$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft File: Vyfu6NouLMefq6Da0ZyISCvRWdw.mft (raw, json) Hash identifier: QtI6E6itn0vdSbqyHpa5d6+QbwGe6AnMLlMW2nt/MkA= Subject key identifier: 68:FA:3B:28:A9:B8:36:B6:30:BA:C7:63:E5:29:6F:BC:01:9F:43:05 Authority key identifier: 57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC Certificate issuer: /CN=A9125C3D/serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC Certificate serial: 03AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft Manifest number: 03A6 Signing time: Sun 03 Aug 2025 01:20:34 +0000 Manifest this update: Sun 03 Aug 2025 01:20:33 +0000 Manifest next update: Sun 10 Aug 2025 01:20:33 +0000 Files and hashes: 1: Vyfu6NouLMefq6Da0ZyISCvRWdw.crl (hash: 99yVLH/bQXCy0sKGLYeqGukTp/3repFRv4bPDZ57Uao=) 2: D66E75F0A5CF11EC94CFB734C4F9AE02.roa (hash: l/s5xmTdNpZpeVMlmGz5C4jtr1q5+jW3USj6jM51K9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 01:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 939 (0x3ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C3D, serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC Validity Not Before: Aug 3 01:20:33 2025 GMT Not After : Aug 10 01:20:33 2025 GMT Subject: CN=688eb962-c0e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d7:0c:9e:63:30:7a:84:1d:53:d6:be:40:d1: 0a:50:45:64:08:47:8b:24:e3:9e:ba:29:58:e1:dc: de:4e:0a:34:97:5b:e3:82:be:26:a6:c2:23:6e:ea: 03:c8:b4:b1:e8:5d:73:e0:2c:43:13:17:86:e4:14: c2:9e:1a:85:b5:15:76:20:52:be:99:2a:f2:c9:28: 97:e3:87:cc:11:7e:44:01:7e:9d:5b:2b:3b:39:0b: 12:1b:2e:ca:4b:39:97:0d:a7:ba:5c:6b:ff:9a:2f: a2:be:a5:ed:aa:83:b7:46:1b:f6:60:65:29:93:a2: 11:33:64:15:d8:76:de:95:30:1c:a2:8b:d0:18:b7: 61:6b:e7:cb:78:72:21:eb:f0:d5:f4:30:fd:ff:a1: b4:44:f7:68:2a:00:73:ac:8c:3d:b7:d7:b4:bf:14: 86:c7:41:8d:22:90:f2:c9:e7:30:9e:43:11:fd:69: b9:d4:03:19:ba:13:15:46:ad:04:c0:94:de:bd:bc: 51:8e:5c:92:a6:81:79:56:d8:b6:d6:0a:e1:91:8e: b0:2c:9b:7b:1e:ef:ce:eb:fd:b8:5e:56:1e:c5:db: f7:49:c4:39:78:67:11:02:c1:31:f7:1c:ba:9b:e4: ec:0e:52:5e:67:d7:f7:55:1d:ab:9e:9f:80:a1:4c: 76:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FA:3B:28:A9:B8:36:B6:30:BA:C7:63:E5:29:6F:BC:01:9F:43:05 X509v3 Authority Key Identifier: keyid:57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:e8:4e:91:9e:84:88:99:35:f8:27:29:50:cf:4d:a2:11:ba: 97:d9:b8:bd:94:a3:53:eb:69:f2:47:fd:33:8c:4c:a9:96:3d: b3:31:5c:49:74:0a:64:8a:ab:9a:a8:34:de:42:6a:e4:78:b6: 61:22:99:55:0e:9b:b2:d2:73:2d:e0:ff:2f:30:d9:8d:45:76: bc:41:1b:d8:85:2d:f7:ad:70:9f:a2:98:db:16:b6:e2:ec:08: 35:1d:72:78:d0:41:eb:db:c1:51:02:de:47:1a:7e:56:66:44: 44:1b:64:0d:82:1e:74:da:e0:b1:66:6c:8a:da:b3:f8:66:a6: ec:d9:9a:9e:10:a2:37:69:73:00:0d:8c:fd:d9:7f:11:11:63: 33:88:c9:f6:67:0b:84:d0:00:c0:36:ff:bf:ce:f8:0b:27:42: e0:f0:d3:91:97:cb:f1:79:19:40:d7:b1:71:8c:21:f9:25:e0: aa:91:51:81:77:8a:51:05:b5:ec:3e:db:5d:bd:a0:b4:3f:e1: b3:c2:7a:d9:7b:a6:c6:b1:1e:32:0a:b1:b9:7a:75:e9:59:0c: 94:58:23:50:8c:07:c5:a5:0b:6e:e9:1c:50:2a:1d:0f:70:16: 2c:1f:00:d2:ca:e8:86:de:97:88:6d:77:18:95:3c:42:c1:f3: 39:fb:31:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDM0QxMTAvBgNVBAUTKDU3MjdFRUU4REEyRTJDQzc5RkFCQTBEQUQxOUM4ODQ4 MkJEMTU5REMwHhcNMjUwODAzMDEyMDMzWhcNMjUwODEwMDEyMDMzWjAYMRYwFAYD VQQDEw02ODhlYjk2Mi1jMGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9cMnmMweoQdU9a+QNEKUEVkCEeLJOOeuilY4dzeTgo0l1vjgr4mpsIjbuoD yLSx6F1z4CxDExeG5BTCnhqFtRV2IFK+mSryySiX44fMEX5EAX6dWys7OQsSGy7K SzmXDae6XGv/mi+ivqXtqoO3Rhv2YGUpk6IRM2QV2HbelTAcoovQGLdha+fLeHIh 6/DV9DD9/6G0RPdoKgBzrIw9t9e0vxSGx0GNIpDyyecwnkMR/Wm51AMZuhMVRq0E wJTevbxRjlySpoF5Vti21grhkY6wLJt7Hu/O6/24XlYexdv3ScQ5eGcRAsEx9xy6 m+TsDlJeZ9f3VR2rnp+AoUx2IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGj6Oyip uDa2MLrHY+Upb7wBn0MFMB8GA1UdIwQYMBaAFFcn7ujaLizHn6ug2tGciEgr0Vnc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMzRC9GODAyOUE0NkE1 Q0MxMUVDQjc1RUM1MkRDNEY5QUUwMi9WeWZ1Nk5vdUxNZWZxNkRhMFp5SVNDdlJX ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z5ZnU2Tm91TE1lZnE2RGEwWnlJU0N2Uldkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMzRC9GODAyOUE0NkE1Q0MxMUVDQjc1RUM1MkRDNEY5QUUwMi9WeWZ1Nk5vdUxN ZWZxNkRhMFp5SVNDdlJXZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm6E6RnoSImTX4JylQz02iEbqX2bi9lKNT62nyR/0zjEyplj2zMVxJ dApkiquaqDTeQmrkeLZhIplVDpuy0nMt4P8vMNmNRXa8QRvYhS33rXCfopjbFrbi 7Ag1HXJ40EHr28FRAt5HGn5WZkREG2QNgh502uCxZmyK2rP4Zqbs2ZqeEKI3aXMA DYz92X8REWMziMn2ZwuE0ADANv+/zvgLJ0Lg8NORl8vxeRlA17FxjCH5JeCqkVGB d4pRBbXsPttdvaC0P+GzwnrZe6bGsR4yCrG5enXpWQyUWCNQjAfFpQtu6RxQKh0P cBYsHwDSyuiG3peIbXcYlTxCwfM5+zG4 -----END CERTIFICATE-----Generated at Mon Aug 4 16:07:47 2025 by rpki-client