$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft File: Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft (raw, json) Hash identifier: k/lJcwofw1GlX+7CJWjPiQzTviHqRK3zpZi8dcq3Z6g= Subject key identifier: 63:0C:3E:90:42:4A:EC:7E:74:8D:91:7B:63:D6:E5:FD:22:AF:3F:71 Authority key identifier: 56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59 Certificate issuer: /CN=A91E0D8B/serialNumber=568D179152473C809A62E585E5ADC942866BE659 Certificate serial: 06D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft Manifest number: 06CF Signing time: Wed 06 Aug 2025 22:26:08 +0000 Manifest this update: Wed 06 Aug 2025 22:26:08 +0000 Manifest next update: Wed 13 Aug 2025 22:26:07 +0000 Files and hashes: 1: Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl (hash: AipiWfCZR5OHnbKWS6PpLLRWy0Zn3PMtkVNMTkVadE8=) 2: 146FD366653611EB99BE491DC4F9AE02.roa (hash: vDTtnYK0urRCnkWdVJaHunlHhYBCBiIEuZyHl4rL/x4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 22:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1749 (0x6d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D8B, serialNumber=568D179152473C809A62E585E5ADC942866BE659 Validity Not Before: Aug 6 22:26:08 2025 GMT Not After : Aug 13 22:26:07 2025 GMT Subject: CN=6893d680-e1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:de:f0:ee:2e:e4:ee:75:b6:20:4a:28:47:39: 75:a4:3c:a1:a7:92:fc:36:99:42:59:95:53:1f:30: 35:94:55:eb:ca:74:7b:a5:b9:6a:27:90:2c:b4:a6: 7d:e6:2f:80:85:a9:c6:fc:05:21:88:a9:4e:93:5f: a2:90:79:8a:d1:7a:a6:6f:98:9b:02:87:08:23:f0: 2c:25:5e:b2:db:d2:5b:29:fd:cd:7c:f2:b7:a2:a6: 04:36:a3:c4:07:28:15:40:dd:7f:2f:28:f1:33:7e: 23:c5:66:c5:5a:13:d5:dc:c4:3c:9d:44:be:47:39: 9e:bd:ad:18:7a:3f:b9:1a:be:f5:f5:8b:0d:94:97: b4:b0:ad:26:c0:d2:35:20:1e:64:b1:3d:cd:5b:e6: 43:bd:29:d9:6e:e8:16:c1:e5:f1:20:79:a4:64:68: da:21:d7:e6:b8:85:bd:d2:fe:70:b3:b4:d7:42:9a: af:f7:eb:92:01:24:bd:0a:6b:21:d9:fc:b6:6d:d9: a2:a7:07:78:72:e5:f4:39:29:40:59:48:bf:2a:2b: 2e:c4:26:0b:a5:eb:47:8b:3a:f9:90:71:dd:d5:44: 0c:2d:d4:20:b6:a4:8a:8b:2b:72:14:cf:3b:d8:8f: 00:97:e5:80:fd:6b:ad:41:e7:8c:ee:ba:3d:67:5d: 66:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0C:3E:90:42:4A:EC:7E:74:8D:91:7B:63:D6:E5:FD:22:AF:3F:71 X509v3 Authority Key Identifier: keyid:56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b4:e8:d3:ed:32:10:a9:c7:12:0e:29:65:60:cf:6a:2b:9a: 