$ rpki-client -vvf rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft File: VKJNxo3yZA57s_8PNreO-IQAww8.mft (raw, json) Hash identifier: QLeW63yHs8sD/9WcaeXFZKXBHhFEsqBkZOPlyYpt7ac= Subject key identifier: 87:F1:E3:08:80:6A:59:61:8E:B1:45:29:D9:92:15:B2:44:65:9E:33 Authority key identifier: 54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F Certificate issuer: /CN=A91362EB/serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft Manifest number: 07 Signing time: Sat 19 Jul 2025 08:25:51 +0000 Manifest this update: Sat 19 Jul 2025 08:25:51 +0000 Manifest next update: Sat 26 Jul 2025 08:25:51 +0000 Files and hashes: 1: VKJNxo3yZA57s_8PNreO-IQAww8.crl (hash: SNU5uhpqIAO2pmaZOzkhsEPVx0XTRIdxP357g27BSQY=) 2: 0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa (hash: /uTCkM+7T3MX4CR0F7TNTBgsSs4yKxKjHNmhUVycHRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91362EB, serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F Validity Not Before: Jul 19 08:25:51 2025 GMT Not After : Jul 26 08:25:51 2025 GMT Subject: CN=687b568f-9d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0c:a3:22:aa:5d:11:7e:87:51:87:f5:1b:aa: 38:40:e9:cd:6b:06:9f:c9:21:e2:4c:b9:f4:17:1f: cd:d8:03:b8:4d:00:79:63:57:e8:3d:4f:13:4b:7f: ff:2b:6b:23:4f:39:57:a2:d8:b7:b4:90:45:af:54: 52:77:aa:83:0e:47:38:ce:49:c7:43:53:df:2a:8c: 10:c7:66:67:16:d3:04:77:d9:ee:bf:a7:37:11:5d: e5:21:52:9d:ff:9d:70:b8:34:54:f2:26:ad:95:08: c0:e2:e5:f1:d9:73:3f:1c:0a:c5:5b:5e:bb:9a:7e: 53:45:e1:8e:02:c1:54:79:d0:50:75:f1:da:30:2e: 4d:05:78:d8:84:91:da:fd:9b:5c:86:90:a3:f6:4b: a7:78:ec:fa:9b:d8:fa:c9:58:2d:ed:91:93:9b:09: 52:30:e8:75:9f:41:b3:67:9b:20:cd:2c:6c:62:5b: 58:60:8a:72:e8:f4:d1:1e:99:dc:23:79:d0:08:ad: 4b:60:1f:bf:2a:1a:ce:ee:18:28:04:96:e3:62:91: b1:6b:d3:4a:0d:28:d2:35:dc:d4:a3:b5:3b:7f:2c: 6d:62:76:01:2b:8f:63:6b:62:27:2d:95:db:81:48: d4:50:e1:c6:6a:4d:e2:80:d6:64:e7:04:7e:75:4d: 76:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F1:E3:08:80:6A:59:61:8E:B1:45:29:D9:92:15:B2:44:65:9E:33 X509v3 Authority Key Identifier: keyid:54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:54:4f:44:24:50:d6:43:17:ff:96:a4:e1:81:e3:8b:20:36: 5b:3e:86:0e:c1:5f:80:97:01:5e:fc:15:cc:41:ab:fa:32:dc: 6d:09:67:de:aa:b6:50:94:00:7e:d4:f9:e4:a6:3e:90:4f:3d: 06:ac:ae:0d:c7:e6:ef:2e:85:d9:30:90:af:d6:6a:e1:08:83: 0b:a5:df:6a:25:81:09:f7:a9:81:bf:eb:0c:12:e6:2f:6d:54: 70:9b:9f:67:8d:38:22:8e:b4:b3:0d:ca:5b:9e:02:ab:7b:62: f8:cb:c5:51:c2:38:d9:f2:01:03:d5:fe:d8:4f:82:53:0f:31: d6:33:b7:9d:d1:94:ff:08:9d:ec:cc:6c:a1:e8:22:f6:01:48: 0e:5d:fe:32:10:a3:e4:dd:ea:02:6a:76:85:b7:97:d5:68:03: 5b:a0:fb:30:8a:7f:ff:b9:c5:b2:88:55:0a:47:97:48:4d:4d: 01:54:e3:9d:a9:eb:d6:e9:3a:ae:43:cc:42:e3:d2:ec:73:bb: 8a:18:98:0f:b5:87:5d:0c:b0:6c:2c:3e:ee:e8:3e:76:37:20: ff:a4:3b:1e:24:23:ae:a9:67:89:67:dd:ab:ce:0f:61:22:ed: 87:07:25:50:a5:46:40:40:de:81:1a:52:bb:dc:91:bf:3c:f2: 19:46:26:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjJFQjExMC8GA1UEBRMoNTRBMjREQzY4REYyNjQwRTdCQjNGRjBGMzZCNzhFRjg4 NDAwQzMwRjAeFw0yNTA3MTkwODI1NTFaFw0yNTA3MjYwODI1NTFaMBgxFjAUBgNV BAMTDTY4N2I1NjhmLTlkOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTDKMiql0RfodRh/UbqjhA6c1rBp/JIeJMufQXH83YA7hNAHljV+g9TxNLf/8r ayNPOVei2Le0kEWvVFJ3qoMORzjOScdDU98qjBDHZmcW0wR32e6/pzcRXeUhUp3/ nXC4NFTyJq2VCMDi5fHZcz8cCsVbXruaflNF4Y4CwVR50FB18dowLk0FeNiEkdr9 m1yGkKP2S6d47Pqb2PrJWC3tkZObCVIw6HWfQbNnmyDNLGxiW1hginLo9NEemdwj edAIrUtgH78qGs7uGCgEluNikbFr00oNKNI13NSjtTt/LG1idgErj2NrYictlduB SNRQ4cZqTeKA1mTnBH51TXaHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh/HjCIBq WWGOsUUp2ZIVskRlnjMwHwYDVR0jBBgwFoAUVKJNxo3yZA57s/8PNreO+IQAww8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MkVCL0RGNTQ1Q0M4NUM5 OTExRjBCNEJFMUUyMUM0RjlBRTAyL1ZLSk54bzN5WkE1N3NfOFBOcmVPLUlRQXd3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVktKTnhvM3laQTU3c184UE5yZU8tSVFBd3c4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 MkVCL0RGNTQ1Q0M4NUM5OTExRjBCNEJFMUUyMUM0RjlBRTAyL1ZLSk54bzN5WkE1 N3NfOFBOcmVPLUlRQXd3OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJBUT0QkUNZDF/+WpOGB44sgNls+hg7BX4CXAV78FcxBq/oy3G0JZ96q tlCUAH7U+eSmPpBPPQasrg3H5u8uhdkwkK/WauEIgwul32olgQn3qYG/6wwS5i9t VHCbn2eNOCKOtLMNylueAqt7YvjLxVHCONnyAQPV/thPglMPMdYzt53RlP8InezM bKHoIvYBSA5d/jIQo+Td6gJqdoW3l9VoA1ug+zCKf/+5xbKIVQpHl0hNTQFU452p 69bpOq5DzELj0uxzu4oYmA+1h10MsGwsPu7oPnY3IP+kOx4kI66pZ4ln3avOD2Ei 7YcHJVClRkBA3oEaUrvckb888hlGJjs= -----END CERTIFICATE-----Generated at Sun Jul 20 08:00:38 2025 by rpki-client