$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft File: VFjEVinBBKqnpYcoaG-NHihyqSo.mft (raw, json) Hash identifier: YdUWazTV77Y5CvT/N2HkYTulnwBzL+hjsf+OMVBOh7E= Subject key identifier: 25:D4:A9:3C:BD:74:FF:F7:06:B9:D6:A3:9C:3F:E3:4B:C2:28:CB:D8 Authority key identifier: 54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A Certificate issuer: /CN=A9153C27/serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Certificate serial: 0C7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft Manifest number: 0C76 Signing time: Sun 20 Jul 2025 18:19:00 +0000 Manifest this update: Sun 20 Jul 2025 18:19:00 +0000 Manifest next update: Sun 27 Jul 2025 18:19:00 +0000 Files and hashes: 1: VFjEVinBBKqnpYcoaG-NHihyqSo.crl (hash: DGxA556h72oBxPlaj/RnDrSbGdTJVf1DQjr24PvYMFs=) 2: DB020E9C010D11EAA82AD83CC4F9AE02.roa (hash: +/HgExCatPcRmJalycUeFMmwknrCCg9dQk/HjuFZjUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3198 (0xc7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C27, serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Validity Not Before: Jul 20 18:19:00 2025 GMT Not After : Jul 27 18:19:00 2025 GMT Subject: CN=687d3314-69b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d4:68:79:cc:74:23:c7:16:3f:fa:e3:78:74: bc:74:b6:aa:1a:76:b5:6a:f9:a5:07:b1:e4:de:db: 2c:55:b9:98:14:6e:3f:d3:07:b4:9b:1b:20:7d:e7: 82:be:27:96:e9:e7:4d:54:00:bd:13:b6:52:6a:2e: 8b:28:4f:46:72:c1:df:fb:22:88:84:95:8d:46:fd: 21:af:5c:f9:85:38:5d:c4:ef:18:c5:d2:8a:c3:17: 3b:8d:ff:6d:ac:87:26:bf:02:74:1f:9d:51:70:06: 9c:c8:d6:ff:45:07:7d:c3:cc:f6:9f:f4:73:11:8a: 6f:8e:3b:56:1c:0d:e2:91:45:67:30:c9:fe:4c:56: 13:1f:22:bc:f1:00:6f:5b:2b:c9:06:82:c2:67:76: 03:e2:22:44:bf:e0:2c:1a:a5:05:35:40:0d:9b:00: 0b:8e:6a:45:74:a8:0f:27:d3:ec:3a:bc:d1:67:43: 07:ef:e8:ad:29:7d:85:1f:df:f3:a7:45:9a:ed:ff: 5c:fb:1e:c0:f9:78:a3:a5:6d:fc:dd:17:1d:21:be: 82:d5:f3:c7:f8:1c:6c:dd:71:b6:7d:7f:03:09:b6: fa:2f:43:9b:45:80:f6:0a:3a:43:8d:9d:08:5c:b2: 4a:2b:69:f0:2b:98:f8:1c:72:a0:4e:12:6b:d3:84: 45:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D4:A9:3C:BD:74:FF:F7:06:B9:D6:A3:9C:3F:E3:4B:C2:28:CB:D8 X509v3 Authority Key Identifier: keyid:54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:ab:06:a2:e6:c9:4a:f6:99:33:11:51:18:86:b0:99:54:85: e4:05:b8:7b:2c:65:63:bc:88:ba:c4:48:b3:3f:d8:aa:e1:df: d0:60:dd:a8:64:d3:f4:79:44:89:d1:a1:7d:ae:10:7f:62:89: 2a:93:66:71:32:7e:31:d2:21:d2:e5:6b:c3:2f:5d:40:b0:9b: 2e:e3:be:e8:20:01:42:f0:55:12:c5:99:91:d2:6c:ce:be:e8: 37:fa:d7:4e:91:c3:33:a7:a0:1b:36:e1:14:9c:ad:fd:1a:86: e3:ec:69:1d:38:61:2d:0e:78:db:20:b9:9a:d5:0d:a9:5b:04: 8d:2d:46:9e:82:cd:20:16:a8:7f:dc:8b:ae:c6:8e:36:71:3b: 38:63:4d:29:7a:15:98:ca:2b:78:bb:03:c3:80:89:ef:23:c3: 54:58:56:81:3e:a5:25:b5:25:b1:b4:6b:b6:11:1c:e4:4b:2f: 23:62:c3:7f:99:e2:88:89:32:47:18:c9:04:de:79:3c:2e:5e: 52:07:eb:ce:dd:c4:87:7e:d5:97:4b:88:37:29:f9:bf:a6:72: 9e:7a:ed:5f:8d:35:5a:d5:59:6b:fb:9a:3e:ad:39:16:30:cc: 78:e4:42:8c:e5:88:d0:b9:36:40:86:b0:b8:cd:81:80:c7:af: f9:a2:73:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDMjcxMTAvBgNVBAUTKDU0NThDNDU2MjlDMTA0QUFBN0E1ODcyODY4NkY4RDFF Mjg3MkE5MkEwHhcNMjUwNzIwMTgxOTAwWhcNMjUwNzI3MTgxOTAwWjAYMRYwFAYD VQQDEw02ODdkMzMxNC02OWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtRoecx0I8cWP/rjeHS8dLaqGna1avmlB7Hk3tssVbmYFG4/0we0mxsgfeeC vieW6edNVAC9E7ZSai6LKE9GcsHf+yKIhJWNRv0hr1z5hThdxO8YxdKKwxc7jf9t rIcmvwJ0H51RcAacyNb/RQd9w8z2n/RzEYpvjjtWHA3ikUVnMMn+TFYTHyK88QBv WyvJBoLCZ3YD4iJEv+AsGqUFNUANmwALjmpFdKgPJ9PsOrzRZ0MH7+itKX2FH9/z p0Wa7f9c+x7A+XijpW383RcdIb6C1fPH+Bxs3XG2fX8DCbb6L0ObRYD2CjpDjZ0I XLJKK2nwK5j4HHKgThJr04RFZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXUqTy9 dP/3BrnWo5w/40vCKMvYMB8GA1UdIwQYMBaAFFRYxFYpwQSqp6WHKGhvjR4ocqkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0MyNy82NUJCNDg5QzAw NEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJLcW5wWWNvYUctTkhpaHlx U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGakVWaW5CQktxbnBZY29hRy1OSGloeXFTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0MyNy82NUJCNDg5QzAwNEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJL cW5wWWNvYUctTkhpaHlxU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDqwai5slK9pkzEVEYhrCZVIXkBbh7LGVjvIi6xEizP9iq4d/QYN2o ZNP0eUSJ0aF9rhB/Yokqk2ZxMn4x0iHS5WvDL11AsJsu477oIAFC8FUSxZmR0mzO vug3+tdOkcMzp6AbNuEUnK39Gobj7GkdOGEtDnjbILma1Q2pWwSNLUaegs0gFqh/ 3Iuuxo42cTs4Y00pehWYyit4uwPDgInvI8NUWFaBPqUltSWxtGu2ERzkSy8jYsN/ meKIiTJHGMkE3nk8Ll5SB+vO3cSHftWXS4g3Kfm/pnKeeu1fjTVa1Vlr+5o+rTkW MMx45EKM5YjQuTZAhrC4zYGAx6/5onPO -----END CERTIFICATE-----Generated at Mon Jul 21 13:44:03 2025 by rpki-client