$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft File: Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft (raw, json) Hash identifier: e9TDmYTYK+4T/ZE8xtcpyxy36aGEXeoPkXBrf5gyxII= Subject key identifier: 29:59:CF:8C:54:36:E2:90:09:F6:CC:DE:B8:86:F7:C1:D8:E3:FD:DE Authority key identifier: 56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71 Certificate issuer: /CN=A91203DC/serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071 Certificate serial: 21A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft Manifest number: 2198 Signing time: Sat 02 Aug 2025 16:01:08 +0000 Manifest this update: Sat 02 Aug 2025 16:01:07 +0000 Manifest next update: Sat 09 Aug 2025 16:01:07 +0000 Files and hashes: 1: Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl (hash: xQtK/Z8u2ekZ9ZK6pYOQWwNRHI3POMtrbyYvnsCd65g=) 2: 1D9DC82A652311EBA8CF3C4CC4F9AE02.roa (hash: lzXH47zwQqzR7U0IwcpEbq0QXTqtq0eXFrMFUkvM89M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 16:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8611 (0x21a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203DC, serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071 Validity Not Before: Aug 2 16:01:07 2025 GMT Not After : Aug 9 16:01:07 2025 GMT Subject: CN=688e3644-43e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c6:7a:ea:fe:0f:0f:76:77:c8:6c:25:3c:ad: 5c:fb:c0:d4:5b:73:c7:ea:e1:25:38:ea:f2:21:a3: 23:00:dc:ad:65:e5:54:ac:1e:17:ca:30:93:06:66: e0:43:47:d0:7a:4d:d8:f0:a0:15:66:b9:89:43:cc: e2:33:be:b7:4a:b6:ca:18:0d:aa:74:33:13:7e:e0: a8:32:2a:31:70:f0:20:56:99:13:fd:84:1b:ae:91: c5:b3:cc:da:14:5d:26:a8:cb:24:45:98:e2:22:f0: 8b:d4:c1:65:3b:00:5f:7f:a7:20:4a:7b:ac:57:5f: 40:db:40:0a:28:7d:0d:57:86:6c:09:97:b8:c5:a2: 1e:0a:c9:ac:75:5c:72:fe:60:5a:0c:21:a8:10:4a: e0:44:cf:f4:2e:58:48:fe:0b:6d:aa:95:a2:e9:e5: e0:9b:73:5a:41:17:19:fe:b3:ac:df:7b:b1:3f:aa: 9c:15:f5:96:71:fe:bd:83:2a:3f:1b:6e:0f:cf:b6: 0d:90:9c:65:b2:4a:21:b9:55:98:a7:d7:e8:b1:3b: fb:ec:d9:87:e2:86:fd:ae:39:73:6c:0e:81:c9:2c: 19:bf:0c:56:5c:15:19:09:a3:a5:d2:5d:d7:3b:4d: 6d:81:4f:ac:78:24:a2:0a:ec:ca:2f:ee:cb:d1:29: ef:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:59:CF:8C:54:36:E2:90:09:F6:CC:DE:B8:86:F7:C1:D8:E3:FD:DE X509v3 Authority Key Identifier: keyid:56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:22:ca:39:eb:e9:f6:ef:58:1e:d5:a0:c2:66:9e:3b:37:28: f3:ab:2d:63:a5:06:af:d7:3c:65:e8:dc:f5:7b:55:f2:58:40: c6:39:62:f8:d6:49:da:7c:8d:22:bd:1c:3a:1a:df:74:27:05: 33:98:fc:9b:a5:6e:b7:c2:b0:4f:93:f4:3e:a3:c5:13:cb:34: b3:b7:3e:0d:5b:94:83:e2:13:b1:72:6a:1b:6d:b8:f8:c0:46: fd:1d:ae:de:a6:93:33:e1:03:7c:43:66:d7:4d:32:af:15:01: 89:dd:d3:1f:da:44:59:6e:45:d6:0f:fb:52:01:a8:db:6a:bd: f5:84:64:66:27:c4:de:4b:75:0a:92:3b:be:f0:a5:bc:38:a5: 09:70:8f:05:b5:c9:fa:da:47:bb:56:97:c0:6c:c9:98:d7:5e: 37:05:55:a4:fe:f6:c7:a1:b4:05:ab:ee:f5:58:56:dd:01:fc: e1:c8:bf:0f:b8:24:b4:be:9e:dd:d4:5d:3b:bc:71:35:72:78: d1:48:67:32:07:40:17:c0:a3:13:bc:0d:60:1b:f1:16:b6:69: 1f:30:d8:d7:13:de:26:7b:70:e9:18:00:76:d9:46:79:86:3b: 39:a6:2d:ff:ab:15:92:43:a2:4d:4e:28:3d:1c:a6:57:a9:b7: 0a:d6:72:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzREMxMTAvBgNVBAUTKDU2NDZFMDdBMEY2MDI1RjFFMjYwRjFDNDk5NkY5QTY4 MUIyOTIwNzEwHhcNMjUwODAyMTYwMTA3WhcNMjUwODA5MTYwMTA3WjAYMRYwFAYD VQQDEw02ODhlMzY0NC00M2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8Z66v4PD3Z3yGwlPK1c+8DUW3PH6uElOOryIaMjANytZeVUrB4XyjCTBmbg Q0fQek3Y8KAVZrmJQ8ziM763SrbKGA2qdDMTfuCoMioxcPAgVpkT/YQbrpHFs8za FF0mqMskRZjiIvCL1MFlOwBff6cgSnusV19A20AKKH0NV4ZsCZe4xaIeCsmsdVxy /mBaDCGoEErgRM/0LlhI/gttqpWi6eXgm3NaQRcZ/rOs33uxP6qcFfWWcf69gyo/ G24Pz7YNkJxlskohuVWYp9fosTv77NmH4ob9rjlzbA6BySwZvwxWXBUZCaOl0l3X O01tgU+seCSiCuzKL+7L0SnvxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClZz4xU NuKQCfbM3riG98HY4/3eMB8GA1UdIwQYMBaAFFZG4HoPYCXx4mDxxJlvmmgbKSBx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNEQy9GQUQzRDZGQ0RD NDkxMUU1QTA2MjVGODJDNEY5QUUwMi9Wa2JnZWc5Z0pmSGlZUEhFbVctYWFCc3BJ SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZrYmdlZzlnSmZIaVlQSEVtVy1hYUJzcElIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNEQy9GQUQzRDZGQ0RDNDkxMUU1QTA2MjVGODJDNEY5QUUwMi9Wa2JnZWc5Z0pm SGlZUEhFbVctYWFCc3BJSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEIso56+n271ge1aDCZp47Nyjzqy1jpQav1zxl6Nz1e1XyWEDGOWL4 1knafI0ivRw6Gt90JwUzmPybpW63wrBPk/Q+o8UTyzSztz4NW5SD4hOxcmobbbj4 wEb9Ha7eppMz4QN8Q2bXTTKvFQGJ3dMf2kRZbkXWD/tSAajbar31hGRmJ8TeS3UK kju+8KW8OKUJcI8Ftcn62ke7VpfAbMmY1143BVWk/vbHobQFq+71WFbdAfzhyL8P uCS0vp7d1F07vHE1cnjRSGcyB0AXwKMTvA1gG/EWtmkfMNjXE94me3DpGAB22UZ5 hjs5pi3/qxWSQ6JNTig9HKZXqbcK1nJH -----END CERTIFICATE-----Generated at Mon Aug 4 04:03:50 2025 by rpki-client