$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft File: vRTPGp8I9oE3_oEWzXdq29sv77Q.mft (raw, json) Hash identifier: 2ZrCJE4qs7M3kyjaepp+TU3uZMZGkQl2N3015Z8byRE= Subject key identifier: 93:59:70:FA:7B:73:C7:3A:30:C3:E3:DE:E1:F3:E3:85:84:E8:FA:60 Authority key identifier: BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4 Certificate issuer: /CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4 Certificate serial: 03FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft Manifest number: 1076 Signing time: Sun 10 Aug 2025 18:17:30 +0000 Manifest this update: Sun 10 Aug 2025 18:17:30 +0000 Manifest next update: Sun 17 Aug 2025 18:17:30 +0000 Files and hashes: 1: vRTPGp8I9oE3_oEWzXdq29sv77Q.crl (hash: snpEGz6wvdeDcFgK1kiWqD7EcceR5fL4HWn3GmW5OOs=) 2: D5DBA6BC63ED11ED851C647DC4F9AE02.roa (hash: Cu7mP4ScFcEgh99akamYEaBRClwxLE+oM+a0PvnQM0M=) 3: 5277F6368D2411EC816B4C70C4F9AE02.roa (hash: jmM2MyWVgkGoSl8m7eT/QohnLLhAgCt5V5ifbC8tFnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 18:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1019 (0x3fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119A40, serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4 Validity Not Before: Aug 10 18:17:30 2025 GMT Not After : Aug 17 18:17:30 2025 GMT Subject: CN=6898e23a-90d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:59:26:2b:e6:4d:8d:aa:61:6a:76:4a:95:47: 49:7a:44:a8:b4:66:66:e2:74:1d:8a:52:b0:98:b1: 0a:73:7d:af:aa:da:f0:2b:9d:6e:f8:78:ea:23:9d: d7:a8:88:d0:42:4b:27:a2:bd:cb:e0:26:94:72:7b: 2b:63:33:ab:b8:3f:cf:31:d3:16:bf:47:46:43:d2: 0d:d2:62:ab:91:f0:eb:75:68:f6:bd:28:70:2b:4a: 32:ac:a2:a4:6f:ff:51:b5:53:93:90:f5:33:3c:cc: b1:2a:cd:5d:70:fd:84:05:0a:60:52:a2:93:6e:ef: c8:07:67:06:b4:1c:f2:95:3d:60:2e:9a:c3:dc:14: 26:3a:22:fa:cc:d5:ca:48:97:7d:29:b0:7e:51:24: b0:f2:bf:4b:8c:55:45:93:70:3e:e6:03:c1:eb:80: 02:23:51:0a:3c:42:ae:43:8e:1f:d4:c3:24:cf:82: 4a:70:6d:40:f8:2f:ff:d6:c6:1e:98:3d:89:32:1e: 7a:d0:d9:2b:e8:0a:4e:46:aa:36:c9:08:da:4f:3c: 1e:76:16:21:eb:72:89:6d:c0:df:6c:7f:c4:eb:3f: c7:fc:ea:0b:4d:3f:95:89:f8:33:82:89:0e:07:62: fa:b7:19:4c:d2:f3:81:6a:ca:eb:ce:57:13:8c:e3: ed:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:59:70:FA:7B:73:C7:3A:30:C3:E3:DE:E1:F3:E3:85:84:E8:FA:60 X509v3 Authority Key Identifier: keyid:BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:38:24:75:bd:3c:e0:01:a5:79:95:74:b5:57:9b:f1:a5:8b: 