$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft File: VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft (raw, json) Hash identifier: QDebpbBlhDdzQBIyY1mtkielCneB4RdqDVX7+GPzxs8= Subject key identifier: 2E:0F:39:E1:AD:00:DA:2F:02:5C:49:31:9D:5E:54:00:E8:98:13:91 Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Certificate serial: 0602 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft Manifest number: 054E Signing time: Sun 10 Aug 2025 04:36:49 +0000 Manifest this update: Sun 10 Aug 2025 04:36:48 +0000 Manifest next update: Sun 17 Aug 2025 04:36:48 +0000 Files and hashes: 1: VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl (hash: sCI3lOltxV6YVTbRy02FDMN/hIkWHhiNtgyK/5oSun8=) 2: 0BD4BBC2716911EDA03D4A50C4F9AE02.roa (hash: iCGYHqcapZ1DKt8RS4ox+PrMVLiDQPhQLsfb9ZqKn8Y=) 3: 48CB7422E27911ED88B5A641C4F9AE02.roa (hash: QmFCb1gnvXBWWYpq973wK4QQOQ9b3T0BnSVKwwKlbk4=) 4: D4FCF92C716B11ED9F349A49C4F9AE02.roa (hash: UuOQPjOHW3te4OiVFYw+HXL7r4q+xv2PoIFABxSLF70=) 5: B7342ECA555B11F0B35B1E0DC4F9AE02.roa (hash: ZCWgM50hKhmVlBN6caSNUYvrDT45U67mSi8JO40F7Hk=) 6: ECC41AD2748A11ED80EF3436C4F9AE02.roa (hash: sg221W/egXu0ZEIvG5/3NuaO+9JdsATAt/T48V/WxaU=) 7: 0C5EDCDA716911EDA03D4A50C4F9AE02.roa (hash: /udoJCuRJJiznFyAsVCyc0gM64uxhJqp5G9jTAQbZu4=) 8: 9A1D8B2E867D11ED856A8E54C4F9AE02.roa (hash: cieJSU2MctUg0O+GWn4XGuRsQ3vHkHefCudId57mspk=) 9: 8DEEDC96E6B511EF9FEF6436C4F9AE02.roa (hash: PXNaSMJ5YVKmgSX7D94F0YVFvnDTmRG8eGKKeg/Al70=) 10: 0D0517EE716911EDA03D4A50C4F9AE02.roa (hash: fhtBFY+6U1Q/NDrcrqBZE1BQCslriv3eFT6qN9HqyO4=) 11: D359E238716B11ED9F349A49C4F9AE02.roa (hash: aJuLqquEQyyIiKwXY41VQpBHPxNA/CIwMjOgaOCooJI=) 12: 1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa (hash: A2ygxvr9PN0f2GmPnzr/pvOkxXlgbKwoY3C25qzAOpk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1538 (0x602) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Validity Not Before: Aug 10 04:36:48 2025 GMT Not After : Aug 17 04:36:48 2025 GMT Subject: CN=689821e1-9431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d5:68:b1:10:01:b5:06:85:19:c1:aa:4b:db: 5f:70:72:21:57:ec:32:ce:bd:0f:fc:81:39:5b:40: bf:33:63:a5:5c:f6:33:82:e5:81:e5:8b:ea:bc:84: d2:16:36:d8:ea:55:d9:6c:79:f7:1e:df:20:39:84: b2:19:d8:5a:67:be:f8:d1:4d:cc:27:86:dd:16:12: cc:2b:75:12:06:16:3a:24:fe:f4:f7:01:d7:29:fe: 82:49:b6:69:b4:d7:7b:37:d4:bd:12:df:ec:cf:f6: f8:91:32:15:5a:83:27:e6:28:b6:ea:40:d0:ba:76: fd:0a:96:61:da:f6:bd:d1:93:90:2b:3d:e2:df:00: 22:5f:31:a1:42:dc:ab:57:0f:9c:8d:b5:f8:6a:09: 58:e3:69:d2:a8:5e:00:12:89:06:40:e0:2b:6a:cc: 