$ rpki-client -vvf rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft File: VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft (raw, json) Hash identifier: rjIQMQKS6A8NZM9UWJqYnJqw2ATiQSrF+AwAHWy/U4k= Subject key identifier: 9E:4E:37:48:16:DD:72:83:37:EC:06:AB:01:A8:A7:28:7D:DD:C7:3D Authority key identifier: 56:D5:24:19:D5:6A:AC:DF:7D:00:5B:A1:5D:9D:DB:8F:14:2E:3A:D0 Certificate issuer: /CN=A912F592/serialNumber=56D52419D56AACDF7D005BA15D9DDB8F142E3AD0 Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft Manifest number: 0213 Signing time: Wed 13 Aug 2025 02:35:31 +0000 Manifest this update: Wed 13 Aug 2025 02:35:30 +0000 Manifest next update: Wed 20 Aug 2025 02:35:30 +0000 Files and hashes: 1: VtUkGdVqrN99AFuhXZ3bjxQuOtA.crl (hash: 3k12HcZrOZJKIMtkekxA4yC2cuhRNNVw4Q0Noge52bQ=) 2: 20BFA0B64A4911EDACB7AB0CC4F9AE02.roa (hash: fM0f1U3uv8elOOSoakvi5zas2tW7Yg5J98LgfW+bqBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.crl rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 02:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F592, serialNumber=56D52419D56AACDF7D005BA15D9DDB8F142E3AD0 Validity Not Before: Aug 13 02:35:30 2025 GMT Not After : Aug 20 02:35:30 2025 GMT Subject: CN=689bf9f3-57bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d3:70:77:66:9b:c9:27:bc:03:f6:52:d9:f6: ef:df:b2:08:0f:f1:a1:24:b5:63:e7:cd:50:9b:e5: 79:0d:e9:8a:7e:bc:4b:ca:2e:de:d3:84:50:52:3f: 11:0b:40:4f:66:df:d6:a0:73:b1:28:88:17:9a:58: 1e:8f:09:56:7c:fe:af:8b:55:52:6d:5f:b1:49:8c: 35:0e:ab:c1:1c:bc:5b:42:b1:93:b3:f2:d9:86:0a: 1f:f5:64:87:50:70:b5:3e:f4:87:16:6c:b5:78:86: e1:fc:8e:c5:b9:51:83:81:17:82:5e:60:05:d2:62: 3b:d5:a5:35:1f:f8:a7:fb:f7:df:b8:12:e7:f6:32: cd:79:9f:23:2a:cd:a8:66:fa:98:4d:a7:00:ca:b0: 27:c4:5f:84:30:2a:f7:f3:b5:24:c9:15:bd:b7:ea: 1e:80:23:1a:93:0d:63:ff:01:60:c8:66:a6:80:c2: db:98:ad:6c:44:22:31:95:c5:8d:6b:30:5f:7f:b4: 85:ad:50:6c:91:be:90:36:0f:84:d1:cb:e6:1c:eb: 8d:46:5a:1b:66:49:46:0a:8d:bb:bc:40:b2:6e:75: 06:d6:eb:ef:77:75:c8:5f:b8:69:e7:e9:e4:5a:61: 54:1b:5c:f8:cb:25:58:06:95:79:c0:fe:98:3c:18: 46:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4E:37:48:16:DD:72:83:37:EC:06:AB:01:A8:A7:28:7D:DD:C7:3D X509v3 Authority Key Identifier: keyid:56:D5:24:19:D5:6A:AC:DF:7D:00:5B:A1:5D:9D:DB:8F:14:2E:3A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:2b:40:dc:9d:a8:0b:17:c7:64:9d:e0:67:9b:17:41:f5:0e: 