$ rpki-client -vvf rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft File: VWyosJdH0HtvaiekBVKNOfpbgkw.mft (raw, json) Hash identifier: 6mltl8sKg3ZHDNhfO7Aj62mvqMJHYZM5fPC/iLMqwEI= Subject key identifier: D9:AA:18:05:0C:6E:9C:54:27:00:67:C3:3C:56:11:B7:36:B0:93:24 Authority key identifier: 55:6C:A8:B0:97:47:D0:7B:6F:6A:27:A4:05:52:8D:39:FA:5B:82:4C Certificate issuer: /CN=A912A4D7/serialNumber=556CA8B09747D07B6F6A27A405528D39FA5B824C Certificate serial: 08B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft Manifest number: 08AD Signing time: Tue 12 Aug 2025 20:48:28 +0000 Manifest this update: Tue 12 Aug 2025 20:48:27 +0000 Manifest next update: Tue 19 Aug 2025 20:48:27 +0000 Files and hashes: 1: VWyosJdH0HtvaiekBVKNOfpbgkw.crl (hash: 7wQDuai2wb6vZaKukmBOMeE2nLlgxYN6goaTPiMipcY=) 2: 3C24D492BF6911EAA877B317C4F9AE02.roa (hash: NZkd996OCXD4hErR3DmhrfGKjBgYP///vRBLCCwugg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.crl rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 20:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2229 (0x8b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A4D7, serialNumber=556CA8B09747D07B6F6A27A405528D39FA5B824C Validity Not Before: Aug 12 20:48:27 2025 GMT Not After : Aug 19 20:48:27 2025 GMT Subject: CN=689ba89b-3f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:36:2c:bd:ea:49:84:67:3c:74:9f:b6:1d:76: 1a:6b:2b:5f:2b:36:7c:78:f7:ec:12:40:00:ae:a3: 27:4e:a3:f0:ff:57:66:07:2a:9d:7a:94:d8:17:fb: ce:19:f5:1c:3c:1a:b0:86:2f:ab:49:e1:c4:9b:ba: e5:b6:13:6d:a1:39:23:3e:89:23:02:93:f0:5d:e1: 0b:70:dc:79:f0:87:d2:f6:90:5b:a5:09:35:58:57: 1e:19:68:9a:bf:ad:9b:64:14:a8:63:d5:b9:85:0e: 57:a0:f5:9d:98:bc:73:d3:1f:4b:1b:f8:3e:ec:33: e0:cf:98:8e:46:0c:2b:3d:d9:85:ae:95:a8:81:21: 75:b5:6f:04:9a:fa:88:81:bd:14:b4:63:af:d1:fc: b1:08:25:c6:16:65:fb:0b:22:58:7a:b1:da:7d:f3: 5f:cc:b2:20:a2:da:d9:7b:06:95:6d:ce:66:7e:f5: c9:33:dc:22:c2:d9:1f:ed:09:a1:78:9c:d9:62:58: 8e:06:2a:b4:42:e6:db:06:1b:27:e2:2f:f5:cc:7b: 4c:b2:31:98:a1:23:48:26:30:be:a8:96:8e:a1:31: 37:d7:2f:fa:5e:c5:5f:e7:51:64:95:a1:5e:19:fe: 7b:18:8a:f2:84:c9:df:30:16:62:7b:d5:e5:56:fe: 23:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AA:18:05:0C:6E:9C:54:27:00:67:C3:3C:56:11:B7:36:B0:93:24 X509v3 Authority Key Identifier: keyid:55:6C:A8:B0:97:47:D0:7B:6F:6A:27:A4:05:52:8D:39:FA:5B:82:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:a6:56:e2:4c:97:d7:2f:67:c2:df:f6:a2:70:b5:1a:d8:7c: 