$ rpki-client -vvf rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft File: vNgnSl8YLOQAgCwIPo0VQi-bthE.mft (raw, json) Hash identifier: EmTMnWoMA8XHl7O0DsbFZRYUl4sV2/tRsu/1wYIzfEE= Subject key identifier: FA:47:E5:59:1E:46:9F:0D:48:8A:39:EF:D1:61:EC:F8:69:E7:33:8A Authority key identifier: BC:D8:27:4A:5F:18:2C:E4:00:80:2C:08:3E:8D:15:42:2F:9B:B6:11 Certificate issuer: /CN=A91554E6/serialNumber=BCD8274A5F182CE400802C083E8D15422F9BB611 Certificate serial: 02F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNgnSl8YLOQAgCwIPo0VQi-bthE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft Manifest number: 0444 Signing time: Thu 07 Aug 2025 01:52:58 +0000 Manifest this update: Thu 07 Aug 2025 01:52:58 +0000 Manifest next update: Thu 14 Aug 2025 01:52:58 +0000 Files and hashes: 1: vNgnSl8YLOQAgCwIPo0VQi-bthE.crl (hash: iwl3Il3mLuYXIjWpTf9I5JZQLFuPuWHy0/mD27l+Eh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.crl rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNgnSl8YLOQAgCwIPo0VQi-bthE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 756 (0x2f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91554E6, serialNumber=BCD8274A5F182CE400802C083E8D15422F9BB611 Validity Not Before: Aug 7 01:52:58 2025 GMT Not After : Aug 14 01:52:58 2025 GMT Subject: CN=689406fa-bf41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6c:58:14:3a:0b:ea:f1:7a:6a:cb:2d:f0:97: 4e:7f:78:dc:37:8c:5c:1d:12:80:78:3c:37:dd:85: d0:dd:38:4e:a2:10:5d:f2:86:85:bb:f6:63:5f:1e: 61:db:2b:1c:fe:56:42:76:18:34:ca:32:e9:f4:62: 20:0d:d9:08:d2:94:f5:cf:21:0f:ef:d0:a4:d8:61: f8:b1:13:3e:bb:a3:23:b0:e3:ec:28:50:3e:6a:d9: 66:63:c9:f5:82:e3:a4:eb:00:66:f4:24:61:2a:0f: cc:6c:b4:a2:06:d3:a1:d3:0b:05:28:1f:21:36:8e: 83:d7:b6:07:0e:18:47:44:77:23:b3:17:38:6a:3b: f8:0c:16:cc:a1:d4:ed:7b:2b:5b:f0:49:2a:0e:2d: 52:d3:2d:30:88:35:c4:8d:28:68:28:fd:5c:d7:34: 76:33:54:8d:c0:0b:ab:13:8e:86:ca:b5:6f:cc:f4: 33:7e:47:b6:f0:40:30:6d:1e:ba:df:3f:bc:ff:67: f1:00:ab:bc:94:1b:16:37:76:4a:b0:7c:48:e2:b6: f3:bf:ea:48:b1:99:ab:74:01:7e:a3:9f:40:d9:80: 0d:50:00:51:cd:66:a9:ff:bc:4b:55:cc:65:33:81: 3b:d7:b7:1b:14:cc:80:ff:9a:1a:69:b5:20:61:da: 94:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:47:E5:59:1E:46:9F:0D:48:8A:39:EF:D1:61:EC:F8:69:E7:33:8A X509v3 Authority Key Identifier: keyid:BC:D8:27:4A:5F:18:2C:E4:00:80:2C:08:3E:8D:15:42:2F:9B:B6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNgnSl8YLOQAgCwIPo0VQi-bthE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/vNgnSl8YLOQAgCwIPo0VQi-bthE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:8f:27:01:2c:77:5d:7b:cc:e5:07:fa:9c:df:de:72:b7:c2: