$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft File: VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft (raw, json) Hash identifier: DH4ISsCG4H+1+HSEHaPJbCFsS2bXFx9Ip7juube7lrU= Subject key identifier: 89:D1:3B:00:87:7A:20:38:62:09:6F:52:97:D4:19:8A:2B:6E:EB:12 Authority key identifier: 55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 Certificate issuer: /CN=A91C23DC/serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Certificate serial: 0C5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft Manifest number: 0C4F Signing time: Fri 08 Aug 2025 18:46:08 +0000 Manifest this update: Fri 08 Aug 2025 18:46:07 +0000 Manifest next update: Fri 15 Aug 2025 18:46:07 +0000 Files and hashes: 1: VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl (hash: romHayF1aKmMAHoLz/7ONzHcmWN2Ua6Nh7oSOpNp94M=) 2: 598BD2E268D111ED99477B87C4F9AE02.roa (hash: CC9X+3CcYjfvDOG+Jd491zfowlADhabzoyJw/gqJGUg=) 3: 5AA3FD0868D111ED99477B87C4F9AE02.roa (hash: erICH0cme0SAzh4DFMOpR5Ja+e0q51Z/KWddXql4mQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3165 (0xc5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23DC, serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Validity Not Before: Aug 8 18:46:07 2025 GMT Not After : Aug 15 18:46:07 2025 GMT Subject: CN=689645f0-ad6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c4:12:dc:54:28:1c:30:de:5b:49:df:a0:53: 01:9f:de:21:07:65:7b:76:60:96:73:22:a5:ea:93: 3e:0c:16:97:41:57:8e:04:b2:8e:19:6d:92:88:6d: 76:15:36:0b:54:61:40:b3:50:e2:05:59:96:30:8b: 35:44:65:e0:9a:32:5f:21:8f:6b:2b:ee:f0:23:ee: 65:32:3e:53:3d:c5:bc:0e:12:c6:ae:57:0a:14:bd: b6:04:6d:61:e3:5d:74:64:49:16:d1:39:83:88:68: e0:1f:67:cd:93:60:0b:30:ce:73:0e:15:b9:a9:a6: 16:e3:82:4e:61:c0:5a:63:59:5e:83:6c:38:7a:d5: 53:c1:45:f2:d8:c1:3c:58:46:a1:00:c8:3f:c5:4f: 47:c2:2c:5a:45:db:42:45:63:e7:0e:ce:8f:55:f9: 88:2b:02:80:2e:d0:08:9e:34:49:03:b0:b2:c6:26: 75:c1:f4:4e:4f:ea:17:0a:ce:67:d3:a9:ea:8f:38: 34:56:c2:d6:8e:06:c8:61:4b:c0:4e:8b:1f:a6:36: d1:4d:7f:2d:df:36:81:e2:27:64:3d:dc:70:d3:19: 42:37:bc:16:7a:4d:b1:92:56:27:98:20:5c:68:7d: dd:60:32:80:ca:f0:bb:1b:d0:d8:42:ea:2e:ec:d9: 88:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D1:3B:00:87:7A:20:38:62:09:6F:52:97:D4:19:8A:2B:6E:EB:12 X509v3 Authority Key Identifier: keyid:55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:6c:8e:db:5a:bc:d0:3c:73:74:bd:79:76:59:81:b4:88:92: 88:ff:2a:29:68:f0:5d:9f:35:b5:7b:dd:58:2d:a9:3e:df:f1: 17:8f:2d:84:42:7e:2b:81:ae:c0:06:17:2f:3a:71:0c:4b:fc: 33:01:82:cb:fd:c0:98:23:f1:e5:21:2d:ed:93:5d:e8:46:a9: 23:a3:e0:1c:52:4e:bb:1d:5a:81:3a:95:26:dc:05:e7:93:da: 5d:da:c6:e0:e8:12:b9:4b:b2:bf:17:f0:5f:eb:5d:77:93:85: 82:ac:9c:8f:52:7a:53:52:e6:98:17:8f:33:62:3a:d2:8a:cc: db:7f:e2:16:b4:5e:e7:cd:e4:14:b2:8e:90:7a:d1:fd:d7:86: d9:09:97:ab:4b:1a:ed:78:61:a0:32:3a:d5:89:f7:87:60:95: 37:b1:0e:1d:b4:c0:fe:d5:47:27:03:58:d0:d1:9c:b7:1a:32: e1:6b:76:6a:f1:f0:60:cf:b3:a2:05:0b:ff:00:75:49:90:45: 93:f5:bb:d3:55:3d:f3:18:bf:90:1e:6d:b3:89:e3:eb:47:b8: f6:59:80:9d:b2:6b:65:aa:0c:a6:07:34:f3:f9:72:a7:42:33: 44:4b:54:1e:0c:36:f6:7c:6f:8f:20:6a:5a:52:c9:67:62:3d: 27:c7:b3:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzREMxMTAvBgNVBAUTKDU1RjJFNDg3NDAwNThFOEZDQzRGOTAxQTRBMzNFMUY0 MTc2MjAwRjgwHhcNMjUwODA4MTg0NjA3WhcNMjUwODE1MTg0NjA3WjAYMRYwFAYD VQQDEw02ODk2NDVmMC1hZDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMQS3FQoHDDeW0nfoFMBn94hB2V7dmCWcyKl6pM+DBaXQVeOBLKOGW2SiG12 FTYLVGFAs1DiBVmWMIs1RGXgmjJfIY9rK+7wI+5lMj5TPcW8DhLGrlcKFL22BG1h 4110ZEkW0TmDiGjgH2fNk2ALMM5zDhW5qaYW44JOYcBaY1leg2w4etVTwUXy2ME8 WEahAMg/xU9HwixaRdtCRWPnDs6PVfmIKwKALtAInjRJA7CyxiZ1wfROT+oXCs5n 06nqjzg0VsLWjgbIYUvATosfpjbRTX8t3zaB4idkPdxw0xlCN7wWek2xklYnmCBc aH3dYDKAyvC7G9DYQuou7NmIyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInROwCH eiA4YglvUpfUGYorbusSMB8GA1UdIwQYMBaAFFXy5IdABY6PzE+QGkoz4fQXYgD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNEQy8wNjYzOUY4NjBB OTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpvX01UNUFhU2pQaDlCZGlB UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZmTGtoMEFGam9fTVQ1QWFTalBoOUJkaUFQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjNEQy8wNjYzOUY4NjBBOTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpv X01UNUFhU2pQaDlCZGlBUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKbI7bWrzQPHN0vXl2WYG0iJKI/yopaPBdnzW1e91YLak+3/EXjy2E Qn4rga7ABhcvOnEMS/wzAYLL/cCYI/HlIS3tk13oRqkjo+AcUk67HVqBOpUm3AXn k9pd2sbg6BK5S7K/F/Bf6113k4WCrJyPUnpTUuaYF48zYjrSiszbf+IWtF7nzeQU so6QetH914bZCZerSxrteGGgMjrVifeHYJU3sQ4dtMD+1UcnA1jQ0Zy3GjLha3Zq 8fBgz7OiBQv/AHVJkEWT9bvTVT3zGL+QHm2ziePrR7j2WYCdsmtlqgymBzTz+XKn QjNES1QeDDb2fG+PIGpaUslnYj0nx7NF -----END CERTIFICATE-----Generated at Sat Aug 9 10:39:32 2025 by rpki-client