$ rpki-client -vvf rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft File: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft (raw, json) Hash identifier: BOJBbAdrWiITmQmorFW/TIuUUYSX31NTFDNIXYXBkRo= Subject key identifier: 10:67:F5:BE:B7:18:8A:82:87:C7:AD:23:3C:9C:90:EE:2A:CE:E5:4F Authority key identifier: BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2 Certificate issuer: /CN=A917B503/serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft Manifest number: CD Signing time: Sat 09 Aug 2025 06:09:17 +0000 Manifest this update: Sat 09 Aug 2025 06:09:17 +0000 Manifest next update: Sat 16 Aug 2025 06:09:17 +0000 Files and hashes: 1: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl (hash: 9oakPqhi13kfp8gYUHiyEar5tL4N8tM9g+gD2LLu9Pg=) 2: FF7048A08BB111EF8981B871C4F9AE02.roa (hash: 9uEwzB8ckH0lupP2vcJh2pZkJ61ZIv0842o4n0sbwyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B503, serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2 Validity Not Before: Aug 9 06:09:17 2025 GMT Not After : Aug 16 06:09:17 2025 GMT Subject: CN=6896e60d-238a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a9:6f:ec:24:2e:00:96:16:f2:ce:34:41:fa: 55:f3:14:17:ef:b8:56:64:a4:7d:c0:c5:08:df:e4: 8c:3c:ec:67:a0:5b:ad:a9:53:8e:c0:35:83:84:fc: e2:be:c7:69:f7:15:f2:e3:c1:10:40:e8:cd:c4:00: db:cf:a9:95:0f:d8:d7:35:17:95:78:84:fc:07:e1: e1:a5:13:82:f7:8f:b8:6a:76:be:7d:f0:dd:b2:0e: e5:5f:55:8c:d4:ba:97:e1:f0:f6:31:e5:fc:ea:4a: 9b:1e:9e:2f:8e:16:c9:1f:df:4e:8a:a4:4f:e4:41: 67:b1:5d:6f:a1:bb:98:19:79:70:bd:81:15:be:e3: e5:71:41:09:d0:10:92:e7:d9:54:b4:ca:31:49:9b: 2e:e3:e8:27:7e:4c:a1:61:49:cf:e9:03:42:70:bc: ec:1a:b3:17:2b:6a:57:41:c4:b9:73:51:da:f8:a7: 3f:2c:12:2f:8c:60:50:05:59:07:8f:99:6b:11:23: f6:d0:60:82:5c:a6:bf:14:d0:31:e7:21:f5:4b:3a: 38:f1:1c:98:2e:6e:bd:a6:37:3d:64:3f:db:d3:a6: bd:93:ca:73:c0:64:14:80:0b:0c:25:6b:ec:91:89: fb:fc:ce:4c:38:fb:51:42:61:bf:43:53:39:60:af: 28:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:67:F5:BE:B7:18:8A:82:87:C7:AD:23:3C:9C:90:EE:2A:CE:E5:4F X509v3 Authority Key Identifier: keyid:BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:03:cc:85:2e:b5:3c:55:16:bc:97:95:94:8f:dc:d8:f5:c9: d0:a1:10:9e:65:49:be:e0:e2:65:70:fc:5f:f8:78:bd:61:0f: 59:5d:c9:76:2a:79:f5:f8:57:30:63:66:ea:85:08:5f:03:f7: 14:ca:ad:c4:6e:9b:0b:09:5a:8e:3d:29:10:bd:58:e4:c1:1d: e2:6b:38:c1:07:d5:2c:1f:95:4f:72:7e:ec:07:81:be:4c:39: 78:da:f8:d8:c4:c0:db:80:1a:f0:3a:eb:3f:87:98:01:08:f0: 38:ea:cd:86:dd:5c:23:46:f6:b6:47:d6:5c:9c:28:37:05:33: 3d:e2:80:91:9d:74:d6:aa:bf:b0:72:a8:53:2e:2a:03:dc:08: 4f:a9:be:ce:0f:fb:8c:1e:75:e6:6a:d9:3b:a3:46:cf:73:7e: 49:c6:fe:6d:b2:45:f4:72:52:43:29:6c:83:10:51:70:ae:95: 69:78:12:67:6b:1e:a0:44:b8:35:a4:30:c3:bd:e0:7d:3f:a2: f9:4d:90:83:35:8e:fc:aa:dd:07:5e:55:94:06:23:82:f5:8b: 80:b4:30:1f:83:0f:1f:43:91:58:6b:47:61:81:7c:9e:c7:31: 48:f2:69:19:9a:6f:73:f7:7b:03:2f:41:de:04:f4:9c:26:4f: a0:f1:95:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MDMxMTAvBgNVBAUTKEJENjNFMEREQ0I1Q0Q0MUIzNDUwMURGMkU4MUEyQTcy Q0VFMzZFRjIwHhcNMjUwODA5MDYwOTE3WhcNMjUwODE2MDYwOTE3WjAYMRYwFAYD VQQDEw02ODk2ZTYwZC0yMzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qlv7CQuAJYW8s40QfpV8xQX77hWZKR9wMUI3+SMPOxnoFutqVOOwDWDhPzi vsdp9xXy48EQQOjNxADbz6mVD9jXNReVeIT8B+HhpROC94+4ana+ffDdsg7lX1WM 1LqX4fD2MeX86kqbHp4vjhbJH99OiqRP5EFnsV1vobuYGXlwvYEVvuPlcUEJ0BCS 59lUtMoxSZsu4+gnfkyhYUnP6QNCcLzsGrMXK2pXQcS5c1Ha+Kc/LBIvjGBQBVkH j5lrESP20GCCXKa/FNAx5yH1Szo48RyYLm69pjc9ZD/b06a9k8pzwGQUgAsMJWvs kYn7/M5MOPtRQmG/Q1M5YK8ooQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBn9b63 GIqCh8etIzyckO4qzuVPMB8GA1UdIwQYMBaAFL1j4N3LXNQbNFAd8ugaKnLO427y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUwMy83Qjg4NUZFNDQz MTAxMUVGODk0OEEzODFDNEY5QUUwMi92V1BnM2N0YzFCczBVQjN5NkJvcWNzN2pi dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZXUGczY3RjMUJzMFVCM3k2Qm9xY3M3amJ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUwMy83Qjg4NUZFNDQzMTAxMUVGODk0OEEzODFDNEY5QUUwMi92V1BnM2N0YzFC czBVQjN5NkJvcWNzN2pidkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYA8yFLrU8VRa8l5WUj9zY9cnQoRCeZUm+4OJlcPxf+Hi9YQ9ZXcl2 Knn1+FcwY2bqhQhfA/cUyq3EbpsLCVqOPSkQvVjkwR3iazjBB9UsH5VPcn7sB4G+ TDl42vjYxMDbgBrwOus/h5gBCPA46s2G3VwjRva2R9ZcnCg3BTM94oCRnXTWqr+w cqhTLioD3AhPqb7OD/uMHnXmatk7o0bPc35Jxv5tskX0clJDKWyDEFFwrpVpeBJn ax6gRLg1pDDDveB9P6L5TZCDNY78qt0HXlWUBiOC9YuAtDAfgw8fQ5FYa0dhgXye xzFI8mkZmm9z93sDL0HeBPScJk+g8ZWM -----END CERTIFICATE-----Generated at Mon Aug 11 01:54:14 2025 by rpki-client