$ rpki-client -vvf rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft File: vIlHKy_1NJ5Maoqwmc745o3XuZU.mft (raw, json) Hash identifier: g1BmOLjLofLDpjvq6nCumYMnawx7Ns77sDI6HOlOKYc= Subject key identifier: 9C:EB:50:02:61:1F:01:ED:CB:46:1C:72:34:FF:97:D5:27:0E:80:88 Authority key identifier: BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 Certificate issuer: /CN=A91495CF/serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Certificate serial: 0809 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft Manifest number: 0804 Signing time: Fri 08 Aug 2025 21:15:56 +0000 Manifest this update: Fri 08 Aug 2025 21:15:56 +0000 Manifest next update: Fri 15 Aug 2025 21:15:56 +0000 Files and hashes: 1: vIlHKy_1NJ5Maoqwmc745o3XuZU.crl (hash: 0HIf2LbECNRybHcETHr45jmklxQMsN89VZ204vxs+Kw=) 2: 27DCF5D6EBAC11EAA7A0FB1FC4F9AE02.roa (hash: 4fzem4ahEMq6xHsoRwyaVn0YkdRGg0st3UIcj7ppJ2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2057 (0x809) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91495CF, serialNumber=BC89472B2FF5349E4C6A8AB099CEF8E68DD7B995 Validity Not Before: Aug 8 21:15:56 2025 GMT Not After : Aug 15 21:15:56 2025 GMT Subject: CN=6896690c-5280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:16:6d:0c:e9:4c:ea:c0:80:b0:d2:d8:02:87: 8c:9e:52:c3:83:ed:3a:2f:bf:ad:1d:c3:6d:3f:4a: 00:a3:32:c5:01:8a:4c:8e:93:d7:67:30:88:64:fc: 65:de:fe:2c:17:19:60:80:71:0b:eb:b5:32:1d:2b: 1e:2c:f6:ef:b0:bc:dc:de:93:01:48:d5:4a:15:81: 24:86:71:cf:f4:d3:9a:09:90:a6:7b:db:bc:12:eb: cb:c3:9a:4f:9e:8a:e0:c9:47:aa:a7:c1:ab:ac:26: 99:ce:78:f1:1e:cd:46:de:2f:ee:d6:be:4a:ba:40: 13:20:b9:4c:92:13:ec:72:6f:45:85:8c:06:eb:d2: 3c:4e:e0:e6:6e:70:a1:f8:67:7b:94:d8:73:e6:6a: fb:a1:2d:de:95:77:98:ba:3e:96:91:7b:0f:78:fb: da:ae:82:7a:60:8a:0f:d9:f5:95:ca:d9:ec:4f:e0: 44:1b:4c:3b:b1:df:da:e4:bd:50:c1:ef:77:fc:ec: f0:ad:aa:2e:89:e8:ec:d9:a0:c2:d2:70:e2:22:b8: 09:6e:7e:32:cb:b2:3e:7f:74:d3:ba:4d:c6:37:41: 86:8c:a0:16:3b:39:e9:41:7f:9f:af:e0:6f:88:96: 95:ee:a7:66:b0:ba:02:ce:66:e5:01:74:9f:1a:56: d8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EB:50:02:61:1F:01:ED:CB:46:1C:72:34:FF:97:D5:27:0E:80:88 X509v3 Authority Key Identifier: keyid:BC:89:47:2B:2F:F5:34:9E:4C:6A:8A:B0:99:CE:F8:E6:8D:D7:B9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIlHKy_1NJ5Maoqwmc745o3XuZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91495CF/2A51069CEBAA11EAABA4D11CC4F9AE02/vIlHKy_1NJ5Maoqwmc745o3XuZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:47:1e:ef:3a:51:2f:a1:fd:75:5f:dc:12:ae:4f:5e:d4:f3: 