$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft File: vTfx1AdHvmxfXGujMH32Vgq2gaM.mft (raw, json) Hash identifier: SPf1AJXQOS0Devbtz3qt+t22CR5XtvJsclLtYmq7Dkw= Subject key identifier: EF:22:8F:74:80:C6:58:1B:57:EB:97:4A:15:87:3A:43:E9:B6:35:DE Authority key identifier: BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3 Certificate issuer: /CN=A91817E6/serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft Manifest number: 0AB0 Signing time: Fri 08 Aug 2025 20:44:47 +0000 Manifest this update: Fri 08 Aug 2025 20:44:47 +0000 Manifest next update: Fri 15 Aug 2025 20:44:46 +0000 Files and hashes: 1: vTfx1AdHvmxfXGujMH32Vgq2gaM.crl (hash: FIWr8A57cviO54Z0vHFLPeb/GAy0ycEOa0GLGR4qaKo=) 2: 28C454FCB41211EF8D2EC946C4F9AE02.roa (hash: A1jEmvYmaWLQVLC3lKrKCjgOEWn5/laaNWB/FSQRMc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91817E6, serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3 Validity Not Before: Aug 8 20:44:47 2025 GMT Not After : Aug 15 20:44:46 2025 GMT Subject: CN=689661bf-8d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:be:1f:2b:73:ca:f6:8a:78:5a:ef:07:ee:15: 7b:ce:87:9f:83:1f:ff:13:48:40:9d:05:94:8c:ba: 99:43:3e:b7:c4:9a:62:fa:07:7f:a7:d5:d1:32:f6: 7e:45:78:fa:82:55:73:90:48:eb:b0:bd:13:4e:b2: 7b:b4:1c:59:8a:ac:d1:79:34:6c:72:87:6d:cf:f6: 45:cf:82:86:3d:9c:82:1e:52:49:27:c2:24:2f:46: e4:57:48:7f:44:b6:09:d7:12:b1:f3:57:e7:fd:71: c2:1d:0c:b5:57:d2:dd:e5:c0:7a:51:dc:99:ef:97: 10:b3:2b:13:65:4b:78:ca:be:61:47:05:8c:90:00: 52:ba:cd:71:7e:17:f2:75:5b:f4:48:7d:0a:3c:d6: eb:46:18:20:67:c1:35:6e:bf:43:d7:87:93:74:d6: b9:1c:89:d1:d3:6b:54:73:83:b6:b4:f2:c6:6d:57: 33:1f:1c:39:2e:c9:ad:05:24:d3:79:44:1e:90:ea: 27:d8:ae:f3:1d:f3:c0:c2:60:c8:83:6b:3e:ab:64: 3a:fc:65:1b:39:4f:14:65:e7:db:fe:bd:11:76:1d: e3:5f:b0:48:fc:77:ce:db:5f:e4:4d:b6:17:be:94: 76:2d:8a:c1:c1:76:f1:fb:8a:6e:07:39:65:ff:27: b9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:22:8F:74:80:C6:58:1B:57:EB:97:4A:15:87:3A:43:E9:B6:35:DE X509v3 Authority Key Identifier: keyid:BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:9c:31:c0:46:e6:de:c0:c8:bc:0c:5d:97:8a:dd:2b:79:df: 36:d0:dd:0f:e9:04:7f:d9:7a:f5:0c:df:62:8f:24:ff:3d:60: 9b:cb:fc:d9:43:3d:71:3b:e7:ed:41:f6:04:06:3c:eb:17:f9: 7e:34:b8:11:86:b4:a4:36:2e:64:d0:ce:cc:13:bf:5b:95:9c: 4d:d2:f2:db:9c:ee:d4:24:53:42:89:6c:a4:6e:4b:93:6f:ff: 0e:da:fb:53:89:2d:33:93:c3:cd:3a:db:7c:25:5d:cb:12:3f: dc:b5:cf:9f:4f:84:c8:fd:f1:89:90:3d:0a:48:0d:11:b1:24: 94:1f:61:83:b7:2c:93:54:3a:7c:b7:0b:e1:3c:d4:4a:96:86: a4:6a:b1:2a:4a:ae:a6:e1:93:8a:1b:d0:32:79:55:45:0d:6c: 27:5a:01:5a:a6:08:91:02:6a:55:9d:51:87:56:a4:bb:ba:39: ac:54:b2:9b:e3:8b:62:1f:49:50:c1:14:b3:8d:1d:cc:ac:d3: cf:94:a6:d8:d6:13:71:fd:e8:84:d9:1d:cf:71:7e:39:2a:0a: 4a:51:15:c7:4d:2d:14:07:39:13:b2:0d:5f:4c:d4:c4:ff:7d: 5f:bd:64:9f:03:ec:79:d4:6b:74:1b:91:77:67:d2:70:73:d3: 11:76:2f:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE3RTYxMTAvBgNVBAUTKEJEMzdGMUQ0MDc0N0JFNkM1RjVDNkJBMzMwN0RGNjU2 MEFCNjgxQTMwHhcNMjUwODA4MjA0NDQ3WhcNMjUwODE1MjA0NDQ2WjAYMRYwFAYD VQQDEw02ODk2NjFiZi04ZDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsL4fK3PK9op4Wu8H7hV7zoefgx//E0hAnQWUjLqZQz63xJpi+gd/p9XRMvZ+ RXj6glVzkEjrsL0TTrJ7tBxZiqzReTRscodtz/ZFz4KGPZyCHlJJJ8IkL0bkV0h/ RLYJ1xKx81fn/XHCHQy1V9Ld5cB6UdyZ75cQsysTZUt4yr5hRwWMkABSus1xfhfy dVv0SH0KPNbrRhggZ8E1br9D14eTdNa5HInR02tUc4O2tPLGbVczHxw5LsmtBSTT eUQekOon2K7zHfPAwmDIg2s+q2Q6/GUbOU8UZefb/r0Rdh3jX7BI/HfO21/kTbYX vpR2LYrBwXbx+4puBzll/ye50QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8ij3SA xlgbV+uXShWHOkPptjXeMB8GA1UdIwQYMBaAFL038dQHR75sX1xrozB99lYKtoGj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTdFNi81NTc0MEU3MEIz QjMxMUVBQjE5OENFMERDNEY5QUUwMi92VGZ4MUFkSHZteGZYR3VqTUgzMlZncTJn YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZUZngxQWRIdm14ZlhHdWpNSDMyVmdxMmdhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTdFNi81NTc0MEU3MEIzQjMxMUVBQjE5OENFMERDNEY5QUUwMi92VGZ4MUFkSHZt eGZYR3VqTUgzMlZncTJnYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWnDHARubewMi8DF2Xit0red820N0P6QR/2Xr1DN9ijyT/PWCby/zZ Qz1xO+ftQfYEBjzrF/l+NLgRhrSkNi5k0M7ME79blZxN0vLbnO7UJFNCiWykbkuT b/8O2vtTiS0zk8PNOtt8JV3LEj/ctc+fT4TI/fGJkD0KSA0RsSSUH2GDtyyTVDp8 twvhPNRKloakarEqSq6m4ZOKG9AyeVVFDWwnWgFapgiRAmpVnVGHVqS7ujmsVLKb 44tiH0lQwRSzjR3MrNPPlKbY1hNx/eiE2R3PcX45KgpKURXHTS0UBzkTsg1fTNTE /31fvWSfA+x51Gt0G5F3Z9Jwc9MRdi/R -----END CERTIFICATE-----Generated at Sun Aug 10 04:57:38 2025 by rpki-client