$ rpki-client -vvf rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft File: vNvXHXuijevFk59cynZuyp91YxA.mft (raw, json) Hash identifier: ulefSFQhgGJeNcs5bMsmivUH0Qzq+3ZiMo1VhDr0its= Subject key identifier: 4B:AD:2F:21:67:C5:26:C3:A6:88:12:03:49:A7:D0:E9:4C:9E:0C:39 Authority key identifier: BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10 Certificate issuer: /CN=A9126285/serialNumber=BCDBD71D7BA28DEBC5939F5CCA766ECA9F756310 Certificate serial: 275F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft Manifest number: 2747 Signing time: Tue 12 Aug 2025 15:43:38 +0000 Manifest this update: Tue 12 Aug 2025 15:43:37 +0000 Manifest next update: Tue 19 Aug 2025 15:43:37 +0000 Files and hashes: 1: vNvXHXuijevFk59cynZuyp91YxA.crl (hash: 9UKCFbI9YQh841XeQmViZTEi2f0h3ExbwDkCzOvUpjA=) 2: 962B0D98B14111E5A3B46B15C4F9AE02.roa (hash: yQHlkxuzz99/7kQgioJqP7ffoLiy5kq1xOtP6xkgYXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.crl rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 15:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10079 (0x275f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126285, serialNumber=BCDBD71D7BA28DEBC5939F5CCA766ECA9F756310 Validity Not Before: Aug 12 15:43:37 2025 GMT Not After : Aug 19 15:43:37 2025 GMT Subject: CN=689b612a-37bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cf:22:d9:11:0b:0b:4d:35:46:cc:49:4d:03: 50:ef:ae:aa:c0:a4:dc:7d:46:4b:92:49:b1:30:b4: 11:78:9f:8f:8d:59:ba:91:e2:57:9c:a5:1f:1c:ce: 46:06:31:db:32:f4:4a:10:4c:08:6f:20:60:da:18: d5:7e:cd:3e:4a:40:cf:8b:b0:c8:91:3a:25:0b:0e: a4:8d:ad:6a:0b:6e:bf:02:e8:c5:90:85:3d:f9:82: 40:12:9f:bb:31:a0:92:8e:b3:20:4f:c0:6b:22:99: fd:8e:c8:dd:db:3a:82:3d:39:10:24:ff:fe:9a:78: bf:17:08:30:ba:25:f3:3a:6d:10:0a:bc:3b:35:97: 8b:65:1f:2e:cc:20:f4:2b:8f:1b:58:0c:cd:99:57: ba:11:a6:e3:d1:fa:bb:c2:7d:55:eb:6c:8c:8c:79: a5:ea:c5:ba:29:7d:1b:87:4d:25:04:b7:8b:c4:74: cc:1a:82:4d:75:6d:a0:c9:dc:05:67:7f:83:f7:03: 3c:9d:7c:9e:a0:af:66:0c:e0:7d:7c:4e:88:f6:6c: b0:e2:bf:42:f6:ba:aa:2d:b3:6f:05:8a:ba:f6:a4: 24:73:9b:20:90:3a:11:29:ce:da:75:c3:49:fb:bc: 73:60:df:78:61:76:79:7d:62:86:bb:a9:46:7c:f5: 63:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AD:2F:21:67:C5:26:C3:A6:88:12:03:49:A7:D0:E9:4C:9E:0C:39 X509v3 Authority Key Identifier: keyid:BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ef:44:f5:ee:85:76:35:72:56:62:e8:83:33:f9:9e:7d:bc:86: 