$ rpki-client -vvf rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft File: vJfyb7J4ln3TyjnFndCMaiwjBvk.mft (raw, json) Hash identifier: Q/qIxglQUgUHiWDZr3zGNsLbBIYfXSmrRPvYLj/opjg= Subject key identifier: 96:25:5B:CE:E4:B8:7F:0C:FA:7A:1D:43:8B:D2:8F:81:E5:CF:BD:80 Authority key identifier: BC:97:F2:6F:B2:78:96:7D:D3:CA:39:C5:9D:D0:8C:6A:2C:23:06:F9 Certificate issuer: /CN=A9171845/serialNumber=BC97F26FB278967DD3CA39C59DD08C6A2C2306F9 Certificate serial: 0504 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft Manifest number: 04FC Signing time: Sat 09 Aug 2025 00:09:10 +0000 Manifest this update: Sat 09 Aug 2025 00:09:10 +0000 Manifest next update: Sat 16 Aug 2025 00:09:10 +0000 Files and hashes: 1: vJfyb7J4ln3TyjnFndCMaiwjBvk.crl (hash: ws70aNjeJDMQin9Ga0s05fdojrYyc0LQp/zccBxGL6I=) 2: 8B91EDB420CD11EC97292B78C4F9AE02.roa (hash: eIj7A9yHm5UyaDqD5wlEFgtzeqxaYRyGJ855/hLNbFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.crl rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1284 (0x504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171845, serialNumber=BC97F26FB278967DD3CA39C59DD08C6A2C2306F9 Validity Not Before: Aug 9 00:09:10 2025 GMT Not After : Aug 16 00:09:10 2025 GMT Subject: CN=689691a6-82a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b8:f9:bd:85:b2:73:b6:21:fe:ba:54:7f:b5: 82:22:98:17:af:5c:30:47:85:90:d5:fc:fd:1e:e9: 31:9e:53:40:ee:cc:21:df:b9:25:88:e9:f6:d9:cc: a0:1e:df:1e:9e:d8:7e:17:6d:2d:ba:24:31:7e:c6: 57:de:e5:6e:f7:8a:e4:7c:77:70:fe:7c:75:da:7b: 5e:f1:44:bc:1d:16:2c:12:fc:4a:c2:90:a5:3b:80: 2a:b2:ff:bf:c7:79:95:9d:c0:49:59:c8:00:e9:32: 54:20:30:3f:06:b9:93:b6:07:6b:8d:fb:54:06:75: 54:56:b8:f7:09:c8:28:8a:f8:57:a0:d4:bf:9b:02: f7:63:3b:13:a8:fe:80:f5:53:66:13:77:c5:89:6e: 6c:27:77:d0:2f:97:f7:bd:5d:1e:68:fe:52:4c:93: da:33:c4:80:df:b1:e9:63:d4:4c:ed:fa:bd:04:98: e9:cc:b9:de:a4:d4:4d:2c:90:7d:b1:7e:34:7f:c4: df:67:d5:8f:3f:09:83:99:80:52:ad:ad:e8:64:05: e1:9c:e6:72:f7:31:c7:7e:b6:95:e1:60:9b:4a:7f: 86:c4:ad:a3:a8:f9:fa:5c:5b:55:ca:50:e7:09:e7: 8e:ea:55:08:7e:e1:b6:c9:28:94:98:7a:b4:4a:72: e1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:25:5B:CE:E4:B8:7F:0C:FA:7A:1D:43:8B:D2:8F:81:E5:CF:BD:80 X509v3 Authority Key Identifier: keyid:BC:97:F2:6F:B2:78:96:7D:D3:CA:39:C5:9D:D0:8C:6A:2C:23:06:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:32:31:bc:29:ce:71:d0:49:e1:cc:a4:12:db:d5:4b:72:65: