$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft File: vxobyMAsIDYtD9n5K8AGoolejIA.mft (raw, json) Hash identifier: 4/UZd3YDTQu8ltINjBy/YR7jA0X2vcAiPStBDmZ9hB8= Subject key identifier: 30:D7:30:F4:17:C3:1E:42:66:2D:10:17:80:AC:30:8A:59:B1:C4:D3 Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80 Certificate issuer: /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80 Certificate serial: 07C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft Manifest number: 07BB Signing time: Wed 06 Aug 2025 21:32:23 +0000 Manifest this update: Wed 06 Aug 2025 21:32:23 +0000 Manifest next update: Wed 13 Aug 2025 21:32:23 +0000 Files and hashes: 1: vxobyMAsIDYtD9n5K8AGoolejIA.crl (hash: fm7js2WvBwLiaYMhkITUx9HxKtB20HlI8PUBtJSSlBk=) 2: ABD5003E079C11EBA7C04832C4F9AE02.roa (hash: 1LIqaLcLd8sIbPgwe6w2+ZfDiBIad4OGJXBnSw3QIfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 21:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1984 (0x7c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A423B, serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80 Validity Not Before: Aug 6 21:32:23 2025 GMT Not After : Aug 13 21:32:23 2025 GMT Subject: CN=6893c9e7-8aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:35:46:d1:42:21:78:c5:c1:42:52:a2:02:52: da:c4:62:9f:4d:45:8d:9b:9f:1b:53:e0:4a:ac:6f: 69:61:41:cc:4d:55:82:32:cc:8e:a0:27:93:e5:66: 11:5b:0e:fc:b2:17:60:1e:8f:d0:0e:0f:44:83:57: 1a:c8:f5:55:48:66:6a:68:f6:da:8b:c2:6e:c2:0b: e6:1f:fc:ed:e4:1b:19:98:75:b2:d3:a8:22:8e:fe: c5:0f:77:90:e9:3b:2c:4d:1d:ed:91:75:f9:fa:9a: ea:c9:a8:f0:e2:42:3e:45:f7:6b:bd:6c:c2:b1:b0: 61:92:e0:b2:21:28:d9:03:9c:56:96:9d:df:00:ad: df:44:44:be:64:eb:6a:f2:01:fa:ee:c9:48:36:f1: 05:73:02:ed:7d:fa:ff:43:eb:40:bb:0f:11:e7:99: 9e:68:de:4f:63:4c:c6:ae:ee:63:e2:89:d3:4c:f8: 35:07:f5:42:c4:6a:ec:a8:36:00:63:9e:1b:3b:07: d0:3c:e2:fa:6b:0e:6d:82:4c:bd:0f:e4:ed:a5:42: ff:97:2f:c9:15:5e:0c:af:cb:91:20:28:d8:5d:10: 2f:fa:b3:2f:21:0e:94:da:cf:1c:5b:c9:21:0d:df: 5b:2b:09:f1:f4:b0:01:81:b6:9c:2c:99:1b:ee:33: 24:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D7:30:F4:17:C3:1E:42:66:2D:10:17:80:AC:30:8A:59:B1:C4:D3 X509v3 Authority Key Identifier: keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:35:ba:b8:d9:7e:66:bc:5e:92:7e:32:ca:3e:a3:e3:ef:2d: db:de:03:8a:f9:6c:de:5d:d1:bb:1b:56:ea:96:d1:27:ee:5e: 3e:05:a8:9e:0e:0d:39:43:ff:b5:41:bf:a2:b1:70:fc:6e:7a: 03:35:85:fc:d3:f0:02:c3:be:04:09:4e:49:10:99:af:8e:03: 49:ac:f8:73:85:b7:72:1e:b7:d7:05:16:f2:f2:3e:72:a1:f8: 3f:9b:55:2c:23:9f:92:b6:dd:9b:38:fb:c2:2d:1e:d1:bb:61: c5:37:51:d6:b1:d3:45:fb:6d:a0:26:1b:82:e8:73:5f:9b:b7: cf:b2:a5:fa:80:ca:fd:5f:fa:15:e0:d1:f9:bd:14:10:87:a2: 93:34:70:91:2e:09:10:13:c2:80:95:ab:b5:8d:90:94:39:b5: ae:ea:42:10:3b:cf:92:82:d8:7b:2a:67:ae:18:42:95:a6:5f: 2e:df:92:01:20:f2:44:eb:2c:cc:93:8a:32:43:58:64:a8:3e: 1a:bd:2d:94:ba:8b:bf:68:fa:eb:5b:fd:54:3a:de:c5:13:4b: 95:ac:02:94:f2:51:a4:3a:17:b4:7c:08:a7:48:9c:4a:df:25: c8:40:f3:8c:a3:1c:06:cb:7d:3a:5d:2a:07:62:07:ba:3a:06: 30:02:e5:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyM0IxMTAvBgNVBAUTKEJGMUExQkM4QzAyQzIwMzYyRDBGRDlGOTJCQzAwNkEy ODk1RThDODAwHhcNMjUwODA2MjEzMjIzWhcNMjUwODEzMjEzMjIzWjAYMRYwFAYD VQQDEw02ODkzYzllNy04YWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDVG0UIheMXBQlKiAlLaxGKfTUWNm58bU+BKrG9pYUHMTVWCMsyOoCeT5WYR Ww78shdgHo/QDg9Eg1cayPVVSGZqaPbai8JuwgvmH/zt5BsZmHWy06gijv7FD3eQ 6TssTR3tkXX5+prqyajw4kI+RfdrvWzCsbBhkuCyISjZA5xWlp3fAK3fRES+ZOtq 8gH67slINvEFcwLtffr/Q+tAuw8R55meaN5PY0zGru5j4onTTPg1B/VCxGrsqDYA Y54bOwfQPOL6aw5tgky9D+TtpUL/ly/JFV4Mr8uRICjYXRAv+rMvIQ6U2s8cW8kh Dd9bKwnx9LABgbacLJkb7jMkuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDXMPQX wx5CZi0QF4CsMIpZscTTMB8GA1UdIwQYMBaAFL8aG8jALCA2LQ/Z+SvABqKJXoyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDIzQi9BRjc1NkI5NDA3 OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lEWXREOW41SzhBR29vbGVq SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z4b2J5TUFzSURZdEQ5bjVLOEFHb29sZWpJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDIzQi9BRjc1NkI5NDA3OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lE WXREOW41SzhBR29vbGVqSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHNbq42X5mvF6SfjLKPqPj7y3b3gOK+WzeXdG7G1bqltEn7l4+Baie Dg05Q/+1Qb+isXD8bnoDNYX80/ACw74ECU5JEJmvjgNJrPhzhbdyHrfXBRby8j5y ofg/m1UsI5+Stt2bOPvCLR7Ru2HFN1HWsdNF+22gJhuC6HNfm7fPsqX6gMr9X/oV 4NH5vRQQh6KTNHCRLgkQE8KAlau1jZCUObWu6kIQO8+Sgth7KmeuGEKVpl8u35IB IPJE6yzMk4oyQ1hkqD4avS2Uuou/aPrrW/1UOt7FE0uVrAKU8lGkOhe0fAinSJxK 3yXIQPOMoxwGy306XSoHYge6OgYwAuV9 -----END CERTIFICATE-----Generated at Fri Aug 8 21:02:40 2025 by rpki-client