$ rpki-client -vvf rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft File: vmOANw9kBuY_dG-vUrxQHsTQvVI.mft (raw, json) Hash identifier: iEDsoZ4JrKEcCivD8RLjuiofJTqCVOJu4zUT0UQqcys= Subject key identifier: 95:09:BE:AB:66:C6:76:01:E0:6D:A7:4A:36:E2:3B:F2:BD:33:00:A5 Authority key identifier: BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52 Certificate issuer: /CN=A9171B8D/serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft Manifest number: 4B Signing time: Sat 09 Aug 2025 07:51:16 +0000 Manifest this update: Sat 09 Aug 2025 07:51:15 +0000 Manifest next update: Sat 16 Aug 2025 07:51:15 +0000 Files and hashes: 1: vmOANw9kBuY_dG-vUrxQHsTQvVI.crl (hash: Dnl7rGcDvwvc5wxB/iUFYqtvkjUl9M6EC7uwCkjEblM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171B8D, serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52 Validity Not Before: Aug 9 07:51:15 2025 GMT Not After : Aug 16 07:51:15 2025 GMT Subject: CN=6896fdf3-9467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:39:b8:33:96:70:be:cb:ae:29:bf:7f:06:4e: b2:71:2a:32:0b:b2:50:b9:45:ac:a2:e6:45:79:0a: 46:fe:13:a9:0a:6f:59:b8:b4:4d:10:8f:ba:59:e2: 87:d2:41:4c:60:5d:ca:62:a2:78:9e:67:44:a4:ae: 80:b4:11:2f:86:a1:4b:f5:b4:b1:b4:6c:60:04:97: d6:10:7b:f2:36:5d:36:a9:fb:5b:e6:f8:a5:39:2c: 4a:00:7a:89:96:f2:38:4d:ad:b3:fa:d9:5d:e1:41: 6b:9a:e6:00:d7:ca:13:63:c7:e8:6f:13:cf:31:6d: 20:7e:8c:c0:5d:e6:9e:47:ca:2c:1c:6d:1b:32:7e: c1:9d:c8:9a:98:6a:9e:0e:20:d4:02:dc:4e:57:6a: 84:df:33:99:da:92:6f:99:7e:7f:dd:08:40:d0:a6: 40:4d:f5:46:f0:db:ff:62:d0:6c:a8:24:59:93:27: 5e:e6:a5:57:61:f5:a5:ec:1c:88:ad:61:ee:84:70: 4b:b4:dd:c0:2d:31:0f:ba:68:64:7c:45:48:2d:3f: 6d:96:8e:53:bc:11:96:d8:34:3d:1e:56:3c:f2:32: 76:2e:df:5c:11:37:53:44:4e:22:4e:c3:92:de:5c: 52:fc:98:9d:64:57:33:39:52:bc:f5:e8:d2:c0:30: b4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:09:BE:AB:66:C6:76:01:E0:6D:A7:4A:36:E2:3B:F2:BD:33:00:A5 X509v3 Authority Key Identifier: keyid:BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:92:6f:07:da:cb:0f:a7:84:5b:0a:46:af:1c:c7:47:50:49: bf:0a:b7:a6:8d:49:cb:e7:ae:47:37:d1:e0:5c:da:2c:97:cc: 98:26:4d:0a:f8:3b:a1:bd:de:40:29:9c:aa:c6:35:61:f0:20: da:a8:cf:03:60:1f:26:37:95:8e:d4:0d:e0:fc:c9:7d:aa:cf: 3d:8f:c2:f9:a5:a1:95:65:21:c4:ca:84:ef:5f:66:fc:6f:a7: d4:04:f0:9f:db:6c:17:e0:4c:2e:c1:db:d1:12:eb:6f:89:c4: c6:35:b2:0b:46:f8:4a:f1:3b:bd:e7:82:2d:66:5c:56:3e:1c: 32:0e:9e:01:b2:5d:41:fb:16:95:b7:68:c6:37:32:5d:1b:02: 07:a4:c9:d5:38:80:6f:b9:d7:87:79:8f:51:aa:1f:3b:bd:b3: 31:28:6d:32:68:66:ce:d6:12:a4:75:fa:b4:d9:b7:19:40:d1: 95:c0:47:17:c1:d5:c8:66:06:e3:4d:2e:8f:f7:d2:e6:70:83: e6:4d:b8:72:b3:39:c7:f2:cd:25:45:6e:cd:4d:86:8f:e1:64: 47:a1:89:2f:7e:06:f8:1e:59:25:42:64:c2:21:9d:05:45:13: 65:4f:ab:9b:e9:b5:95:4b:6f:bb:70:86:e9:27:47:c7:b7:3c: 91:69:c3:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MUI4RDExMC8GA1UEBRMoQkU2MzgwMzcwRjY0MDZFNjNGNzQ2RkFGNTJCQzUwMUVD NEQwQkQ1MjAeFw0yNTA4MDkwNzUxMTVaFw0yNTA4MTYwNzUxMTVaMBgxFjAUBgNV BAMTDTY4OTZmZGYzLTk0NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwObgzlnC+y64pv38GTrJxKjILslC5Rayi5kV5Ckb+E6kKb1m4tE0Qj7pZ4ofS QUxgXcpionieZ0SkroC0ES+GoUv1tLG0bGAEl9YQe/I2XTap+1vm+KU5LEoAeomW 8jhNrbP62V3hQWua5gDXyhNjx+hvE88xbSB+jMBd5p5HyiwcbRsyfsGdyJqYap4O INQC3E5XaoTfM5nakm+Zfn/dCEDQpkBN9Ubw2/9i0GyoJFmTJ17mpVdh9aXsHIit Ye6EcEu03cAtMQ+6aGR8RUgtP22WjlO8EZbYND0eVjzyMnYu31wRN1NETiJOw5Le XFL8mJ1kVzM5Urz16NLAMLStAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlQm+q2bG dgHgbadKNuI78r0zAKUwHwYDVR0jBBgwFoAUvmOANw9kBuY/dG+vUrxQHsTQvVIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxQjhELzFDRjlBODdBMDNE MTExRjBCMjM0QkMxNUM0RjlBRTAyL3ZtT0FOdzlrQnVZX2RHLXZVcnhRSHNUUXZW SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdm1PQU53OWtCdVlfZEctdlVyeFFIc1RRdlZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx QjhELzFDRjlBODdBMDNEMTExRjBCMjM0QkMxNUM0RjlBRTAyL3ZtT0FOdzlrQnVZ X2RHLXZVcnhRSHNUUXZWSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD6Sbwfayw+nhFsKRq8cx0dQSb8Kt6aNScvnrkc30eBc2iyXzJgmTQr4 O6G93kApnKrGNWHwINqozwNgHyY3lY7UDeD8yX2qzz2PwvmloZVlIcTKhO9fZvxv p9QE8J/bbBfgTC7B29ES62+JxMY1sgtG+ErxO73ngi1mXFY+HDIOngGyXUH7FpW3 aMY3Ml0bAgekydU4gG+514d5j1GqHzu9szEobTJoZs7WEqR1+rTZtxlA0ZXARxfB 1chmBuNNLo/30uZwg+ZNuHKzOcfyzSVFbs1Nho/hZEehiS9+BvgeWSVCZMIhnQVF E2VPq5vptZVLb7twhuknR8e3PJFpw0Y= -----END CERTIFICATE-----Generated at Mon Aug 11 07:28:50 2025 by rpki-client