$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft File: vRTPGp8I9oE3_oEWzXdq29sv77Q.mft (raw, json) Hash identifier: kCZfR3Ube1DBflc0HXMmfD50Kfhq1GpksF8EG40tn6Y= Subject key identifier: BB:EA:19:2E:40:49:6D:12:6F:2C:75:64:2E:75:F0:85:2B:FE:A1:17 Authority key identifier: BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4 Certificate issuer: /CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4 Certificate serial: 03F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft Manifest number: 1062 Signing time: Tue 22 Jul 2025 18:29:11 +0000 Manifest this update: Tue 22 Jul 2025 18:29:10 +0000 Manifest next update: Tue 29 Jul 2025 18:29:10 +0000 Files and hashes: 1: vRTPGp8I9oE3_oEWzXdq29sv77Q.crl (hash: gUNgYTGcuiN12SiTZOEUx8VVoNF8XYas88T/ntE9koA=) 2: D5DBA6BC63ED11ED851C647DC4F9AE02.roa (hash: Cu7mP4ScFcEgh99akamYEaBRClwxLE+oM+a0PvnQM0M=) 3: 5277F6368D2411EC816B4C70C4F9AE02.roa (hash: jmM2MyWVgkGoSl8m7eT/QohnLLhAgCt5V5ifbC8tFnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 18:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1009 (0x3f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119A40, serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4 Validity Not Before: Jul 22 18:29:10 2025 GMT Not After : Jul 29 18:29:10 2025 GMT Subject: CN=687fd877-982b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:56:40:02:e7:2c:28:da:df:08:d9:6a:2d:77: 84:48:72:c1:9e:ff:e7:48:c0:15:79:fb:44:2c:2a: f1:d5:27:0c:4b:39:04:54:9d:05:53:4f:19:4f:9e: 85:86:4a:39:be:52:9a:12:97:6a:0d:28:20:82:5b: 97:12:02:fb:67:1d:c3:ba:5e:26:07:ed:7e:23:0d: b8:47:45:47:c0:41:c7:60:a2:ed:ff:3e:9b:d0:5b: 80:2b:01:1c:65:70:05:8c:e2:35:3d:a7:fd:2d:f4: cb:f4:e4:a5:b5:ae:71:8f:f2:5f:ab:cc:1d:b6:07: b2:80:b9:64:47:9a:66:28:03:79:5b:dc:c6:ef:ed: ca:0a:cc:1f:99:6f:b7:d2:58:c9:c2:6a:9a:e8:6b: 73:f1:ff:30:8b:8f:b8:71:7f:17:d8:e4:72:76:78: 17:67:72:b1:ff:fd:dc:af:42:71:65:7b:a7:b4:8f: ea:48:f3:18:33:c9:8e:57:a5:e6:bb:99:3f:ac:94: 87:4a:aa:14:a5:a3:f7:26:36:2b:76:a1:bf:90:33: 8c:e9:a3:99:b1:3c:36:5e:f1:81:c9:60:5e:93:5f: e5:76:9e:29:87:67:03:0c:f5:97:ef:a6:6e:a9:e5: 25:71:2e:2d:2e:ae:b7:52:7b:91:d3:b3:02:03:67: d2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EA:19:2E:40:49:6D:12:6F:2C:75:64:2E:75:F0:85:2B:FE:A1:17 X509v3 Authority Key Identifier: keyid:BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:95:a7:9b:88:ea:7b:9a:59:87:fa:04:66:78:ea:83:20:9d: 