$ rpki-client -vvf rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft File: vUxEHwLHrdQvpiQugzHZP1nlGDo.mft (raw, json) Hash identifier: v3g7SYNAt1sD0zSXQJaP+d8CurAmLGZBBC/WdknSknI= Subject key identifier: 7E:3D:D0:F5:7F:DD:B1:92:55:A2:74:43:DC:50:D7:CD:89:8C:6A:9B Authority key identifier: BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A Certificate issuer: /CN=A91C67F9/serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft Manifest number: 01EA Signing time: Sat 09 Aug 2025 03:00:15 +0000 Manifest this update: Sat 09 Aug 2025 03:00:15 +0000 Manifest next update: Sat 16 Aug 2025 03:00:15 +0000 Files and hashes: 1: vUxEHwLHrdQvpiQugzHZP1nlGDo.crl (hash: cgkTwyx5aKj+RwG3ivc8moMZVoI4jr+5/DGBAc5Q7NM=) 2: 079523028DB211ED910C330CC4F9AE02.roa (hash: W9Hoie4kNxclHpEMWbcvds2qMQa9C1Hni+pmtAE5bWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C67F9, serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A Validity Not Before: Aug 9 03:00:15 2025 GMT Not After : Aug 16 03:00:15 2025 GMT Subject: CN=6896b9bf-2520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:5e:6f:c7:af:f4:4f:5d:7f:2a:6d:05:f5: 1e:8e:cd:a7:ca:78:fc:20:88:cb:3e:6f:74:4a:e4: a4:9e:66:b2:9c:54:03:0b:60:3e:e9:1b:8a:bf:bd: 63:60:ef:d5:0d:9d:61:fb:e1:b7:27:84:54:1f:fe: b3:c8:8f:c6:12:70:57:17:d0:db:a1:a1:58:ec:ef: d0:c3:a4:f7:47:c4:dc:02:31:87:50:82:dd:2c:45: 95:90:f1:bf:0e:cb:04:bd:6f:64:52:57:1d:35:5b: f2:c9:a5:56:11:58:da:73:cd:79:39:2b:a7:a1:43: fc:11:42:3d:74:d5:fa:2d:6a:60:3b:f3:ad:e9:42: 12:bb:d0:5a:87:8e:8e:a4:3a:d4:e4:cf:00:b8:36: 03:8c:b7:3d:e1:35:e1:37:44:88:96:8c:65:6f:96: e6:8c:6e:5d:d0:9e:d8:2c:36:8c:12:e3:60:77:5c: a3:e9:b3:33:31:d3:cb:60:87:af:1f:e7:92:9a:7a: be:7d:62:aa:ea:1f:75:98:f9:c4:dd:f9:ca:87:db: 85:62:2c:45:22:66:f4:d6:0e:fb:62:67:cb:68:5a: bf:ec:6f:55:f4:e0:98:e5:05:32:d4:a5:94:62:bd: 5e:bd:d8:25:dc:14:c8:02:ab:61:03:22:cf:96:90: 08:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3D:D0:F5:7F:DD:B1:92:55:A2:74:43:DC:50:D7:CD:89:8C:6A:9B X509v3 Authority Key Identifier: keyid:BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:b6:e0:8a:60:36:15:44:26:1f:c9:22:f8:d8:b5:b4:20:bc: 48:78:84:e1:a1:b0:63:f1:98:98:5a:70:ae:3c:85:7e:7a:28: db:52:a0:7b:1f:1c:c7:23:9e:52:52:c6:be:b4:41:60:b7:c1: 3d:aa:1e:1e:8c:a6:53:4a:69:b8:7c:34:42:fc:e2:dc:b6:23: d8:61:c7:df:4b:79:59:c7:60:22:c3:3a:51:67:f5:0c:50:94: c9:6a:96:b6:13:c4:f6:65:05:3e:e1:2d:92:71:32:2f:88:9e: ca:87:ca:1e:c0:8c:96:5e:fa:b9:55:f9:c3:87:76:ea:23:57: d1:aa:e1:a4:f5:63:fb:41:ed:ee:48:77:df:59:0d:64:e7:62: 1f:9f:03:7f:5e:4d:cf:f5:d1:3c:33:20:0e:29:3d:c9:f3:2a: e1:d7:5a:3c:7d:c9:99:c2:ff:8a:36:0d:1c:72:85:d6:59:14: 10:58:b1:5b:e7:3d:2c:b8:99:47:1f:1a:b1:63:3d:ce:07:4f: 47:47:97:c6:ab:c7:05:bc:df:a0:b8:24:7f:ea:d5:b1:0e:6c: ff:ae:41:f6:75:18:d8:4f:dd:f2:e9:c2:02:44:f0:8f:79:1a: ad:22:14:0a:49:a9:2d:a4:d1:d8:73:09:6e:82:b2:80:2e:05: a0:d0:e3:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY3RjkxMTAvBgNVBAUTKEJENEM0NDFGMDJDN0FERDQyRkE2MjQyRTgzMzFEOTNG NTlFNTE4M0EwHhcNMjUwODA5MDMwMDE1WhcNMjUwODE2MDMwMDE1WjAYMRYwFAYD VQQDEw02ODk2YjliZi0yNTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKpeb8ev9E9dfyptBfUejs2nynj8IIjLPm90SuSknmaynFQDC2A+6RuKv71j YO/VDZ1h++G3J4RUH/6zyI/GEnBXF9DboaFY7O/Qw6T3R8TcAjGHUILdLEWVkPG/ DssEvW9kUlcdNVvyyaVWEVjac815OSunoUP8EUI9dNX6LWpgO/Ot6UISu9Bah46O pDrU5M8AuDYDjLc94TXhN0SIloxlb5bmjG5d0J7YLDaMEuNgd1yj6bMzMdPLYIev H+eSmnq+fWKq6h91mPnE3fnKh9uFYixFImb01g77YmfLaFq/7G9V9OCY5QUy1KWU Yr1evdgl3BTIAqthAyLPlpAIdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH490PV/ 3bGSVaJ0Q9xQ182JjGqbMB8GA1UdIwQYMBaAFL1MRB8Cx63UL6YkLoMx2T9Z5Rg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjdGOS9FQUUxMkU0NDhE QUQxMUVEQjJEQ0M0ODdDNEY5QUUwMi92VXhFSHdMSHJkUXZwaVF1Z3pIWlAxbmxH RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZVeEVId0xIcmRRdnBpUXVnekhaUDFubEdEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjdGOS9FQUUxMkU0NDhEQUQxMUVEQjJEQ0M0ODdDNEY5QUUwMi92VXhFSHdMSHJk UXZwaVF1Z3pIWlAxbmxHRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEtuCKYDYVRCYfySL42LW0ILxIeIThobBj8ZiYWnCuPIV+eijbUqB7 HxzHI55SUsa+tEFgt8E9qh4ejKZTSmm4fDRC/OLctiPYYcffS3lZx2AiwzpRZ/UM UJTJapa2E8T2ZQU+4S2ScTIviJ7Kh8oewIyWXvq5VfnDh3bqI1fRquGk9WP7Qe3u SHffWQ1k52IfnwN/Xk3P9dE8MyAOKT3J8yrh11o8fcmZwv+KNg0ccoXWWRQQWLFb 5z0suJlHHxqxYz3OB09HR5fGq8cFvN+guCR/6tWxDmz/rkH2dRjYT93y6cICRPCP eRqtIhQKSaktpNHYcwlugrKALgWg0OMD -----END CERTIFICATE-----Generated at Sun Aug 10 05:35:39 2025 by rpki-client