$ rpki-client -vvf rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft File: VRT85Dhj9Rga80k4LThBTpYPCW8.mft (raw, json) Hash identifier: bMZMmiqTJt93xCxVH4FeKvRyciDfr1z7A88z22hGmbI= Subject key identifier: 14:FC:F6:C7:97:EF:AB:2F:5D:7E:13:7F:30:AF:7E:E2:16:B0:57:8A Authority key identifier: 55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F Certificate issuer: /CN=A9195262/serialNumber=5514FCE43863F5181AF349382D38414E960F096F Certificate serial: 08F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft Manifest number: 08EF Signing time: Fri 18 Jul 2025 20:37:27 +0000 Manifest this update: Fri 18 Jul 2025 20:37:27 +0000 Manifest next update: Fri 25 Jul 2025 20:37:27 +0000 Files and hashes: 1: VRT85Dhj9Rga80k4LThBTpYPCW8.crl (hash: T6TGiLoIf7pjyzpi8fzRJS2muhbM1TyE/M/BRQhBVNs=) 2: DFC21CD8B1CF11EAA8732709C4F9AE02.roa (hash: fBbrGPpyBqHG5VjMBpwa+Y1+AP7kUm89FdDIYPNDwG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2296 (0x8f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195262, serialNumber=5514FCE43863F5181AF349382D38414E960F096F Validity Not Before: Jul 18 20:37:27 2025 GMT Not After : Jul 25 20:37:27 2025 GMT Subject: CN=687ab087-716f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a2:24:38:88:d4:c8:1f:f4:8c:d2:f2:4d:0a: 90:eb:74:43:68:00:b8:eb:a8:a9:29:ed:96:4f:3e: ae:5f:89:32:a1:38:87:04:29:80:1c:c5:5e:e4:99: d6:55:3e:ac:59:70:ab:81:4e:20:c1:7b:1e:03:a8: 32:7b:84:a1:6a:57:63:27:e0:41:53:36:be:82:59: 0c:b1:3b:b7:2d:3a:f9:cc:83:b3:8c:64:60:8f:e7: 31:f3:9b:de:b7:2c:5c:a5:53:57:55:2d:d5:bd:5c: 81:b2:17:90:68:b0:d1:d6:35:5e:9d:1c:26:f7:e7: 17:04:a5:b0:e3:6c:b3:b7:ae:08:c2:bf:87:c9:4a: 3c:3b:23:a1:f7:86:a8:e0:62:4e:e0:36:56:15:31: bc:75:28:dc:b4:13:ce:cf:8a:33:79:fe:24:08:d3: 1e:06:26:97:70:1f:a1:66:92:32:3d:63:6b:8a:24: f2:8b:13:fa:91:0a:5a:80:d4:fe:78:f8:31:9b:65: a0:ac:cf:88:d5:80:6d:2c:c1:da:5e:6d:d7:77:78: 20:37:45:66:44:1b:ee:34:16:11:09:f5:b6:12:3f: 90:b7:7a:93:0b:6c:fd:61:1a:20:af:11:82:07:53: 45:bd:2c:c7:ec:e7:51:f5:cd:39:e8:ee:a1:0d:9c: a9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FC:F6:C7:97:EF:AB:2F:5D:7E:13:7F:30:AF:7E:E2:16:B0:57:8A X509v3 Authority Key Identifier: keyid:55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:4f:d9:3f:16:f4:75:8a:b7:89:6a:ba:ee:64:e9:22:2b:4d: 65:85:a0:f4:16:c6:60:4e:d9:e8:c1:9c:3a:67:3e:6c:8f:a0: ab:a5:41:5f:c0:98:a6:af:5d:29:2a:ef:cc:2d:34:a3:03:01: 7f:d6:4a:21:ff:12:c2:cd:e2:50:76:91:68:a2:ea:03:95:e4: 77:94:14:16:ce:4b:3b:b4:23:e7:54:ae:22:ed:c1:5f:33:fe: 85:91:b7:4c:83:6d:b1:0d:cf:53:01:16:ef:74:22:e1:2a:09: c8:51:a7:62:3f:20:ba:eb:59:87:90:7c:59:ad:a2:6b:c1:77: 1e:de:07:33:3d:83:1a:fc:c4:b5:43:fa:a0:5d:c5:c5:35:dc: 82:c9:4d:75:e0:33:58:e2:fd:eb:4a:a5:2c:c9:ff:e3:f7:4c: cf:91:b0:6e:10:2a:27:43:0b:f8:d5:ac:e1:e0:75:d5:37:3b: 37:fe:1b:10:b2:1a:ca:c0:68:54:43:e1:55:1c:04:bf:8d:22: 64:44:2f:57:4f:ac:94:0c:4c:5f:05:49:a6:b5:ed:f4:02:f7: 07:ac:22:e7:f4:25:bd:8b:2c:b0:2b:2a:38:00:a1:e7:3f:5f: 43:8e:b6:85:07:93:07:21:a9:9d:ae:9b:50:2b:cd:03:41:e7: c0:e4:42:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUyNjIxMTAvBgNVBAUTKDU1MTRGQ0U0Mzg2M0Y1MTgxQUYzNDkzODJEMzg0MTRF OTYwRjA5NkYwHhcNMjUwNzE4MjAzNzI3WhcNMjUwNzI1MjAzNzI3WjAYMRYwFAYD VQQDEw02ODdhYjA4Ny03MTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmqIkOIjUyB/0jNLyTQqQ63RDaAC466ipKe2WTz6uX4kyoTiHBCmAHMVe5JnW VT6sWXCrgU4gwXseA6gye4ShaldjJ+BBUza+glkMsTu3LTr5zIOzjGRgj+cx85ve tyxcpVNXVS3VvVyBsheQaLDR1jVenRwm9+cXBKWw42yzt64Iwr+HyUo8OyOh94ao 4GJO4DZWFTG8dSjctBPOz4ozef4kCNMeBiaXcB+hZpIyPWNriiTyixP6kQpagNT+ ePgxm2WgrM+I1YBtLMHaXm3Xd3ggN0VmRBvuNBYRCfW2Ej+Qt3qTC2z9YRogrxGC B1NFvSzH7OdR9c056O6hDZypDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBT89seX 76svXX4TfzCvfuIWsFeKMB8GA1UdIwQYMBaAFFUU/OQ4Y/UYGvNJOC04QU6WDwlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTI2Mi9GN0E2RDU5Q0Iw RkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlSZ2E4MGs0TFRoQlRwWVBD VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSVDg1RGhqOVJnYTgwazRMVGhCVHBZUENXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTI2Mi9GN0E2RDU5Q0IwRkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlS Z2E4MGs0TFRoQlRwWVBDVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgT9k/FvR1ireJarruZOkiK01lhaD0FsZgTtnowZw6Zz5sj6CrpUFf wJimr10pKu/MLTSjAwF/1koh/xLCzeJQdpFoouoDleR3lBQWzks7tCPnVK4i7cFf M/6FkbdMg22xDc9TARbvdCLhKgnIUadiPyC661mHkHxZraJrwXce3gczPYMa/MS1 Q/qgXcXFNdyCyU114DNY4v3rSqUsyf/j90zPkbBuEConQwv41azh4HXVNzs3/hsQ shrKwGhUQ+FVHAS/jSJkRC9XT6yUDExfBUmmte30AvcHrCLn9CW9iyywKyo4AKHn P19DjraFB5MHIamdrptQK80DQefA5EJ/ -----END CERTIFICATE-----Generated at Sun Jul 20 09:58:18 2025 by rpki-client