1b:42:58:7b:68:fa:86:bd:51:a1:99:ad:d7:24:f9:9a:08:c1: 32:c0:fe:3d:b1:9b:ec:6a:86:60:bc:0d:c4:b1:b2:26:21:07: 00:b4:72:17:2c:a4:60:6b:1c:a3:d8:a2:17:f2:7b:71:10:ee: c5:5f:63:9f:68:21:60:93:9e:8d:cb:5f:80:fe:bd:c5:49:3f: b2:29:df:19:70:ea:fe:cc:c7:fd:51:2f:39:16:82:98:6c:31: 29:22:2e:b7:0d:0e:54:ac:bc:d3:53:55:5e:9d:e0:e2:87:35: b7:49:e7:b1:c1:fd:4e:03:28:04:bf:a4:4b:ba:74:83:d0:00: 32:df:74:ba:97:9d:aa:39:2b:24:c9:34:bd:32:cb:51:5a:20: ef:1b:16:fe:32:19:66:ff:a7:b9:1a:e0:a0:c0:0e:be:79:e8: 41:ca:1f:97:94:8e:91:0e:51:56:8d:f1:53:16:59:9c:eb:57: af:c8:7e:f0:75:c2:e3:fb:00:b8:81:32:28:92:08:b8:96:e1: 5f:6d:ea:99:74:ef:f0:3e:e2:5c:6d:3f:54:d0:94:8e:7b:94: d3:20:7f:ea:1c:e7:4b:c5:bb:ca:a7:ba:b7:3d:4b:54:ae:10: 03:01:4c:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE0RDcxMTAvBgNVBAUTKDU1NkNBOEIwOTc0N0QwN0I2RjZBMjdBNDA1NTI4RDM5 RkE1QjgyNEMwHhcNMjUwODEyMjA0ODI3WhcNMjUwODE5MjA0ODI3WjAYMRYwFAYD VQQDEw02ODliYTg5Yi0zZjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDYsvepJhGc8dJ+2HXYaaytfKzZ8ePfsEkAArqMnTqPw/1dmByqdepTYF/vO GfUcPBqwhi+rSeHEm7rlthNtoTkjPokjApPwXeELcNx58IfS9pBbpQk1WFceGWia v62bZBSoY9W5hQ5XoPWdmLxz0x9LG/g+7DPgz5iORgwrPdmFrpWogSF1tW8EmvqI gb0UtGOv0fyxCCXGFmX7CyJYerHaffNfzLIgotrZewaVbc5mfvXJM9wiwtkf7Qmh eJzZYliOBiq0QubbBhsn4i/1zHtMsjGYoSNIJjC+qJaOoTE31y/6XsVf51FklaFe Gf57GIryhMnfMBZie9XlVv4jnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmqGAUM bpxUJwBnwzxWEbc2sJMkMB8GA1UdIwQYMBaAFFVsqLCXR9B7b2onpAVSjTn6W4JM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTRENy9CRDBDMDNGMkJG NjcxMUVBQjNCQjE4MTVDNEY5QUUwMi9WV3lvc0pkSDBIdHZhaWVrQlZLTk9mcGJn a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZXeW9zSmRIMEh0dmFpZWtCVktOT2ZwYmdrdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTRENy9CRDBDMDNGMkJGNjcxMUVBQjNCQjE4MTVDNEY5QUUwMi9WV3lvc0pkSDBI dHZhaWVrQlZLTk9mcGJna3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZplbiTJfXL2fC3/aicLUa2HwbQlh7aPqGvVGhma3XJPmaCMEywP49 sZvsaoZgvA3EsbImIQcAtHIXLKRgaxyj2KIX8ntxEO7FX2OfaCFgk56Ny1+A/r3F ST+yKd8ZcOr+zMf9US85FoKYbDEpIi63DQ5UrLzTU1VeneDihzW3Seexwf1OAygE v6RLunSD0AAy33S6l52qOSskyTS9MstRWiDvGxb+Mhlm/6e5GuCgwA6+eehByh+X lI6RDlFWjfFTFlmc61evyH7wdcLj+wC4gTIokgi4luFfbeqZdO/wPuJcbT9U0JSO e5TTIH/qHOdLxbvKp7q3PUtUrhADAUwO -----END CERTIFICATE-----Generated at Wed Aug 13 05:37:43 2025 by rpki-client