$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft File: VA3axmjYtQyWYFcSGVqYihytnj8.mft (raw, json) Hash identifier: X5GaE4W5jpW5lDS3Bg6KfOIYVx/JTI6vemJqlww4WZ0= Subject key identifier: 0A:B9:CD:93:BF:99:61:11:72:00:EC:8A:D6:60:7F:F4:93:C1:5D:D5 Authority key identifier: 54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F Certificate issuer: /CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Certificate serial: 0789 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft Manifest number: 0776 Signing time: Sun 10 Aug 2025 21:43:53 +0000 Manifest this update: Sun 10 Aug 2025 21:43:52 +0000 Manifest next update: Sun 17 Aug 2025 21:43:52 +0000 Files and hashes: 1: VA3axmjYtQyWYFcSGVqYihytnj8.crl (hash: rxdorsUlgZ140I4FhpMlEpnytK1W3hKUY94/oyQ7A9c=) 2: 4CA8BBE232CF11EBADB5497FC4F9AE02.roa (hash: 9R9QsXFUMXvz//+w7pzMdn8juESdiZRyTDAnvcDwnQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1929 (0x789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF74B, serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Validity Not Before: Aug 10 21:43:52 2025 GMT Not After : Aug 17 21:43:52 2025 GMT Subject: CN=68991299-d479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e4:26:24:da:d9:20:62:dd:97:12:a2:a5:8d: 63:c5:7d:cd:25:92:02:77:1c:0c:e3:ab:5a:a6:4e: ad:b8:7b:cf:c1:43:ca:a7:ec:a5:87:5a:e6:c7:45: 05:b9:8a:05:2d:a6:8e:fa:ae:97:bb:fc:b7:10:99: 98:c2:92:a3:b0:bd:d2:17:03:3e:3b:21:1a:e3:dd: 73:37:91:16:34:eb:2c:fb:f6:39:74:c5:64:32:34: 75:f8:51:2b:5d:f5:ad:dc:ad:14:26:a4:72:e8:80: d7:61:fb:99:9e:e6:ec:7a:44:5f:05:ca:9c:90:82: d5:ae:b0:40:57:9c:51:27:ad:7d:f0:93:b0:cb:b6: d0:b7:7a:e4:e3:74:30:44:0c:f5:d8:08:73:58:e2: 56:42:70:83:9e:c8:f8:a1:e9:2a:1e:3e:d7:da:fc: ce:05:51:39:7e:56:ae:f8:28:78:4a:b1:73:d3:fe: db:b5:dc:3d:c0:c7:ab:22:0e:db:a4:8f:2e:8d:6a: 3c:d8:f3:0e:07:f6:ae:5a:f5:2d:83:33:00:0b:a5: 62:73:e3:50:dd:77:ef:53:bb:d1:68:f4:38:bf:1d: 7e:34:a8:98:97:2e:9d:67:1c:e5:3d:b4:7c:42:61: 9a:c4:31:2d:85:48:05:4b:95:32:5d:de:92:26:1a: dc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B9:CD:93:BF:99:61:11:72:00:EC:8A:D6:60:7F:F4:93:C1:5D:D5 X509v3 Authority Key Identifier: keyid:54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:d2:8d:2f:fd:53:8a:d0:83:a2:91:fe:82:a0:c2:65:7d:b8: f3:f9:e4:5c:7a:ab:0d:e3:10:d8:35:a1:e9:72:eb:bb:54:49: 42:b8:a0:21:5f:11:94:56:22:97:cb:a8:4d:82:7d:f0:04:52: 10:dc:75:4c:f5:ce:a3:d6:03:4b:dd:20:87:df:b6:d4:f0:6d: 39:35:d6:6b:a3:9f:c7:f1:d0:68:b0:aa:74:3d:eb:86:21:f7: cc:57:69:e6:47:fd:d7:05:b7:00:c6:5e:cb:4e:70:8c:74:7e: b1:2e:99:74:a0:d2:a1:f0:42:ce:7a:c8:5d:54:53:81:4f:7c: a0:3e:c7:9e:6f:eb:a8:f8:82:e0:cc:22:63:c5:20:da:1a:4e: 28:d2:e4:e8:b1:60:c0:43:09:d6:6e:bc:d9:72:f2:ad:2e:39: 80:4b:8c:36:c8:4e:47:20:62:55:c0:25:76:93:27:2e:a5:07: 84:a2:e5:df:ba:14:cb:2d:70:79:06:e0:7c:a1:57:af:74:27: f8:e5:c6:0a:74:d5:78:08:88:51:bd:85:5e:30:4f:2e:7d:ee: 24:fc:f8:c9:ac:76:8d:39:c7:f4:f9:47:12:c4:a4:e3:94:c1: 6a:f4:de:04:32:2d:5d:cf:de:6f:f8:c5:e9:b1:9b:6b:62:32: 0f:d1:e7:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3NEIxMTAvBgNVBAUTKDU0MEREQUM2NjhEOEI1MEM5NjYwNTcxMjE5NUE5ODhB MUNBRDlFM0YwHhcNMjUwODEwMjE0MzUyWhcNMjUwODE3MjE0MzUyWjAYMRYwFAYD VQQDEw02ODk5MTI5OS1kNDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlOQmJNrZIGLdlxKipY1jxX3NJZICdxwM46tapk6tuHvPwUPKp+ylh1rmx0UF uYoFLaaO+q6Xu/y3EJmYwpKjsL3SFwM+OyEa491zN5EWNOss+/Y5dMVkMjR1+FEr XfWt3K0UJqRy6IDXYfuZnubsekRfBcqckILVrrBAV5xRJ6198JOwy7bQt3rk43Qw RAz12AhzWOJWQnCDnsj4oekqHj7X2vzOBVE5flau+Ch4SrFz0/7btdw9wMerIg7b pI8ujWo82PMOB/auWvUtgzMAC6Vic+NQ3XfvU7vRaPQ4vx1+NKiYly6dZxzlPbR8 QmGaxDEthUgFS5UyXd6SJhrcWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAq5zZO/ mWERcgDsitZgf/STwV3VMB8GA1UdIwQYMBaAFFQN2sZo2LUMlmBXEhlamIocrZ4/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjc0Qi8wOTQ0ODlGRTMy Q0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRReVdZRmNTR1ZxWWloeXRu ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZBM2F4bWpZdFF5V1lGY1NHVnFZaWh5dG5qOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjc0Qi8wOTQ0ODlGRTMyQ0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRR eVdZRmNTR1ZxWWloeXRuajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm0o0v/VOK0IOikf6CoMJlfbjz+eRceqsN4xDYNaHpcuu7VElCuKAh XxGUViKXy6hNgn3wBFIQ3HVM9c6j1gNL3SCH37bU8G05NdZro5/H8dBosKp0PeuG IffMV2nmR/3XBbcAxl7LTnCMdH6xLpl0oNKh8ELOeshdVFOBT3ygPseeb+uo+ILg zCJjxSDaGk4o0uTosWDAQwnWbrzZcvKtLjmAS4w2yE5HIGJVwCV2kycupQeEouXf uhTLLXB5BuB8oVevdCf45cYKdNV4CIhRvYVeME8ufe4k/PjJrHaNOcf0+UcSxKTj lMFq9N4EMi1dz95v+MXpsZtrYjIP0edn -----END CERTIFICATE-----Generated at Mon Aug 11 05:52:19 2025 by rpki-client