$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft File: VXiaNBbn71Fc4I8Fo28d7YNETAk.mft (raw, json) Hash identifier: sveNRExaGGoxbAj5SNkNx8ywb5XvdKqd4BTIaNwgXos= Subject key identifier: 47:03:CB:0C:A2:51:4A:ED:F7:22:DC:15:AF:9C:63:BD:DB:74:52:0A Authority key identifier: 55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09 Certificate issuer: /CN=A91F43F2/serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft Manifest number: 0C Signing time: Sun 03 Aug 2025 08:31:23 +0000 Manifest this update: Sun 03 Aug 2025 08:31:23 +0000 Manifest next update: Sun 10 Aug 2025 08:31:23 +0000 Files and hashes: 1: VXiaNBbn71Fc4I8Fo28d7YNETAk.crl (hash: 8rqyHQV7A82Tp1fHcJnEEJIX0cvd9E3sGAtjnbEgUk0=) 2: A19F973C60C011F0A28C7F2CC4F9AE02.roa (hash: z6l4Kf7BBkbhNbxfRp+L0t7tdYphMHusFnOI/s0ajOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 08:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F43F2, serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09 Validity Not Before: Aug 3 08:31:23 2025 GMT Not After : Aug 10 08:31:23 2025 GMT Subject: CN=688f1e5b-7ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0c:60:a6:a5:44:92:67:17:3d:4a:96:4c:fe: a6:f1:db:f0:d9:78:d2:fb:c1:94:bf:7e:9c:02:27: d9:dd:69:a7:51:3e:ed:be:c9:68:3f:23:6a:40:f7: 4f:af:05:51:25:a6:5f:2e:23:89:1f:76:b5:0c:ca: 89:3a:53:1b:60:f6:1d:01:57:71:6a:2c:34:16:a8: c4:93:ff:9b:19:87:1a:73:f1:2e:8c:e9:8a:dc:3d: 8d:0b:f1:55:0a:e3:33:52:b2:cb:7f:65:e7:53:5b: a1:5f:39:87:d1:40:aa:b4:48:e0:28:0e:3e:85:4a: ee:46:33:6e:81:9a:fb:19:5b:3a:0f:79:5f:d8:7f: da:cb:78:d4:e4:15:ff:e9:be:8a:9f:16:67:d8:04: a1:61:ac:43:70:a7:3c:88:18:0b:8a:13:f5:30:70: 88:4c:a3:73:83:73:40:6c:2f:dd:d0:e4:f6:a1:02: ac:01:ba:1b:13:f1:b9:a7:12:6e:02:da:92:86:7d: e0:2c:8b:8c:cd:29:67:fd:ad:32:cc:be:10:cc:47: b8:e6:a8:32:aa:49:a4:0e:cd:90:7c:18:7e:fa:06: 65:93:38:42:7b:60:d7:05:4d:b1:00:58:26:ee:6d: 19:21:85:3b:a6:90:dd:8a:0d:01:c5:d2:8b:9e:bf: c9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:03:CB:0C:A2:51:4A:ED:F7:22:DC:15:AF:9C:63:BD:DB:74:52:0A X509v3 Authority Key Identifier: keyid:55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:b8:bc:8c:ee:2a:62:4e:db:92:8c:ba:35:db:62:3b:0e:1a: 45:3a:40:f5:2f:2b:b6:73:5e:84:fb:50:a8:84:cf:55:47:c2: 1c:df:69:17:2b:bd:bd:bc:24:64:7a:f9:a2:db:86:eb:91:d5: b3:fa:32:9f:16:cc:42:b4:96:a4:aa:c3:1d:23:b3:9a:14:cb: 98:d8:e3:39:14:50:f7:46:f0:8e:df:e2:1a:a8:0b:51:99:bd: 7c:77:26:9f:40:1c:67:f2:bf:ec:bc:83:e6:08:95:cd:9a:b9: e7:da:70:5a:b8:dc:a7:1a:68:aa:87:6e:4b:eb:16:72:fa:12: 8c:37:13:c0:46:4e:d4:16:14:b2:9d:89:15:3b:af:5f:f4:58: c3:79:10:ea:87:52:e6:69:1d:9c:79:0e:86:53:d3:16:2a:56: 05:5c:8e:6d:7a:8e:20:7d:f5:78:e7:15:74:df:bd:5d:93:32: ac:36:f7:c4:82:7b:65:62:65:0c:15:65:c4:a4:83:fb:95:8f: d2:44:e9:46:ce:42:cc:fc:da:9f:6e:0b:db:c9:59:58:34:7d: 7d:95:d9:82:cc:e2:66:76:5a:17:76:15:96:48:45:e9:bd:dc: 35:88:8d:21:d8:f0:10:65:77:83:cb:6f:32:bf:bb:6d:cc:d5: 87:9b:f8:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NDNGMjExMC8GA1UEBRMoNTU3ODlBMzQxNkU3RUY1MTVDRTA4RjA1QTM2RjFERUQ4 MzQ0NEMwOTAeFw0yNTA4MDMwODMxMjNaFw0yNTA4MTAwODMxMjNaMBgxFjAUBgNV BAMTDTY4OGYxZTViLTdlZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkDGCmpUSSZxc9SpZM/qbx2/DZeNL7wZS/fpwCJ9ndaadRPu2+yWg/I2pA90+v BVElpl8uI4kfdrUMyok6Uxtg9h0BV3FqLDQWqMST/5sZhxpz8S6M6YrcPY0L8VUK 4zNSsst/ZedTW6FfOYfRQKq0SOAoDj6FSu5GM26BmvsZWzoPeV/Yf9rLeNTkFf/p voqfFmfYBKFhrENwpzyIGAuKE/UwcIhMo3ODc0BsL93Q5PahAqwBuhsT8bmnEm4C 2pKGfeAsi4zNKWf9rTLMvhDMR7jmqDKqSaQOzZB8GH76BmWTOEJ7YNcFTbEAWCbu bRkhhTumkN2KDQHF0ouev8kZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURwPLDKJR Su33ItwVr5xjvdt0UgowHwYDVR0jBBgwFoAUVXiaNBbn71Fc4I8Fo28d7YNETAkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0M0YyLzQxODA1MDk0NjBD MDExRjBBRkI0NTcyQkM0RjlBRTAyL1ZYaWFOQmJuNzFGYzRJOEZvMjhkN1lORVRB ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVlhpYU5CYm43MUZjNEk4Rm8yOGQ3WU5FVEFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0 M0YyLzQxODA1MDk0NjBDMDExRjBBRkI0NTcyQkM0RjlBRTAyL1ZYaWFOQmJuNzFG YzRJOEZvMjhkN1lORVRBay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAi4vIzuKmJO25KMujXbYjsOGkU6QPUvK7ZzXoT7UKiEz1VHwhzfaRcr vb28JGR6+aLbhuuR1bP6Mp8WzEK0lqSqwx0js5oUy5jY4zkUUPdG8I7f4hqoC1GZ vXx3Jp9AHGfyv+y8g+YIlc2auefacFq43KcaaKqHbkvrFnL6Eow3E8BGTtQWFLKd iRU7r1/0WMN5EOqHUuZpHZx5DoZT0xYqVgVcjm16jiB99XjnFXTfvV2TMqw298SC e2ViZQwVZcSkg/uVj9JE6UbOQsz82p9uC9vJWVg0fX2V2YLM4mZ2Whd2FZZIRem9 3DWIjSHY8BBld4PLbzK/u23M1Yeb+IA= -----END CERTIFICATE-----Generated at Mon Aug 4 14:43:27 2025 by rpki-client