$ rpki-client -vvf rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft File: vIYHvM59W9TtuRjN4bc0W4HmrR0.mft (raw, json) Hash identifier: HCxkQwF2KE6x7RI14ShLsiLQEeC8izFApcWYac9W3g4= Subject key identifier: 94:CD:6C:F1:60:91:C5:69:D8:BE:7A:18:58:4B:9C:CF:CC:39:E3:6B Authority key identifier: BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D Certificate issuer: /CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D Certificate serial: 0C8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft Manifest number: 0C83 Signing time: Fri 08 Aug 2025 18:28:18 +0000 Manifest this update: Fri 08 Aug 2025 18:28:17 +0000 Manifest next update: Fri 15 Aug 2025 18:28:17 +0000 Files and hashes: 1: vIYHvM59W9TtuRjN4bc0W4HmrR0.crl (hash: W/N2qAnNDDyZWeyq3kzV23Th1117MIoWCtDRmaTttdE=) 2: 87B023F2FF9E11E998D7BF77C4F9AE02.roa (hash: wgxBqTOXaVBqDTXi3QmSfIMhu4UE3inSSK8gOm0zVzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3210 (0xc8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B489, serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D Validity Not Before: Aug 8 18:28:17 2025 GMT Not After : Aug 15 18:28:17 2025 GMT Subject: CN=689641c2-98a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d2:5c:76:0b:96:1e:52:16:be:b9:41:3b:2d: 37:42:7b:b6:ea:62:1d:e2:58:48:f1:a8:c6:f8:8a: cf:5c:ac:25:d2:12:97:61:e3:92:2a:f8:62:3e:e5: 2e:3a:c2:4c:1b:37:03:d5:cb:7d:d4:98:73:88:1e: c6:49:c0:5b:14:a4:42:8b:63:31:04:8f:59:a9:d2: f1:51:c6:d2:cc:b4:c0:2d:a1:39:09:87:82:8a:73: e0:a5:8d:e9:8d:92:ba:25:0d:75:77:e1:5a:89:4c: 69:be:44:69:14:ff:b2:4a:0b:93:6e:1b:2b:83:cf: 41:4b:9a:62:da:bc:83:4e:96:d7:d1:12:5d:92:0c: 34:72:41:52:b0:3d:8b:65:9b:b7:e8:17:f0:a8:54: 15:2f:48:11:ec:c6:8c:68:51:0b:a5:b1:3d:14:16: 7e:54:dd:03:9f:95:e1:74:39:09:c2:69:51:29:4b: 75:03:72:62:07:62:20:86:3d:d2:97:b8:66:19:a7: 54:a8:be:1d:be:e5:27:c2:b0:d7:f9:b5:e7:89:eb: 95:e6:d7:a9:05:65:3d:a8:f4:cd:ed:35:56:c9:98: 1d:74:56:35:dc:d0:0d:73:fa:3f:3b:49:57:e7:89: 38:d0:18:71:3e:e8:71:a2:93:a1:33:f2:b7:c0:29: 75:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:CD:6C:F1:60:91:C5:69:D8:BE:7A:18:58:4B:9C:CF:CC:39:E3:6B X509v3 Authority Key Identifier: keyid:BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:40:a6:6a:f0:b4:56:27:ab:6e:5f:f9:b5:42:1e:49:00:90: 31:07:93:98:94:dc:94:82:6d:02:d4:b9:44:10:69:4b:ed:d2: 7b:40:b5:36:b1:8b:e0:21:4e:d8:27:f4:80:8a:a4:0a:35:21: 06:0f:6d:29:16:80:ad:07:ef:9c:30:1d:1d:2b:ff:60:38:dd: c8:ad:7d:13:8e:f6:16:f2:a9:2b:5e:cb:d4:45:9a:6f:94:16: 07:76:59:14:f2:b9:36:18:90:cc:52:bc:b8:62:f3:1b:95:34: 67:a0:2c:c3:f9:a9:ae:ff:0f:8d:38:5b:d4:62:1c:f0:eb:9d: 05:a3:9a:fe:82:6c:d4:5b:84:35:1d:e0:87:e0:e0:d6:a7:e1: 8a:57:c2:3e:e7:fe:e0:f8:5c:a1:2a:c3:fb:16:38:d0:c7:16: e7:62:5f:64:5d:f4:57:d3:94:1b:8f:00:2b:dc:41:3f:ce:e4: ea:a4:ec:fa:e4:94:56:77:75:89:54:94:04:ba:38:13:51:d1: dd:32:79:3c:a6:1c:f3:9a:78:d7:90:a7:cb:2e:2b:9d:11:59: 2a:17:0a:b3:4b:74:be:d4:ff:5a:e6:e3:3a:25:55:b8:66:84: 10:88:80:15:08:98:32:52:b7:0e:60:f4:21:14:ba:51:2e:66: a9:58:a3:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0ODkxMTAvBgNVBAUTKEJDODYwN0JDQ0U3RDVCRDRFREI5MThDREUxQjczNDVC ODFFNkFEMUQwHhcNMjUwODA4MTgyODE3WhcNMjUwODE1MTgyODE3WjAYMRYwFAYD VQQDEw02ODk2NDFjMi05OGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNJcdguWHlIWvrlBOy03Qnu26mId4lhI8ajG+IrPXKwl0hKXYeOSKvhiPuUu OsJMGzcD1ct91JhziB7GScBbFKRCi2MxBI9ZqdLxUcbSzLTALaE5CYeCinPgpY3p jZK6JQ11d+FaiUxpvkRpFP+ySguTbhsrg89BS5pi2ryDTpbX0RJdkgw0ckFSsD2L ZZu36BfwqFQVL0gR7MaMaFELpbE9FBZ+VN0Dn5XhdDkJwmlRKUt1A3JiB2Ighj3S l7hmGadUqL4dvuUnwrDX+bXnieuV5tepBWU9qPTN7TVWyZgddFY13NANc/o/O0lX 54k40BhxPuhxopOhM/K3wCl1UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJTNbPFg kcVp2L56GFhLnM/MOeNrMB8GA1UdIwQYMBaAFLyGB7zOfVvU7bkYzeG3NFuB5q0d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjQ4OS8wQjM4NzlDQUZG OUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5VHR1UmpONGJjMFc0SG1y UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJWUh2TTU5VzlUdHVSak40YmMwVzRIbXJSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjQ4OS8wQjM4NzlDQUZGOUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5 VHR1UmpONGJjMFc0SG1yUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhQKZq8LRWJ6tuX/m1Qh5JAJAxB5OYlNyUgm0C1LlEEGlL7dJ7QLU2 sYvgIU7YJ/SAiqQKNSEGD20pFoCtB++cMB0dK/9gON3IrX0TjvYW8qkrXsvURZpv lBYHdlkU8rk2GJDMUry4YvMblTRnoCzD+amu/w+NOFvUYhzw650Fo5r+gmzUW4Q1 HeCH4ODWp+GKV8I+5/7g+FyhKsP7FjjQxxbnYl9kXfRX05QbjwAr3EE/zuTqpOz6 5JRWd3WJVJQEujgTUdHdMnk8phzzmnjXkKfLLiudEVkqFwqzS3S+1P9a5uM6JVW4 ZoQQiIAVCJgyUrcOYPQhFLpRLmapWKNK -----END CERTIFICATE-----Generated at Sun Aug 10 18:18:43 2025 by rpki-client