8b:49:52:b2:39:46:3d:1d:75:c5:45:96:7d:41:d5:7b:33:68: 24:7f:24:0a:d3:b0:8d:21:0e:4b:bc:ee:09:f5:ce:0d:75:40: b4:f7:d5:bf:30:9c:7d:b5:81:f8:72:5f:c0:04:a6:6b:83:0e: 16:a3:8c:b0:33:66:1e:7d:24:e1:d8:2b:f9:68:4a:75:bc:6f: db:f8:d3:9d:96:6a:22:4c:81:74:ff:c1:7a:51:9c:cc:07:99: 4d:02:f7:c3:35:80:9b:f4:4e:12:de:06:6c:1a:ec:63:21:40: 51:c3:51:72:c6:98:c8:56:1d:12:19:8e:15:eb:67:53:cd:90: 5c:dd:fc:89:58:9d:38:6c:7e:69:fc:de:4a:cf:f3:9e:15:6b: 16:2b:6d:1a:89:6f:9a:e8:24:3c:da:cc:ce:8c:bc:5f:2d:99: dd:47:d5:06:b4:3b:de:c8:b9:27:10:cc:fb:d7:a7:0f:1f:10: 62:e1:a9:c1:9e:a7:c2:41:91:68:3c:bf:07:d9:d6:b1:7e:fe: 2e:ed:86:40:89:d3:a0:ae:93:72:e3:27:16:ca:c8:31:78:5f: ad:c3:30:9d:6b:6b:09:62:cf:a5:44:71:ae:ad:0e:41:31:a5: ac:a2:32:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk1Q0YxMTAvBgNVBAUTKEJDODk0NzJCMkZGNTM0OUU0QzZBOEFCMDk5Q0VGOEU2 OEREN0I5OTUwHhcNMjUwODA4MjExNTU2WhcNMjUwODE1MjExNTU2WjAYMRYwFAYD VQQDEw02ODk2NjkwYy01MjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xZtDOlM6sCAsNLYAoeMnlLDg+06L7+tHcNtP0oAozLFAYpMjpPXZzCIZPxl 3v4sFxlggHEL67UyHSseLPbvsLzc3pMBSNVKFYEkhnHP9NOaCZCme9u8EuvLw5pP norgyUeqp8GrrCaZznjxHs1G3i/u1r5KukATILlMkhPscm9FhYwG69I8TuDmbnCh +Gd7lNhz5mr7oS3elXeYuj6WkXsPePvaroJ6YIoP2fWVytnsT+BEG0w7sd/a5L1Q we93/Ozwraouiejs2aDC0nDiIrgJbn4yy7I+f3TTuk3GN0GGjKAWOznpQX+fr+Bv iJaV7qdmsLoCzmblAXSfGlbYJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzrUAJh HwHty0YccjT/l9UnDoCIMB8GA1UdIwQYMBaAFLyJRysv9TSeTGqKsJnO+OaN17mV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTVDRi8yQTUxMDY5Q0VC QUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5KNU1hb3F3bWM3NDVvM1h1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJbEhLeV8xTko1TWFvcXdtYzc0NW8zWHVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTVDRi8yQTUxMDY5Q0VCQUExMUVBQUJBNEQxMUNDNEY5QUUwMi92SWxIS3lfMU5K NU1hb3F3bWM3NDVvM1h1WlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/Rx7vOlEvof11X9wSrk9e1POLSVKyOUY9HXXFRZZ9QdV7M2gkfyQK 07CNIQ5LvO4J9c4NdUC099W/MJx9tYH4cl/ABKZrgw4Wo4ywM2YefSTh2Cv5aEp1 vG/b+NOdlmoiTIF0/8F6UZzMB5lNAvfDNYCb9E4S3gZsGuxjIUBRw1FyxpjIVh0S GY4V62dTzZBc3fyJWJ04bH5p/N5Kz/OeFWsWK20aiW+a6CQ82szOjLxfLZndR9UG tDveyLknEMz716cPHxBi4anBnqfCQZFoPL8H2daxfv4u7YZAidOgrpNy4ycWysgx eF+twzCda2sJYs+lRHGurQ5BMaWsojKD -----END CERTIFICATE-----Generated at Sat Aug 9 10:46:25 2025 by rpki-client