$ rpki-client -vvf rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft File: VwO1XNjigCKWBKELyM9bOAERY_o.mft (raw, json) Hash identifier: Aq5KPL+YWWQiN9iLbc4ssvlMG2MeStiDCnjVKB5YhDE= Subject key identifier: B5:5B:9C:49:C1:74:45:A7:00:75:97:0F:6E:F6:46:A6:50:B7:41:7D Authority key identifier: 57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA Certificate issuer: /CN=A9183EB3/serialNumber=5703B55CD8E280229604A10BC8CF5B38011163FA Certificate serial: 0A89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft Manifest number: 0A82 Signing time: Mon 04 Aug 2025 19:50:09 +0000 Manifest this update: Mon 04 Aug 2025 19:50:08 +0000 Manifest next update: Mon 11 Aug 2025 19:50:08 +0000 Files and hashes: 1: VwO1XNjigCKWBKELyM9bOAERY_o.crl (hash: S3nXImmW+dSg/I02arMVAmlh0SvBBDErMkOPu2MR25E=) 2: D67C31E8637511EA8A698E0BC4F9AE02.roa (hash: 0G9HtTLZBqQUwE8UGiq72iqUjTtI4Gz6+fEdMQN9vkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 19:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2697 (0xa89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183EB3, serialNumber=5703B55CD8E280229604A10BC8CF5B38011163FA Validity Not Before: Aug 4 19:50:08 2025 GMT Not After : Aug 11 19:50:08 2025 GMT Subject: CN=68910ef1-aee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:30:cb:3d:5c:8a:b3:d5:af:c0:7b:23:f1:55: 5b:e0:00:a8:7c:ba:66:b4:d6:b1:99:e0:21:35:fd: 1f:c7:a8:9b:2e:13:fa:0c:4b:c9:51:ec:78:99:40: cf:43:5a:be:be:09:13:24:68:72:c9:6b:e4:8c:9b: 97:65:07:ff:bf:59:a2:33:ba:de:dc:2c:8d:06:10: 59:60:a9:d2:15:00:d8:97:33:3e:c0:37:07:f7:ce: 75:98:1b:f7:e0:79:1e:d7:5f:52:d4:b4:e0:78:4b: 38:bb:6f:6e:3f:73:d8:9a:20:e1:d4:57:c8:4c:36: 0b:c4:92:32:cd:85:0a:18:d7:e9:22:37:37:7d:24: 63:ab:59:67:d5:76:92:ea:ad:02:59:73:25:63:0f: 08:90:a0:ae:ce:ed:dc:d6:a9:44:c4:75:0e:4a:3b: 43:9f:7f:2a:47:96:b8:13:b2:18:06:d9:54:c4:a7: 46:c7:b2:d5:67:98:11:11:cb:70:b1:50:cb:98:89: e6:bd:c1:da:18:a9:54:d5:44:7a:4d:2a:9c:d1:f0: eb:98:dd:72:17:32:ed:3b:7b:b4:15:12:c1:2e:38: b8:77:cf:46:eb:41:ad:33:6c:50:75:11:9b:ac:d5: 50:9c:33:54:fd:2c:79:19:d0:0b:44:7a:9a:d3:07: aa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:5B:9C:49:C1:74:45:A7:00:75:97:0F:6E:F6:46:A6:50:B7:41:7D X509v3 Authority Key Identifier: keyid:57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:77:07:81:41:73:2f:ea:7c:08:81:03:24:e6:ed:9b:01:09: 