$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft File: Vj8ylI68GzkPMqCqPzYUeFr858I.mft (raw, json) Hash identifier: Y2h837pal+PwVueaEEmN09XCX1aXpAeQtwHFu8HL4ow= Subject key identifier: B5:CD:63:F0:73:57:2C:FF:78:9F:D9:3F:8B:7D:14:D6:BC:69:6B:F3 Authority key identifier: 56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2 Certificate issuer: /CN=A917AC8C/serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2 Certificate serial: 02FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft Manifest number: 02F2 Signing time: Thu 07 Aug 2025 01:52:09 +0000 Manifest this update: Thu 07 Aug 2025 01:52:09 +0000 Manifest next update: Thu 14 Aug 2025 01:52:09 +0000 Files and hashes: 1: Vj8ylI68GzkPMqCqPzYUeFr858I.crl (hash: Hezi7pXELBj7HkoiVt/3h7e2Hfuu2bF3aaxeuhCtQY0=) 2: EA5EB99CEBBD11ECB3DAFE39C4F9AE02.roa (hash: 6Otg6zDUC3T6chkRppH8+51GAfFhb4rhNrj+nGsoi3I=) 3: EB756434EBBD11ECB3DAFE39C4F9AE02.roa (hash: dSIhsF2Xt53EsY5Qnrga5XSOK9oGKkuxZKuBhxw3Vak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 762 (0x2fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AC8C, serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2 Validity Not Before: Aug 7 01:52:09 2025 GMT Not After : Aug 14 01:52:09 2025 GMT Subject: CN=689406c9-df7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a5:16:25:88:46:cf:41:a1:78:a4:0e:1a:44: aa:75:f8:8c:f7:68:d2:d6:d1:f6:64:f5:90:67:f3: 3f:69:31:e3:13:64:d4:a6:b2:72:f8:df:6e:6b:7e: e4:61:45:68:da:0b:a9:8a:fa:d4:f7:f2:91:4f:d0: 46:33:15:45:f3:dc:26:bc:47:c1:dc:63:6b:fb:54: ab:71:77:73:99:60:e8:2d:dd:3b:62:ef:0b:b2:87: 2e:7e:d0:4e:a8:2f:d0:63:9b:80:31:66:8c:d2:b8: d8:2d:a9:ad:61:5c:df:42:64:61:9a:e2:50:44:cc: b5:4f:68:5a:e9:ae:52:dd:ae:a2:db:d5:b6:1e:8b: 8f:f1:de:41:b7:97:04:0e:0d:f6:10:17:3a:8a:52: 6f:a9:0c:38:34:40:d2:5d:2d:38:39:e8:51:c1:fc: c5:39:f9:d5:5f:55:23:2a:8a:9b:c8:42:78:15:4f: 6c:ea:fc:3d:5e:7b:5b:68:ce:48:83:30:0f:66:f4: b4:00:de:4d:6e:6d:cd:af:05:7b:b1:cd:e2:c7:d2: 3a:2a:ce:c7:b6:ec:fb:93:fa:2c:05:3a:f5:dd:c4: 34:6a:a8:c0:7c:9e:b4:02:a2:53:29:a1:50:9c:29: 20:00:0e:60:d9:52:eb:36:60:3f:04:90:c8:ab:74: 40:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CD:63:F0:73:57:2C:FF:78:9F:D9:3F:8B:7D:14:D6:BC:69:6B:F3 X509v3 Authority Key Identifier: keyid:56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:39:2f:cc:a3:43:81:99:0c:fd:36:7f:0a:34:35:fc:09:21: 