$ rpki-client -vvf rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft File: vkMB4qQLT2pH4YWmdX2abo18dEI.mft (raw, json) Hash identifier: CJ5nIeW7iQjNKH3SD7PpeXraR6/f9pPOtbf1iVM45qU= Subject key identifier: AD:27:48:6E:44:9E:ED:42:5A:A1:9E:D2:86:FE:41:6C:0F:89:9A:27 Authority key identifier: BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42 Certificate issuer: /CN=A919318C/serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft Manifest number: 16 Signing time: Sat 09 Aug 2025 08:36:37 +0000 Manifest this update: Sat 09 Aug 2025 08:36:37 +0000 Manifest next update: Sat 16 Aug 2025 08:36:37 +0000 Files and hashes: 1: vkMB4qQLT2pH4YWmdX2abo18dEI.crl (hash: jZ8ACCFHKacVE8sFReLbYYJ2pJxy+ouxtVD1oxaLXEs=) 2: 99DC33DA621D11F0B3B28C17C4F9AE02.roa (hash: 9kelna+bn4AOokX7+VNhCMprSYcOppK0alNOtL2P1j4=) 3: 9FB4CD9462DB11F0B8A4FE59C4F9AE02.roa (hash: qjbaR5DPgSKsm7fnzDHbXrkez/bN/PhLzRqIXdA5oKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919318C, serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442 Validity Not Before: Aug 9 08:36:37 2025 GMT Not After : Aug 16 08:36:37 2025 GMT Subject: CN=68970895-c310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bf:c2:5e:90:ec:6a:ff:5c:a9:c5:89:be:d8: 50:61:4e:23:30:50:9d:02:14:5c:e8:e3:c7:6e:db: bb:a1:85:c3:6c:a3:28:97:73:a0:45:7a:90:00:4e: e9:ea:b0:89:f0:1f:67:ab:8f:07:15:81:8f:5e:79: 7a:21:4b:ad:30:30:c4:81:6e:dc:13:b7:01:13:0d: 82:ff:59:5c:9b:60:90:94:54:29:62:84:f2:3e:aa: 54:7a:24:bc:a3:bb:b8:fd:38:f6:f0:40:1c:44:04: 59:2c:4c:94:c0:5d:cd:aa:5a:a2:53:24:83:e2:8d: d2:bc:85:6f:d9:83:7b:e8:66:b3:1b:88:3c:f1:ef: 65:23:fc:d0:87:24:60:b8:6b:6f:50:88:8b:a1:4d: 0c:17:d5:bd:06:92:ca:39:80:15:a3:9a:fb:99:82: 68:61:19:1c:5a:8c:02:e1:8b:85:f6:00:64:9c:a9: 83:3c:5f:b5:94:75:f3:68:7f:19:88:41:65:66:07: ef:f2:cd:c9:d1:bb:68:9c:b8:61:6a:10:d6:6f:58: 95:cd:90:81:4b:2e:e4:1a:a9:e8:b2:aa:0b:c7:0a: a4:ce:96:3c:79:e8:48:45:8f:6a:0b:21:42:17:b4: ae:ed:9c:ab:66:83:e4:cf:9f:75:71:07:79:c6:ab: ad:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:27:48:6E:44:9E:ED:42:5A:A1:9E:D2:86:FE:41:6C:0F:89:9A:27 X509v3 Authority Key Identifier: keyid:BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:fb:cb:e9:2a:02:8f:85:4f:71:f1:10:84:5d:e6:df:0a:6d: a6:22:b0:a5:d3:ba:a3:ca:9f:9e:67:cc:5a:19:57:0c:00:6d: 