$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft File: VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft (raw, json) Hash identifier: Qghu4twhJcWIi4vnm2QVqx/nLg3cuHDWDx2MG8uQhKI= Subject key identifier: D8:09:92:88:89:9C:11:DA:02:14:3F:F9:C2:2C:7B:08:2E:4C:ED:B0 Authority key identifier: 56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A Certificate issuer: /CN=A91D6F2B/serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A Certificate serial: 037B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft Manifest number: 0376 Signing time: Sat 09 Aug 2025 01:24:13 +0000 Manifest this update: Sat 09 Aug 2025 01:24:12 +0000 Manifest next update: Sat 16 Aug 2025 01:24:12 +0000 Files and hashes: 1: VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl (hash: X6pAWkfPrvcfU/bg+SSCGHMRFNy9StBObjnk4+Rmwcg=) 2: 2A22D2FCB6CB11ECA43EEE87C4F9AE02.roa (hash: KlAC54soZmN85lgdd13wHGCcsR/XbE59aQyhJMVb4zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 891 (0x37b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6F2B, serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A Validity Not Before: Aug 9 01:24:12 2025 GMT Not After : Aug 16 01:24:12 2025 GMT Subject: CN=6896a33c-8937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:a6:9e:90:9b:6c:d4:2e:1a:76:08:ff:66: 5c:a7:93:79:b6:17:f7:32:af:81:8a:66:07:82:41: 4a:a8:6b:a0:66:82:2f:0b:2d:10:aa:6c:d1:b6:5e: 35:2d:1b:50:28:92:80:81:d6:ab:0b:87:cb:9b:98: f9:3b:52:ce:4e:f4:05:20:e9:1c:cb:fa:7b:53:5e: 3b:37:01:84:24:54:74:e6:99:cf:80:d8:f1:02:0c: 81:78:55:c6:28:51:3f:4a:33:79:e7:e0:c3:d9:0b: 6a:0e:01:74:df:4a:b0:19:6f:78:2f:18:df:ab:76: 54:d4:7e:83:5c:73:b9:41:f3:af:37:b9:05:e4:8e: 02:44:c9:3a:33:db:f6:b9:20:64:cc:26:63:b6:de: 0b:46:c6:e9:c1:f6:8e:19:e8:cf:f9:24:8d:c2:3e: 1d:59:1d:1a:c1:b7:03:80:f2:07:c6:5a:a0:6f:4a: 0e:03:61:74:bd:a3:46:2e:55:7b:fe:f9:6d:a7:ea: 11:bf:30:40:f1:c9:31:6c:5f:36:be:d5:69:cc:c8: ff:d7:0e:29:14:d2:c3:4a:d0:5c:f1:00:6a:69:9c: 2f:86:9f:44:4b:17:2d:6e:11:6a:71:c0:28:aa:d2: 22:00:67:48:a9:f6:64:bc:98:a7:ec:19:ec:cb:66: d6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:09:92:88:89:9C:11:DA:02:14:3F:F9:C2:2C:7B:08:2E:4C:ED:B0 X509v3 Authority Key Identifier: keyid:56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:cc:f9:42:b4:62:46:b5:26:21:9b:9b:99:c2:00:bc:dc:3f: 5b:9d:31:d9:bb:9c:8b:84:33:6f:93:79:37:82:53:8d:5c:96: ce:d2:8a:54:87:2c:6b:12:b5:17:0e:14:81:e8:a5:a7:a9:85: bb:01:18:0a:58:00:00:41:56:7c:0d:93:17:fd:ec:d6:64:93: 65:38:54:60:ad:60:7b:c2:32:9f:f5:da:24:89:5e:71:86:cf: 42:ba:eb:ea:81:e9:fe:31:7a:e7:47:a0:57:3f:d1:42:70:9b: 33:6b:e3:0d:48:07:83:4c:82:3a:9b:6a:3e:b4:d5:e4:d7:c5: 12:ed:62:66:d1:2f:cf:12:4a:30:bb:5f:9f:a2:cb:19:0c:65: 43:aa:dc:cf:ba:49:86:1b:85:3d:c4:bb:3d:67:af:cf:98:4a: bc:2d:8b:3e:ff:62:04:d5:95:7f:b3:b6:18:75:d0:26:20:13: 75:03:f5:0e:29:23:69:c2:c8:e5:f4:2d:d0:ab:b9:b9:05:c4: ca:9a:0e:ca:6d:b7:40:86:93:88:30:35:5f:15:76:cb:20:af: 79:c8:79:0b:ea:60:85:07:c3:50:42:f3:b8:af:be:70:99:64: 6f:bb:d0:4d:1b:6e:59:5f:68:12:8e:ac:17:f3:08:13:51:f7: 28:6a:85:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZGMkIxMTAvBgNVBAUTKDU2MzhDQjFFMjZEMTE5OURBQkU4QjhDN0VEMjJCMDND NENFOEM4MEEwHhcNMjUwODA5MDEyNDEyWhcNMjUwODE2MDEyNDEyWjAYMRYwFAYD VQQDEw02ODk2YTMzYy04OTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVWmnpCbbNQuGnYI/2Zcp5N5thf3Mq+BimYHgkFKqGugZoIvCy0QqmzRtl41 LRtQKJKAgdarC4fLm5j5O1LOTvQFIOkcy/p7U147NwGEJFR05pnPgNjxAgyBeFXG KFE/SjN55+DD2QtqDgF030qwGW94Lxjfq3ZU1H6DXHO5QfOvN7kF5I4CRMk6M9v2 uSBkzCZjtt4LRsbpwfaOGejP+SSNwj4dWR0awbcDgPIHxlqgb0oOA2F0vaNGLlV7 /vltp+oRvzBA8ckxbF82vtVpzMj/1w4pFNLDStBc8QBqaZwvhp9ESxctbhFqccAo qtIiAGdIqfZkvJin7Bnsy2bWcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgJkoiJ nBHaAhQ/+cIsewguTO2wMB8GA1UdIwQYMBaAFFY4yx4m0Rmdq+i4x+0isDxM6MgK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkYyQi8zMzg2Njc2NkI2 QzkxMUVDODlCREM2ODdDNEY5QUUwMi9WampMSGliUkdaMnI2TGpIN1NLd1BFem95 QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZqakxIaWJSR1oycjZMakg3U0t3UEV6b3lBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkYyQi8zMzg2Njc2NkI2QzkxMUVDODlCREM2ODdDNEY5QUUwMi9WampMSGliUkda MnI2TGpIN1NLd1BFem95QW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuzPlCtGJGtSYhm5uZwgC83D9bnTHZu5yLhDNvk3k3glONXJbO0opU hyxrErUXDhSB6KWnqYW7ARgKWAAAQVZ8DZMX/ezWZJNlOFRgrWB7wjKf9dokiV5x hs9Cuuvqgen+MXrnR6BXP9FCcJsza+MNSAeDTII6m2o+tNXk18US7WJm0S/PEkow u1+fossZDGVDqtzPukmGG4U9xLs9Z6/PmEq8LYs+/2IE1ZV/s7YYddAmIBN1A/UO KSNpwsjl9C3Qq7m5BcTKmg7KbbdAhpOIMDVfFXbLIK95yHkL6mCFB8NQQvO4r75w mWRvu9BNG25ZX2gSjqwX8wgTUfcoaoWq -----END CERTIFICATE-----Generated at Sun Aug 10 05:36:21 2025 by rpki-client