$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft File: vrUOQRzD4sQGA7FqkWCepNQGZJU.mft (raw, json) Hash identifier: BVDorlrYvf9ka0kmpQ7cGoMOgCRs3G1j6AlY9WBvtAU= Subject key identifier: 23:5B:55:0B:94:7A:32:BA:0D:D1:54:6B:B2:9B:32:73:19:1F:BD:6D Authority key identifier: BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 Certificate issuer: /CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Certificate serial: 0DF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft Manifest number: 0DE9 Signing time: Fri 08 Aug 2025 18:05:34 +0000 Manifest this update: Fri 08 Aug 2025 18:05:33 +0000 Manifest next update: Fri 15 Aug 2025 18:05:33 +0000 Files and hashes: 1: vrUOQRzD4sQGA7FqkWCepNQGZJU.crl (hash: Y0My1ztDUoIbSQD4RtcClYjDdWcPgogytB76uzWtbCo=) 2: 4BECBAFCB99811E98000600AC4F9AE02.roa (hash: rqASzwwK7FbCaVAYTK88nCqRcfP1vi7cp+uLy8ucquU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3569 (0xdf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B2F8, serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Validity Not Before: Aug 8 18:05:33 2025 GMT Not After : Aug 15 18:05:33 2025 GMT Subject: CN=68963c6d-3352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a0:04:06:54:27:ae:d8:73:0f:76:ef:41:40: ec:d1:dd:f9:d4:05:fe:fc:46:43:3e:8f:94:fd:28: 69:1a:e1:b0:dd:d1:c1:17:f5:a1:24:e7:6d:87:81: 24:c3:df:09:e5:f1:d6:79:f9:8d:03:c5:a9:34:54: 07:4d:ae:c5:81:0c:a2:19:d5:0d:46:9a:5c:f9:d8: 7b:49:fb:c9:39:58:df:f9:45:c7:93:eb:0b:61:53: f3:6d:36:cb:b4:b3:57:ec:0e:2e:da:17:0d:8f:11: 11:8f:b1:ab:13:5d:16:d4:b7:08:6b:4f:72:78:53: b4:ee:e6:8f:7c:87:fc:89:4f:6b:27:35:7d:4f:cd: 66:59:60:60:e0:ce:0f:c2:79:ff:87:d0:60:d1:d2: fd:ab:7a:f0:5f:7f:83:fc:b5:6b:aa:75:8c:f5:ae: 26:e4:a0:20:0a:f0:96:bc:19:7a:12:f6:0a:9a:4c: 45:e4:1e:1a:56:b3:41:1d:b7:eb:28:88:1a:2c:ba: 94:74:75:30:a4:7c:20:81:25:ad:95:52:08:a3:83: b5:34:b8:0f:16:e4:6d:7c:dc:84:f6:17:4e:6a:5e: 78:7f:ed:e9:20:14:ee:fd:e5:bf:27:66:d0:04:b4: 51:ae:91:fb:8d:fd:3e:d5:cc:a1:59:a5:83:45:24: 92:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5B:55:0B:94:7A:32:BA:0D:D1:54:6B:B2:9B:32:73:19:1F:BD:6D X509v3 Authority Key Identifier: keyid:BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:5f:12:5a:28:ae:66:46:bb:43:a8:ac:ae:0f:77:2e:0c:4d: e3:05:43:8b:b7:c6:ef:96:fe:ac:8e:46:a5:30:bf:b7:7d:ab: 64:d4:4e:fa:4d:4d:4f:95:4a:3f:8a:e3:1e:62:6a:7e:4b:e9: e8:38:95:5a:ee:c9:25:35:99:a0:12:c8:ab:8d:31:ce:f8:40: 84:3b:2b:df:95:f9:08:d9:ec:2a:67:4b:87:b6:4e:29:f2:d2: 4b:ab:8e:ec:76:84:c3:5f:c4:c2:7d:1c:b6:a8:e5:ed:2c:61: e0:39:c6:57:0d:54:36:aa:d4:1d:8d:44:04:27:c6:85:f1:56: cd:0a:89:d9:e8:b8:2b:9d:bb:8c:6b:b3:b1:de:b8:de:71:bc: 0e:3d:f2:e9:09:7b:af:8b:99:82:db:2c:dd:29:d7:2a:37:dc: 3f:d2:4d:6e:a7:4e:0b:0b:e9:eb:a0:2d:8b:8e:7c:a3:14:b7: f3:7a:a6:a6:90:ee:6b:fc:be:ac:78:22:96:79:92:e1:16:69: 3e:0e:2a:6a:28:c2:b1:2c:b4:fa:18:b4:81:47:40:7d:c5:a9: 39:59:9d:d0:41:b4:d4:aa:fc:3d:57:67:2d:bf:40:44:9d:7f: 91:84:1e:78:17:d0:1b:75:48:b7:71:ee:2c:0f:0f:4d:40:33: ae:62:63:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyRjgxMTAvBgNVBAUTKEJFQjUwRTQxMUNDM0UyQzQwNjAzQjE2QTkxNjA5RUE0 RDQwNjY0OTUwHhcNMjUwODA4MTgwNTMzWhcNMjUwODE1MTgwNTMzWjAYMRYwFAYD VQQDEw02ODk2M2M2ZC0zMzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16AEBlQnrthzD3bvQUDs0d351AX+/EZDPo+U/ShpGuGw3dHBF/WhJOdth4Ek w98J5fHWefmNA8WpNFQHTa7FgQyiGdUNRppc+dh7SfvJOVjf+UXHk+sLYVPzbTbL tLNX7A4u2hcNjxERj7GrE10W1LcIa09yeFO07uaPfIf8iU9rJzV9T81mWWBg4M4P wnn/h9Bg0dL9q3rwX3+D/LVrqnWM9a4m5KAgCvCWvBl6EvYKmkxF5B4aVrNBHbfr KIgaLLqUdHUwpHwggSWtlVIIo4O1NLgPFuRtfNyE9hdOal54f+3pIBTu/eW/J2bQ BLRRrpH7jf0+1cyhWaWDRSSShQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNbVQuU ejK6DdFUa7KbMnMZH71tMB8GA1UdIwQYMBaAFL61DkEcw+LEBgOxapFgnqTUBmSV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjJGOC9ERkVFNjFERUI5 OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRzUUdBN0Zxa1dDZXBOUUda SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyVU9RUnpENHNRR0E3RnFrV0NlcE5RR1pKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjJGOC9ERkVFNjFERUI5OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRz UUdBN0Zxa1dDZXBOUUdaSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAXxJaKK5mRrtDqKyuD3cuDE3jBUOLt8bvlv6sjkalML+3fatk1E76 TU1PlUo/iuMeYmp+S+noOJVa7sklNZmgEsirjTHO+ECEOyvflfkI2ewqZ0uHtk4p 8tJLq47sdoTDX8TCfRy2qOXtLGHgOcZXDVQ2qtQdjUQEJ8aF8VbNConZ6LgrnbuM a7Ox3rjecbwOPfLpCXuvi5mC2yzdKdcqN9w/0k1up04LC+nroC2LjnyjFLfzeqam kO5r/L6seCKWeZLhFmk+DipqKMKxLLT6GLSBR0B9xak5WZ3QQbTUqvw9V2ctv0BE nX+RhB54F9AbdUi3ce4sDw9NQDOuYmO2 -----END CERTIFICATE-----Generated at Sun Aug 10 18:14:31 2025 by rpki-client