$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft File: vFNsAPhfWQQdnEwpYfciQr9g1R4.mft (raw, json) Hash identifier: QhdhSgIZoJqTY0a/pGHolglw7KNVJAt7mZ1ANrz9GiM= Subject key identifier: C0:7F:B2:76:92:D0:98:BD:4F:42:E6:EB:7D:4A:7A:E3:41:6B:6E:A0 Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Certificate serial: 1285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft Manifest number: 124F Signing time: Sun 10 Aug 2025 17:09:01 +0000 Manifest this update: Sun 10 Aug 2025 17:09:01 +0000 Manifest next update: Sun 17 Aug 2025 17:09:01 +0000 Files and hashes: 1: vFNsAPhfWQQdnEwpYfciQr9g1R4.crl (hash: DbtX2Vjcpc/2hZ0z1cNDNQ0C5U+nmjXcCdgBgZzvafo=) 2: DA505546B74C11ED916B5A6AC4F9AE02.roa (hash: 9RHwtONKgQdHSDennn4HM2Ikhdy+C6zf57qmecAxamQ=) 3: 3A9AD3CEDAD411EBB35DA50AC4F9AE02.roa (hash: EztUCIPqk3y/a6AcLfvax6DUhCHP6l9BEvQIvIo9iws=) 4: 57A84138605911EE8ABC9318C4F9AE02.roa (hash: ugTs/oyoKALkGSyMUkjHh2f/tiPGip4BWJ+dEzDMSyU=) 5: E0ACCAC4ECD211EFA6C15823C4F9AE02.roa (hash: /d3XQ565KopoANcg+pwgBZqGoqy8+pW8EGFbyyXXzys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4741 (0x1285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Validity Not Before: Aug 10 17:09:01 2025 GMT Not After : Aug 17 17:09:01 2025 GMT Subject: CN=6898d22d-a1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:23:ce:25:ba:df:0a:0a:a0:41:6b:db:a8:4f: 11:76:eb:33:4d:9a:48:50:e7:28:68:2d:4b:0c:2e: f1:c7:5e:1b:48:d7:90:5c:1a:19:e8:9a:38:74:eb: 42:3d:35:38:dd:99:0b:0b:93:3c:28:e0:e7:9e:f3: c8:d1:6d:05:b9:50:38:ee:d9:11:28:96:f9:cc:81: cf:c7:e5:48:b5:e5:37:e8:40:68:c8:4f:9c:de:20: 64:90:66:5a:97:f3:68:2a:6c:77:57:c8:e3:4a:9f: e5:dc:a1:01:33:9e:a0:52:66:5c:bb:29:97:6b:63: 8e:78:c3:41:e2:f4:28:59:9f:e9:57:3c:b6:ab:49: a9:d1:b5:67:5b:47:99:53:b8:8b:a1:d1:d5:98:96: 90:43:46:63:d1:aa:d8:8d:6f:86:8d:b8:0b:bf:8d: 4d:07:76:33:fe:39:82:3d:ed:b0:99:be:e7:f8:cd: ec:ff:e1:f3:6d:e1:aa:7d:47:70:09:45:a9:c8:e6: 2b:e9:9c:14:7d:af:e9:fb:87:9d:f1:fa:45:35:5d: 64:9c:9e:64:6f:f1:ea:fc:bc:fd:2d:df:27:4d:34: 5a:47:5f:e6:84:2a:46:a3:f7:b4:4a:c6:cb:4d:65: 5a:ac:1d:4f:d3:1c:dc:98:19:db:02:f8:81:0d:e6: 2c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7F:B2:76:92:D0:98:BD:4F:42:E6:EB:7D:4A:7A:E3:41:6B:6E:A0 X509v3 Authority Key Identifier: keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ae:54:83:7f:21:85:27:cd:4d:a1:ea:92:8a:54:03:3c:84: cd:70:26:c3:40:6d:ed:57:69:69:2d:5f:82:7c:c1:0f:49:ec: e2:14:ba:7f:a5:6c:19:a3:92:2e:20:8c:40:b8:aa:7f:d4:5a: 25:e4:3a:2c:57:71:e6:7a:9a:c8:50:b7:eb:f6:5a:67:4c:89: 4f:49:9b:14:a3:3d:bd:b7:fd:ed:66:b9:0d:99:78:3a:88:65: b8:49:7e:37:1f:e9:04:ec:72:11:63:5d:5b:d6:76:34:e7:b9: 4a:61:0b:cc:92:63:72:fd:fe:c4:c8:bd:4c:63:6a:e6:0c:a6: de:b8:a4:0b:7d:5c:32:46:f9:f7:b8:b6:54:0e:4b:00:6d:c2: e2:02:bb:24:28:92:aa:63:d7:1c:b5:57:22:01:ed:27:6d:e1: 1b:5a:dd:ca:5b:89:75:04:6c:26:47:fe:22:62:13:2d:3f:56: 56:6a:35:6d:0f:1b:e7:4c:b3:cd:28:11:a7:11:9a:dc:11:0c: 10:b3:08:c8:03:16:b0:c4:a8:0c:fc:d4:7d:4d:e6:46:0c:81: 48:ce:48:cc:63:e6:be:f5:c2:68:ff:56:34:33:7a:06:77:fd: 3d:84:82:bf:3e:75:56:18:d5:3e:81:e3:f8:e4:15:51:3c:0f: 4a:2f:d3:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy QkY2MEQ1MUUwHhcNMjUwODEwMTcwOTAxWhcNMjUwODE3MTcwOTAxWjAYMRYwFAYD VQQDEw02ODk4ZDIyZC1hMWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiPOJbrfCgqgQWvbqE8RduszTZpIUOcoaC1LDC7xx14bSNeQXBoZ6Jo4dOtC PTU43ZkLC5M8KODnnvPI0W0FuVA47tkRKJb5zIHPx+VIteU36EBoyE+c3iBkkGZa l/NoKmx3V8jjSp/l3KEBM56gUmZcuymXa2OOeMNB4vQoWZ/pVzy2q0mp0bVnW0eZ U7iLodHVmJaQQ0Zj0arYjW+GjbgLv41NB3Yz/jmCPe2wmb7n+M3s/+HzbeGqfUdw CUWpyOYr6ZwUfa/p+4ed8fpFNV1knJ5kb/Hq/Lz9Ld8nTTRaR1/mhCpGo/e0SsbL TWVarB1P0xzcmBnbAviBDeYsVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMB/snaS 0Ji9T0Lm631KeuNBa26gMB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5 NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDg2MC9CNDAxQzk4MkU5NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldR UWRuRXdwWWZjaVFyOWcxUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAurlSDfyGFJ81NoeqSilQDPITNcCbDQG3tV2lpLV+CfMEPSeziFLp/ pWwZo5IuIIxAuKp/1Fol5DosV3HmeprIULfr9lpnTIlPSZsUoz29t/3tZrkNmXg6 iGW4SX43H+kE7HIRY11b1nY057lKYQvMkmNy/f7EyL1MY2rmDKbeuKQLfVwyRvn3 uLZUDksAbcLiArskKJKqY9cctVciAe0nbeEbWt3KW4l1BGwmR/4iYhMtP1ZWajVt DxvnTLPNKBGnEZrcEQwQswjIAxawxKgM/NR9TeZGDIFIzkjMY+a+9cJo/1Y0M3oG d/09hIK/PnVWGNU+geP45BVRPA9KL9Pj -----END CERTIFICATE-----Generated at Sun Aug 10 18:25:01 2025 by rpki-client