$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft File: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft (raw, json) Hash identifier: Wl3YGO4cacjJWUeCvnGGSwvGhZKz3A+8t6p1c+cj8J0= Subject key identifier: E3:DB:5F:FD:E5:E7:71:2E:57:FE:37:E9:7A:C6:0D:A1:89:E1:3C:B2 Authority key identifier: 56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29 Certificate issuer: /CN=A9136BD7/serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829 Certificate serial: 061F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft Manifest number: 061A Signing time: Mon 04 Aug 2025 23:12:27 +0000 Manifest this update: Mon 04 Aug 2025 23:12:27 +0000 Manifest next update: Mon 11 Aug 2025 23:12:27 +0000 Files and hashes: 1: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl (hash: SI1dCXMVPqUV6XZkPMGNmqvnJLgIsE9UYrHXa0jFv3M=) 2: E22BD636AC5011EBA37CCA28C4F9AE02.roa (hash: fdFSt8Mu6WuYnLA2fbE3V7b+qZmpKdHiBdsuXljNq4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 23:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1567 (0x61f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BD7, serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829 Validity Not Before: Aug 4 23:12:27 2025 GMT Not After : Aug 11 23:12:27 2025 GMT Subject: CN=68913e5b-9530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7b:eb:8b:28:b3:e6:88:20:0e:05:a4:61:2f: 4f:a5:c7:cb:2b:ae:2f:06:cf:b1:a0:da:c3:31:8e: 31:8b:ba:05:0b:39:3f:01:4f:ef:01:48:5b:3f:ad: a0:f4:62:3e:1a:ac:e4:a2:3d:02:35:34:21:82:30: 25:81:f1:8b:f1:7e:57:86:0d:70:80:d9:91:f3:6c: a2:4e:b0:3c:7b:05:88:97:eb:62:e6:ad:56:24:5c: 4e:0f:30:5d:0d:33:e9:92:a6:79:50:86:36:54:87: 4f:dd:ee:55:20:97:7b:45:14:fa:05:e6:74:17:2d: 57:60:87:ff:f9:b9:bf:ff:3c:b2:bb:2c:43:3d:91: 88:a7:a6:aa:1b:b6:81:6b:6e:a3:54:99:f9:1b:49: c1:ed:a1:38:a5:29:c9:5f:65:1d:8c:63:99:9c:3b: b5:90:91:06:68:2d:3e:cf:5a:c0:8b:1b:89:76:82: f8:b8:89:72:18:03:47:0c:30:98:1c:92:e1:84:c6: e5:0a:1f:61:c2:58:7d:af:22:b0:f4:d0:55:62:46: 33:eb:f1:5b:49:31:52:6d:55:f6:0b:36:d9:e7:ae: 07:97:57:1f:9f:ba:e0:4d:71:e7:01:52:9d:85:70: 75:79:f9:01:9d:cd:9e:b7:e3:3b:23:6b:de:8d:83: 2a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DB:5F:FD:E5:E7:71:2E:57:FE:37:E9:7A:C6:0D:A1:89:E1:3C:B2 X509v3 Authority Key Identifier: keyid:56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:f3:e7:d7:51:9d:82:23:47:d9:bb:51:4d:19:84:58:25:1a: 2a:51:25:eb:08:5b:e7:85:00:a8:10:9c:69:52:47:a2:3f:14: cb:33:2d:02:7e:1b:7c:ca:8b:02:26:3a:42:d5:0c:40:1c:67: 6f:26:79:50:63:dc:72:28:b3:26:0e:7f:d5:a7:6b:2a:46:77: 7c:b5:1b:dd:52:a4:82:1e:85:a9:0b:b6:e6:6c:4c:ba:f6:74: d6:1e:b4:3a:3e:6c:48:84:d5:98:ee:70:63:7f:33:de:45:80: 4d:68:00:bd:6e:1d:0c:97:91:b5:a1:36:c1:6c:75:76:9d:93: 44:77:43:af:54:dc:5d:b6:2f:3b:9b:5e:9c:69:c3:87:af:7f: bf:63:64:6f:26:bf:4e:01:63:7f:ce:e2:18:03:d3:a2:61:35: d8:ac:a7:c1:27:37:2b:b7:36:86:7d:38:c4:b1:6b:fb:1b:8b: 9f:98:03:f1:a7:9e:63:4a:51:3d:7f:23:58:ca:e7:a5:72:66: 86:cd:80:5c:75:cb:4b:86:f7:4b:bc:0c:d9:9e:bf:eb:7d:b8: 0d:71:0d:98:03:59:6f:c1:f1:9f:01:d5:57:a5:11:33:0d:e5: 8a:c3:be:69:fa:43:b3:86:bd:5d:44:c9:00:e7:0c:b1:a2:1e: 99:a4:f4:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRDcxMTAvBgNVBAUTKDU2QTAzMTY3RkFFMTJCMUJBMTRCQjg0NzRENDQyQjY3 NzBCQjk4MjkwHhcNMjUwODA0MjMxMjI3WhcNMjUwODExMjMxMjI3WjAYMRYwFAYD VQQDEw02ODkxM2U1Yi05NTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3vriyiz5oggDgWkYS9PpcfLK64vBs+xoNrDMY4xi7oFCzk/AU/vAUhbP62g 9GI+Gqzkoj0CNTQhgjAlgfGL8X5Xhg1wgNmR82yiTrA8ewWIl+ti5q1WJFxODzBd DTPpkqZ5UIY2VIdP3e5VIJd7RRT6BeZ0Fy1XYIf/+bm//zyyuyxDPZGIp6aqG7aB a26jVJn5G0nB7aE4pSnJX2UdjGOZnDu1kJEGaC0+z1rAixuJdoL4uIlyGANHDDCY HJLhhMblCh9hwlh9ryKw9NBVYkYz6/FbSTFSbVX2CzbZ564Hl1cfn7rgTXHnAVKd hXB1efkBnc2et+M7I2vejYMqKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPbX/3l 53EuV/436XrGDaGJ4TyyMB8GA1UdIwQYMBaAFFagMWf64SsboUu4R01EK2dwu5gp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJENy9BNjUxQjQ3NEFD NEYxMUVCODNEMThFMjhDNEY5QUUwMi9WcUF4Wl9yaEt4dWhTN2hIVFVRclozQzdt Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZxQXhaX3JoS3h1aFM3aEhUVVFyWjNDN21Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkJENy9BNjUxQjQ3NEFDNEYxMUVCODNEMThFMjhDNEY5QUUwMi9WcUF4Wl9yaEt4 dWhTN2hIVFVRclozQzdtQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU8+fXUZ2CI0fZu1FNGYRYJRoqUSXrCFvnhQCoEJxpUkeiPxTLMy0C fht8yosCJjpC1QxAHGdvJnlQY9xyKLMmDn/Vp2sqRnd8tRvdUqSCHoWpC7bmbEy6 9nTWHrQ6PmxIhNWY7nBjfzPeRYBNaAC9bh0Ml5G1oTbBbHV2nZNEd0OvVNxdti87 m16cacOHr3+/Y2RvJr9OAWN/zuIYA9OiYTXYrKfBJzcrtzaGfTjEsWv7G4ufmAPx p55jSlE9fyNYyuelcmaGzYBcdctLhvdLvAzZnr/rfbgNcQ2YA1lvwfGfAdVXpREz DeWKw75p+kOzhr1dRMkA5wyxoh6ZpPQ7 -----END CERTIFICATE-----Generated at Wed Aug 6 05:26:27 2025 by rpki-client