$ rpki-client -vvf rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft File: VKJNxo3yZA57s_8PNreO-IQAww8.mft (raw, json) Hash identifier: NnwF67OjMl6Ty1Hcs87e0eYVpjoGNKdnIeQV1XN73cU= Subject key identifier: 15:AE:4E:E2:0D:A6:FF:92:1A:72:9F:EB:F4:44:46:A5:1B:0D:5D:6F Authority key identifier: 54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F Certificate issuer: /CN=A91362EB/serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft Manifest number: 12 Signing time: Sat 09 Aug 2025 08:32:33 +0000 Manifest this update: Sat 09 Aug 2025 08:32:32 +0000 Manifest next update: Sat 16 Aug 2025 08:32:32 +0000 Files and hashes: 1: VKJNxo3yZA57s_8PNreO-IQAww8.crl (hash: gvNVoEzlE56qfQUozb0XanfjHKzHG7WESAjCe04mB4Y=) 2: 0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa (hash: /uTCkM+7T3MX4CR0F7TNTBgsSs4yKxKjHNmhUVycHRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91362EB, serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F Validity Not Before: Aug 9 08:32:32 2025 GMT Not After : Aug 16 08:32:32 2025 GMT Subject: CN=689707a0-9433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:f7:f6:87:f8:34:3e:3e:12:d8:07:11:e9: da:9a:e8:26:38:27:46:f7:14:e0:e0:70:0b:4a:5a: a4:c7:53:23:0b:a0:db:fb:34:bc:8c:7d:8b:18:2d: b3:65:66:8b:20:05:d0:2c:64:c4:8e:9b:95:53:56: 1b:3e:74:6b:f1:2f:90:0e:fd:de:1b:e0:32:d9:04: fb:79:fa:ab:93:ff:3f:18:8f:99:b0:de:79:6d:8b: 48:9b:1b:59:58:1e:66:dc:f1:82:92:65:75:25:4b: b3:6e:4e:4d:6f:d9:c4:f5:d4:1e:5a:bd:f1:a2:8f: 77:83:98:09:16:f8:f4:08:ab:f1:bc:a8:de:13:dc: c7:e9:1f:cc:3f:ae:1f:42:2a:40:bd:bd:ba:ce:65: be:f5:ac:80:fc:26:18:32:4b:c2:fa:5c:4f:a3:20: 23:3a:c9:f5:63:19:5d:b2:f6:0b:56:0c:ef:79:7e: 61:83:f9:f0:e9:07:e0:9e:6f:e6:04:b3:8e:ab:27: 58:7d:32:13:37:50:8d:7e:f0:35:19:a8:cf:f1:87: 05:48:6e:6c:61:0d:b2:be:36:2f:75:94:b8:54:e6: 54:d2:7b:ea:e9:c5:b6:3b:56:0e:03:23:a0:15:0c: e2:bd:8b:0d:cb:7d:89:c9:28:eb:a4:a4:17:04:fb: a2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AE:4E:E2:0D:A6:FF:92:1A:72:9F:EB:F4:44:46:A5:1B:0D:5D:6F X509v3 Authority Key Identifier: keyid:54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:4a:5d:56:7d:54:d5:bd:f2:e3:c0:d9:6c:f1:5f:fe:06:68: 5a:60:2c:77:d2:25:67:4e:a7:08:ef:cf:8e:25:aa:ab:4b:9e: d9:32:d6:76:31:a3:6f:d6:ea:86:88:3a:fe:3f:36:d2:9d:bd: 7f:89:ed:5d:35:a1:3f:7a:b2:16:6f:5e:cb:77:bd:e8:dc:4a: d6:e5:e1:d9:c5:82:02:f2:a0:db:36:14:42:f6:aa:16:94:12: a1:45:20:9d:b4:7f:6b:35:4f:ae:52:97:63:a6:6c:a2:0c:82: 5b:5f:bf:bb:b2:b8:41:80:fd:bf:34:c8:3d:8d:95:ea:c7:42: e6:d8:63:30:77:2e:4b:f7:ce:50:c1:15:fd:48:8e:43:3a:c3: 24:7b:d4:cc:f8:ad:0f:3c:ee:4c:ec:2b:a6:e8:4d:a6:53:9a: 30:e9:ef:ac:bb:e6:12:b0:98:cc:9b:16:17:11:0d:60:7f:49: 75:6d:ea:34:ab:b5:d3:73:82:3a:ad:fb:f6:e5:89:44:5b:ed: f8:b4:3e:fc:09:fd:1e:03:d6:0c:53:bc:a1:84:6a:7e:9d:b9: 12:8b:2d:2c:92:f2:61:e0:88:c3:c5:17:2e:3f:67:7b:23:3e: 13:7e:fe:31:7b:0f:e6:15:e8:2f:f8:76:27:4f:b1:34:a4:70: 56:d6:b6:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjJFQjExMC8GA1UEBRMoNTRBMjREQzY4REYyNjQwRTdCQjNGRjBGMzZCNzhFRjg4 NDAwQzMwRjAeFw0yNTA4MDkwODMyMzJaFw0yNTA4MTYwODMyMzJaMBgxFjAUBgNV BAMTDTY4OTcwN2EwLTk0MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4Xff2h/g0Pj4S2AcR6dqa6CY4J0b3FODgcAtKWqTHUyMLoNv7NLyMfYsYLbNl ZosgBdAsZMSOm5VTVhs+dGvxL5AO/d4b4DLZBPt5+quT/z8Yj5mw3nlti0ibG1lY Hmbc8YKSZXUlS7NuTk1v2cT11B5avfGij3eDmAkW+PQIq/G8qN4T3MfpH8w/rh9C KkC9vbrOZb71rID8JhgyS8L6XE+jICM6yfVjGV2y9gtWDO95fmGD+fDpB+Ceb+YE s46rJ1h9MhM3UI1+8DUZqM/xhwVIbmxhDbK+Ni91lLhU5lTSe+rpxbY7Vg4DI6AV DOK9iw3LfYnJKOukpBcE+6JzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFa5O4g2m /5Iacp/r9ERGpRsNXW8wHwYDVR0jBBgwFoAUVKJNxo3yZA57s/8PNreO+IQAww8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MkVCL0RGNTQ1Q0M4NUM5 OTExRjBCNEJFMUUyMUM0RjlBRTAyL1ZLSk54bzN5WkE1N3NfOFBOcmVPLUlRQXd3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVktKTnhvM3laQTU3c184UE5yZU8tSVFBd3c4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 MkVCL0RGNTQ1Q0M4NUM5OTExRjBCNEJFMUUyMUM0RjlBRTAyL1ZLSk54bzN5WkE1 N3NfOFBOcmVPLUlRQXd3OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIVKXVZ9VNW98uPA2WzxX/4GaFpgLHfSJWdOpwjvz44lqqtLntky1nYx o2/W6oaIOv4/NtKdvX+J7V01oT96shZvXst3vejcStbl4dnFggLyoNs2FEL2qhaU EqFFIJ20f2s1T65Sl2OmbKIMgltfv7uyuEGA/b80yD2NlerHQubYYzB3Lkv3zlDB Ff1IjkM6wyR71Mz4rQ887kzsK6boTaZTmjDp76y75hKwmMybFhcRDWB/SXVt6jSr tdNzgjqt+/bliURb7fi0PvwJ/R4D1gxTvKGEan6duRKLLSyS8mHgiMPFFy4/Z3sj PhN+/jF7D+YV6C/4didPsTSkcFbWtvQ= -----END CERTIFICATE-----Generated at Sun Aug 10 21:16:33 2025 by rpki-client