bb:71:90:c9:90:6a:64:5e:0f:14:4f:70:fd:a9:56:1b:18:73: 6a:5d:fe:96:e1:a2:4b:de:d5:5c:ec:49:9c:2e:45:8b:84:b3: b1:b1:a9:45:b2:3b:24:a0:be:8e:f3:61:f6:57:78:33:c3:ea: d1:f4:23:b5:93:3a:fa:32:49:95:44:fa:3b:ef:fd:8c:d5:64: c9:36:59:f2:81:dd:64:18:3c:ca:d3:0b:6e:8a:40:22:5e:45: 17:15:06:74:9b:cf:e8:e6:85:6d:ab:0b:1b:c1:c9:94:c0:3a: 1d:72:0f:f1:d3:c0:63:6d:bd:4f:a9:35:e2:55:e7:e4:22:ad: 70:fb:97:88:97:f0:28:b4:5a:f3:b8:f3:1b:da:03:28:b0:d6: ff:aa:a1:3c:62:c0:82:05:28:3d:47:bc:71:57:f4:31:d4:be: 48:90:45:05:54:8c:f8:c1:d7:f0:52:d9:26:87:98:32:93:f1: 85:42:b6:ff:fb:de:5e:a3:2c:3f:4b:0c:3f:db:6d:ab:3e:7f: 6e:12:00:af:9d:0f:d8:b6:ee:81:f6:dc:3d:75:1e:b2:e2:82: 09:23:e8:25:3e:78:fc:ce:8c:b1:93:81:57:d1:0c:1f:23:f0: 6d:27:c0:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE4NDUxMTAvBgNVBAUTKEJDOTdGMjZGQjI3ODk2N0REM0NBMzlDNTlERDA4QzZB MkMyMzA2RjkwHhcNMjUwODA5MDAwOTEwWhcNMjUwODE2MDAwOTEwWjAYMRYwFAYD VQQDEw02ODk2OTFhNi04MmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLj5vYWyc7Yh/rpUf7WCIpgXr1wwR4WQ1fz9HukxnlNA7swh37kliOn22cyg Ht8enth+F20tuiQxfsZX3uVu94rkfHdw/nx12nte8US8HRYsEvxKwpClO4Aqsv+/ x3mVncBJWcgA6TJUIDA/BrmTtgdrjftUBnVUVrj3CcgoivhXoNS/mwL3YzsTqP6A 9VNmE3fFiW5sJ3fQL5f3vV0eaP5STJPaM8SA37HpY9RM7fq9BJjpzLnepNRNLJB9 sX40f8TfZ9WPPwmDmYBSra3oZAXhnOZy9zHHfraV4WCbSn+GxK2jqPn6XFtVylDn CeeO6lUIfuG2ySiUmHq0SnLhNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYlW87k uH8M+nodQ4vSj4Hlz72AMB8GA1UdIwQYMBaAFLyX8m+yeJZ908o5xZ3QjGosIwb5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg0NS83QjYyQzgwODIw Q0ExMUVDQjY2QzE0NTJDNEY5QUUwMi92SmZ5YjdKNGxuM1R5am5GbmRDTWFpd2pC dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZKZnliN0o0bG4zVHlqbkZuZENNYWl3akJ2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTg0NS83QjYyQzgwODIwQ0ExMUVDQjY2QzE0NTJDNEY5QUUwMi92SmZ5YjdKNGxu M1R5am5GbmRDTWFpd2pCdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkMjG8Kc5x0EnhzKQS29VLcmW7cZDJkGpkXg8UT3D9qVYbGHNqXf6W 4aJL3tVc7EmcLkWLhLOxsalFsjskoL6O82H2V3gzw+rR9CO1kzr6MkmVRPo77/2M 1WTJNlnygd1kGDzK0wtuikAiXkUXFQZ0m8/o5oVtqwsbwcmUwDodcg/x08Bjbb1P qTXiVefkIq1w+5eIl/AotFrzuPMb2gMosNb/qqE8YsCCBSg9R7xxV/Qx1L5IkEUF VIz4wdfwUtkmh5gyk/GFQrb/+95eoyw/Sww/222rPn9uEgCvnQ/Ytu6B9tw9dR6y 4oIJI+glPnj8zoyxk4FX0QwfI/BtJ8C3 -----END CERTIFICATE-----Generated at Sat Aug 9 23:10:12 2025 by rpki-client