20:f6:1e:53:ab:7b:d3:b1:a7:53:50:51:78:01:36: 18:31:6e:91:ce:15:67:da:05:b4:a1:af:6d:5b:d6: 3f:ad:ce:bc:6f:fb:1d:c6:85:f6:99:9b:6e:31:51: ec:26:ec:df:93:fc:01:1b:52:a4:46:55:a3:0b:3f: bb:f1:81:05:f2:5a:ad:4b:d1:57:b0:93:18:30:c8: a6:2a:f1:09:53:bd:fd:bb:7e:34:ab:3a:ab:66:aa: ee:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:0F:39:E1:AD:00:DA:2F:02:5C:49:31:9D:5E:54:00:E8:98:13:91 X509v3 Authority Key Identifier: keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:64:2d:dd:e2:8e:22:3d:4a:a7:6e:b8:d2:ff:d2:3b:b1:b3: 03:b2:99:ef:39:df:e2:ea:f6:57:fc:22:2a:fb:64:77:c3:b0: 89:7e:24:8f:5a:4d:48:7b:8f:a7:8e:01:8d:4e:26:f6:d3:31: 23:73:4c:86:f2:ed:19:f9:3d:0c:b8:44:9d:ad:d9:f4:1e:1b: 1b:81:6a:67:06:ed:5d:ae:11:68:2d:2b:a1:71:e9:7e:ca:30: 9e:96:9f:91:ab:d3:8a:3b:6c:bd:ff:39:43:ae:76:d8:38:b7: bc:72:6e:ae:5f:41:5b:a8:ad:47:32:87:36:b2:3f:ff:4e:6d: 5e:3d:4b:85:0d:7c:68:9e:19:78:40:b6:02:1f:d1:47:1c:0c: 78:b8:04:ef:80:c9:2a:82:9e:87:80:a4:7d:4b:18:7a:78:92: da:a2:d2:4e:38:37:73:f0:42:88:53:ba:c2:dc:d9:9d:2b:b9: be:01:4e:c3:2f:7a:da:81:c3:01:e8:07:70:4c:b5:8f:fa:45: 43:fc:72:3f:b9:a4:e5:56:9a:fa:fb:a1:ca:7a:84:75:47:6f: 11:2b:df:41:47:cc:fa:15:c2:c8:db:16:53:54:fe:27:24:45: c8:59:85:c0:71:e6:77:40:64:bf:67:de:9a:2f:f2:c3:d1:82: f8:7d:cc:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3 RDc0MTQ3RjMwHhcNMjUwODEwMDQzNjQ4WhcNMjUwODE3MDQzNjQ4WjAYMRYwFAYD VQQDEw02ODk4MjFlMS05NDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5tVosRABtQaFGcGqS9tfcHIhV+wyzr0P/IE5W0C/M2OlXPYzguWB5YvqvITS FjbY6lXZbHn3Ht8gOYSyGdhaZ7740U3MJ4bdFhLMK3USBhY6JP709wHXKf6CSbZp tNd7N9S9Et/sz/b4kTIVWoMn5ii26kDQunb9CpZh2va90ZOQKz3i3wAiXzGhQtyr Vw+cjbX4aglY42nSqF4AEokGQOAraswg9h5Tq3vTsadTUFF4ATYYMW6RzhVn2gW0 oa9tW9Y/rc68b/sdxoX2mZtuMVHsJuzfk/wBG1KkRlWjCz+78YEF8lqtS9FXsJMY MMimKvEJU739u340qzqrZqruGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4POeGt ANovAlxJMZ1eVADomBORMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDM5RC9ERTdEMkY5NDRFNzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9S WF9JbVgtU1JrSng5ZEJSX00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPZC3d4o4iPUqnbrjS/9I7sbMDspnvOd/i6vZX/CIq+2R3w7CJfiSP Wk1Ie4+njgGNTib20zEjc0yG8u0Z+T0MuESdrdn0HhsbgWpnBu1drhFoLSuhcel+ yjCelp+Rq9OKO2y9/zlDrnbYOLe8cm6uX0FbqK1HMoc2sj//Tm1ePUuFDXxonhl4 QLYCH9FHHAx4uATvgMkqgp6HgKR9Sxh6eJLaotJOODdz8EKIU7rC3NmdK7m+AU7D L3ragcMB6AdwTLWP+kVD/HI/uaTlVpr6+6HKeoR1R28RK99BR8z6FcLI2xZTVP4n JEXIWYXAceZ3QGS/Z96aL/LD0YL4fcxI -----END CERTIFICATE-----Generated at Sun Aug 10 21:01:07 2025 by rpki-client