$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft File: VNOpVcw0GoQYFajN6hkK6lEC384.mft (raw, json) Hash identifier: jxgAsxCJ+Upd2uTK3gQ/x+PWLErUVz58G00/2iBTSFc= Subject key identifier: 30:D7:53:A3:B4:41:11:4A:33:0D:6B:E1:D3:DD:54:BA:23:D3:CD:D8 Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE Certificate issuer: /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Certificate serial: 0C66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft Manifest number: 0C60 Signing time: Fri 08 Aug 2025 18:39:08 +0000 Manifest this update: Fri 08 Aug 2025 18:39:07 +0000 Manifest next update: Fri 15 Aug 2025 18:39:07 +0000 Files and hashes: 1: VNOpVcw0GoQYFajN6hkK6lEC384.crl (hash: 5RewMHKA2fOGcOOjt+G0/frUcLJKxlvIcItkjOwwCtY=) 2: 86B7FE9005FF11EAB499A845C4F9AE02.roa (hash: zdVWhh1fLYpRD960eUnMlAOzWPZg7F1+V76js4O1Hfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3174 (0xc66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FAC, serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Validity Not Before: Aug 8 18:39:07 2025 GMT Not After : Aug 15 18:39:07 2025 GMT Subject: CN=6896444b-3e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3d:93:ce:0d:79:f8:fa:9a:d3:e4:29:b7:d3: e0:c6:8c:14:7a:e2:53:de:7c:da:2d:5b:51:7e:b7: 2a:bc:8c:e1:1d:93:ae:be:00:cf:8c:a1:85:1d:e8: 76:af:ce:c2:79:a6:f0:bf:14:61:d9:58:10:14:27: 63:a6:e3:a6:04:00:aa:15:5e:6e:8f:cf:8b:e8:4b: 9c:39:e2:54:84:58:cf:82:77:89:84:91:f3:d7:05: 8b:db:d2:c8:8a:74:9d:a7:25:c6:1e:52:f8:97:50: 96:35:ca:79:d1:18:54:4b:71:24:0f:2b:e3:1f:db: 2b:a8:12:75:2b:8d:86:5e:01:c3:8b:2c:80:ff:d0: cc:b0:be:a0:8b:88:90:77:5e:5d:3f:4b:c4:c3:2b: bf:b4:30:dc:25:c1:3a:38:62:93:92:5c:31:4d:32: 46:02:4b:bc:a3:e2:34:61:77:a8:25:15:47:a2:ed: 07:eb:65:e4:75:1d:dd:83:32:59:47:a7:49:60:df: 52:37:1a:80:1d:3e:76:80:f0:b4:72:e2:19:02:35: d5:9c:e5:04:ca:d1:9c:95:b1:a3:8d:eb:c9:1d:63: 4e:b2:ea:c6:8a:c5:af:14:8e:dc:c9:68:19:ce:35: 89:20:78:85:41:d2:7e:4d:6a:c6:76:ed:e5:85:10: 24:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D7:53:A3:B4:41:11:4A:33:0D:6B:E1:D3:DD:54:BA:23:D3:CD:D8 X509v3 Authority Key Identifier: keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:69:71:ec:60:82:d9:0e:1f:fe:fc:58:e3:86:d8:aa:d5:99: ab:80:fa:8c:41:31:58:6d:5b:bb:76:24:fe:ed:5f:78:bb:a1: 80:65:92:e7:ae:81:4d:cb:2a:5b:9c:d5:d2:b8:79:aa:73:f5: d9:1f:38:1d:be:17:82:47:ae:e4:fb:17:ae:44:22:a9:2b:a5: ea:07:7e:33:03:79:a5:34:1c:0a:ae:15:60:f4:53:93:c6:34: 27:19:86:aa:93:be:61:2e:04:48:69:f1:7b:4f:31:6a:ce:a4: 65:18:93:6c:09:b0:50:7a:d9:5e:29:30:23:9d:97:e8:cd:17: 30:fb:8a:e0:d8:0b:3f:ed:a8:d1:c4:2a:11:03:3b:d2:70:09: 26:ed:be:10:17:16:43:ea:69:da:54:00:44:d9:d8:eb:c6:b0: 81:4a:8c:1b:1f:9a:d7:11:0b:51:88:61:03:c2:4f:39:35:ea: a4:15:b3:47:59:fe:ce:fd:75:d3:97:d0:26:79:3b:f7:a1:5d: 1e:48:ed:7d:d9:d0:49:85:ef:d7:8f:51:6a:24:df:83:e1:e0: f2:3c:44:8d:f8:60:2d:f9:6d:77:c2:a7:18:e1:0e:3f:bd:52: 84:39:4d:dd:23:87:50:1d:5d:38:ee:08:b0:a8:86:cb:e5:98: 4e:42:bd:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQUMxMTAvBgNVBAUTKDU0RDNBOTU1Q0MzNDFBODQxODE1QThDREVBMTkwQUVB NTEwMkRGQ0UwHhcNMjUwODA4MTgzOTA3WhcNMjUwODE1MTgzOTA3WjAYMRYwFAYD VQQDEw02ODk2NDQ0Yi0zZTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqD2Tzg15+Pqa0+Qpt9PgxowUeuJT3nzaLVtRfrcqvIzhHZOuvgDPjKGFHeh2 r87CeabwvxRh2VgQFCdjpuOmBACqFV5uj8+L6EucOeJUhFjPgneJhJHz1wWL29LI inSdpyXGHlL4l1CWNcp50RhUS3EkDyvjH9srqBJ1K42GXgHDiyyA/9DMsL6gi4iQ d15dP0vEwyu/tDDcJcE6OGKTklwxTTJGAku8o+I0YXeoJRVHou0H62XkdR3dgzJZ R6dJYN9SNxqAHT52gPC0cuIZAjXVnOUEytGclbGjjevJHWNOsurGisWvFI7cyWgZ zjWJIHiFQdJ+TWrGdu3lhRAkGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDXU6O0 QRFKMw1r4dPdVLoj083YMB8GA1UdIwQYMBaAFFTTqVXMNBqEGBWozeoZCupRAt/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBQy82ODE5QkY0MjA1 RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdvUVlGYWpONmhrSzZsRUMz ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZOT3BWY3cwR29RWUZhak42aGtLNmxFQzM4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZBQy82ODE5QkY0MjA1RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdv UVlGYWpONmhrSzZsRUMzODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+aXHsYILZDh/+/Fjjhtiq1ZmrgPqMQTFYbVu7diT+7V94u6GAZZLn roFNyypbnNXSuHmqc/XZHzgdvheCR67k+xeuRCKpK6XqB34zA3mlNBwKrhVg9FOT xjQnGYaqk75hLgRIafF7TzFqzqRlGJNsCbBQetleKTAjnZfozRcw+4rg2As/7ajR xCoRAzvScAkm7b4QFxZD6mnaVABE2djrxrCBSowbH5rXEQtRiGEDwk85NeqkFbNH Wf7O/XXTl9AmeTv3oV0eSO192dBJhe/Xj1FqJN+D4eDyPESN+GAt+W13wqcY4Q4/ vVKEOU3dI4dQHV047giwqIbL5ZhOQr2g -----END CERTIFICATE-----Generated at Fri Aug 8 20:53:29 2025 by rpki-client