$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft File: VlIPoddulfCBm23dSWe0VQRphp0.mft (raw, json) Hash identifier: GyrofytuiXzBfm7MfyzYP7crwPj8dPLTnZrydAB0+1c= Subject key identifier: 79:27:12:38:4F:D9:8E:A3:A2:99:BC:AE:2C:0C:20:0A:6C:D5:F0:48 Authority key identifier: 56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D Certificate issuer: /CN=A91A91CB/serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft Manifest number: 50 Signing time: Sat 19 Jul 2025 07:30:59 +0000 Manifest this update: Sat 19 Jul 2025 07:30:58 +0000 Manifest next update: Sat 26 Jul 2025 07:30:58 +0000 Files and hashes: 1: VlIPoddulfCBm23dSWe0VQRphp0.crl (hash: 5k7jHLT3BTH9+5zVns1/Ari/WHY4RMr74v3JVa+KMvU=) 2: EE8CD88EEA5A11EF922B276DC4F9AE02.roa (hash: NgoL1gjr88ZdEn/6hgZXntqKOlCBVmw0eMD59yFjWlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91CB, serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D Validity Not Before: Jul 19 07:30:58 2025 GMT Not After : Jul 26 07:30:58 2025 GMT Subject: CN=687b49b2-decf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:81:5f:e5:da:3a:06:01:68:f0:49:9f:e5:d8: 10:9b:26:ac:aa:d6:b6:65:88:f2:2e:84:24:93:7d: 3c:ec:b4:5a:a9:e8:28:f8:f8:f0:ee:8f:5e:8a:c2: e7:f5:c2:1e:48:80:19:c9:eb:3d:98:ef:fb:20:15: d9:1c:5f:97:a4:71:d7:9e:7e:db:d3:9d:c0:19:73: 87:8b:09:3d:df:61:82:7d:93:5a:8b:de:73:23:04: e8:1f:a9:cd:b7:af:15:81:c1:59:82:06:fa:2f:5b: d2:7d:ba:a3:92:0c:02:f3:99:18:0b:20:e0:b8:64: f5:ae:20:52:5b:63:a5:fc:1a:32:48:f9:e7:80:48: a6:e5:f8:bd:d6:89:50:8b:4d:17:e9:52:b3:d5:f9: cd:3a:61:47:d8:88:f2:6d:36:ef:b5:4f:30:37:2b: fe:7a:38:dc:a7:81:ec:90:32:78:fa:18:2f:92:f8: 6b:7b:d6:11:3a:00:e8:d6:e2:d2:07:22:8c:e6:df: b8:35:0a:bc:6e:90:25:17:14:db:49:4c:65:a4:b4: 50:00:d5:5f:b4:87:7c:f4:79:f3:ec:5f:77:77:ac: e9:9e:fe:2f:ae:4d:76:d4:25:ad:9e:43:d7:29:1a: e0:fe:72:11:49:aa:be:9d:13:82:12:8a:10:d8:a0: 3f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:27:12:38:4F:D9:8E:A3:A2:99:BC:AE:2C:0C:20:0A:6C:D5:F0:48 X509v3 Authority Key Identifier: keyid:56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:56:b2:b6:42:20:bd:ec:3e:db:b7:63:73:49:0f:d9:e9:79: 92:29:46:00:31:65:92:1b:7e:eb:5a:15:bf:ff:8c:47:a9:4b: 4a:11:05:92:c9:d4:e2:24:4e:83:51:01:2b:3b:c8:bb:2d:8e: 26:ae:c3:0e:e8:69:f5:44:1f:b5:a2:74:d6:46:1a:5a:75:9a: 08:86:69:06:46:88:5b:d2:af:5a:37:3a:b2:1c:36:9f:2e:0f: 52:b9:cb:30:7b:7b:ee:39:34:bb:e8:36:73:fb:37:a2:f9:2d: 1c:f7:8c:96:53:88:63:f8:4b:91:fb:38:17:25:90:c6:29:84: 5c:e2:b4:d9:21:dc:c1:31:82:e8:df:52:a6:b1:cc:cd:97:53: d3:21:61:55:65:65:f3:7d:b2:1f:58:0f:5c:b7:5b:19:43:c3: 4c:29:eb:a7:53:50:fe:21:96:5b:87:a3:18:ed:12:4c:ba:02: a8:1e:d6:81:94:1e:fd:d6:47:ec:64:f1:cc:bc:07:d0:e4:29: a1:b0:25:70:64:0b:af:ab:e8:b6:bd:4a:f6:14:62:d7:77:db: c7:30:79:44:85:3b:d6:fe:1c:ee:75:39:39:4c:d9:49:c8:39: c3:b6:f4:f9:fc:5d:b9:09:8c:cf:aa:6e:83:f8:f1:dc:32:db: 8a:4e:37:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTFDQjExMC8GA1UEBRMoNTY1MjBGQTFENzZFOTVGMDgxOUI2RERENDk2N0I0NTUw NDY5ODY5RDAeFw0yNTA3MTkwNzMwNThaFw0yNTA3MjYwNzMwNThaMBgxFjAUBgNV BAMTDTY4N2I0OWIyLWRlY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9gV/l2joGAWjwSZ/l2BCbJqyq1rZliPIuhCSTfTzstFqp6Cj4+PDuj16Kwuf1 wh5IgBnJ6z2Y7/sgFdkcX5ekcdeeftvTncAZc4eLCT3fYYJ9k1qL3nMjBOgfqc23 rxWBwVmCBvovW9J9uqOSDALzmRgLIOC4ZPWuIFJbY6X8GjJI+eeASKbl+L3WiVCL TRfpUrPV+c06YUfYiPJtNu+1TzA3K/56ONyngeyQMnj6GC+S+Gt71hE6AOjW4tIH Iozm37g1CrxukCUXFNtJTGWktFAA1V+0h3z0efPsX3d3rOme/i+uTXbUJa2eQ9cp GuD+chFJqr6dE4ISihDYoD9/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeScSOE/Z jqOimbyuLAwgCmzV8EgwHwYDVR0jBBgwFoAUVlIPoddulfCBm23dSWe0VQRphp0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5MUNCLzVCNkZBMzYwRUE1 QTExRUZCODRBRTQ2OEM0RjlBRTAyL1ZsSVBvZGR1bGZDQm0yM2RTV2UwVlFScGhw MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVmxJUG9kZHVsZkNCbTIzZFNXZTBWUVJwaHAwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 MUNCLzVCNkZBMzYwRUE1QTExRUZCODRBRTQ2OEM0RjlBRTAyL1ZsSVBvZGR1bGZD Qm0yM2RTV2UwVlFScGhwMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFZWsrZCIL3sPtu3Y3NJD9npeZIpRgAxZZIbfutaFb//jEepS0oRBZLJ 1OIkToNRASs7yLstjiauww7oafVEH7WidNZGGlp1mgiGaQZGiFvSr1o3OrIcNp8u D1K5yzB7e+45NLvoNnP7N6L5LRz3jJZTiGP4S5H7OBclkMYphFzitNkh3MExgujf UqaxzM2XU9MhYVVlZfN9sh9YD1y3WxlDw0wp66dTUP4hlluHoxjtEky6Aqge1oGU Hv3WR+xk8cy8B9DkKaGwJXBkC6+r6La9SvYUYtd328cweUSFO9b+HO51OTlM2UnI OcO29Pn8XbkJjM+qboP48dwy24pONzc= -----END CERTIFICATE-----Generated at Sun Jul 20 02:37:13 2025 by rpki-client