0c:be:ab:58:d0:19:f2:16:78:99:96:90:07:85:c3:71:d9:97: c6:88:86:4e:84:e6:27:e7:0a:9a:1f:d8:2a:d1:25:3f:43:18: 5c:00:e6:fc:e4:0d:00:37:bf:8f:a4:95:31:53:0a:b9:a6:84: 77:06:94:3f:93:84:1c:a9:46:4e:dc:b4:fb:e2:20:b4:c8:a8: 8a:c1:89:73:2b:fa:eb:72:a9:8a:b7:2b:3e:60:92:d0:97:bd: b9:6f:57:dc:ac:23:0f:5f:db:d4:03:6e:37:74:b9:a9:e9:cc: 01:aa:08:19:2b:26:d0:07:63:71:4f:e7:eb:bf:68:e5:a2:6a: f6:6f:b8:c6:93:05:33:65:5d:9b:bc:72:59:19:47:e9:4a:fe: 4f:06:c0:21:cc:b5:a1:02:ec:99:9a:30:55:82:32:b5:e4:8d: ac:b2:4a:7c:52:b7:21:be:cc:77:7d:ff:70:f6:9f:7b:8f:3b: ef:e8:28:6b:9b:46:aa:1a:40:95:f2:ff:fb:25:44:09:21:ea: 39:07:be:10:8c:a3:ba:bc:d4:85:8d:5d:02:8b:04:95:13:27: 92:f3:b1:8c:c0:24:cb:66:fe:e1:f7:1b:d0:78:74:c7:78:28: ab:93:f7:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNFQjMxMTAvBgNVBAUTKDU3MDNCNTVDRDhFMjgwMjI5NjA0QTEwQkM4Q0Y1QjM4 MDExMTYzRkEwHhcNMjUwODA0MTk1MDA4WhcNMjUwODExMTk1MDA4WjAYMRYwFAYD VQQDEw02ODkxMGVmMS1hZWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TDLPVyKs9WvwHsj8VVb4ACofLpmtNaxmeAhNf0fx6ibLhP6DEvJUex4mUDP Q1q+vgkTJGhyyWvkjJuXZQf/v1miM7re3CyNBhBZYKnSFQDYlzM+wDcH9851mBv3 4Hke119S1LTgeEs4u29uP3PYmiDh1FfITDYLxJIyzYUKGNfpIjc3fSRjq1ln1XaS 6q0CWXMlYw8IkKCuzu3c1qlExHUOSjtDn38qR5a4E7IYBtlUxKdGx7LVZ5gREctw sVDLmInmvcHaGKlU1UR6TSqc0fDrmN1yFzLtO3u0FRLBLji4d89G60GtM2xQdRGb rNVQnDNU/Sx5GdALRHqa0weqSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVbnEnB dEWnAHWXD272RqZQt0F9MB8GA1UdIwQYMBaAFFcDtVzY4oAilgShC8jPWzgBEWP6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0VCMy8zREI2QTM2MjYz NzUxMUVBQjlDMzY4MEJDNEY5QUUwMi9Wd08xWE5qaWdDS1dCS0VMeU05Yk9BRVJZ X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z3TzFYTmppZ0NLV0JLRUx5TTliT0FFUllfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0VCMy8zREI2QTM2MjYzNzUxMUVBQjlDMzY4MEJDNEY5QUUwMi9Wd08xWE5qaWdD S1dCS0VMeU05Yk9BRVJZX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAydweBQXMv6nwIgQMk5u2bAQkMvqtY0BnyFniZlpAHhcNx2ZfGiIZO hOYn5wqaH9gq0SU/QxhcAOb85A0AN7+PpJUxUwq5poR3BpQ/k4QcqUZO3LT74iC0 yKiKwYlzK/rrcqmKtys+YJLQl725b1fcrCMPX9vUA243dLmp6cwBqggZKybQB2Nx T+frv2jlomr2b7jGkwUzZV2bvHJZGUfpSv5PBsAhzLWhAuyZmjBVgjK15I2sskp8 Urchvsx3ff9w9p97jzvv6Chrm0aqGkCV8v/7JUQJIeo5B74QjKO6vNSFjV0CiwSV EyeS87GMwCTLZv7h9xvQeHTHeCirk/eG -----END CERTIFICATE-----Generated at Wed Aug 6 09:43:27 2025 by rpki-client