$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft File: Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft (raw, json) Hash identifier: gBQTFsJHDz/gSIxQl9n4FHom+qvR/WzlFp3BcaASSCo= Subject key identifier: A4:E8:FC:B7:79:1F:C4:03:44:57:1B:11:9A:43:97:AD:C0:84:43:8F Authority key identifier: 56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00 Certificate issuer: /CN=A91ADB98/serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft Manifest number: 021F Signing time: Sat 09 Aug 2025 02:32:28 +0000 Manifest this update: Sat 09 Aug 2025 02:32:28 +0000 Manifest next update: Sat 16 Aug 2025 02:32:28 +0000 Files and hashes: 1: Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl (hash: kr1rqLPwIO0mlSa4joIbGLW3p57ImvRHJO2fHtgKNuA=) 2: 310AEC7A5B7C11EDAAFAB831C4F9AE02.roa (hash: LZXk13HoV3M3PJSIAKsfySeBLEgNErX9ux8+6mN8duA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800 Validity Not Before: Aug 9 02:32:28 2025 GMT Not After : Aug 16 02:32:28 2025 GMT Subject: CN=6896b33c-fdda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2a:6c:7b:94:c2:df:74:50:38:f1:ab:9d:f4: c9:73:c5:99:67:a3:b7:f9:39:74:cc:5b:24:42:e4: a8:31:a0:76:c5:7b:c0:1f:f7:51:02:a9:5f:e4:1d: 7a:9c:c2:ec:24:00:ee:57:c5:be:fd:40:2b:ca:84: 5e:99:f7:2d:c4:c4:45:e8:e4:85:ca:f1:04:14:a8: c4:78:55:f6:cf:d7:e5:e9:04:4e:7e:14:28:09:8f: 1c:1d:d1:b3:63:d2:5d:11:42:03:9c:41:69:4d:d2: e3:dd:9e:17:81:52:aa:1e:ef:bb:b8:5f:09:8e:b5: ac:21:9a:6b:0f:70:a1:b4:e4:9d:4e:9b:da:60:16: ff:20:2e:0c:29:84:ec:d8:88:18:cb:99:ac:38:16: 8b:ca:31:d6:46:e1:80:20:c7:d4:d7:9a:34:b2:b4: 67:70:57:07:6e:fc:87:dd:1b:bc:6c:26:fe:ca:21: 3c:02:c5:34:85:e4:8e:5b:48:13:b6:c3:16:3b:3b: b4:db:0a:fb:99:c2:ec:f2:55:26:37:aa:d3:f3:b3: 9d:35:b6:92:f5:23:f2:14:2b:17:b6:3d:37:79:5c: c0:b4:b9:5b:6b:f0:ce:39:08:8f:a8:99:46:e2:d0: ff:ff:a0:60:dc:bb:52:b6:97:bb:53:77:af:47:57: 39:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E8:FC:B7:79:1F:C4:03:44:57:1B:11:9A:43:97:AD:C0:84:43:8F X509v3 Authority Key Identifier: keyid:56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:93:06:b1:15:c0:22:d9:3b:b2:fe:5e:b6:6a:75:3c:b4:dd: ba:75:4a:a9:e5:ef:d6:90:55:15:c1:1c:a1:52:51:92:09:f6: f0:e8:29:7a:99:aa:79:fa:0d:5a:48:23:63:81:a8:1d:ca:84: c7:d3:27:57:c3:75:ed:45:64:8f:44:f7:c5:f6:17:82:ac:12: ce:45:ac:b6:93:f4:8d:d6:28:92:12:f1:00:36:48:2a:d6:56: b2:5e:5d:a4:5a:9a:80:be:e6:67:1e:e4:24:f8:cc:95:f8:34: 50:ea:8e:93:10:9c:81:f7:e8:06:95:06:cf:80:36:d3:08:79: 81:a6:7b:99:69:73:0a:87:2b:26:68:0e:20:d0:86:4b:be:fa: 9a:4a:15:7c:7e:2f:76:d2:02:2d:d5:54:8c:54:ff:d1:90:cd: 94:96:e0:c6:35:45:a2:56:29:11:d6:92:7d:e9:69:a4:85:de: 7a:a1:5e:98:ad:4b:16:04:f7:42:55:51:1c:79:9d:ce:a8:01: 31:05:40:40:25:42:8d:b8:ca:14:be:ab:18:9b:d0:f2:6e:13: a7:29:8f:ce:e6:8b:ad:f9:99:35:70:34:4f:e0:3d:8e:9a:4e: 45:c8:2a:8c:06:34:99:a9:51:95:3c:41:88:fc:5d:81:da:31: 5a:c7:ce:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDU2N0Y5QUIyQjJDNzk2OTI2ODVDMDMwNTVBRjk2OUU2 MEI2NkI4MDAwHhcNMjUwODA5MDIzMjI4WhcNMjUwODE2MDIzMjI4WjAYMRYwFAYD VQQDEw02ODk2YjMzYy1mZGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSpse5TC33RQOPGrnfTJc8WZZ6O3+Tl0zFskQuSoMaB2xXvAH/dRAqlf5B16 nMLsJADuV8W+/UAryoRemfctxMRF6OSFyvEEFKjEeFX2z9fl6QROfhQoCY8cHdGz Y9JdEUIDnEFpTdLj3Z4XgVKqHu+7uF8JjrWsIZprD3ChtOSdTpvaYBb/IC4MKYTs 2IgYy5msOBaLyjHWRuGAIMfU15o0srRncFcHbvyH3Ru8bCb+yiE8AsU0heSOW0gT tsMWOzu02wr7mcLs8lUmN6rT87OdNbaS9SPyFCsXtj03eVzAtLlba/DOOQiPqJlG 4tD//6Bg3LtStpe7U3evR1c5GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTo/Ld5 H8QDRFcbEZpDl63AhEOPMB8GA1UdIwQYMBaAFFZ/mrKyx5aSaFwDBVr5aeYLZrgA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9FMkRBODUxODQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9Wbi1hc3JMSGxwSm9YQU1GV3ZscDVndG11 QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZuLWFzckxIbHBKb1hBTUZXdmxwNWd0bXVBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9FMkRBODUxODQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9Wbi1hc3JMSGxw Sm9YQU1GV3ZscDVndG11QUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxkwaxFcAi2Tuy/l62anU8tN26dUqp5e/WkFUVwRyhUlGSCfbw6Cl6 map5+g1aSCNjgagdyoTH0ydXw3XtRWSPRPfF9heCrBLORay2k/SN1iiSEvEANkgq 1layXl2kWpqAvuZnHuQk+MyV+DRQ6o6TEJyB9+gGlQbPgDbTCHmBpnuZaXMKhysm aA4g0IZLvvqaShV8fi920gIt1VSMVP/RkM2UluDGNUWiVikR1pJ96Wmkhd56oV6Y rUsWBPdCVVEceZ3OqAExBUBAJUKNuMoUvqsYm9DybhOnKY/O5out+Zk1cDRP4D2O mk5FyCqMBjSZqVGVPEGI/F2B2jFax848 -----END CERTIFICATE-----Generated at Sat Aug 9 05:52:25 2025 by rpki-client