$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft File: vZ1mh32GbnyQQVa-CMtDcargAb0.mft (raw, json) Hash identifier: 26q3xw6hBfzBaTF4l8NuMm5i+p1QvvC9+UT0HNSfQoM= Subject key identifier: 8D:75:60:1D:E6:26:D2:D2:B4:53:6C:55:E9:CE:6D:43:C5:5A:B0:97 Authority key identifier: BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD Certificate issuer: /CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Certificate serial: 0186 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft Manifest number: 0179 Signing time: Mon 11 Aug 2025 04:06:45 +0000 Manifest this update: Mon 11 Aug 2025 04:06:45 +0000 Manifest next update: Mon 18 Aug 2025 04:06:45 +0000 Files and hashes: 1: vZ1mh32GbnyQQVa-CMtDcargAb0.crl (hash: TGcyEeDXgM1tKHcH/e/+nqOyqprj8hbSE3cPa+t5oB4=) 2: AC9A49A6B79811EF9C8DF330C4F9AE02.roa (hash: x42cPOY42/ihAcwEOhbusv08pDLFkf2E5Qjxerl5aIk=) 3: 975A513293B011EF9203EA6BC4F9AE02.roa (hash: LAC2JzlZ9Cqk3BSRvYxm4bLahu0/0Fv8k3EO+q7V5PY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5E8B, serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Validity Not Before: Aug 11 04:06:45 2025 GMT Not After : Aug 18 04:06:45 2025 GMT Subject: CN=68996c55-9c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d3:02:50:8e:c0:3c:a5:84:bf:e0:13:40:13: e3:31:8d:56:9d:d9:a4:79:cc:29:10:31:cc:4c:b8: 49:72:49:49:5b:95:9a:c7:d5:f4:99:5f:ab:3f:c3: df:ec:5e:b7:ac:8f:10:9b:e6:a4:d5:20:fb:7e:68: f3:3e:49:38:e5:c4:e1:65:ab:d5:0b:b9:15:19:83: ec:1b:c7:48:15:f4:b1:9e:6a:83:14:b6:89:63:fa: 80:95:e5:ac:f5:92:ea:21:f5:cc:92:90:14:2c:de: 84:2e:62:bb:17:6a:c1:e3:8a:c2:47:55:3f:7c:72: e4:0c:13:28:75:e4:fa:8c:ec:bf:d2:00:84:1d:d1: 86:e6:e2:ed:d7:3b:b2:b0:c0:e3:73:e1:eb:a9:21: ff:d4:00:18:93:fb:e3:22:8c:cb:f0:fd:fc:6f:98: 2b:4e:19:fb:06:5f:c5:08:66:7a:86:b4:47:f5:3e: 8e:06:a8:32:16:0f:8d:62:b5:65:bf:ec:fa:f2:23: 0f:65:8b:e7:05:82:46:f1:28:2f:9b:fb:28:e8:97: 05:98:e1:75:c8:28:88:da:d4:f8:07:76:90:bb:8b: fe:07:47:d1:8d:48:3d:e8:49:0a:36:ca:c5:7a:57: a1:27:bd:22:13:91:fc:18:b1:b9:fe:ad:3e:5f:9b: 79:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:75:60:1D:E6:26:D2:D2:B4:53:6C:55:E9:CE:6D:43:C5:5A:B0:97 X509v3 Authority Key Identifier: keyid:BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:a4:98:73:ce:fe:e5:70:77:18:3b:4f:1b:41:26:f3:19:4c: e8:f5:c3:6e:37:da:df:bb:3c:c7:99:1d:eb:c1:2c:19:a9:84: 63:15:64:33:72:71:ff:36:15:00:98:4b:16:1a:ac:d7:46:3b: b3:48:0a:5a:9d:a6:57:c3:d8:67:9d:17:94:db:95:34:38:93: 63:cd:f8:16:6d:63:33:4a:f4:36:ec:50:fd:0c:14:b3:06:72: b5:d2:a4:05:4e:91:a5:c0:82:00:12:41:a0:f4:02:7b:d5:05: 37:cc:c7:ef:d2:31:7c:90:5c:28:4c:40:39:43:8a:3b:83:dc: 7e:82:26:53:f5:42:4d:16:90:7f:96:3b:6f:cf:91:73:c9:e4: 89:b9:aa:cf:46:2f:56:85:d5:9e:d4:1a:11:f3:fc:5d:6e:33: a0:df:ef:1e:2c:09:5a:ed:6a:d7:6f:4a:1a:8f:68:b5:4e:45: f1:c5:0c:da:b7:62:6c:bc:7f:61:56:81:7e:5f:15:ab:0a:14: 36:84:15:24:46:35:fa:11:d2:ea:8a:12:67:45:05:63:66:d7: b5:0c:84:fb:fe:78:86:48:fc:29:74:16:e7:4e:70:2b:ee:0f: b0:d7:3f:c2:7d:ed:6e:5f:40:14:2f:6e:73:9c:a7:be:1b:31: 0e:3b:fe:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVFOEIxMTAvBgNVBAUTKEJEOUQ2Njg3N0Q4NjZFN0M5MDQxNTZCRTA4Q0I0Mzcx QUFFMDAxQkQwHhcNMjUwODExMDQwNjQ1WhcNMjUwODE4MDQwNjQ1WjAYMRYwFAYD VQQDEw02ODk5NmM1NS05YzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNMCUI7APKWEv+ATQBPjMY1WndmkecwpEDHMTLhJcklJW5Wax9X0mV+rP8Pf 7F63rI8Qm+ak1SD7fmjzPkk45cThZavVC7kVGYPsG8dIFfSxnmqDFLaJY/qAleWs 9ZLqIfXMkpAULN6ELmK7F2rB44rCR1U/fHLkDBModeT6jOy/0gCEHdGG5uLt1zuy sMDjc+HrqSH/1AAYk/vjIozL8P38b5grThn7Bl/FCGZ6hrRH9T6OBqgyFg+NYrVl v+z68iMPZYvnBYJG8Sgvm/so6JcFmOF1yCiI2tT4B3aQu4v+B0fRjUg96EkKNsrF elehJ70iE5H8GLG5/q0+X5t5kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI11YB3m JtLStFNsVenObUPFWrCXMB8GA1UdIwQYMBaAFL2dZod9hm58kEFWvgjLQ3Gq4AG9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUU4Qi9ERUMzQkQ3QzVB RDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2JueVFRVmEtQ010RGNhcmdB YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZaMW1oMzJHYm55UVFWYS1DTXREY2FyZ0FiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUU4Qi9ERUMzQkQ3QzVBRDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2Ju eVFRVmEtQ010RGNhcmdBYjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDpJhzzv7lcHcYO08bQSbzGUzo9cNuN9rfuzzHmR3rwSwZqYRjFWQz cnH/NhUAmEsWGqzXRjuzSApanaZXw9hnnReU25U0OJNjzfgWbWMzSvQ27FD9DBSz BnK10qQFTpGlwIIAEkGg9AJ71QU3zMfv0jF8kFwoTEA5Q4o7g9x+giZT9UJNFpB/ ljtvz5FzyeSJuarPRi9WhdWe1BoR8/xdbjOg3+8eLAla7WrXb0oaj2i1TkXxxQza t2JsvH9hVoF+XxWrChQ2hBUkRjX6EdLqihJnRQVjZte1DIT7/niGSPwpdBbnTnAr 7g+w1z/Cfe1uX0AUL25znKe+GzEOO/4t -----END CERTIFICATE-----Generated at Mon Aug 11 08:45:53 2025 by rpki-client