$ rpki-client -vvf rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft File: VIw8AL4pDBZz22aZmFINcjeERcs.mft (raw, json) Hash identifier: OnjLMbq9CbXlSe22U9PL+X/c5ZOR9gy+lPFtTmuRy4k= Subject key identifier: D8:CD:35:27:6E:B0:97:44:43:92:DC:4D:14:58:62:7D:1A:64:62:24 Authority key identifier: 54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB Certificate issuer: /CN=A914B089/serialNumber=548C3C00BE290C1673DB669998520D72378445CB Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft Manifest number: 012A Signing time: Sat 09 Aug 2025 04:58:59 +0000 Manifest this update: Sat 09 Aug 2025 04:58:58 +0000 Manifest next update: Sat 16 Aug 2025 04:58:58 +0000 Files and hashes: 1: VIw8AL4pDBZz22aZmFINcjeERcs.crl (hash: APL8NSPuPivFwLdrTKzXwzAICFnm/DjaJSRlCvTSzhU=) 2: 55F7C16CABDE11EEA9B44639C4F9AE02.roa (hash: LRgZIPAfyXWSZXYxQKmagPCwrYM4gPhtoJaJVDq8z0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B089, serialNumber=548C3C00BE290C1673DB669998520D72378445CB Validity Not Before: Aug 9 04:58:58 2025 GMT Not After : Aug 16 04:58:58 2025 GMT Subject: CN=6896d592-39e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d8:2b:39:d3:1f:a9:f3:3b:81:1c:56:40:19: 22:f3:9f:51:89:25:da:55:d5:77:35:3c:96:ce:f6: a0:6b:4e:d1:78:c9:ae:c5:03:08:13:b9:55:f9:63: 76:4e:1b:5e:fa:55:9a:10:33:d3:64:8d:24:d2:72: f6:8b:7e:e4:0a:85:c5:2c:3f:d0:1f:b3:4c:7c:0b: 07:5d:09:03:23:49:b7:80:05:1b:61:4f:f0:29:27: 67:0d:d6:bf:f6:bf:97:81:39:10:79:a7:46:1f:fc: 58:a8:c6:34:a8:be:27:0e:79:56:52:2b:ba:44:cb: e2:e0:62:7e:19:2d:36:a8:48:87:75:9f:08:b7:f7: ec:ab:53:09:90:62:f2:c9:30:47:65:ae:5d:e7:0a: 6b:0a:b6:d6:dd:88:6b:3b:51:7d:db:2e:e9:90:2d: 08:86:65:61:2f:76:25:d1:f5:2b:44:63:cd:99:51: 9c:1a:12:c7:a8:bb:72:d4:c1:7f:d9:b4:de:03:d1: 86:7e:f6:ca:9d:7e:f3:58:cd:d6:23:5a:a0:7d:9f: 97:19:ee:ba:eb:3d:93:2d:ab:28:b1:13:b0:bc:99: 11:b2:b4:e0:eb:a1:c0:66:d7:71:ff:43:cb:89:ab: c5:29:68:aa:a9:df:ef:27:07:3d:82:fc:27:86:08: 9d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CD:35:27:6E:B0:97:44:43:92:DC:4D:14:58:62:7D:1A:64:62:24 X509v3 Authority Key Identifier: keyid:54:8C:3C:00:BE:29:0C:16:73:DB:66:99:98:52:0D:72:37:84:45:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIw8AL4pDBZz22aZmFINcjeERcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B089/0F896AFAABDE11EE9EF0DF38C4F9AE02/VIw8AL4pDBZz22aZmFINcjeERcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:e0:29:5d:1c:f7:d0:93:9f:e9:6e:24:76:f7:4f:38:aa:63: