$ rpki-client -vvf rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft File: VR9YpoyP5pILLvCsbpCi0_NYinY.mft (raw, json) Hash identifier: N0wP5G8IVluhQ0SqN3dZ2LfExAjp5A+srgsAp+hP5ms= Subject key identifier: 5F:32:38:1C:B0:87:A3:21:C4:A1:6F:59:79:EB:69:40:89:93:CD:5E Authority key identifier: 55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76 Certificate issuer: /CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76 Certificate serial: 1067 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft Manifest number: 1043 Signing time: Sun 10 Aug 2025 17:26:58 +0000 Manifest this update: Sun 10 Aug 2025 17:26:58 +0000 Manifest next update: Sun 17 Aug 2025 17:26:58 +0000 Files and hashes: 1: VR9YpoyP5pILLvCsbpCi0_NYinY.crl (hash: Y7+OcYjrnK2hFAWrH372K/kXgjdVKKgtTJNL72Q2Llk=) 2: 5318EFAC6BAE11EBA5B87E56C4F9AE02.roa (hash: O/zDQK+5XXecDsvlrrRdDdVdYXgD1MTmZzBzRrBq/J0=) 3: E973A832656511EC85A7CA2CC4F9AE02.roa (hash: sn836Q2nMHQU64NdjOs0ZiA4VlzUNBBTB3I7t0SZgIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4199 (0x1067) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160856, serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76 Validity Not Before: Aug 10 17:26:58 2025 GMT Not After : Aug 17 17:26:58 2025 GMT Subject: CN=6898d662-797c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e6:b5:f7:ae:98:77:a2:a4:a9:19:05:65:e1: aa:b1:53:f9:8c:e1:cd:c6:09:32:24:0b:e7:f5:54: 99:4a:98:fc:26:c4:25:f8:63:f1:6e:a6:d9:ff:16: c0:a1:74:33:13:55:de:5f:08:54:03:da:43:64:7d: d9:63:28:07:b2:dd:d5:30:d8:70:dc:84:33:57:03: 5c:05:3f:7f:ca:1b:de:7e:71:49:08:5d:42:e1:3c: d6:bc:be:f7:81:39:00:87:3c:f0:75:26:ad:fb:2e: 7a:58:ea:a7:94:3d:a9:d5:79:d3:ae:db:2d:42:00: 43:22:bd:80:4a:1e:a1:dc:39:7f:be:37:10:e7:3c: 93:45:65:78:51:04:d7:4b:da:6b:dc:b5:ca:1f:dc: 72:ec:85:84:32:33:82:85:04:42:00:6c:a7:42:2c: 02:80:b9:9e:28:76:7c:a6:72:c9:98:dc:b5:2f:0a: 9f:ec:18:c3:c3:45:68:c3:e2:e3:c7:ed:14:c0:59: a1:a6:f0:97:aa:aa:ef:98:c7:81:92:ff:c4:9d:ff: 17:aa:82:d6:c6:49:8e:89:5c:d8:e6:c9:81:df:1f: 4b:40:a7:2e:4d:00:c4:c2:07:7d:84:ed:07:7f:ca: 87:6b:f7:6b:f1:3d:bf:57:fe:0e:a4:5c:44:d4:0a: cf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:32:38:1C:B0:87:A3:21:C4:A1:6F:59:79:EB:69:40:89:93:CD:5E X509v3 Authority Key Identifier: keyid:55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a0:64:6f:e2:0e:84:13:15:6e:24:ab:7c:3b:27:4b:53:cb: