$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft File: VQWhoodm2zGCLEYVhuaO3fKnk_o.mft (raw, json) Hash identifier: LP2sUaScdCQ0LtXykSFeqJPGS9NaAk7vX1mzDnZyYNM= Subject key identifier: 52:C9:7A:2F:41:F3:CE:7B:F0:FB:AC:24:BB:FD:0C:77:5B:38:06:B7 Authority key identifier: 55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA Certificate issuer: /CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft Manifest number: A7 Signing time: Sat 19 Jul 2025 06:22:39 +0000 Manifest this update: Sat 19 Jul 2025 06:22:38 +0000 Manifest next update: Sat 26 Jul 2025 06:22:38 +0000 Files and hashes: 1: VQWhoodm2zGCLEYVhuaO3fKnk_o.crl (hash: ywP+Va5nhKuyiuAVaJHQNnFX2ys+08FZdsX/Bel7Xok=) 2: 95737270643711EFBCD1344AC4F9AE02.roa (hash: 0MmgAOsynAk/z75v6F6/3mM/hRV1GTY1/gUKJqE0crQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91850AD, serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA Validity Not Before: Jul 19 06:22:38 2025 GMT Not After : Jul 26 06:22:38 2025 GMT Subject: CN=687b39af-2824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a1:cd:55:33:0c:2e:e4:1e:20:16:d9:2d:e2: d4:c2:dc:43:0a:1d:d9:a9:19:81:60:de:8f:28:6e: 2a:85:e0:ac:74:ac:81:2b:5e:02:2c:d7:ba:ce:66: e2:17:50:05:cb:bf:2c:78:19:9c:ed:30:7f:09:2c: 74:17:2b:10:9b:1e:55:9e:df:e5:85:cc:46:5b:e9: 1c:f9:d9:6a:1f:1e:56:e2:5b:2e:6e:dc:b0:c4:f3: 2f:7b:08:19:b5:78:ec:8b:1f:37:99:3d:6c:0e:3a: 78:01:c2:93:c1:2a:5b:6e:13:4b:64:c1:61:7e:70: 55:b1:7a:2e:13:55:85:a7:d1:2d:8a:71:69:21:f0: bc:9a:2c:f2:39:bc:f0:6e:9c:cd:58:c8:b8:50:6e: e6:da:07:2d:96:69:ee:27:66:b6:e5:1e:51:30:77: f4:1c:ad:cb:6e:19:e6:8e:41:ab:53:08:5a:58:0f: d1:a6:eb:5b:a5:20:9f:49:74:a3:9b:3e:ad:a4:5a: ae:1c:79:49:f7:6c:d3:a0:cd:29:48:ad:6c:b0:2a: 5b:f9:e6:1d:63:f0:bd:7b:1f:13:f1:f3:ec:5e:23: f4:54:5d:9c:e2:e0:0c:4c:17:86:88:c6:77:64:40: 84:8f:6f:9d:c7:86:e4:e8:08:43:43:f3:2e:29:29: 22:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C9:7A:2F:41:F3:CE:7B:F0:FB:AC:24:BB:FD:0C:77:5B:38:06:B7 X509v3 Authority Key Identifier: keyid:55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e0:79:c1:ad:61:64:af:b9:de:9d:09:79:e6:b6:54:a9:a0: eb:ba:a8:2d:64:39:22:3d:9e:ff:d4:b8:ae:1d:48:e7:d7:06: 49:f3:b4:76:a1:0a:37:d5:12:85:4d:9a:9d:74:02:de:a7:21: 56:9c:ca:17:e8:dd:f9:99:d6:b0:83:9d:64:6f:d1:92:c7:83: e2:41:b8:ec:9d:b8:91:6a:00:ef:17:44:d8:a7:e6:f1:f4:f7: 0a:05:f6:50:f9:c8:59:c7:a9:c6:08:79:fc:dd:b8:06:9e:91: 85:a2:5d:66:d7:be:a8:a5:9e:f2:98:f4:f9:3f:5d:66:80:9c: c3:58:62:5d:74:5d:70:06:af:bd:e4:fd:7b:5a:cd:a9:d2:ca: 33:a7:f7:bc:d0:c9:be:50:a8:36:c0:74:6c:bf:ab:a5:ce:e7: 84:e8:57:37:94:ba:76:19:1c:36:7f:9e:17:1a:c0:fb:61:79: e7:fb:58:68:3f:a9:cd:2f:d6:18:19:c6:d4:01:df:40:dd:ab: 98:93:ee:6d:71:cd:ec:ff:fa:7c:8d:52:9a:fb:c4:d6:ab:01: 5d:04:88:bc:00:1d:d3:ca:e2:55:48:05:f7:3a:09:ea:50:6f: b1:f6:75:65:d8:e9:fa:5c:82:18:80:06:03:9c:bc:73:9b:25: cf:fa:27:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUwQUQxMTAvBgNVBAUTKDU1MDVBMUEyODc2NkRCMzE4MjJDNDYxNTg2RTY4RURE RjJBNzkzRkEwHhcNMjUwNzE5MDYyMjM4WhcNMjUwNzI2MDYyMjM4WjAYMRYwFAYD VQQDEw02ODdiMzlhZi0yODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6aHNVTMMLuQeIBbZLeLUwtxDCh3ZqRmBYN6PKG4qheCsdKyBK14CLNe6zmbi F1AFy78seBmc7TB/CSx0FysQmx5Vnt/lhcxGW+kc+dlqHx5W4lsubtywxPMvewgZ tXjsix83mT1sDjp4AcKTwSpbbhNLZMFhfnBVsXouE1WFp9EtinFpIfC8mizyObzw bpzNWMi4UG7m2gctlmnuJ2a25R5RMHf0HK3LbhnmjkGrUwhaWA/RputbpSCfSXSj mz6tpFquHHlJ92zToM0pSK1ssCpb+eYdY/C9ex8T8fPsXiP0VF2c4uAMTBeGiMZ3 ZECEj2+dx4bk6AhDQ/MuKSkibwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLJei9B 88578PusJLv9DHdbOAa3MB8GA1UdIwQYMBaAFFUFoaKHZtsxgixGFYbmjt3yp5P6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTBBRC82QTBBQzgwMjY0 MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9WUVdob29kbTJ6R0NMRVlWaHVhTzNmS25r X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZRV2hvb2RtMnpHQ0xFWVZodWFPM2ZLbmtfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTBBRC82QTBBQzgwMjY0MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9WUVdob29kbTJ6 R0NMRVlWaHVhTzNmS25rX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv4HnBrWFkr7nenQl55rZUqaDruqgtZDkiPZ7/1LiuHUjn1wZJ87R2 oQo31RKFTZqddALepyFWnMoX6N35mdawg51kb9GSx4PiQbjsnbiRagDvF0TYp+bx 9PcKBfZQ+chZx6nGCHn83bgGnpGFol1m176opZ7ymPT5P11mgJzDWGJddF1wBq+9 5P17Ws2p0sozp/e80Mm+UKg2wHRsv6ulzueE6Fc3lLp2GRw2f54XGsD7YXnn+1ho P6nNL9YYGcbUAd9A3auYk+5tcc3s//p8jVKa+8TWqwFdBIi8AB3TyuJVSAX3Ognq UG+x9nVl2On6XIIYgAYDnLxzmyXP+idI -----END CERTIFICATE-----Generated at Sun Jul 20 07:47:23 2025 by rpki-client