20:e4:aa:7c:1e:18:75:23:50:5f: 72:48:9d:07:0a:fe:00:cc:19:57:9c:5f:5a:f6:38:d9:53:8a: 3f:9e:a0:f6:fb:2b:27:1b:5d:53:0b:7f:c8:cc:88:1c:ff:e1: 9f:25:88:42:2d:63:17:10:f1:e6:dc:f5:43:9f:9d:4e:f3:84: 48:8b:14:27:57:99:67:78:51:51:45:c3:48:81:fb:f8:fb:86: 9c:af:9b:5b:c8:ab:4f:3e:65:61:96:88:e7:47:76:9a:af:9a: 02:db:93:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2NEMxMTAvBgNVBAUTKDU2NkE2RjM0NDQwQUM5Mjk1RUQ4QTAwMkQ1MDQ5RjU3 NENGMTZDODgwHhcNMjUwODIzMDMyMDEwWhcNMjUwODMwMDMyMDEwWjAYMRYwFAYD VQQDEw02OGE5MzM2YS0yZDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4EJ6PrEl6oDBnyQNcol0mh6e/t7Hgg4qbTASbLPAX10duQJCLKMyhPdfHejh zKZyp3xveNhbG+ZIB6Ge5Ngoysr7LTWYiamk5qg9rgl7rCOC+Fovg9ysoR3YnuCP /YnukYnnxAGgwTMoh8TqzboLgBEge4z4WhZ90KQi2yGOzsJP7Ur+7zTgRU4SxmMO c0Y1/nfKFivc3UTrr9YAfclp0Ohco5xX+5jb8gtQWHKwOHt8L3Qqb/N7WZ5r+htU O8kRAzSEGvw3BGFTyLZHINgFoESrDWO2DoHxXrbmVxD0J7eJE8nLnhYA5ncJ3Vwt hQxmslTKNEBrbm97z8ihqCx7OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPBZmOS 8QIUXeb8wI6uuCUKAJhzMB8GA1UdIwQYMBaAFFZqbzRECskpXtigAtUEn1dM8WyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY0Qy9FMUE1NDYyNkY3 OTgxMUVEOTY3NzcxMjRDNEY5QUUwMi9WbXB2TkVRS3lTbGUyS0FDMVFTZlYwenhi SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZtcHZORVFLeVNsZTJLQUMxUVNmVjB6eGJJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY0Qy9FMUE1NDYyNkY3OTgxMUVEOTY3NzcxMjRDNEY5QUUwMi9WbXB2TkVRS3lT bGUyS0FDMVFTZlYwenhiSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB//ilG9U5Y6W+CTjTxpQi3+nMeASzc6+Sk0AIsavUHfJBsvDqSdwKx LLXoRz4uwXgEvca40mra9M6LyR9zEyIKD4MYZM7sWP3Eolkr5AmtXAcfEXKMNci2 AmF19f65DC3rM6sFF5dnjzGQJow92wsN4MepKO68EMgm86/ThB7tw/tYbqhsOUEx VppH2vFGZF1yLKzXIUcTxSDkqnweGHUjUF9ySJ0HCv4AzBlXnF9a9jjZU4o/nqD2 +ysnG11TC3/IzIgc/+GfJYhCLWMXEPHm3PVDn51O84RIixQnV5lneFFRRcNIgfv4 +4acr5tbyKtPPmVhlojnR3aar5oC25Nn -----END CERTIFICATE-----Generated at Sat Aug 23 13:33:07 2025 by rpki-client