$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft File: vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft (raw, json) Hash identifier: 6WWZXY5xBYx4jkSpRHcOYUi0CjHQX111NWxGbIm1LwQ= Subject key identifier: 75:E1:99:36:26:8B:FB:A8:AC:8B:E5:3A:9E:31:FB:6E:2B:93:BC:04 Authority key identifier: BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96 Certificate issuer: /CN=A91FEB89/serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096 Certificate serial: 026B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft Manifest number: 0264 Signing time: Mon 11 Aug 2025 02:00:49 +0000 Manifest this update: Mon 11 Aug 2025 02:00:48 +0000 Manifest next update: Mon 18 Aug 2025 02:00:48 +0000 Files and hashes: 1: vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl (hash: mg6Yci17n7W9FatLIGPj1D3u2kTyLZXbL33hOQ98UWw=) 2: 5706BF6024F111ED84831E21C4F9AE02.roa (hash: KwT8765tV1xGz2sf7ujcAdTQLGt8VA1bqI5xYKuBmVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 02:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 619 (0x26b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB89, serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096 Validity Not Before: Aug 11 02:00:48 2025 GMT Not After : Aug 18 02:00:48 2025 GMT Subject: CN=68994ed1-58a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f0:4f:2e:14:73:f5:5e:01:6b:39:a1:d2:f9: cc:eb:a7:2d:fb:4c:b2:4d:88:72:8f:c8:8e:52:1c: 96:d2:30:ce:b5:d2:3f:ec:16:97:45:72:dc:94:51: b1:18:81:f1:d9:fd:96:01:59:18:eb:77:d7:f3:1b: a8:b7:e0:b0:b7:e7:c5:62:ad:92:f4:4d:4b:24:06: 72:82:ba:38:f3:ec:7b:a4:e8:fb:31:8b:d9:69:e1: 71:63:7d:c9:ba:51:d5:3f:69:fc:dc:f9:c3:fe:53: 2c:e1:0b:79:39:67:d2:4c:55:44:e7:3e:9f:5d:fd: 04:ee:d7:9f:90:bd:5a:dc:2e:af:d1:95:52:fd:88: ae:3a:cb:3d:c0:ff:52:c4:de:8f:a8:ca:84:4e:06: c5:42:4f:46:25:2b:c3:61:7b:d4:14:ef:8a:0f:f9: 3a:8f:fb:7b:e1:f0:35:da:82:e2:ce:14:ed:40:5b: da:08:e6:7d:cc:4e:73:fb:04:11:09:00:8c:42:e9: 48:f6:76:e2:49:c1:95:7a:e7:5a:34:f2:18:f8:e9: 5d:94:e0:8f:e0:4d:c0:e3:3d:38:7f:eb:ed:d4:0c: b5:c2:4d:22:b4:d3:c3:8d:5e:61:d7:3b:b9:61:84: 11:c8:7d:95:28:a1:5e:7c:51:89:03:c9:28:40:cd: b2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E1:99:36:26:8B:FB:A8:AC:8B:E5:3A:9E:31:FB:6E:2B:93:BC:04 X509v3 Authority Key Identifier: keyid:BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:a5:0a:8f:6e:ad:69:7b:e1:73:fc:d3:f4:0c:aa:97:b7:ec: 29:03:1d:ea:07:eb:f9:ad:94:86:60:f8:ea:4c:51:93:64:f2: 8a:38:6d:5d:ef:f0:f3:6e:f6:17:10:67:7f:94:36:fb:56:a5: 8d:73:f5:bb:9f:8e:18:e2:43:8f:46:74:fd:6d:18:c5:f0:55: 19:67:e2:78:1b:6b:71:94:6d:41:19:77:09:c1:4e:55:88:5f: 49:04:cc:4f:24:f3:2b:e9:df:73:39:6b:16:30:9f:0a:0f:02: d2:9e:95:5c:22:2d:38:68:48:14:31:6b:f7:9b:21:7c:7b:26: f8:64:e0:d9:cf:08:4c:22:e9:c5:a1:a5:91:f2:6e:be:64:89: 57:c9:9d:cd:77:16:97:8f:9b:c0:2d:f8:0b:f1:70:62:a1:b6: 04:37:3e:dc:2e:84:72:a4:09:7e:69:a9:9f:f3:a3:93:91:23: 5d:94:2b:50:3e:3c:ff:9d:dc:ee:a4:11:38:86:8c:3c:63:0b: 28:29:d5:d6:ff:31:8e:6e:58:90:32:8b:49:d9:a8:fb:42:38: ed:54:f2:82:da:8f:d3:39:73:54:87:fb:a3:51:a2:06:2f:20: 6d:b8:3f:d1:8f:4c:36:da:51:db:f8:23:ae:77:ae:07:84:c7: 97:e7:b4:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCODkxMTAvBgNVBAUTKEJEMTZCNTY0MzJBRTVGNDMwMjVDNERBMTEzNDUzN0Y3 MDRFQjQwOTYwHhcNMjUwODExMDIwMDQ4WhcNMjUwODE4MDIwMDQ4WjAYMRYwFAYD VQQDEw02ODk5NGVkMS01OGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfBPLhRz9V4Bazmh0vnM66ct+0yyTYhyj8iOUhyW0jDOtdI/7BaXRXLclFGx GIHx2f2WAVkY63fX8xuot+Cwt+fFYq2S9E1LJAZygro48+x7pOj7MYvZaeFxY33J ulHVP2n83PnD/lMs4Qt5OWfSTFVE5z6fXf0E7tefkL1a3C6v0ZVS/YiuOss9wP9S xN6PqMqETgbFQk9GJSvDYXvUFO+KD/k6j/t74fA12oLizhTtQFvaCOZ9zE5z+wQR CQCMQulI9nbiScGVeudaNPIY+OldlOCP4E3A4z04f+vt1Ay1wk0itNPDjV5h1zu5 YYQRyH2VKKFefFGJA8koQM2yVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXhmTYm i/uorIvlOp4x+24rk7wEMB8GA1UdIwQYMBaAFL0WtWQyrl9DAlxNoRNFN/cE60CW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUI4OS85NkQzQkE1QzI0 RUQxMUVEQjg2NzYxMThDNEY5QUUwMi92UmExWkRLdVgwTUNYRTJoRTBVMzl3VHJR SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZSYTFaREt1WDBNQ1hFMmhFMFUzOXdUclFKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUI4OS85NkQzQkE1QzI0RUQxMUVEQjg2NzYxMThDNEY5QUUwMi92UmExWkRLdVgw TUNYRTJoRTBVMzl3VHJRSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnpQqPbq1pe+Fz/NP0DKqXt+wpAx3qB+v5rZSGYPjqTFGTZPKKOG1d 7/DzbvYXEGd/lDb7VqWNc/W7n44Y4kOPRnT9bRjF8FUZZ+J4G2txlG1BGXcJwU5V iF9JBMxPJPMr6d9zOWsWMJ8KDwLSnpVcIi04aEgUMWv3myF8eyb4ZODZzwhMIunF oaWR8m6+ZIlXyZ3NdxaXj5vALfgL8XBiobYENz7cLoRypAl+aamf86OTkSNdlCtQ Pjz/ndzupBE4how8YwsoKdXW/zGObliQMotJ2aj7QjjtVPKC2o/TOXNUh/ujUaIG LyBtuD/Rj0w22lHb+COud64HhMeX57Sc -----END CERTIFICATE-----Generated at Tue Aug 12 13:51:22 2025 by rpki-client