39:9c:a3:d7:84:b4:c0:c0:b9:64:ff:de:35:4d:25:7d:a1:b0: d1:09:d9:fb:ac:b6:3f:e8:f0:c2:e0:57:cc:bb:69:04:93:d0: c8:a6:1b:9c:d0:72:d1:10:34:95:26:8c:13:15:ae:fe:92:49: 67:46:87:d5:53:3f:9e:0a:64:19:4d:83:2d:c6:c3:75:19:1a: 6f:4c:31:09:6e:6b:11:e7:c1:a4:d7:34:56:69:12:39:d4:32: 79:97:38:ac:ba:d7:10:30:ff:ae:6f:97:1b:53:4e:a1:5d:cf: cf:d8:9d:89:65:42:6b:cd:e3:af:49:06:41:c5:0b:7c:1f:79: 06:db:04:b1:7a:17:7e:7c:e0:df:38:e4:51:c5:5c:2d:07:bf: 23:76:d3:b0:ba:4b:45:84:be:7c:c3:e7:44:f5:59:5b:d8:35: 45:08:bf:3a:b3:b1:92:8e:0e:65:4b:7a:54:16:1a:46:4a:03: 13:58:e0:34:95:b8:d8:ae:cb:a7:33:43:cb:59:6d:d3:d8:ed: 8e:2b:d3:87:3f:e2:3b:7c:7a:15:f0:0a:a2:71:2a:c7:9a:cc: ab:f2:db:fc:8e:30:17:76:7a:81:89:84:f5:46:05:99:ac:ac: ae:ee:cf:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlBNDAxMTAvBgNVBAUTKEJEMTRDRjFBOUYwOEY2ODEzN0ZFODExNkNENzc2QURC REIyRkVGQjQwHhcNMjUwODEwMTgxNzMwWhcNMjUwODE3MTgxNzMwWjAYMRYwFAYD VQQDEw02ODk4ZTIzYS05MGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1kmK+ZNjaphanZKlUdJekSotGZm4nQdilKwmLEKc32vqtrwK51u+HjqI53X qIjQQksnor3L4CaUcnsrYzOruD/PMdMWv0dGQ9IN0mKrkfDrdWj2vShwK0oyrKKk b/9RtVOTkPUzPMyxKs1dcP2EBQpgUqKTbu/IB2cGtBzylT1gLprD3BQmOiL6zNXK SJd9KbB+USSw8r9LjFVFk3A+5gPB64ACI1EKPEKuQ44f1MMkz4JKcG1A+C//1sYe mD2JMh560Nkr6ApORqo2yQjaTzwedhYh63KJbcDfbH/E6z/H/OoLTT+VifgzgokO B2L6txlM0vOBasrrzlcTjOPtiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNZcPp7 c8c6MMPj3uHz44WE6PpgMB8GA1UdIwQYMBaAFL0UzxqfCPaBN/6BFs13atvbL++0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUE0MC8wQkQ0NTYyMjAw N0ExMUVBQjhCMzFCMTBDNEY5QUUwMi92UlRQR3A4STlvRTNfb0VXelhkcTI5c3Y3 N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZSVFBHcDhJOW9FM19vRVd6WGRxMjlzdjc3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUE0MC8wQkQ0NTYyMjAwN0ExMUVBQjhCMzFCMTBDNEY5QUUwMi92UlRQR3A4STlv RTNfb0VXelhkcTI5c3Y3N1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYOCR1vTzgAaV5lXS1V5vxpYs5nKPXhLTAwLlk/941TSV9obDRCdn7 rLY/6PDC4FfMu2kEk9DIphuc0HLREDSVJowTFa7+kklnRofVUz+eCmQZTYMtxsN1 GRpvTDEJbmsR58Gk1zRWaRI51DJ5lzisutcQMP+ub5cbU06hXc/P2J2JZUJrzeOv SQZBxQt8H3kG2wSxehd+fODfOORRxVwtB78jdtOwuktFhL58w+dE9Vlb2DVFCL86 s7GSjg5lS3pUFhpGSgMTWOA0lbjYrsunM0PLWW3T2O2OK9OHP+I7fHoV8AqicSrH msyr8tv8jjAXdnqBiYT1RgWZrKyu7s90 -----END CERTIFICATE-----Generated at Tue Aug 12 18:20:44 2025 by rpki-client