$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft File: VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft (raw, json) Hash identifier: Tl96vXL0HeME3AVqHqAl4yPYGfZKx8KaytJCYJ+5zdc= Subject key identifier: D4:7D:72:E1:4A:39:E2:8D:F3:AB:7C:E9:1D:43:AA:C5:F4:A4:25:8D Authority key identifier: 54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 Certificate issuer: /CN=A916DAC0/serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft Manifest number: 010D Signing time: Sat 09 Aug 2025 05:24:01 +0000 Manifest this update: Sat 09 Aug 2025 05:24:01 +0000 Manifest next update: Sat 16 Aug 2025 05:24:01 +0000 Files and hashes: 1: VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl (hash: 3+YR/lGOKnJlEOsn6QnGNO6nyqYM8SCymTutqN6/cj4=) 2: 2C06DFA22C4C11EFB6974530C4F9AE02.roa (hash: x0R7/aV5SAgSCY1aeBWFVSWK6YKsQh3+SMh4O+dO85w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DAC0, serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Validity Not Before: Aug 9 05:24:01 2025 GMT Not After : Aug 16 05:24:01 2025 GMT Subject: CN=6896db71-7b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ea:25:83:f9:88:97:f4:d5:4d:06:c0:97:36: 16:cc:a4:d5:c6:91:f9:59:cb:31:3f:bd:b2:9b:80: 5b:1f:9a:f2:80:56:04:e4:5d:ad:e9:b4:1d:f9:cf: af:37:cf:e5:b0:58:b4:e0:b3:96:52:f6:db:96:d3: 71:89:ee:45:63:81:77:e8:9f:d6:fc:fe:6c:9a:a7: 62:0c:75:9a:78:3a:50:4e:47:a9:03:61:58:cb:8d: 5e:77:12:6a:31:94:72:8a:f4:52:86:88:56:00:80: 25:4f:85:f6:bc:40:4b:6c:b7:e9:c9:14:2b:55:45: 59:d4:d3:2a:2a:a6:fb:d2:ee:a6:db:5d:13:b5:98: c4:0b:2c:a3:26:c8:4a:b9:ed:85:f5:ad:6c:04:b5: 44:1e:d6:4e:fc:a2:8e:42:48:92:b3:fe:90:51:91: b4:eb:d3:d8:a4:7d:01:42:99:59:70:ad:ff:3a:70: d7:f5:14:d9:65:7b:e0:db:2b:ee:d4:24:5d:ea:b1: 26:84:f2:f2:a0:f7:1f:41:2a:33:12:f2:f2:54:22: c3:59:41:10:7f:73:a9:98:e4:17:94:b9:3c:d5:44: c2:d7:93:f4:f2:67:6d:47:e3:35:a9:fb:50:58:c7: d4:72:e8:c3:c2:4b:99:5b:e2:9f:6a:e1:dc:d8:4f: 3d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7D:72:E1:4A:39:E2:8D:F3:AB:7C:E9:1D:43:AA:C5:F4:A4:25:8D X509v3 Authority Key Identifier: keyid:54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:ba:51:9f:35:29:f1:d7:89:14:b4:f5:28:86:be:39:3f:24: 8e:0c:05:a5:f3:43:1b:6d:ea:b6:69:60:58:68:26:ee:01:8e: 9d:c7:64:b1:4f:2e:12:d0:e2:d2:dd:6b:c2:81:70:fb:db:48: e7:10:e9:49:1f:4d:87:44:f2:0d:24:3d:d9:6b:42:c1:5e:3c: 79:bc:2e:54:31:93:3e:f8:30:9f:f2:cf:b3:a0:16:ad:82:c5: 2d:c0:f0:c2:59:ba:37:b7:4d:70:a0:e6:67:ee:06:08:7e:7d: fe:34:d6:c8:c4:8d:af:45:1c:2e:b1:14:4b:89:42:5f:ad:81: fa:1d:d4:b4:ee:f9:3b:b7:9b:41:ef:03:54:a8:b5:46:74:cd: 93:b2:60:a4:3c:92:7c:21:51:82:1f:be:60:71:cd:5a:74:7a: 68:76:9d:49:72:38:18:0d:8d:9d:1f:18:90:14:49:e8:9e:c0: f6:15:dc:61:d3:27:48:e7:fa:68:db:97:34:0d:e1:48:a0:f5: f0:65:db:f5:aa:af:1e:38:0b:fb:43:3f:e7:41:1e:8a:d5:1b: bf:5b:13:53:00:dd:7a:93:93:ee:64:f2:1f:0b:37:a4:68:a5: 78:f0:2c:24:f6:bc:a4:84:46:80:79:cc:91:41:ff:c1:79:75: 21:10:54:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBQzAxMTAvBgNVBAUTKDU0Qjk2NkFEOEI1NzMxNjQxNjUyOTUwN0Y1QkNBOUMw MEUxMTgxQjkwHhcNMjUwODA5MDUyNDAxWhcNMjUwODE2MDUyNDAxWjAYMRYwFAYD VQQDEw02ODk2ZGI3MS03YjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOolg/mIl/TVTQbAlzYWzKTVxpH5WcsxP72ym4BbH5rygFYE5F2t6bQd+c+v N8/lsFi04LOWUvbbltNxie5FY4F36J/W/P5smqdiDHWaeDpQTkepA2FYy41edxJq MZRyivRShohWAIAlT4X2vEBLbLfpyRQrVUVZ1NMqKqb70u6m210TtZjECyyjJshK ue2F9a1sBLVEHtZO/KKOQkiSs/6QUZG069PYpH0BQplZcK3/OnDX9RTZZXvg2yvu 1CRd6rEmhPLyoPcfQSozEvLyVCLDWUEQf3OpmOQXlLk81UTC15P08mdtR+M1qftQ WMfUcujDwkuZW+KfauHc2E89bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNR9cuFK OeKN86t86R1DqsX0pCWNMB8GA1UdIwQYMBaAFFS5Zq2LVzFkFlKVB/W8qcAOEYG5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REFDMC9FNzYzQUE4QURF ODgxMUVFOTNEOUE3NDRDNEY5QUUwMi9WTGxtcll0WE1XUVdVcFVIOWJ5cHdBNFJn YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZMbG1yWXRYTVdRV1VwVUg5Ynlwd0E0Umdiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REFDMC9FNzYzQUE4QURFODgxMUVFOTNEOUE3NDRDNEY5QUUwMi9WTGxtcll0WE1X UVdVcFVIOWJ5cHdBNFJnYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYulGfNSnx14kUtPUohr45PySODAWl80Mbbeq2aWBYaCbuAY6dx2Sx Ty4S0OLS3WvCgXD720jnEOlJH02HRPINJD3Za0LBXjx5vC5UMZM++DCf8s+zoBat gsUtwPDCWbo3t01woOZn7gYIfn3+NNbIxI2vRRwusRRLiUJfrYH6HdS07vk7t5tB 7wNUqLVGdM2TsmCkPJJ8IVGCH75gcc1adHpodp1JcjgYDY2dHxiQFEnonsD2Fdxh 0ydI5/po25c0DeFIoPXwZdv1qq8eOAv7Qz/nQR6K1Ru/WxNTAN16k5PuZPIfCzek aKV48Cwk9rykhEaAecyRQf/BeXUhEFRM -----END CERTIFICATE-----Generated at Sun Aug 10 10:47:48 2025 by rpki-client