41:9c:41:b6:3b:7d:07:92:c1:ed:3f:a4:9f:16:98:b1:a5:07: 56:19:82:4a:62:bf:3c:39:6e:6c:06:0f:26:a6:14:e0:f7:65: 3e:71:d6:28:7b:a3:5a:9d:92:1c:e9:ba:f9:f2:fd:6a:26:6a: d1:ce:b9:72:b4:01:29:0c:c8:2a:7e:8c:ea:2c:a3:bd:5c:a0: 79:8f:e9:fa:8a:58:be:53:55:da:c8:f5:29:04:e6:c0:20:f0: ca:44:4f:24:b7:2b:b2:75:4a:ba:6d:50:51:c8:2c:87:0f:d1: 18:6a:0b:35:c4:b1:5c:8a:d6:0b:b2:51:84:c5:1c:a1:47:8f: 06:a2:d0:b6:57:76:ae:b8:6a:b3:26:ab:29:9a:4c:dd:2b:c0: 22:a9:d9:b8:66:be:ff:d7:b1:2a:54:71:b0:6e:81:f7:97:8c: ac:82:e0:e5:55:ac:3d:ce:2e:55:13:90:61:30:e7:b6:df:12: 3b:3a:d5:11:d3:a8:7e:5e:3c:81:b6:e2:16:9d:2f:3f:d9:9e: a1:00:20:b1:66:f8:5b:36:80:6a:c7:3d:4e:81:14:5d:e1:9d: f5:bb:47:86:c7:c6:33:48:c2:c6:e7:05:2f:2b:a2:4f:36:06: ca:77:9a:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1OTIxMTAvBgNVBAUTKDU2RDUyNDE5RDU2QUFDREY3RDAwNUJBMTVEOUREQjhG MTQyRTNBRDAwHhcNMjUwODEzMDIzNTMwWhcNMjUwODIwMDIzNTMwWjAYMRYwFAYD VQQDEw02ODliZjlmMy01N2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytNwd2abySe8A/ZS2fbv37IID/GhJLVj581Qm+V5DemKfrxLyi7e04RQUj8R C0BPZt/WoHOxKIgXmlgejwlWfP6vi1VSbV+xSYw1DqvBHLxbQrGTs/LZhgof9WSH UHC1PvSHFmy1eIbh/I7FuVGDgReCXmAF0mI71aU1H/in+/ffuBLn9jLNeZ8jKs2o ZvqYTacAyrAnxF+EMCr387UkyRW9t+oegCMakw1j/wFgyGamgMLbmK1sRCIxlcWN azBff7SFrVBskb6QNg+E0cvmHOuNRlobZklGCo27vECybnUG1uvvd3XIX7hp5+nk WmFUG1z4yyVYBpV5wP6YPBhGlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5ON0gW 3XKDN+wGqwGopyh93cc9MB8GA1UdIwQYMBaAFFbVJBnVaqzffQBboV2d248ULjrQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjU5Mi9GQTU5MTJERTRB NDUxMUVEOTUzQjQxODZDNEY5QUUwMi9WdFVrR2RWcXJOOTlBRnVoWFozYmp4UXVP dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z0VWtHZFZxck45OUFGdWhYWjNianhRdU90QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjU5Mi9GQTU5MTJERTRBNDUxMUVEOTUzQjQxODZDNEY5QUUwMi9WdFVrR2RWcXJO OTlBRnVoWFozYmp4UXVPdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWK0DcnagLF8dkneBnmxdB9Q5BnEG2O30HksHtP6SfFpixpQdWGYJK Yr88OW5sBg8mphTg92U+cdYoe6NanZIc6br58v1qJmrRzrlytAEpDMgqfozqLKO9 XKB5j+n6ili+U1XayPUpBObAIPDKRE8ktyuydUq6bVBRyCyHD9EYags1xLFcitYL slGExRyhR48GotC2V3auuGqzJqspmkzdK8Aiqdm4Zr7/17EqVHGwboH3l4ysguDl Vaw9zi5VE5BhMOe23xI7OtUR06h+XjyBtuIWnS8/2Z6hACCxZvhbNoBqxz1OgRRd 4Z31u0eGx8YzSMLG5wUvK6JPNgbKd5om -----END CERTIFICATE-----Generated at Wed Aug 13 05:58:12 2025 by rpki-client