$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft File: vAv4-dc7foz8yOpen0LXqFUjPXw.mft (raw, json) Hash identifier: Ogb6bRznmfkgJWu88i5H+aepQgqNT5qfAZAoY92D1I0= Subject key identifier: A4:8C:27:B3:0E:8E:B1:58:78:D2:28:2D:32:45:D6:EB:8A:20:5F:5E Authority key identifier: BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C Certificate issuer: /CN=A9163EB9/serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft Manifest number: BE Signing time: Sat 09 Aug 2025 06:16:37 +0000 Manifest this update: Sat 09 Aug 2025 06:16:36 +0000 Manifest next update: Sat 16 Aug 2025 06:16:36 +0000 Files and hashes: 1: vAv4-dc7foz8yOpen0LXqFUjPXw.crl (hash: gEBa5FAlqSGC87dOwD+DKvK7Jt84ekwl9cjGoHeEXuc=) 2: 710FB354979E11EF99310B40C4F9AE02.roa (hash: bruRF8XqvNXc2lROOKilx3DJEF2Mi08/zHCfWANPCjg=) 3: 27AEE7D0979D11EFB1426839C4F9AE02.roa (hash: FRD/IGf5tsKizstdT15eHvBke9+NzOwPHHiU7wEzleM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EB9, serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C Validity Not Before: Aug 9 06:16:36 2025 GMT Not After : Aug 16 06:16:36 2025 GMT Subject: CN=6896e7c5-d5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:53:a9:33:e6:bc:16:9f:71:ee:4c:d8:a9:7f: 38:78:c8:ce:c3:df:c4:08:7b:eb:9d:e9:ad:58:e5: f6:8a:a4:df:1a:ad:0a:8a:8a:85:f8:cc:e6:a3:14: 86:d9:ef:9e:c0:69:32:04:67:6f:fe:1d:6b:85:2d: 75:b5:16:3a:51:99:c3:56:96:e8:05:e1:b2:1d:a7: f4:d0:ed:5f:6d:df:c7:0c:e9:fe:fd:c1:4e:19:47: ff:59:04:42:a8:24:d7:59:bb:4e:ed:a1:cf:5b:96: 8c:04:d9:ac:19:d6:94:2d:e1:c1:00:f7:99:36:6e: d9:83:86:f8:77:32:14:dd:83:90:6f:9d:fd:a3:5f: 55:45:74:5b:4a:b9:bb:29:40:05:03:57:08:cd:9f: 8a:e3:00:8f:9b:e9:fe:b3:1b:a1:4d:e9:58:95:76: 1b:ef:93:14:e8:9a:1d:b8:f6:94:ad:6a:ad:b4:56: fb:43:89:c0:14:e7:c9:f7:a6:4a:cf:ee:fb:48:58: fb:3e:f8:5b:d8:c2:09:05:0e:9f:b3:21:a0:ca:16: 57:6c:21:cb:7e:42:be:4c:52:5a:74:20:16:bd:97: bb:b5:e5:51:04:e9:ca:d9:b8:81:40:ab:6c:bb:fc: be:66:90:79:f0:fe:6d:48:23:2d:47:04:40:65:f0: 67:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8C:27:B3:0E:8E:B1:58:78:D2:28:2D:32:45:D6:EB:8A:20:5F:5E X509v3 Authority Key Identifier: keyid:BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:2c:97:6e:e4:52:8a:fe:87:b1:ef:a8:4b:7b:bd:63:33:c4: db:72:e6:5f:cd:e3:67:08:2d:46:19:5d:1f:ab:2c:2a:d7:c6: 