00:94:70:f2:c4:7f:f6:c5:ae:68:c5:c1:c9:80:22:55:11:f8: 73:7f:43:43:90:07:e7:ea:6e:10:ee:4e:02:aa:dd:13:ff:fb: cb:2b:4a:0c:1b:e7:0e:ee:da:0e:2e:9e:a4:c7:b0:b8:80:4e: 82:3b:72:ba:96:3b:ad:42:81:e8:fc:c1:fb:02:87:d7:60:37: e3:3e:6a:31:52:9c:bd:26:3b:ce:74:57:47:cd:c2:c9:5c:8f: 68:fb:f4:df:95:27:89:b2:80:65:a8:d7:e6:3b:bf:57:97:c5: 41:47:49:88:cc:03:fd:57:bc:3c:da:87:66:b7:0a:50:5d:b8: d9:7f:ce:8c:b1:1d:1d:df:eb:93:13:cf:a5:e1:32:0b:17:54: 12:7d:79:a7:a1:22:f0:99:81:11:1b:a5:71:ea:3a:17:9f:01: e4:e2:ac:07:47:83:bb:13:b6:65:de:55:cf:79:a0:92:f4:c0: 32:4b:75:cb:b3:8e:3d:0b:49:cc:62:7d:5b:d7:5a:aa:27:06: 3c:63:fc:ea:d3:8c:fa:f2:7c:3f:2c:80:47:1f:ac:a7:92:1d: 47:bc:31:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MzE4QzExMC8GA1UEBRMoQkU0MzAxRTJBNDBCNEY2QTQ3RTE4NUE2NzU3RDlBNkU4 RDdDNzQ0MjAeFw0yNTA4MDkwODM2MzdaFw0yNTA4MTYwODM2MzdaMBgxFjAUBgNV BAMTDTY4OTcwODk1LWMzMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjv8JekOxq/1ypxYm+2FBhTiMwUJ0CFFzo48du27uhhcNsoyiXc6BFepAATunq sInwH2erjwcVgY9eeXohS60wMMSBbtwTtwETDYL/WVybYJCUVClihPI+qlR6JLyj u7j9OPbwQBxEBFksTJTAXc2qWqJTJIPijdK8hW/Zg3voZrMbiDzx72Uj/NCHJGC4 a29QiIuhTQwX1b0Gkso5gBWjmvuZgmhhGRxajALhi4X2AGScqYM8X7WUdfNofxmI QWVmB+/yzcnRu2icuGFqENZvWJXNkIFLLuQaqeiyqgvHCqTOljx56EhFj2oLIUIX tK7tnKtmg+TPn3VxB3nGq61fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrSdIbkSe 7UJaoZ7Shv5BbA+JmicwHwYDVR0jBBgwFoAUvkMB4qQLT2pH4YWmdX2abo18dEIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzMThDL0NFOUIwOUVFNjE1 NDExRjBCQjUwRkEzN0M0RjlBRTAyL3ZrTUI0cVFMVDJwSDRZV21kWDJhYm8xOGRF SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdmtNQjRxUUxUMnBINFlXbWRYMmFibzE4ZEVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz MThDL0NFOUIwOUVFNjE1NDExRjBCQjUwRkEzN0M0RjlBRTAyL3ZrTUI0cVFMVDJw SDRZV21kWDJhYm8xOGRFSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA77y+kqAo+FT3HxEIRd5t8KbaYisKXTuqPKn55nzFoZVwwAbQCUcPLE f/bFrmjFwcmAIlUR+HN/Q0OQB+fqbhDuTgKq3RP/+8srSgwb5w7u2g4unqTHsLiA ToI7crqWO61Cgej8wfsCh9dgN+M+ajFSnL0mO850V0fNwslcj2j79N+VJ4mygGWo 1+Y7v1eXxUFHSYjMA/1XvDzah2a3ClBduNl/zoyxHR3f65MTz6XhMgsXVBJ9eaeh IvCZgREbpXHqOhefAeTirAdHg7sTtmXeVc95oJL0wDJLdcuzjj0LScxifVvXWqon Bjxj/OrTjPryfD8sgEcfrKeSHUe8MfU= -----END CERTIFICATE-----Generated at Sun Aug 10 16:12:23 2025 by rpki-client