$ rpki-client -vvf rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft File: Vg3ED_OlCfnv21Jg7huzhi222N8.mft (raw, json) Hash identifier: kX622wlsyXt/UL3KuORHjzGgVtL79aolJi4xp3Cx6CY= Subject key identifier: 2E:8A:1F:A4:48:16:A1:69:FB:C2:E5:0A:AF:E9:79:83:78:CA:91:61 Authority key identifier: 56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF Certificate issuer: /CN=A912E926/serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft Manifest number: 019F Signing time: Mon 11 Aug 2025 03:24:41 +0000 Manifest this update: Mon 11 Aug 2025 03:24:41 +0000 Manifest next update: Mon 18 Aug 2025 03:24:41 +0000 Files and hashes: 1: Vg3ED_OlCfnv21Jg7huzhi222N8.crl (hash: dZoVNh4pyxJlhXSu50frlIqi9QfGEbnSvbzyUhA3FfQ=) 2: 46BF7E7CFA0611ED802A1C29C4F9AE02.roa (hash: jnuMHWmzh0Mkxo/UqfQiHQK9zwVM6oBly72+HKRXMlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E926, serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF Validity Not Before: Aug 11 03:24:41 2025 GMT Not After : Aug 18 03:24:41 2025 GMT Subject: CN=68996279-e269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:93:b2:94:54:65:ed:e6:ef:d1:d3:07:f6:f0: 36:13:bc:bc:17:b7:b6:21:21:af:5a:82:ef:9f:07: 28:15:ef:48:79:32:52:a9:4d:b9:fe:19:06:7a:23: 33:23:61:41:be:25:78:da:90:64:01:4f:05:fb:53: a4:9e:13:4c:3b:1f:fc:bc:6f:d0:a7:ee:a3:84:e4: fa:fe:50:dc:70:56:3a:4d:f8:57:86:58:64:37:53: 59:3a:3e:f3:31:b9:70:f9:e6:81:42:1a:af:a0:df: b3:24:fc:64:ca:d4:c2:52:45:c1:77:ab:9b:14:e4: b5:f1:8b:2e:43:4a:7f:14:57:50:43:55:70:a0:2d: 99:11:34:b4:6d:c9:d3:e6:bc:2c:64:7b:b8:ba:60: 34:67:34:cc:d1:5e:b0:63:b8:2f:80:a2:37:4e:36: df:83:a8:c1:c2:7f:0d:14:92:d9:cc:63:14:72:a4: 7e:89:20:52:0a:d4:9f:29:35:dc:31:c3:d1:3f:81: f0:11:61:b6:16:1c:33:97:4e:59:fd:3a:5a:b9:97: fa:9e:21:73:c8:aa:55:33:27:f0:0a:46:5b:e0:86: 31:d6:80:98:1e:e9:51:16:04:4e:34:a6:cf:1e:53: c0:db:27:a6:07:84:53:18:1d:c3:0c:96:08:34:36: 60:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8A:1F:A4:48:16:A1:69:FB:C2:E5:0A:AF:E9:79:83:78:CA:91:61 X509v3 Authority Key Identifier: keyid:56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:90:ee:92:cc:f0:a4:73:b9:9a:b8:59:65:2d:5b:97:74:2d: 22:cc:1c:f8:31:01:06:41:1e:aa:e1:69:8b:bb:e6:23:33:12: de:e7:78:41:bf:2e:c7:b4:f5:80:97:32:b5:ca:2b:8c:89:22: 74:48:02:0c:25:75:41:51:1b:e6:ef:e1:51:d7:13:0b:8a:c4: 50:8b:9a:67:68:69:51:14:ec:60:79:43:8f:b9:1d:a3:8a:70: 9a:69:55:35:d2:43:9a:7a:19:2b:51:27:98:a7:59:43:50:ce: 6d:b5:96:5b:e5:69:2f:53:cb:62:61:d6:4e:76:33:f5:49:0b: 8d:20:8b:03:01:a8:26:30:3a:ba:95:da:a1:12:de:7b:1a:70: ab:44:d5:5f:b7:33:be:80:06:50:b9:23:6d:10:b0:7f:cd:67: 18:92:47:78:5d:1c:f9:ca:6f:ba:73:d7:c3:30:07:71:8b:18: ee:fc:ee:2c:ad:d3:cb:c9:d4:6a:e6:4d:c6:d3:77:23:67:c8: 34:33:b9:00:92:1a:2d:39:95:a0:b7:cc:67:45:02:6d:3d:4c: 12:b9:02:08:1f:02:9e:74:bd:8f:23:36:58:7c:09:08:d3:ea: dc:f6:27:12:ff:19:92:2c:ef:dc:2b:30:1f:76:d7:aa:30:3a: a4:fd:94:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MjYxMTAvBgNVBAUTKDU2MERDNDBGRjNBNTA5RjlFRkRCNTI2MEVFMUJCMzg2 MkRCNkQ4REYwHhcNMjUwODExMDMyNDQxWhcNMjUwODE4MDMyNDQxWjAYMRYwFAYD VQQDEw02ODk5NjI3OS1lMjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJOylFRl7ebv0dMH9vA2E7y8F7e2ISGvWoLvnwcoFe9IeTJSqU25/hkGeiMz I2FBviV42pBkAU8F+1OknhNMOx/8vG/Qp+6jhOT6/lDccFY6TfhXhlhkN1NZOj7z Mblw+eaBQhqvoN+zJPxkytTCUkXBd6ubFOS18YsuQ0p/FFdQQ1VwoC2ZETS0bcnT 5rwsZHu4umA0ZzTM0V6wY7gvgKI3Tjbfg6jBwn8NFJLZzGMUcqR+iSBSCtSfKTXc McPRP4HwEWG2Fhwzl05Z/TpauZf6niFzyKpVMyfwCkZb4IYx1oCYHulRFgRONKbP HlPA2yemB4RTGB3DDJYINDZgEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6KH6RI FqFp+8LlCq/peYN4ypFhMB8GA1UdIwQYMBaAFFYNxA/zpQn579tSYO4bs4Ytttjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyNi84NjY3NkRBMEZB MDExMUVEQkFENzVEMjhDNEY5QUUwMi9WZzNFRF9PbENmbnYyMUpnN2h1emhpMjIy TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZnM0VEX09sQ2ZudjIxSmc3aHV6aGkyMjJOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyNi84NjY3NkRBMEZBMDExMUVEQkFENzVEMjhDNEY5QUUwMi9WZzNFRF9PbENm bnYyMUpnN2h1emhpMjIyTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWkO6SzPCkc7mauFllLVuXdC0izBz4MQEGQR6q4WmLu+YjMxLe53hB vy7HtPWAlzK1yiuMiSJ0SAIMJXVBURvm7+FR1xMLisRQi5pnaGlRFOxgeUOPuR2j inCaaVU10kOaehkrUSeYp1lDUM5ttZZb5WkvU8tiYdZOdjP1SQuNIIsDAagmMDq6 ldqhEt57GnCrRNVftzO+gAZQuSNtELB/zWcYkkd4XRz5ym+6c9fDMAdxixju/O4s rdPLydRq5k3G03cjZ8g0M7kAkhotOZWgt8xnRQJtPUwSuQIIHwKedL2PIzZYfAkI 0+rc9icS/xmSLO/cKzAfdteqMDqk/ZSb -----END CERTIFICATE-----Generated at Mon Aug 11 04:30:55 2025 by rpki-client