3e:e4:55:ad:42:3a:50:22:d7:86:09:4e:e1:bd:da:d1:db:0b: 07:d7:95:04:d7:4c:31:4a:17:8b:39:7f:c8:c5:24:1a:8e:a4: 3d:cc:c5:98:3a:88:7a:39:bf:b9:e8:5b:55:b7:ec:ea:65:16: 75:3d:bc:0e:73:6b:90:4b:69:40:43:d2:ea:5e:b0:18:f0:4e: 41:12:56:1d:f6:b9:19:6d:8d:ac:47:eb:6c:67:fc:7b:0b:cc: ce:84:09:23:93:1f:3e:6a:d3:74:0b:80:5c:1a:77:62:46:0b: 26:45:25:69:05:95:f6:97:2e:88:7f:e6:d8:52:9a:c7:58:f4: 22:55:19:f5:b9:56:69:a0:d0:e4:01:49:81:cc:61:85:ff:27: 3c:80:4f:67:27:f6:4e:df:6b:7b:14:5a:cd:95:91:fa:99:47: 0e:86:e7:9a:37:f9:57:8f:23:76:17:52:55:29:7a:c1:36:e0: 7a:13:00:b2:12:b1:04:9e:e3:b0:80:a7:86:69:fc:7c:a2:e1: 06:b3:9f:bd:30:f5:6f:fb:fc:92:dd:9f:27:66:8f:ad:de:df: a8:04:59:35:e5:11:a6:84:b5:98:7c:76:9b:b0:f6:bc:06:4e: 5f:4c:54:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDOEMxMTAvBgNVBAUTKDU2M0YzMjk0OEVCQzFCMzkwRjMyQTBBQTNGMzYxNDc4 NUFGQ0U3QzIwHhcNMjUwODA3MDE1MjA5WhcNMjUwODE0MDE1MjA5WjAYMRYwFAYD VQQDEw02ODk0MDZjOS1kZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqUWJYhGz0GheKQOGkSqdfiM92jS1tH2ZPWQZ/M/aTHjE2TUprJy+N9ua37k YUVo2gupivrU9/KRT9BGMxVF89wmvEfB3GNr+1SrcXdzmWDoLd07Yu8LsocuftBO qC/QY5uAMWaM0rjYLamtYVzfQmRhmuJQRMy1T2ha6a5S3a6i29W2HouP8d5Bt5cE Dg32EBc6ilJvqQw4NEDSXS04OehRwfzFOfnVX1UjKoqbyEJ4FU9s6vw9XntbaM5I gzAPZvS0AN5Nbm3NrwV7sc3ix9I6Ks7Htuz7k/osBTr13cQ0aqjAfJ60AqJTKaFQ nCkgAA5g2VLrNmA/BJDIq3RAOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXNY/Bz Vyz/eJ/ZP4t9FNa8aWvzMB8GA1UdIwQYMBaAFFY/MpSOvBs5DzKgqj82FHha/OfC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUM4Qy84OTk2NkRDQUVC QjkxMUVDOTlFNTYxMEVDNEY5QUUwMi9Wajh5bEk2OEd6a1BNcUNxUHpZVWVGcjg1 OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZqOHlsSTY4R3prUE1xQ3FQellVZUZyODU4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUM4Qy84OTk2NkRDQUVCQjkxMUVDOTlFNTYxMEVDNEY5QUUwMi9Wajh5bEk2OEd6 a1BNcUNxUHpZVWVGcjg1OEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/OS/Mo0OBmQz9Nn8KNDX8CSE+5FWtQjpQIteGCU7hvdrR2wsH15UE 10wxSheLOX/IxSQajqQ9zMWYOoh6Ob+56FtVt+zqZRZ1PbwOc2uQS2lAQ9LqXrAY 8E5BElYd9rkZbY2sR+tsZ/x7C8zOhAkjkx8+atN0C4BcGndiRgsmRSVpBZX2ly6I f+bYUprHWPQiVRn1uVZpoNDkAUmBzGGF/yc8gE9nJ/ZO32t7FFrNlZH6mUcOhuea N/lXjyN2F1JVKXrBNuB6EwCyErEEnuOwgKeGafx8ouEGs5+9MPVv+/yS3Z8nZo+t 3t+oBFk15RGmhLWYfHabsPa8Bk5fTFQn -----END CERTIFICATE-----Generated at Sat Aug 9 01:08:50 2025 by rpki-client