$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft File: vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft (raw, json) Hash identifier: 2/ju2dFj2GTazKjFmdxxEnX7FPamu8dcWqEHdbeGca8= Subject key identifier: 45:BE:92:D5:CB:40:A1:97:19:48:EF:B0:DD:6D:B4:44:38:E9:3F:EE Authority key identifier: BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B Certificate issuer: /CN=A9113C02/serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft Manifest number: 2548 Signing time: Sun 10 Aug 2025 16:18:13 +0000 Manifest this update: Sun 10 Aug 2025 16:18:12 +0000 Manifest next update: Sun 17 Aug 2025 16:18:12 +0000 Files and hashes: 1: vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl (hash: 5fdWvYoTfWbcmwWPBJ2DSiiPvIO2P2saJqrng5cAd7E=) 2: 00CB73CC5B1011F08269C50FC4F9AE02.roa (hash: tee5qyYUeYtzVgY5XM9ROj+LoDAFDMjISaly7p7VUNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B Validity Not Before: Aug 10 16:18:12 2025 GMT Not After : Aug 17 16:18:12 2025 GMT Subject: CN=6898c644-adfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e1:a7:6c:ca:6a:33:df:39:6b:7d:9f:2a:28: 0a:bb:f9:17:44:21:f0:73:25:6c:73:2d:f0:b1:bf: 1f:7c:0c:af:b5:ab:20:da:7c:8a:9a:b9:9e:25:32: b3:a3:50:a8:ef:2c:de:1b:7a:a5:86:c2:c3:23:40: 1d:65:2e:23:ec:3e:fa:f6:14:fc:a4:c2:3f:96:27: e5:ed:51:8d:cd:c8:b9:05:f1:94:f7:a5:44:69:12: e6:d7:8f:69:03:8a:41:f5:b6:ea:b2:2d:51:e7:98: 3a:76:eb:5d:5e:b2:14:76:73:80:80:f1:af:f2:e7: f7:91:4d:92:90:00:68:68:bd:65:34:a0:c7:3e:ff: 19:ff:e8:8a:6e:49:18:2d:d0:b0:76:64:32:39:ab: 05:d5:47:5d:5a:80:e8:aa:7c:a8:19:7d:0e:fd:9e: 0f:9f:67:04:20:63:1e:5c:4c:73:f0:f6:3a:16:b2: 2d:93:9f:c5:fe:3c:81:85:ea:23:55:bd:14:af:0a: 76:62:d1:95:65:e0:7b:87:69:b7:30:ca:5c:ab:09: fd:b6:26:9d:ee:81:66:3d:d8:89:dc:a1:c5:b6:74: d9:99:2d:52:f5:7f:5c:9a:25:85:ea:49:3c:3b:ed: df:41:db:82:61:0e:d7:ed:34:ba:bf:9f:15:f3:74: 5c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BE:92:D5:CB:40:A1:97:19:48:EF:B0:DD:6D:B4:44:38:E9:3F:EE X509v3 Authority Key Identifier: keyid:BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:41:20:80:c6:4c:9f:49:9c:ae:14:bd:08:f3:3c:10:b4:d1: 46:d6:ba:1e:90:71:d0:e5:32:9c:00:ff:ce:dd:73:62:e8:70: a9:13:52:0d:bd:e3:c4:70:f3:ba:f8:db:28:dc:bd:9b:97:d3: 96:e0:86:af:7e:1a:58:6e:f0:9f:9a:28:f3:d1:99:ea:6d:9b: 79:f4:07:73:1a:44:ff:f2:64:d5:6d:ad:d1:e9:b1:97:4e:b0: 03:c8:a9:80:40:15:b2:ee:59:32:cb:f8:53:9c:03:82:fb:f2: 19:43:ed:b7:83:1b:99:a4:d1:0e:d5:98:66:35:e9:2e:a4:0b: fa:94:af:11:9b:22:05:83:3d:d3:22:3c:0f:d5:bb:63:79:1f: af:e7:04:ca:c1:3c:f3:ee:55:b6:88:f4:99:65:7d:71:5c:d0: 0a:b9:b5:6b:98:f9:32:91:5f:4c:9d:bc:98:a2:7b:e0:28:4d: b2:3c:59:20:3e:74:65:db:71:7d:32:0b:ad:3d:e6:fc:96:47: 14:f5:7c:c3:ba:78:1a:53:14:29:86:c8:93:12:6d:54:fb:c3: af:65:e1:0a:59:10:7b:0c:49:0f:59:e3:4d:31:34:aa:b3:aa: 5a:8d:78:7c:80:ad:6c:bd:36:0f:3f:dd:5e:08:2f:cb:dc:5c: f7:68:d1:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0MwMjExMC8GA1UEBRMoQkU3NjRFRkVGNTNEODY5QzQ0RjYwNzA5OTYxMTNFMEEx ODE4NDExQjAeFw0yNTA4MTAxNjE4MTJaFw0yNTA4MTcxNjE4MTJaMBgxFjAUBgNV BAMTDTY4OThjNjQ0LWFkZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCm4adsymoz3zlrfZ8qKAq7+RdEIfBzJWxzLfCxvx98DK+1qyDafIqauZ4lMrOj UKjvLN4beqWGwsMjQB1lLiPsPvr2FPykwj+WJ+XtUY3NyLkF8ZT3pURpEubXj2kD ikH1tuqyLVHnmDp2611eshR2c4CA8a/y5/eRTZKQAGhovWU0oMc+/xn/6IpuSRgt 0LB2ZDI5qwXVR11agOiqfKgZfQ79ng+fZwQgYx5cTHPw9joWsi2Tn8X+PIGF6iNV vRSvCnZi0ZVl4HuHabcwylyrCf22Jp3ugWY92IncocW2dNmZLVL1f1yaJYXqSTw7 7d9B24JhDtftNLq/nxXzdFyvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURb6S1ctA oZcZSO+w3W20RDjpP+4wHwYDVR0jBBgwFoAUvnZO/vU9hpxE9gcJlhE+ChgYQRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQzAyLzRDNDA2RkI2NDA1 NjExRTdBRjA0MUEzNUM0RjlBRTAyL3ZuWk9fdlU5aHB4RTlnY0psaEUtQ2hnWVFS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdm5aT192VTlocHhFOWdjSmxoRS1DaGdZUVJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QzAyLzRDNDA2RkI2NDA1NjExRTdBRjA0MUEzNUM0RjlBRTAyL3ZuWk9fdlU5aHB4 RTlnY0psaEUtQ2hnWVFScy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHNBIIDGTJ9JnK4UvQjzPBC00UbWuh6QcdDlMpwA/87dc2LocKkTUg29 48Rw87r42yjcvZuX05bghq9+Glhu8J+aKPPRmeptm3n0B3MaRP/yZNVtrdHpsZdO sAPIqYBAFbLuWTLL+FOcA4L78hlD7beDG5mk0Q7VmGY16S6kC/qUrxGbIgWDPdMi PA/Vu2N5H6/nBMrBPPPuVbaI9JllfXFc0Aq5tWuY+TKRX0ydvJiie+AoTbI8WSA+ dGXbcX0yC6095vyWRxT1fMO6eBpTFCmGyJMSbVT7w69l4QpZEHsMSQ9Z400xNKqz qlqNeHyArWy9Ng8/3V4IL8vcXPdo0cQ= -----END CERTIFICATE-----Generated at Sun Aug 10 18:54:10 2025 by rpki-client