$ rpki-client -vvf rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft File: vQyzxI8wwfOrPzAa7N5qzAIutV8.mft (raw, json) Hash identifier: PQvHbrb+eu36yOKDiJboPG4F3I/A1iArSpG43QyO2gY= Subject key identifier: 8B:6E:33:93:3E:AD:5E:4E:52:63:CE:72:58:1F:CB:70:1E:4A:73:5B Authority key identifier: BD:0C:B3:C4:8F:30:C1:F3:AB:3F:30:1A:EC:DE:6A:CC:02:2E:B5:5F Certificate issuer: /CN=A9131940/serialNumber=BD0CB3C48F30C1F3AB3F301AECDE6ACC022EB55F Certificate serial: 069F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft Manifest number: 0699 Signing time: Sun 10 Aug 2025 22:17:05 +0000 Manifest this update: Sun 10 Aug 2025 22:17:04 +0000 Manifest next update: Sun 17 Aug 2025 22:17:04 +0000 Files and hashes: 1: vQyzxI8wwfOrPzAa7N5qzAIutV8.crl (hash: UHmXpV0PqgKfuKPghTZteVPsnjMkLCqwbzo6wJs1yLo=) 2: B7E5ADEE7B2111EB89BB2347C4F9AE02.roa (hash: XhXh7/hc+7Rhp2pgMR497HY0tEko0qYz35OtmtH7m/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.crl rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1695 (0x69f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131940, serialNumber=BD0CB3C48F30C1F3AB3F301AECDE6ACC022EB55F Validity Not Before: Aug 10 22:17:04 2025 GMT Not After : Aug 17 22:17:04 2025 GMT Subject: CN=68991a61-92e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:21:5c:1a:b5:02:09:86:cd:f4:2f:56:cf:0a: 35:20:10:20:87:78:80:40:20:5d:fd:4a:43:58:a3: 2b:87:73:6a:5e:2b:98:6b:13:98:ac:09:d8:0d:17: 04:de:dd:51:c8:b2:51:28:60:ef:9e:d4:6f:8d:66: 7e:ea:b6:c5:bf:44:69:a6:93:56:d4:42:f2:20:3e: 78:da:c4:ab:d7:d2:3d:03:6b:b1:17:56:36:0c:f0: b0:e5:f3:9e:a1:71:a1:79:08:ad:2f:f8:53:24:d0: f3:1f:a7:94:1d:52:32:64:a2:e0:42:01:46:36:a3: 9c:4b:43:16:3e:32:66:8a:10:15:46:94:14:9b:e1: 0c:db:f9:67:43:18:32:86:e8:21:be:4d:e5:a0:98: 2b:11:93:ba:5f:52:c9:15:3a:e2:d4:ae:9b:ef:ff: a9:6e:d1:9b:3d:67:6c:2b:26:93:66:04:47:be:d7: d5:64:1b:ce:85:b1:4f:d1:81:ad:b8:ce:f6:70:ef: 2c:4b:27:5a:4d:e7:7e:90:8d:48:11:13:f1:2a:fb: 8c:c6:2d:00:3f:82:13:2a:b8:84:d4:16:45:9a:af: 89:14:e3:a5:e4:e0:cd:a7:a9:bd:9e:b2:e8:84:1c: 85:fe:7e:86:b0:b8:b1:8e:e5:75:a7:80:19:4a:e3: d7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6E:33:93:3E:AD:5E:4E:52:63:CE:72:58:1F:CB:70:1E:4A:73:5B X509v3 Authority Key Identifier: keyid:BD:0C:B3:C4:8F:30:C1:F3:AB:3F:30:1A:EC:DE:6A:CC:02:2E:B5:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:ad:41:7d:62:e1:82:c3:67:17:c1:17:47:a5:fa:19:3b:6d: 