$ rpki-client -vvf rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft File: VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft (raw, json) Hash identifier: 84rAa7SlHQr5FcqdZ0HnN+z/fLPsmleiULimy4QGLXQ= Subject key identifier: C3:FB:6F:EF:04:28:73:68:B6:11:D2:6B:0C:53:C1:E5:4D:87:21:3A Authority key identifier: 55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 Certificate issuer: /CN=A9154534/serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Certificate serial: 0B60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft Manifest number: 0B58 Signing time: Fri 18 Jul 2025 19:17:53 +0000 Manifest this update: Fri 18 Jul 2025 19:17:53 +0000 Manifest next update: Fri 25 Jul 2025 19:17:53 +0000 Files and hashes: 1: VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl (hash: capuwsp6E766SEPKxY4G69OzPgJ8mSaJpiJJUFEPgDs=) 2: 8789C45E384311EAAA40EE51C4F9AE02.roa (hash: MAWDNXgpu9PgJn7Gnnkwa2ICesKD1B+IPcDJf1k8UoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2912 (0xb60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154534, serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9 Validity Not Before: Jul 18 19:17:53 2025 GMT Not After : Jul 25 19:17:53 2025 GMT Subject: CN=687a9de1-ad1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ef:34:0e:88:fe:71:3c:ce:dd:3f:55:3d:c6: 35:75:31:b6:bc:13:9d:b2:b0:d3:f8:b9:2f:3c:b8: 83:0a:9d:e7:e4:21:f8:65:4f:b7:51:7e:89:aa:03: 88:17:15:1c:bf:ba:3f:d6:80:9e:4f:ff:85:d3:c3: 1a:cf:6a:ce:fd:a5:84:3d:b8:9c:53:78:13:4d:68: 46:4e:e1:cc:13:9e:d0:5a:b1:80:30:c2:ed:93:83: d2:76:ce:dd:c2:6f:e4:36:2e:33:bd:c8:af:74:38: 04:6f:af:9b:1b:68:3c:47:4c:97:24:57:ee:b9:d1: db:23:df:7a:86:31:fc:26:ae:ca:42:ea:32:0d:2d: 1a:8d:41:4a:c4:13:3a:68:8d:6c:08:1c:24:b7:f9: b6:9f:43:1b:19:b5:ca:94:63:a3:30:2b:4e:bc:cb: 46:46:a8:ae:f0:29:ba:6c:f7:de:d8:a3:26:79:9d: df:5e:a8:d6:f1:e7:dd:e7:d9:6c:80:ef:3d:44:06: 65:24:41:3a:bd:32:4a:49:e5:ed:67:43:a4:a3:bd: 6b:1c:79:ef:70:82:20:c9:93:4d:24:82:cf:1d:09: fc:ae:89:0e:89:4a:22:3b:94:88:b7:f3:c6:b3:ea: 49:7e:b4:9e:c7:37:c9:c6:ef:d5:47:b8:86:d7:ab: 8d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FB:6F:EF:04:28:73:68:B6:11:D2:6B:0C:53:C1:E5:4D:87:21:3A X509v3 Authority Key Identifier: keyid:55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:92:dd:36:22:ce:4b:58:87:48:e4:74:9f:da:8d:e6:8a:3a: 7e:06:ed:43:79:b9:b8:06:02:4f:6d:77:28:ae:ea:64:cd:50: 93:99:e0:cf:5c:66:f4:ea:b2:6b:8e:8c:ca:e5:8c:f4:4f:22: 24:b3:87:5d:36:fe:e1:c2:2d:49:55:23:69:a0:ab:c5:84:c5: d8:c5:12:05:fa:9a:c0:ec:e8:e5:ae:3b:51:d5:eb:3f:fb:36: 61:2f:be:ad:f7:b0:fe:bc:62:a9:13:02:92:09:cf:8e:42:7d: eb:8b:08:ae:32:9f:0f:1d:f3:f5:b3:93:73:90:a9:27:42:73: 13:d1:ea:aa:f0:fe:a7:60:00:36:22:33:e0:80:a1:3a:e2:e4: 0c:5e:43:55:bc:e0:fb:62:b0:58:80:21:39:fe:04:df:48:09: a1:bb:dc:b4:1f:7c:8b:99:e5:77:7a:2f:56:23:9a:2c:c1:0a: 10:84:09:01:e5:9e:66:bd:9f:02:2e:15:c2:92:26:06:1d:b0: 1d:31:a3:33:38:7f:34:31:db:bd:d7:bb:d0:70:bb:2c:ca:31: 03:46:4e:37:f0:ca:bc:f4:f2:a9:6d:7d:3d:ae:3d:cc:32:c9: bb:95:f6:12:89:2a:68:4c:65:0c:6f:01:3b:f6:25:97:55:01: 50:2a:6d:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1MzQxMTAvBgNVBAUTKDU1QzQ2ODU1Q0M5MUFDNTRBQzA3NUMyOTdCNzUzMUZB ODhBNzM1RDkwHhcNMjUwNzE4MTkxNzUzWhcNMjUwNzI1MTkxNzUzWjAYMRYwFAYD VQQDEw02ODdhOWRlMS1hZDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+80Doj+cTzO3T9VPcY1dTG2vBOdsrDT+LkvPLiDCp3n5CH4ZU+3UX6JqgOI FxUcv7o/1oCeT/+F08Maz2rO/aWEPbicU3gTTWhGTuHME57QWrGAMMLtk4PSds7d wm/kNi4zvcivdDgEb6+bG2g8R0yXJFfuudHbI996hjH8Jq7KQuoyDS0ajUFKxBM6 aI1sCBwkt/m2n0MbGbXKlGOjMCtOvMtGRqiu8Cm6bPfe2KMmeZ3fXqjW8efd59ls gO89RAZlJEE6vTJKSeXtZ0Oko71rHHnvcIIgyZNNJILPHQn8rokOiUoiO5SIt/PG s+pJfrSexzfJxu/VR7iG16uNaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMP7b+8E KHNothHSawxTweVNhyE6MB8GA1UdIwQYMBaAFFXEaFXMkaxUrAdcKXt1MfqIpzXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDUzNC9CRDI2OTA5RTM4 NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJGU3NCMXdwZTNVeC1vaW5O ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZjUm9WY3lSckZTc0Ixd3BlM1V4LW9pbk5kay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDUzNC9CRDI2OTA5RTM4NDExMUVBOUZFRDVENEZDNEY5QUUwMi9WY1JvVmN5UnJG U3NCMXdwZTNVeC1vaW5OZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJkt02Is5LWIdI5HSf2o3mijp+Bu1Debm4BgJPbXcorupkzVCTmeDP XGb06rJrjozK5Yz0TyIks4ddNv7hwi1JVSNpoKvFhMXYxRIF+prA7OjlrjtR1es/ +zZhL76t97D+vGKpEwKSCc+OQn3riwiuMp8PHfP1s5NzkKknQnMT0eqq8P6nYAA2 IjPggKE64uQMXkNVvOD7YrBYgCE5/gTfSAmhu9y0H3yLmeV3ei9WI5oswQoQhAkB 5Z5mvZ8CLhXCkiYGHbAdMaMzOH80Mdu917vQcLssyjEDRk438Mq89PKpbX09rj3M Msm7lfYSiSpoTGUMbwE79iWXVQFQKm1K -----END CERTIFICATE-----Generated at Sun Jul 20 06:47:45 2025 by rpki-client