76:88:e9:66:f1:c0:63:6f:9e:05:ca:1d:54:f9:8f:31:81:6c: 8c:1c:34:50:5d:23:c9:14:be:20:b7:1d:fe:0c:5a:ba:d7:c8: 35:8b:11:b0:a2:a9:51:3c:5b:bb:f1:9a:6a:3d:c8:cc:3c:56: 6a:2e:51:92:76:24:a8:b5:b1:9d:61:49:c4:0d:e1:88:3b:74: 4d:60:7b:a2:2d:47:e3:be:f0:9b:c9:e2:d7:1d:60:ea:49:d6: 33:2d:80:27:57:2d:77:2f:e1:cf:ec:70:5d:5e:83:54:a5:ba: 55:c7:99:8e:0f:7f:3f:89:45:a7:6c:70:6b:34:3f:01:d4:bf: d0:ad:d9:7f:9a:f1:61:b5:56:71:54:2d:0a:93:f9:01:e7:c9: ae:84:b2:2d:dc:49:5d:96:db:70:b0:d1:57:ae:80:5c:b7:8a: 5e:e0:7c:38:48:a2:6d:1a:dc:bb:df:e3:db:23:3b:9b:2a:e1: eb:ed:48:d2:9f:d7:40:6c:8f:d2:b0:fd:fc:b5:b8:7c:83:af: 49:0e:2e:ff:fe:59:1e:2c:b2:20:b3:28:b9:5d:3b:92:a0:1a: d1:c0:34:94:5c:5f:69:27:ed:ea:27:f9:5d:31:93:c4:f9:3d: 8b:39:95:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyODUxMTAvBgNVBAUTKEJDREJENzFEN0JBMjhERUJDNTkzOUY1Q0NBNzY2RUNB OUY3NTYzMTAwHhcNMjUwODEyMTU0MzM3WhcNMjUwODE5MTU0MzM3WjAYMRYwFAYD VQQDEw02ODliNjEyYS0zN2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3M8i2RELC001RsxJTQNQ766qwKTcfUZLkkmxMLQReJ+PjVm6keJXnKUfHM5G BjHbMvRKEEwIbyBg2hjVfs0+SkDPi7DIkTolCw6kja1qC26/AujFkIU9+YJAEp+7 MaCSjrMgT8BrIpn9jsjd2zqCPTkQJP/+mni/FwgwuiXzOm0QCrw7NZeLZR8uzCD0 K48bWAzNmVe6Eabj0fq7wn1V62yMjHml6sW6KX0bh00lBLeLxHTMGoJNdW2gydwF Z3+D9wM8nXyeoK9mDOB9fE6I9myw4r9C9rqqLbNvBYq69qQkc5sgkDoRKc7adcNJ +7xzYN94YXZ5fWKGu6lGfPVjSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEutLyFn xSbDpogSA0mn0OlMngw5MB8GA1UdIwQYMBaAFLzb1x17oo3rxZOfXMp2bsqfdWMQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI4NS9CMjYxMEI1OEMz RjIxMUU0Qjk2NTc1MTRDNEY5QUUwMi92TnZYSFh1aWpldkZrNTljeW5adXlwOTFZ eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZOdlhIWHVpamV2Rms1OWN5blp1eXA5MVl4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjI4NS9CMjYxMEI1OEMzRjIxMUU0Qjk2NTc1MTRDNEY5QUUwMi92TnZYSFh1aWpl dkZrNTljeW5adXlwOTFZeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDvRPXuhXY1clZi6IMz+Z59vIZ2iOlm8cBjb54Fyh1U+Y8xgWyMHDRQ XSPJFL4gtx3+DFq618g1ixGwoqlRPFu78ZpqPcjMPFZqLlGSdiSotbGdYUnEDeGI O3RNYHuiLUfjvvCbyeLXHWDqSdYzLYAnVy13L+HP7HBdXoNUpbpVx5mOD38/iUWn bHBrND8B1L/Qrdl/mvFhtVZxVC0Kk/kB58muhLIt3EldlttwsNFXroBct4pe4Hw4 SKJtGty73+PbIzubKuHr7UjSn9dAbI/SsP38tbh8g69JDi7//lkeLLIgsyi5XTuS oBrRwDSUXF9pJ+3qJ/ldMZPE+T2LOZXh -----END CERTIFICATE-----Generated at Wed Aug 13 00:33:04 2025 by rpki-client