3b:32:69:ed:c0:75:40:2e:c0:55:b5:05:ca:f1:8a:c8:1c:a2: 59:52:3e:18:e5:12:26:f3:9b:51:86:8a:01:01:19:26:b8:9a: 29:11:8c:6c:30:50:8a:fe:d1:0e:5f:f4:41:17:ef:65:d6:d9: 39:c0:65:26:18:f2:5e:03:37:09:f9:d5:47:25:91:ac:c5:89: 58:dc:a9:79:83:8e:30:c5:30:b9:ab:37:15:c8:6e:24:be:6f: 09:42:50:da:d3:1a:8f:13:ed:d8:27:6a:ae:40:b1:00:62:06: 5b:cf:2f:8e:22:d8:80:39:16:e1:65:03:de:22:16:7e:52:e8: 96:ec:ce:bf:25:15:65:7f:cb:2e:80:a7:67:36:a0:40:5c:e5: 8c:95:d5:48:32:27:9d:96:cc:b9:60:6e:c8:fb:7a:b6:6a:e8: ca:3c:2c:f5:9a:d3:19:4e:04:21:96:74:7e:73:33:70:e7:bd: 95:69:de:e8:00:91:d5:91:43:b4:37:5f:61:c0:1d:b0:be:ab: 9c:22:ea:1d:96:56:9c:73:2c:fe:92:9a:71:68:69:a3:d8:68: 40:ca:1d:12:b0:79:f9:4a:c2:2b:80:f0:45:8d:0d:c3:71:aa: 93:a2:cf:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlBNDAxMTAvBgNVBAUTKEJEMTRDRjFBOUYwOEY2ODEzN0ZFODExNkNENzc2QURC REIyRkVGQjQwHhcNMjUwNzIyMTgyOTEwWhcNMjUwNzI5MTgyOTEwWjAYMRYwFAYD VQQDEw02ODdmZDg3Ny05ODJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lZAAucsKNrfCNlqLXeESHLBnv/nSMAVeftELCrx1ScMSzkEVJ0FU08ZT56F hko5vlKaEpdqDSgggluXEgL7Zx3Dul4mB+1+Iw24R0VHwEHHYKLt/z6b0FuAKwEc ZXAFjOI1Paf9LfTL9OSlta5xj/Jfq8wdtgeygLlkR5pmKAN5W9zG7+3KCswfmW+3 0ljJwmqa6Gtz8f8wi4+4cX8X2ORydngXZ3Kx//3cr0JxZXuntI/qSPMYM8mOV6Xm u5k/rJSHSqoUpaP3JjYrdqG/kDOM6aOZsTw2XvGByWBek1/ldp4ph2cDDPWX76Zu qeUlcS4tLq63UnuR07MCA2fSlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvqGS5A SW0Sbyx1ZC518IUr/qEXMB8GA1UdIwQYMBaAFL0UzxqfCPaBN/6BFs13atvbL++0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUE0MC8wQkQ0NTYyMjAw N0ExMUVBQjhCMzFCMTBDNEY5QUUwMi92UlRQR3A4STlvRTNfb0VXelhkcTI5c3Y3 N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZSVFBHcDhJOW9FM19vRVd6WGRxMjlzdjc3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUE0MC8wQkQ0NTYyMjAwN0ExMUVBQjhCMzFCMTBDNEY5QUUwMi92UlRQR3A4STlv RTNfb0VXelhkcTI5c3Y3N1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWlaebiOp7mlmH+gRmeOqDIJ07MmntwHVALsBVtQXK8YrIHKJZUj4Y 5RIm85tRhooBARkmuJopEYxsMFCK/tEOX/RBF+9l1tk5wGUmGPJeAzcJ+dVHJZGs xYlY3Kl5g44wxTC5qzcVyG4kvm8JQlDa0xqPE+3YJ2quQLEAYgZbzy+OItiAORbh ZQPeIhZ+UuiW7M6/JRVlf8sugKdnNqBAXOWMldVIMiedlsy5YG7I+3q2aujKPCz1 mtMZTgQhlnR+czNw572Vad7oAJHVkUO0N19hwB2wvqucIuodllaccyz+kppxaGmj 2GhAyh0SsHn5SsIrgPBFjQ3DcaqTos99 -----END CERTIFICATE-----Generated at Wed Jul 23 12:54:54 2025 by rpki-client