$ rpki-client -vvf rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft File: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft (raw, json) Hash identifier: NCvLhd9DcmO7/bP44lC7+BBBy/Rc1i9+yhh9iVKf/UU= Subject key identifier: DB:26:86:5C:F1:F2:EF:3A:A2:51:97:37:09:69:97:B5:BC:FA:81:62 Authority key identifier: 56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA Certificate issuer: /CN=A914F22A/serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA Certificate serial: 1398 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft Manifest number: 1390 Signing time: Mon 04 Aug 2025 17:09:07 +0000 Manifest this update: Mon 04 Aug 2025 17:09:07 +0000 Manifest next update: Mon 11 Aug 2025 17:09:07 +0000 Files and hashes: 1: Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl (hash: hsgt7Bb6YNXyIfWUdMhlM73C9xSXSFFlMOcq7wNZT1U=) 2: 8B2E3BA270BD11ED970C535FC4F9AE02.roa (hash: 5VH2eBCf4hkjUtJHqHQPv/5yN4SkQaCzRWcunhO07pE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 17:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5016 (0x1398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F22A, serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA Validity Not Before: Aug 4 17:09:07 2025 GMT Not After : Aug 11 17:09:07 2025 GMT Subject: CN=6890e933-3ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6b:3c:c3:c9:dd:9d:0f:f1:eb:15:85:f7:e3: fb:5f:16:7b:df:68:ae:2c:44:52:94:8e:8f:ae:88: 65:d2:99:a1:96:06:52:50:0d:cd:ee:b9:ec:f4:98: f7:a5:75:ba:2a:68:1a:dc:d4:62:8a:4b:fb:7a:f6: 83:9a:90:d6:b6:93:6e:bc:42:21:55:8c:7d:80:a2: 81:ac:85:bb:9d:79:68:2d:47:f1:d6:c6:87:84:31: 18:9e:59:85:be:58:96:80:a7:ff:a1:2b:11:bc:5c: 04:70:26:bc:93:da:be:fc:7b:6f:76:13:2c:23:87: 2c:7d:59:15:c6:fd:03:8f:9e:f0:11:73:07:80:fa: 8c:00:f8:ed:8b:47:cd:06:5d:25:5a:60:c6:10:73: 4c:80:99:e7:2e:3a:b6:a2:5c:3b:9b:4d:d3:9f:37: 1a:6a:64:58:29:a6:a0:23:78:e1:19:f8:98:e5:e9: c5:56:26:3b:4d:c3:8c:7a:ac:51:1d:7d:bd:f6:95: cf:c7:ad:fd:c0:4a:bb:ae:70:c6:bc:20:88:7c:b4: ad:02:7e:3d:c8:34:99:9a:69:2d:d6:9c:c9:d8:db: 7a:28:9f:f7:ae:76:ff:a0:5c:1c:8e:2e:0a:53:0e: 91:9d:9f:b8:dd:d7:30:6f:26:70:6f:fb:f7:63:b7: fe:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:26:86:5C:F1:F2:EF:3A:A2:51:97:37:09:69:97:B5:BC:FA:81:62 X509v3 Authority Key Identifier: keyid:56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:f0:05:77:77:4d:42:1c:cc:e6:a2:05:7d:2a:2b:53:d7:ca: e3:44:b1:fd:2a:2b:3b:0d:61:a4:29:8e:63:ec:8b:e2:73:c3: 27:18:f8:db:42:6f:ee:56:70:a8:f7:51:53:55:a1:3c:9a:30: 27:42:68:ff:8a:fe:12:9e:ef:d0:56:b9:49:b5:95:1e:03:7b: ee:3d:9d:cc:cc:c3:3c:06:96:54:e3:78:1d:8e:5d:3f:40:e6: d9:95:c3:6d:41:dc:4f:8f:f2:f8:fe:04:6a:cd:b2:d9:77:f7: 52:d0:ed:4b:3e:e6:63:61:bf:a1:ac:68:dd:87:5d:3c:03:35: ef:da:02:6b:71:3d:a0:f4:8b:34:27:61:f3:7a:fb:cd:0a:a1: a4:3b:95:24:b0:12:5a:4a:16:75:85:9e:fa:80:fe:0c:7a:97: ec:57:59:17:f8:6c:60:5b:4e:2a:70:61:e5:00:0c:b3:5b:9b: 63:d4:5a:5d:f0:1b:48:79:89:bd:b7:b7:6d:0a:1c:ed:16:01: 4b:65:8e:58:9e:cb:1e:81:10:67:45:77:c9:94:e7:d0:9f:d2: a6:fb:0b:bb:03:d6:9c:c3:56:ba:9b:9d:c7:5c:d3:0b:0f:ff: 92:9e:04:f3:8e:28:c6:ff:a1:57:a0:7d:2d:ad:ee:e0:68:3a: 57:a2:1b:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYyMkExMTAvBgNVBAUTKDU2QUYxQ0QwQjRFMDdEMDAwQzY0QUIwMTZDMzNGNzg2 QTBERDkwRkEwHhcNMjUwODA0MTcwOTA3WhcNMjUwODExMTcwOTA3WjAYMRYwFAYD VQQDEw02ODkwZTkzMy0zZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWs8w8ndnQ/x6xWF9+P7XxZ732iuLERSlI6Prohl0pmhlgZSUA3N7rns9Jj3 pXW6Kmga3NRiikv7evaDmpDWtpNuvEIhVYx9gKKBrIW7nXloLUfx1saHhDEYnlmF vliWgKf/oSsRvFwEcCa8k9q+/HtvdhMsI4csfVkVxv0Dj57wEXMHgPqMAPjti0fN Bl0lWmDGEHNMgJnnLjq2olw7m03TnzcaamRYKaagI3jhGfiY5enFViY7TcOMeqxR HX299pXPx639wEq7rnDGvCCIfLStAn49yDSZmmkt1pzJ2Nt6KJ/3rnb/oFwcji4K Uw6RnZ+43dcwbyZwb/v3Y7f+pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsmhlzx 8u86olGXNwlpl7W8+oFiMB8GA1UdIwQYMBaAFFavHNC04H0ADGSrAWwz94ag3ZD6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjIyQS83RUVDMUU0QzlD RDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZRQU1aS3NCYkRQM2hxRGRr UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZxOGMwTFRnZlFBTVpLc0JiRFAzaHFEZGtQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjIyQS83RUVDMUU0QzlDRDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZR QU1aS3NCYkRQM2hxRGRrUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDH8AV3d01CHMzmogV9KitT18rjRLH9Kis7DWGkKY5j7Ivic8MnGPjb Qm/uVnCo91FTVaE8mjAnQmj/iv4Snu/QVrlJtZUeA3vuPZ3MzMM8BpZU43gdjl0/ QObZlcNtQdxPj/L4/gRqzbLZd/dS0O1LPuZjYb+hrGjdh108AzXv2gJrcT2g9Is0 J2HzevvNCqGkO5UksBJaShZ1hZ76gP4MepfsV1kX+GxgW04qcGHlAAyzW5tj1Fpd 8BtIeYm9t7dtChztFgFLZY5YnssegRBnRXfJlOfQn9Km+wu7A9acw1a6m53HXNML D/+SngTzjijG/6FXoH0tre7gaDpXohtR -----END CERTIFICATE-----Generated at Wed Aug 6 04:13:18 2025 by rpki-client