a8:af:2c:a5:53:d2:4b:6b:3d:a0:0f:8b:35:8f:5d:ef:81:08: a8:08:d7:6a:99:95:63:b2:74:8c:08:ba:a9:01:90:40:dc:8b: fa:45:ff:e1:19:a3:b6:44:3b:c8:a0:19:29:a5:3e:c9:36:b0: d7:76:f6:dc:95:22:6a:74:70:d7:dc:f7:50:4a:02:fe:92:65: 5a:7c:ef:b9:6d:bf:a1:79:b1:61:0c:69:2b:a4:1f:72:7c:65: 33:67:76:f3:f6:9e:3f:40:57:d2:e4:52:4a:72:69:e3:1f:e8: 9e:ac:95:48:b6:ce:38:5b:92:26:cc:c3:01:86:b6:bd:89:bd: bd:5e:0e:58:c1:5d:58:58:68:f4:dd:ee:d1:f6:0f:f3:01:0c: 91:10:65:09:cc:76:2d:cb:76:1d:8e:9b:69:f5:fa:75:0b:c9: a1:3e:d1:a1:16:ab:37:7d:ed:62:25:29:b6:5a:67:f4:f2:51: ec:58:db:ec:81:47:f5:05:21:23:c6:97:b0:99:6e:3a:b6:18: 71:b7:2c:29:87:bd:6d:71:8a:28:8b:b6:dc:2f:79:c7:0a:2e: 51:51:80:2b:fb:d2:ca:0f:2b:ad:c8:e1:bd:fa:e7:96:53:a2: a4:0c:50:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0RTYxMTAvBgNVBAUTKEJDRDgyNzRBNUYxODJDRTQwMDgwMkMwODNFOEQxNTQy MkY5QkI2MTEwHhcNMjUwODA3MDE1MjU4WhcNMjUwODE0MDE1MjU4WjAYMRYwFAYD VQQDEw02ODk0MDZmYS1iZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GxYFDoL6vF6asst8JdOf3jcN4xcHRKAeDw33YXQ3ThOohBd8oaFu/ZjXx5h 2ysc/lZCdhg0yjLp9GIgDdkI0pT1zyEP79Ck2GH4sRM+u6MjsOPsKFA+atlmY8n1 guOk6wBm9CRhKg/MbLSiBtOh0wsFKB8hNo6D17YHDhhHRHcjsxc4ajv4DBbModTt eytb8EkqDi1S0y0wiDXEjShoKP1c1zR2M1SNwAurE46GyrVvzPQzfke28EAwbR66 3z+8/2fxAKu8lBsWN3ZKsHxI4rbzv+pIsZmrdAF+o59A2YANUABRzWap/7xLVcxl M4E717cbFMyA/5oaabUgYdqUxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpH5Vke Rp8NSIo579Fh7Php5zOKMB8GA1UdIwQYMBaAFLzYJ0pfGCzkAIAsCD6NFUIvm7YR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTRFNi85RjA2Nzc0OEVE NEIxMUVDQUI4RkFBNzdDNEY5QUUwMi92TmduU2w4WUxPUUFnQ3dJUG8wVlFpLWJ0 aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZOZ25TbDhZTE9RQWdDd0lQbzBWUWktYnRoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTRFNi85RjA2Nzc0OEVENEIxMUVDQUI4RkFBNzdDNEY5QUUwMi92TmduU2w4WUxP UUFnQ3dJUG8wVlFpLWJ0aEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7jycBLHdde8zlB/qc395yt8KoryylU9JLaz2gD4s1j13vgQioCNdq mZVjsnSMCLqpAZBA3Iv6Rf/hGaO2RDvIoBkppT7JNrDXdvbclSJqdHDX3PdQSgL+ kmVafO+5bb+hebFhDGkrpB9yfGUzZ3bz9p4/QFfS5FJKcmnjH+ierJVIts44W5Im zMMBhra9ib29Xg5YwV1YWGj03e7R9g/zAQyREGUJzHYty3Ydjptp9fp1C8mhPtGh Fqs3fe1iJSm2Wmf08lHsWNvsgUf1BSEjxpewmW46thhxtywph71tcYooi7bcL3nH Ci5RUYAr+9LKDyutyOG9+ueWU6KkDFBf -----END CERTIFICATE-----Generated at Thu Aug 7 12:52:37 2025 by rpki-client