96:ec:0b:30:7c:e0:1a:86:d6:44:2b:73:d4:6f:c2:95:cb:28: be:f0:da:d0:95:35:db:01:9d:ce:11:39:5e:a6:69:d7:24:58: 42:56:b0:cd:ac:6f:9f:f0:28:9d:27:c4:98:cc:c4:b4:70:bf: 07:3c:99:c3:84:12:c8:2d:68:d0:44:5d:e9:65:3e:0c:6c:fe: 75:1a:e9:77:d3:e4:1b:d2:89:58:48:a2:a9:40:48:06:77:57: ac:26:0c:93:9a:f5:46:ce:2b:96:a6:3f:d6:37:5e:19:a4:4b: ab:ad:19:e8:ef:32:34:99:e2:7a:f7:77:d7:5f:e2:6f:d8:84: d6:43:49:d0:f0:da:b8:b8:8e:a9:c0:57:97:92:fb:66:fc:73: a9:f9:af:22:03:b6:66:5c:8e:06:b6:d9:e2:ee:22:e2:39:f9: 7b:38:0a:93:61:3e:c4:f4:ad:f3:0a:94:9d:22:11:42:8c:69: 60:ec:a8:59:f9:3b:fb:2e:ac:b5:3b:58:e9:e1:05:9a:b8:c6: 1b:a2:c5:6c:1a:24:03:54:ec:4b:6f:26:97:aa:34:4a:67:f4: 15:5f:f2:cd:39:1d:85:42:87:4c:f5:e6:dc:3f:ea:f1:99:fb: 99:9b:56:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEOEIxMTAvBgNVBAUTKDU2OEQxNzkxNTI0NzNDODA5QTYyRTU4NUU1QURDOTQy ODY2QkU2NTkwHhcNMjUwODA2MjIyNjA4WhcNMjUwODEzMjIyNjA3WjAYMRYwFAYD VQQDEw02ODkzZDY4MC1lMWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3N7w7i7k7nW2IEooRzl1pDyhp5L8NplCWZVTHzA1lFXrynR7pblqJ5AstKZ9 5i+AhanG/AUhiKlOk1+ikHmK0Xqmb5ibAocII/AsJV6y29JbKf3NfPK3oqYENqPE BygVQN1/LyjxM34jxWbFWhPV3MQ8nUS+Rzmeva0Yej+5Gr719YsNlJe0sK0mwNI1 IB5ksT3NW+ZDvSnZbugWweXxIHmkZGjaIdfmuIW90v5ws7TXQpqv9+uSASS9Cmsh 2fy2bdmipwd4cuX0OSlAWUi/KisuxCYLpetHizr5kHHd1UQMLdQgtqSKiytyFM87 2I8Al+WA/WutQeeM7ro9Z11mCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMMPpBC Sux+dI2Re2PW5f0irz9xMB8GA1UdIwQYMBaAFFaNF5FSRzyAmmLlheWtyUKGa+ZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Qi80QTZENkMwQTY1 MzQxMUVCQjZCOEYwMTlDNEY5QUUwMi9WbzBYa1ZKSFBJQ2FZdVdGNWEzSlFvWnI1 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZvMFhrVkpIUElDYVl1V0Y1YTNKUW9acjVsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEQ4Qi80QTZENkMwQTY1MzQxMUVCQjZCOEYwMTlDNEY5QUUwMi9WbzBYa1ZKSFBJ Q2FZdVdGNWEzSlFvWnI1bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBetOjT7TIQqccSDillYM9qK5qW7AswfOAahtZEK3PUb8KVyyi+8NrQ lTXbAZ3OETlepmnXJFhCVrDNrG+f8CidJ8SYzMS0cL8HPJnDhBLILWjQRF3pZT4M bP51Gul30+Qb0olYSKKpQEgGd1esJgyTmvVGziuWpj/WN14ZpEurrRno7zI0meJ6 93fXX+Jv2ITWQ0nQ8Nq4uI6pwFeXkvtm/HOp+a8iA7ZmXI4Gttni7iLiOfl7OAqT YT7E9K3zCpSdIhFCjGlg7KhZ+Tv7Lqy1O1jp4QWauMYbosVsGiQDVOxLbyaXqjRK Z/QVX/LNOR2FQodM9ebcP+rxmfuZm1Zw -----END CERTIFICATE-----Generated at Fri Aug 8 21:00:06 2025 by rpki-client