9a:ca:82:c4:11:84:f7:d8:5c:2c:8a:72:2b:a4:8c:6a:b2:d6: d1:88:2b:8d:72:f9:21:0a:c7:64:ca:c7:fd:7f:12:d3:d7:00: 13:1b:61:ae:90:31:db:48:71:4f:90:8a:c3:2b:f7:ef:8a:13: 6a:c3:f0:00:e0:b8:66:e0:ab:f5:6b:6a:13:5b:30:96:6e:3b: d5:98:2f:1e:84:1e:f5:61:32:3b:f3:4d:56:05:4b:5f:de:87: bd:55:b3:f3:c7:64:e9:56:f7:35:4d:ff:f2:98:14:59:7e:fa: 55:64:47:2d:d3:d6:0a:2a:3e:ae:2c:67:1f:89:1d:0e:7b:55: c6:bd:0f:56:74:67:63:76:82:da:e1:92:6f:a8:a9:1a:94:e5: 8d:c1:d0:ea:1e:4d:ad:79:00:d1:14:4e:27:ae:c6:95:fc:32: 9b:06:e7:70:49:59:9a:10:8d:d4:74:3b:5c:2a:dc:02:da:6c: 9f:21:68:64:01:84:f7:24:f0:4a:ed:ea:18:ec:6f:58:02:61: a9:8e:fa:d9:68:7b:ac:c1:76:23:85:08:e8:5e:23:84:93:83: 1f:a1:1a:96:f1:33:61:1e:9f:9d:98:ed:6f:03:f5:d5:ba:da: 85:79:71:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE5NDAxMTAvBgNVBAUTKEJEMENCM0M0OEYzMEMxRjNBQjNGMzAxQUVDREU2QUND MDIyRUI1NUYwHhcNMjUwODEwMjIxNzA0WhcNMjUwODE3MjIxNzA0WjAYMRYwFAYD VQQDEw02ODk5MWE2MS05MmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnyFcGrUCCYbN9C9Wzwo1IBAgh3iAQCBd/UpDWKMrh3NqXiuYaxOYrAnYDRcE 3t1RyLJRKGDvntRvjWZ+6rbFv0RpppNW1ELyID542sSr19I9A2uxF1Y2DPCw5fOe oXGheQitL/hTJNDzH6eUHVIyZKLgQgFGNqOcS0MWPjJmihAVRpQUm+EM2/lnQxgy hughvk3loJgrEZO6X1LJFTri1K6b7/+pbtGbPWdsKyaTZgRHvtfVZBvOhbFP0YGt uM72cO8sSydaTed+kI1IERPxKvuMxi0AP4ITKriE1BZFmq+JFOOl5ODNp6m9nrLo hByF/n6GsLixjuV1p4AZSuPXiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItuM5M+ rV5OUmPOclgfy3AeSnNbMB8GA1UdIwQYMBaAFL0Ms8SPMMHzqz8wGuzeaswCLrVf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTk0MC85Q0Y2MEJCMDdC MjAxMUVCQjBDOERDNDZDNEY5QUUwMi92UXl6eEk4d3dmT3JQekFhN041cXpBSXV0 VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZReXp4STh3d2ZPclB6QWE3TjVxekFJdXRWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTk0MC85Q0Y2MEJCMDdCMjAxMUVCQjBDOERDNDZDNEY5QUUwMi92UXl6eEk4d3dm T3JQekFhN041cXpBSXV0VjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACrUF9YuGCw2cXwRdHpfoZO22ayoLEEYT32FwsinIrpIxqstbRiCuN cvkhCsdkysf9fxLT1wATG2GukDHbSHFPkIrDK/fvihNqw/AA4Lhm4Kv1a2oTWzCW bjvVmC8ehB71YTI7801WBUtf3oe9VbPzx2TpVvc1Tf/ymBRZfvpVZEct09YKKj6u LGcfiR0Oe1XGvQ9WdGdjdoLa4ZJvqKkalOWNwdDqHk2teQDRFE4nrsaV/DKbBudw SVmaEI3UdDtcKtwC2myfIWhkAYT3JPBK7eoY7G9YAmGpjvrZaHuswXYjhQjoXiOE k4MfoRqW8TNhHp+dmO1vA/XVutqFeXEm -----END CERTIFICATE-----Generated at Mon Aug 11 04:25:26 2025 by rpki-client