a4:7b:30:d4:61:ca:15:83:09:fa:36:42:ff:0a:99:df:1b:23: a1:65:d0:aa:b5:5e:75:6c:0c:4c:60:50:73:fd:6b:5f:43:aa: 75:0d:2b:42:55:4f:76:84:d4:88:27:ae:cb:19:82:92:64:4c: db:61:22:36:f1:24:0d:a4:a3:f7:ac:6b:a3:6f:81:ba:9d:3f: ee:a4:9c:25:6c:16:fa:98:33:52:af:7d:7a:d5:c4:2a:4b:1b: 18:87:a2:df:3f:4e:1b:73:7b:ce:79:a9:1a:de:77:0c:ba:32: 3e:47:2c:37:af:f5:9f:24:ac:1b:9a:37:5a:82:7c:5d:38:c8: d4:7f:50:b5:a0:12:b9:92:c7:5d:77:30:d7:fd:ed:c5:5a:45: 8d:14:f8:cf:48:e2:2b:05:8c:ae:e9:09:1e:8e:b2:3a:4c:a4: 27:23:ca:30:3b:25:85:03:24:f0:bd:45:43:c0:95:5c:02:9e: 3b:4f:89:7e:63:24:c1:33:4f:9e:2b:1c:ce:e0:12:68:c1:8a: 99:52:56:47:de:c8:68:6e:47:e4:76:5a:00:71:d3:49:49:90: ba:2d:1b:41:55:15:15:8f:71:65:37:55:50:80:12:97:ff:4b: 00:27:ef:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwODkxMTAvBgNVBAUTKDU0OEMzQzAwQkUyOTBDMTY3M0RCNjY5OTk4NTIwRDcy Mzc4NDQ1Q0IwHhcNMjUwODA5MDQ1ODU4WhcNMjUwODE2MDQ1ODU4WjAYMRYwFAYD VQQDEw02ODk2ZDU5Mi0zOWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNgrOdMfqfM7gRxWQBki859RiSXaVdV3NTyWzvaga07ReMmuxQMIE7lV+WN2 Thte+lWaEDPTZI0k0nL2i37kCoXFLD/QH7NMfAsHXQkDI0m3gAUbYU/wKSdnDda/ 9r+XgTkQeadGH/xYqMY0qL4nDnlWUiu6RMvi4GJ+GS02qEiHdZ8It/fsq1MJkGLy yTBHZa5d5wprCrbW3YhrO1F92y7pkC0IhmVhL3Yl0fUrRGPNmVGcGhLHqLty1MF/ 2bTeA9GGfvbKnX7zWM3WI1qgfZ+XGe666z2TLasosROwvJkRsrTg66HAZtdx/0PL iavFKWiqqd/vJwc9gvwnhgid4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjNNSdu sJdEQ5LcTRRYYn0aZGIkMB8GA1UdIwQYMBaAFFSMPAC+KQwWc9tmmZhSDXI3hEXL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjA4OS8wRjg5NkFGQUFC REUxMUVFOUVGMERGMzhDNEY5QUUwMi9WSXc4QUw0cERCWnoyMmFabUZJTmNqZUVS Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJdzhBTDRwREJaejIyYVptRklOY2plRVJjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjA4OS8wRjg5NkFGQUFCREUxMUVFOUVGMERGMzhDNEY5QUUwMi9WSXc4QUw0cERC WnoyMmFabUZJTmNqZUVSY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDf4CldHPfQk5/pbiR29084qmOkezDUYcoVgwn6NkL/CpnfGyOhZdCq tV51bAxMYFBz/WtfQ6p1DStCVU92hNSIJ67LGYKSZEzbYSI28SQNpKP3rGujb4G6 nT/upJwlbBb6mDNSr3161cQqSxsYh6LfP04bc3vOeaka3ncMujI+Ryw3r/WfJKwb mjdagnxdOMjUf1C1oBK5ksdddzDX/e3FWkWNFPjPSOIrBYyu6QkejrI6TKQnI8ow OyWFAyTwvUVDwJVcAp47T4l+YyTBM0+eKxzO4BJowYqZUlZH3shobkfkdloAcdNJ SZC6LRtBVRUVj3FlN1VQgBKX/0sAJ++d -----END CERTIFICATE-----Generated at Sat Aug 9 15:11:52 2025 by rpki-client