$ rpki-client -vvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft File: VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json) Hash identifier: HtCHw1IVVAjmRQMOYQF7lArxmJljx3rl1l2YbOOEbaQ= Subject key identifier: B3:F9:A0:02:D5:A9:35:D7:2B:B1:5C:A0:25:84:80:A1:C4:69:C3:2E Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 Certificate issuer: /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft Manifest number: 98 Signing time: Sat 19 Jul 2025 06:37:42 +0000 Manifest this update: Sat 19 Jul 2025 06:37:41 +0000 Manifest next update: Sat 26 Jul 2025 06:37:41 +0000 Files and hashes: 1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: 4JNx/9Tq9tx1W2sLVy+3L+zIktkYU+xKgfkdM8XHqko=) 2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: APURPczfV1ii5Oz3jn5uLGx4X2/aeoAU9n96jwy9b0A=) 3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: utVxhZKF0BG0gKmfkjY5U3UQKAW2XCaaTxVRnaQMDbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91276FA, serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582 Validity Not Before: Jul 19 06:37:41 2025 GMT Not After : Jul 26 06:37:41 2025 GMT Subject: CN=687b3d36-5a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:71:08:29:19:8e:46:13:69:cb:73:ca:77:c1: 4e:84:79:f8:54:13:1c:b1:bc:7f:60:9a:c3:27:d6: df:20:89:76:30:e2:51:be:ba:a3:59:f9:0e:e5:38: de:90:d8:c2:99:93:74:6b:5f:9f:88:7c:01:00:26: 88:1b:67:86:3a:53:96:57:b8:df:cd:79:6c:09:a4: 18:9a:c3:8c:b7:50:7b:50:a1:ab:cd:7f:f5:65:ac: 6b:b2:a3:f8:2a:2a:fa:aa:64:56:e9:e7:4c:78:96: 48:7b:64:10:6c:bc:5d:7a:30:f0:ec:37:a3:da:fe: 0d:0f:1d:b9:f1:17:db:d8:27:28:3d:68:77:6e:5b: 96:26:1c:7f:32:1d:d3:dc:b1:b2:17:75:fc:e5:c0: e0:4c:29:13:50:4a:0d:5d:61:97:98:44:d2:3e:7a: 47:1a:d6:b5:8e:93:5a:99:01:9b:8d:6f:9c:4f:30: 1f:30:64:b4:4a:99:46:dc:68:36:db:5d:93:bc:b4: 9f:97:0c:91:32:a9:f4:65:7c:f0:43:e0:f9:dc:8e: bd:d5:14:35:d2:e6:5c:8b:8c:68:da:60:40:94:fd: 8e:03:af:87:d6:c7:1e:c9:f1:ce:87:04:e7:00:12: ae:03:25:a4:d8:c1:ef:5c:54:a3:cb:74:fb:13:b7: f8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F9:A0:02:D5:A9:35:D7:2B:B1:5C:A0:25:84:80:A1:C4:69:C3:2E X509v3 Authority Key Identifier: keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:45:0d:46:3e:8f:2a:4c:99:4c:1e:df:c5:f0:e6:ef:00:34: 69:bd:0f:56:39:32:79:74:45:45:ef:60:cf:a8:0f:4a:f6:0e: 9a:6c:47:cc:2f:ae:b5:c4:85:73:2e:b2:86:6a:36:a7:9e:f0: 94:d8:2f:ce:6c:20:13:c0:14:e0:02:2b:b0:11:e5:b6:81:b9: 52:3f:91:37:75:36:78:97:d3:08:36:93:e3:f9:6d:76:20:2a: 7a:bb:a1:f8:9a:cd:5f:80:f8:e2:31:dc:c2:93:ed:37:bf:13: 0b:e6:9c:ea:52:ab:85:29:92:0b:83:03:0a:81:c8:53:e5:eb: 56:46:d0:2d:7d:5b:9e:2e:ec:78:ca:fa:34:0a:8b:08:d3:1b: c1:42:c9:56:0f:c1:49:08:44:88:ed:02:6b:79:8a:c2:de:94: 7b:cb:a0:6a:2f:1c:6a:61:32:17:e7:0d:c0:56:31:2a:53:ea: f4:81:45:8b:f8:ee:73:60:7e:40:5f:ca:b0:91:96:0b:dd:e4: 69:bf:eb:94:83:74:01:77:f6:bf:06:d6:1b:17:23:48:1e:10: d0:b0:22:91:f4:56:34:a9:0f:e7:4a:60:97:b8:88:f0:78:75: 63:55:6f:47:ef:6e:6e:1b:9f:42:22:f8:53:af:35:f2:a9:fc: e8:8e:ba:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2RkExMTAvBgNVBAUTKDU1MzNBN0M1N0JGNERCMUU1MzhGOUU3N0UwQjQ4NjhC OEY5MEM1ODIwHhcNMjUwNzE5MDYzNzQxWhcNMjUwNzI2MDYzNzQxWjAYMRYwFAYD VQQDEw02ODdiM2QzNi01YTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnEIKRmORhNpy3PKd8FOhHn4VBMcsbx/YJrDJ9bfIIl2MOJRvrqjWfkO5Tje kNjCmZN0a1+fiHwBACaIG2eGOlOWV7jfzXlsCaQYmsOMt1B7UKGrzX/1ZaxrsqP4 Kir6qmRW6edMeJZIe2QQbLxdejDw7Dej2v4NDx258Rfb2CcoPWh3bluWJhx/Mh3T 3LGyF3X85cDgTCkTUEoNXWGXmETSPnpHGta1jpNamQGbjW+cTzAfMGS0SplG3Gg2 212TvLSflwyRMqn0ZXzwQ+D53I691RQ10uZci4xo2mBAlP2OA6+H1sceyfHOhwTn ABKuAyWk2MHvXFSjy3T7E7f4EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLP5oALV qTXXK7FcoCWEgKHEacMuMB8GA1UdIwQYMBaAFFUzp8V79NseU4+ed+C0houPkMWC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzZGQS85QzUyQTdFODg0 QzkxMUVGQjU0RDBDNDlDNEY5QUUwMi9WVE9ueFh2MDJ4NVRqNTUzNExTR2k0LVF4 WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUT254WHYwMng1VGo1NTM0TFNHaTQtUXhZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzZGQS85QzUyQTdFODg0QzkxMUVGQjU0RDBDNDlDNEY5QUUwMi9WVE9ueFh2MDJ4 NVRqNTUzNExTR2k0LVF4WUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxRQ1GPo8qTJlMHt/F8ObvADRpvQ9WOTJ5dEVF72DPqA9K9g6abEfM L661xIVzLrKGajannvCU2C/ObCATwBTgAiuwEeW2gblSP5E3dTZ4l9MINpPj+W12 ICp6u6H4ms1fgPjiMdzCk+03vxML5pzqUquFKZILgwMKgchT5etWRtAtfVueLux4 yvo0CosI0xvBQslWD8FJCESI7QJreYrC3pR7y6BqLxxqYTIX5w3AVjEqU+r0gUWL +O5zYH5AX8qwkZYL3eRpv+uUg3QBd/a/BtYbFyNIHhDQsCKR9FY0qQ/nSmCXuIjw eHVjVW9H725uG59CIvhTrzXyqfzojrry -----END CERTIFICATE-----Generated at Sun Jul 20 10:10:38 2025 by rpki-client