$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft File: VFjEVinBBKqnpYcoaG-NHihyqSo.mft (raw, json) Hash identifier: i32/q3RlXo2qzYRGK922rIrtbMO5N5mGPlrggQaEtPQ= Subject key identifier: 3E:FC:5E:F5:28:E7:E1:D3:F7:70:A4:E1:EF:5B:C9:C8:71:A1:A1:B2 Authority key identifier: 54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A Certificate issuer: /CN=A9153C27/serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Certificate serial: 0C8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft Manifest number: 0C82 Signing time: Tue 12 Aug 2025 18:26:38 +0000 Manifest this update: Tue 12 Aug 2025 18:26:38 +0000 Manifest next update: Tue 19 Aug 2025 18:26:38 +0000 Files and hashes: 1: VFjEVinBBKqnpYcoaG-NHihyqSo.crl (hash: 68CLsOkv4Z95cKKWq90l4oHeEd7XASn4U310cz+cAno=) 2: DB020E9C010D11EAA82AD83CC4F9AE02.roa (hash: +/HgExCatPcRmJalycUeFMmwknrCCg9dQk/HjuFZjUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 18:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3210 (0xc8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C27, serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Validity Not Before: Aug 12 18:26:38 2025 GMT Not After : Aug 19 18:26:38 2025 GMT Subject: CN=689b875e-7a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:af:25:d2:76:ac:a2:d9:57:c5:8c:f9:d5:d6: 8e:a8:10:21:f9:cc:1d:74:35:72:f4:8f:e3:82:67: 40:65:9a:10:45:30:98:5e:03:0e:48:ca:02:2a:9b: 1f:90:cb:92:6e:33:61:d6:7e:4e:ec:f9:17:21:1f: 7d:f5:ea:e7:73:d8:88:13:ea:62:72:9c:6e:7d:fc: 58:7a:60:1f:95:f5:4e:18:28:b1:18:1f:93:61:54: f4:28:b5:4f:8e:a1:f3:2b:af:9f:04:69:e5:3d:65: a5:99:a0:b8:d8:a2:d1:8c:7c:96:e4:90:4a:f6:35: 02:e1:49:67:de:02:ab:5f:67:fa:02:cf:21:3d:e4: be:d5:5e:7d:0b:96:dc:f9:bd:1b:a3:74:cb:64:2a: 8f:03:c0:62:a6:59:03:1d:67:aa:d8:0a:8d:2d:5f: 9e:77:bb:70:b8:89:d9:1a:1a:0f:3a:b9:74:54:65: 69:fa:b6:68:d2:c8:f2:d5:93:86:6b:ab:71:46:25: 5a:d2:ac:a4:80:05:85:4f:bc:74:88:d0:f8:15:4c: 17:cd:4d:c5:a4:74:a4:54:2e:13:3a:71:15:f9:82: 67:8c:94:e2:a3:ff:86:e3:4a:25:8e:e1:d6:19:c0: 20:80:87:90:1b:a3:c3:d7:99:be:8b:4f:59:02:04: 65:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FC:5E:F5:28:E7:E1:D3:F7:70:A4:E1:EF:5B:C9:C8:71:A1:A1:B2 X509v3 Authority Key Identifier: keyid:54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:7b:30:36:c4:74:e1:d8:33:9a:b8:9e:06:12:cc:8e:63:ea: 4a:23:59:00:f2:e8:d2:f3:69:8b:ed:7d:21:08:7e:b5:d8:1d: 87:27:35:f9:fd:d5:65:71:69:a2:d5:ff:57:93:2a:58:38:41: a8:18:a0:8a:44:98:40:c9:07:92:da:2d:42:8b:d1:30:f9:8b: 3d:52:ab:e1:e0:ed:85:7a:79:a5:a8:74:20:a4:ad:85:df:84: 66:d8:9b:e8:07:4c:bc:6f:60:8a:ca:e1:bb:e0:a2:ef:16:37: 8f:fc:fa:7b:09:99:73:80:a3:67:a3:70:56:90:e9:54:cd:2c: 6c:33:22:b3:47:32:05:f8:7a:d8:9b:3e:26:9e:ac:e9:a2:31: 69:8a:65:20:62:66:de:81:fa:c7:e4:2a:ff:ca:47:d3:35:34: 40:72:5d:23:8a:06:16:fb:36:11:d0:03:7c:a8:37:69:60:e2: 46:99:84:84:bf:78:e5:ed:d1:a0:3d:f8:25:8b:d7:9b:20:b6: ef:ee:ff:23:60:4c:0f:20:a2:f6:45:78:ba:0d:0b:75:de:b6: 38:3f:69:b7:29:c0:f3:a2:76:6e:05:19:5d:48:30:7a:06:6a: 8e:5a:6a:08:88:47:d8:a6:cf:9b:03:08:1d:77:51:98:24:4c: 02:54:4b:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDMjcxMTAvBgNVBAUTKDU0NThDNDU2MjlDMTA0QUFBN0E1ODcyODY4NkY4RDFF Mjg3MkE5MkEwHhcNMjUwODEyMTgyNjM4WhcNMjUwODE5MTgyNjM4WjAYMRYwFAYD VQQDEw02ODliODc1ZS03YTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA568l0nasotlXxYz51daOqBAh+cwddDVy9I/jgmdAZZoQRTCYXgMOSMoCKpsf kMuSbjNh1n5O7PkXIR999ernc9iIE+picpxuffxYemAflfVOGCixGB+TYVT0KLVP jqHzK6+fBGnlPWWlmaC42KLRjHyW5JBK9jUC4Uln3gKrX2f6As8hPeS+1V59C5bc +b0bo3TLZCqPA8BiplkDHWeq2AqNLV+ed7twuInZGhoPOrl0VGVp+rZo0sjy1ZOG a6txRiVa0qykgAWFT7x0iND4FUwXzU3FpHSkVC4TOnEV+YJnjJTio/+G40oljuHW GcAggIeQG6PD15m+i09ZAgRlzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD78XvUo 5+HT93Ck4e9bychxoaGyMB8GA1UdIwQYMBaAFFRYxFYpwQSqp6WHKGhvjR4ocqkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0MyNy82NUJCNDg5QzAw NEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJLcW5wWWNvYUctTkhpaHlx U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGakVWaW5CQktxbnBZY29hRy1OSGloeXFTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0MyNy82NUJCNDg5QzAwNEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJL cW5wWWNvYUctTkhpaHlxU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHezA2xHTh2DOauJ4GEsyOY+pKI1kA8ujS82mL7X0hCH612B2HJzX5 /dVlcWmi1f9XkypYOEGoGKCKRJhAyQeS2i1Ci9Ew+Ys9Uqvh4O2FenmlqHQgpK2F 34Rm2JvoB0y8b2CKyuG74KLvFjeP/Pp7CZlzgKNno3BWkOlUzSxsMyKzRzIF+HrY mz4mnqzpojFpimUgYmbegfrH5Cr/ykfTNTRAcl0jigYW+zYR0AN8qDdpYOJGmYSE v3jl7dGgPfgli9ebILbv7v8jYEwPIKL2RXi6DQt13rY4P2m3KcDzonZuBRldSDB6 BmqOWmoIiEfYps+bAwgdd1GYJEwCVEuQ -----END CERTIFICATE-----Generated at Wed Aug 13 05:37:11 2025 by rpki-client