4b:2f:a3:2f:fd:45:d8:2f:c4:ab:ea:24:7e:1b:70:88:62:ae: 3f:db:e9:60:db:c6:83:d8:41:f9:f5:6a:39:a9:41:81:25:35: 4d:f8:94:54:87:a2:59:ab:6e:08:8e:2e:a0:80:a4:a0:07:e5: 41:23:47:88:a4:9a:af:fe:94:3b:06:18:47:3f:7c:1b:bd:a2: 56:bd:a7:05:f0:85:da:4c:9e:b2:03:f5:21:0c:31:e2:65:63: 53:98:cb:f4:26:79:23:eb:56:7a:e0:43:1b:02:1c:c5:08:0e: d8:dd:59:02:6e:34:98:6b:de:e0:01:10:52:ff:37:67:6c:be: 6a:d8:0e:22:aa:cd:9e:59:47:50:69:ec:15:74:4f:e3:b0:20: 59:4b:0c:05:92:76:96:df:a4:23:43:4a:c2:ed:f3:7c:86:84: 6d:19:05:5a:e0:6c:b1:f2:17:b7:50:30:45:e7:9f:72:c5:73: bd:c6:98:cd:fa:3f:56:06:e4:4d:40:ac:85:83:8c:53:f6:52: e8:91:e3:2d:e1:a9:26:70:a5:40:03:eb:ed:51:67:ca:45:57: 75:f0:b1:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFQjkxMTAvBgNVBAUTKEJDMEJGOEY5RDczQjdFOENGQ0M4RUE1RTlGNDJEN0E4 NTUyMzNEN0MwHhcNMjUwODA5MDYxNjM2WhcNMjUwODE2MDYxNjM2WjAYMRYwFAYD VQQDEw02ODk2ZTdjNS1kNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1OpM+a8Fp9x7kzYqX84eMjOw9/ECHvrnemtWOX2iqTfGq0KioqF+MzmoxSG 2e+ewGkyBGdv/h1rhS11tRY6UZnDVpboBeGyHaf00O1fbd/HDOn+/cFOGUf/WQRC qCTXWbtO7aHPW5aMBNmsGdaULeHBAPeZNm7Zg4b4dzIU3YOQb539o19VRXRbSrm7 KUAFA1cIzZ+K4wCPm+n+sxuhTelYlXYb75MU6JoduPaUrWqttFb7Q4nAFOfJ96ZK z+77SFj7Pvhb2MIJBQ6fsyGgyhZXbCHLfkK+TFJadCAWvZe7teVRBOnK2biBQKts u/y+ZpB58P5tSCMtRwRAZfBn2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSMJ7MO jrFYeNIoLTJF1uuKIF9eMB8GA1UdIwQYMBaAFLwL+PnXO36M/MjqXp9C16hVIz18 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VCOS9GQ0Q1NUMwQTU0 OUYxMUVGODZBRTU5MjJDNEY5QUUwMi92QXY0LWRjN2Zvejh5T3BlbjBMWHFGVWpQ WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZBdjQtZGM3Zm96OHlPcGVuMExYcUZValBYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VCOS9GQ0Q1NUMwQTU0OUYxMUVGODZBRTU5MjJDNEY5QUUwMi92QXY0LWRjN2Zv ejh5T3BlbjBMWHFGVWpQWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzLJdu5FKK/oex76hLe71jM8TbcuZfzeNnCC1GGV0fqywq18ZLL6Mv /UXYL8Sr6iR+G3CIYq4/2+lg28aD2EH59Wo5qUGBJTVN+JRUh6JZq24Iji6ggKSg B+VBI0eIpJqv/pQ7BhhHP3wbvaJWvacF8IXaTJ6yA/UhDDHiZWNTmMv0Jnkj61Z6 4EMbAhzFCA7Y3VkCbjSYa97gARBS/zdnbL5q2A4iqs2eWUdQaewVdE/jsCBZSwwF knaW36QjQ0rC7fN8hoRtGQVa4Gyx8he3UDBF559yxXO9xpjN+j9WBuRNQKyFg4xT 9lLokeMt4akmcKVAA+vtUWfKRVd18LHD -----END CERTIFICATE-----Generated at Sat Aug 9 14:22:01 2025 by rpki-client