$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft File: vaPoqCMceH9rfxi8FGuV-1wDjtk.mft (raw, json) Hash identifier: onNWaXasH2mKC+srUrqiI44FK0eGl/IDlYPIykqrnLQ= Subject key identifier: 3E:42:52:49:EA:36:B5:B5:3C:7B:A1:90:26:CC:65:FC:A5:56:AE:5F Authority key identifier: BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9 Certificate issuer: /CN=A91AE8D7/serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft Manifest number: 4F Signing time: Tue 05 Aug 2025 07:53:08 +0000 Manifest this update: Tue 05 Aug 2025 07:53:08 +0000 Manifest next update: Tue 12 Aug 2025 07:53:08 +0000 Files and hashes: 1: vaPoqCMceH9rfxi8FGuV-1wDjtk.crl (hash: iXA3RCWqo4c+OX8fucx6t7XXZ9ximINPcy+GrRshQGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE8D7, serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9 Validity Not Before: Aug 5 07:53:08 2025 GMT Not After : Aug 12 07:53:08 2025 GMT Subject: CN=6891b864-b128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:44:cc:96:67:bf:d0:06:49:8d:de:aa:00:57: fe:c1:5f:f0:81:c6:a1:90:9e:2f:b3:d3:b4:5b:ac: a1:74:6f:19:2b:17:b1:f6:14:0a:f7:33:da:bc:41: 50:f3:20:31:10:04:ac:dd:88:04:37:4e:e5:aa:56: 94:3a:ff:f4:40:95:56:99:cd:d1:fa:16:d2:b1:ed: dc:ae:29:de:5f:2a:7c:7d:a4:f0:c1:50:9f:3d:1e: d2:b9:6e:ee:80:79:e8:c4:05:c5:97:72:bf:f1:b3: f8:11:13:7a:48:66:0f:3e:3c:cf:70:cc:f5:55:c7: c5:0b:4c:06:a7:bc:a9:8c:b2:86:2d:84:6d:74:d0: 7b:cc:59:d9:5c:9c:3a:07:ed:6b:cc:0c:c0:26:49: f9:1f:07:0f:fc:71:f0:1d:40:1f:48:ba:d8:0f:34: 95:ed:64:39:45:c1:49:a1:67:54:b1:3b:94:6e:62: 8e:df:85:b1:32:9c:95:fd:a5:b9:2d:74:0d:08:3e: 06:e5:8d:7a:2b:fa:de:54:fc:a7:ce:82:71:6b:63: 3d:ec:f5:34:6c:b1:ef:0f:3c:a2:1d:c4:e5:77:e8: b4:be:e9:b1:83:39:54:c3:8f:15:23:72:41:98:a7: e9:62:59:5c:e1:02:17:32:f9:d6:64:55:f7:15:9b: 76:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:42:52:49:EA:36:B5:B5:3C:7B:A1:90:26:CC:65:FC:A5:56:AE:5F X509v3 Authority Key Identifier: keyid:BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:3b:1a:99:99:eb:29:02:17:f7:17:a2:37:a5:a3:04:1d:fc: 30:ff:08:1d:54:89:09:b0:68:b7:27:9a:57:7f:cf:66:99:bf: 57:e2:59:f6:20:6a:22:4d:db:49:22:d4:ff:a7:4e:08:d1:91: cf:b2:74:bc:11:52:f2:c7:f6:37:93:60:82:c4:45:2a:91:de: 31:67:77:17:95:73:14:34:b6:2c:ce:b0:95:6a:67:26:99:ce: ac:ea:db:ac:02:74:9f:6d:9b:6a:60:d3:ce:ad:8d:49:cb:6c: 64:a3:ed:35:a2:51:d9:87:7f:cc:d4:42:7e:5d:b1:0e:b5:8c: 6f:34:99:c7:81:0f:cb:cd:c2:b6:6f:ba:5c:dd:90:1a:f9:03: 45:fe:52:ab:f8:bd:4f:dc:ea:a0:22:14:54:f2:e5:81:fe:11: 8b:95:93:c0:76:e5:71:e2:9e:06:4b:ae:ca:2c:94:38:46:02: 6a:5d:31:4f:35:e6:2a:dd:53:c1:fb:7c:61:ab:9a:ee:6a:7b: 65:57:08:b9:58:57:33:5a:66:b3:4d:b5:3e:2d:8e:ec:ba:2f: 7f:bd:3b:38:48:02:85:96:4c:0e:d3:e1:a6:32:6d:ef:54:ca: ae:f6:c0:28:f5:59:04:5e:be:ac:48:51:a3:b8:f4:53:ef:93: 79:31:0a:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RThENzExMC8GA1UEBRMoQkRBM0U4QTgyMzFDNzg3RjZCN0YxOEJDMTQ2Qjk1RkI1 QzAzOEVEOTAeFw0yNTA4MDUwNzUzMDhaFw0yNTA4MTIwNzUzMDhaMBgxFjAUBgNV BAMTDTY4OTFiODY0LWIxMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRRMyWZ7/QBkmN3qoAV/7BX/CBxqGQni+z07RbrKF0bxkrF7H2FAr3M9q8QVDz IDEQBKzdiAQ3TuWqVpQ6//RAlVaZzdH6FtKx7dyuKd5fKnx9pPDBUJ89HtK5bu6A eejEBcWXcr/xs/gRE3pIZg8+PM9wzPVVx8ULTAanvKmMsoYthG100HvMWdlcnDoH 7WvMDMAmSfkfBw/8cfAdQB9IutgPNJXtZDlFwUmhZ1SxO5RuYo7fhbEynJX9pbkt dA0IPgbljXor+t5U/KfOgnFrYz3s9TRsse8PPKIdxOV36LS+6bGDOVTDjxUjckGY p+liWVzhAhcy+dZkVfcVm3YlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPkJSSeo2 tbU8e6GQJsxl/KVWrl8wHwYDVR0jBBgwFoAUvaPoqCMceH9rfxi8FGuV+1wDjtkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFOEQ3LzRCMDFDNEE2Rjkz RjExRUZCN0VBQjQyNUM0RjlBRTAyL3ZhUG9xQ01jZUg5cmZ4aThGR3VWLTF3RGp0 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdmFQb3FDTWNlSDlyZnhpOEZHdVYtMXdEanRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF OEQ3LzRCMDFDNEE2RjkzRjExRUZCN0VBQjQyNUM0RjlBRTAyL3ZhUG9xQ01jZUg5 cmZ4aThGR3VWLTF3RGp0ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACQ7GpmZ6ykCF/cXojelowQd/DD/CB1UiQmwaLcnmld/z2aZv1fiWfYg aiJN20ki1P+nTgjRkc+ydLwRUvLH9jeTYILERSqR3jFndxeVcxQ0tizOsJVqZyaZ zqzq26wCdJ9tm2pg086tjUnLbGSj7TWiUdmHf8zUQn5dsQ61jG80mceBD8vNwrZv ulzdkBr5A0X+Uqv4vU/c6qAiFFTy5YH+EYuVk8B25XHingZLrsoslDhGAmpdMU81 5irdU8H7fGGrmu5qe2VXCLlYVzNaZrNNtT4tjuy6L3+9OzhIAoWWTA7T4aYybe9U yq72wCj1WQRevqxIUaO49FPvk3kxCsY= -----END CERTIFICATE-----Generated at Thu Aug 7 01:16:50 2025 by rpki-client