bc:81:41:67:20:41:92:f3:50:c0:79:1a:04:bc:bd:82:9f:a9: 73:38:cf:2b:4a:00:62:78:c0:96:d2:55:b3:c2:f4:ec:a6:b1: 02:06:c7:f8:5d:a1:2b:32:22:c8:31:93:a0:28:ff:55:23:4c: 37:20:5e:f4:33:e3:7d:75:09:20:39:ed:72:ff:02:89:b8:58: 0d:d1:4a:b3:85:b6:50:62:3f:e4:1a:b6:ec:ab:03:88:fc:73: 1b:d4:fa:8f:a8:af:aa:6a:28:33:48:57:21:0f:b1:d8:58:5f: 73:bf:58:98:59:96:de:67:c6:e2:9e:92:2c:e6:9f:b3:77:e0: 3a:00:f5:15:a7:37:2a:36:87:8c:f8:0e:61:e1:9d:6b:c3:a9: ad:71:7f:cd:53:18:64:36:ea:2e:d1:94:36:b1:fd:ac:f7:52: 4d:f1:b9:90:3f:f0:73:6e:13:b4:4c:73:15:39:a5:e8:d3:2c: ab:1c:e5:9f:92:bf:a0:a3:26:ab:8b:66:f2:16:38:35:68:d0: cd:03:7a:b7:90:81:82:87:ec:cb:e1:63:32:6f:2b:43:55:41: 0e:6a:b8:dc:0b:12:76:a6:f3:f2:b3:ee:49:7d:fa:19:9f:63: 34:ce:b3:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA4NTYxMTAvBgNVBAUTKDU1MUY1OEE2OEM4RkU2OTIwQjJFRjBBQzZFOTBBMkQz RjM1ODhBNzYwHhcNMjUwODEwMTcyNjU4WhcNMjUwODE3MTcyNjU4WjAYMRYwFAYD VQQDEw02ODk4ZDY2Mi03OTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+a1966Yd6KkqRkFZeGqsVP5jOHNxgkyJAvn9VSZSpj8JsQl+GPxbqbZ/xbA oXQzE1XeXwhUA9pDZH3ZYygHst3VMNhw3IQzVwNcBT9/yhvefnFJCF1C4TzWvL73 gTkAhzzwdSat+y56WOqnlD2p1XnTrtstQgBDIr2ASh6h3Dl/vjcQ5zyTRWV4UQTX S9pr3LXKH9xy7IWEMjOChQRCAGynQiwCgLmeKHZ8pnLJmNy1Lwqf7BjDw0Vow+Lj x+0UwFmhpvCXqqrvmMeBkv/Enf8XqoLWxkmOiVzY5smB3x9LQKcuTQDEwgd9hO0H f8qHa/dr8T2/V/4OpFxE1ArPKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8yOByw h6MhxKFvWXnraUCJk81eMB8GA1UdIwQYMBaAFFUfWKaMj+aSCy7wrG6QotPzWIp2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDg1Ni9FRDU3Nzk1RTRD NzQxMUU5OUUxQjk5NTZDNEY5QUUwMi9WUjlZcG95UDVwSUxMdkNzYnBDaTBfTllp blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSOVlwb3lQNXBJTEx2Q3NicENpMF9OWWluWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDg1Ni9FRDU3Nzk1RTRDNzQxMUU5OUUxQjk5NTZDNEY5QUUwMi9WUjlZcG95UDVw SUxMdkNzYnBDaTBfTllpblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAroGRv4g6EExVuJKt8OydLU8u8gUFnIEGS81DAeRoEvL2Cn6lzOM8r SgBieMCW0lWzwvTsprECBsf4XaErMiLIMZOgKP9VI0w3IF70M+N9dQkgOe1y/wKJ uFgN0UqzhbZQYj/kGrbsqwOI/HMb1PqPqK+qaigzSFchD7HYWF9zv1iYWZbeZ8bi npIs5p+zd+A6APUVpzcqNoeM+A5h4Z1rw6mtcX/NUxhkNuou0ZQ2sf2s91JN8bmQ P/BzbhO0THMVOaXo0yyrHOWfkr+goyari2byFjg1aNDNA3q3kIGCh+zL4WMybytD VUEOarjcCxJ2pvPys+5JffoZn2M0zrMD -----END CERTIFICATE-----Generated at Mon Aug 11 13:06:50 2025 by rpki-client