$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft File: VVmDGtzt7KX6kvxOtdLt5i43qM0.mft (raw, json) Hash identifier: pAKpQIoYMRM2JkZrnHgUYy04+L2PjsWI45GP3spjVlY= Subject key identifier: FB:A0:5A:53:AA:3E:2F:1A:B3:D2:4A:5D:2B:0F:9B:9C:37:0D:A0:DE Authority key identifier: 55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD Certificate issuer: /CN=A91AB2EB/serialNumber=5559831ADCEDECA5FA92FC4EB5D2EDE62E37A8CD Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft Manifest number: 0115 Signing time: Sat 19 Jul 2025 05:06:53 +0000 Manifest this update: Sat 19 Jul 2025 05:06:52 +0000 Manifest next update: Sat 26 Jul 2025 05:06:52 +0000 Files and hashes: 1: VVmDGtzt7KX6kvxOtdLt5i43qM0.crl (hash: LqWDiqFV+cVFBkk4JVT5TuPjjy2MY8x4v5fW72FPCdM=) 2: B96DD308BF4311EE844DDD58C4F9AE02.roa (hash: Qyo+y73YZI83wemHD69A6cWahcYB7AOwFIX0fbO5DQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.crl rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB2EB, serialNumber=5559831ADCEDECA5FA92FC4EB5D2EDE62E37A8CD Validity Not Before: Jul 19 05:06:52 2025 GMT Not After : Jul 26 05:06:52 2025 GMT Subject: CN=687b27ed-917a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e6:46:27:5c:47:78:32:f1:ab:a1:6a:b4:7e: 07:1e:a1:89:66:b0:57:62:a6:e8:46:1d:a2:52:ed: f6:67:7e:80:46:33:d6:c0:b4:d5:9e:7f:bc:00:35: 75:8d:40:ca:38:3f:93:80:40:47:83:ef:62:66:1a: b1:a3:a9:a0:d3:5e:60:be:e0:6b:3d:c5:37:9f:d6: 58:a1:41:15:66:e1:7e:d1:0c:1a:b0:71:98:19:c5: af:58:e1:e2:94:c6:ce:c6:fb:65:ef:ad:f3:e4:6d: 91:ae:ed:7c:e8:bd:5d:48:c0:47:3a:2d:1e:5a:82: 8e:01:e6:02:70:6d:40:fe:83:7e:be:c5:9d:fb:ac: ad:ce:c2:1a:5c:f3:b3:73:a6:d8:75:ed:e1:8b:ed: 8e:1c:25:fc:2f:3c:6d:23:27:a6:3a:bf:3a:b8:23: 17:11:6d:fe:3b:f3:ac:00:9d:25:a5:f0:5f:9f:c8: 14:16:8f:8d:0b:98:98:bc:62:fa:09:8f:90:8a:92: 81:9a:7f:07:3c:8b:da:98:77:7b:6e:88:4a:b7:49: f4:a2:45:cc:98:89:30:92:16:95:fa:8b:95:2c:25: 81:fa:28:35:57:29:4e:b2:15:8a:86:f4:45:04:d2: db:7e:62:df:fb:ff:8e:0f:c0:eb:3f:d3:7a:80:8c: 89:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A0:5A:53:AA:3E:2F:1A:B3:D2:4A:5D:2B:0F:9B:9C:37:0D:A0:DE X509v3 Authority Key Identifier: keyid:55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:68:ed:e3:c3:0d:90:35:7a:a4:1e:b1:80:c5:36:49:0e:5a: 70:83:12:60:02:0f:38:da:6a:00:4a:ec:7c:ba:bc:da:11:33: 5c:71:bb:2d:08:c1:8a:11:75:ba:c6:fa:67:c7:47:15:5e:9a: 7d:b3:cb:b8:ef:23:29:1b:5d:cf:0e:b0:2c:8f:a8:c9:14:8a: be:9a:9d:ae:f9:6a:78:00:2d:3a:7f:34:5c:d5:f4:7e:3a:e9: 9c:bc:25:a5:1b:52:6e:2a:5e:74:c6:4d:db:bc:f2:25:d4:98: 29:f5:e2:de:05:92:5f:fe:36:67:35:bb:dd:ae:e9:78:62:f1: d5:1f:bc:56:ca:ca:a7:8b:08:77:94:da:e6:1e:8b:fc:3a:e6: 62:35:cd:27:a1:d5:7b:45:d9:fb:df:8d:4c:de:03:62:6b:42: 23:e6:41:0c:ca:e7:01:eb:b7:b8:42:a6:5f:c8:15:67:3d:49: d2:ee:0e:6d:11:59:5e:3d:53:2d:c7:0d:e8:f0:7d:fa:85:3a: 0e:32:d5:ef:74:58:d0:bd:1c:f8:98:70:c6:03:17:fc:c0:f8: 0e:6f:dd:72:a2:d7:22:9c:f5:28:0e:64:ba:8e:74:bc:4e:d4: 50:58:17:ca:2e:4a:75:96:05:76:31:9d:f1:56:8d:8c:44:9f: e6:5c:f1:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyRUIxMTAvBgNVBAUTKDU1NTk4MzFBRENFREVDQTVGQTkyRkM0RUI1RDJFREU2 MkUzN0E4Q0QwHhcNMjUwNzE5MDUwNjUyWhcNMjUwNzI2MDUwNjUyWjAYMRYwFAYD VQQDEw02ODdiMjdlZC05MTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1OZGJ1xHeDLxq6FqtH4HHqGJZrBXYqboRh2iUu32Z36ARjPWwLTVnn+8ADV1 jUDKOD+TgEBHg+9iZhqxo6mg015gvuBrPcU3n9ZYoUEVZuF+0QwasHGYGcWvWOHi lMbOxvtl763z5G2Rru186L1dSMBHOi0eWoKOAeYCcG1A/oN+vsWd+6ytzsIaXPOz c6bYde3hi+2OHCX8LzxtIyemOr86uCMXEW3+O/OsAJ0lpfBfn8gUFo+NC5iYvGL6 CY+QipKBmn8HPIvamHd7bohKt0n0okXMmIkwkhaV+ouVLCWB+ig1VylOshWKhvRF BNLbfmLf+/+OD8DrP9N6gIyJlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPugWlOq Pi8as9JKXSsPm5w3DaDeMB8GA1UdIwQYMBaAFFVZgxrc7eyl+pL8TrXS7eYuN6jN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjJFQi80MzBCNUE3OEJG NDMxMUVFOEZEMzA3NThDNEY5QUUwMi9WVm1ER3R6dDdLWDZrdnhPdGRMdDVpNDNx TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZWbURHdHp0N0tYNmt2eE90ZEx0NWk0M3FNMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjJFQi80MzBCNUE3OEJGNDMxMUVFOEZEMzA3NThDNEY5QUUwMi9WVm1ER3R6dDdL WDZrdnhPdGRMdDVpNDNxTTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7aO3jww2QNXqkHrGAxTZJDlpwgxJgAg842moASux8urzaETNccbst CMGKEXW6xvpnx0cVXpp9s8u47yMpG13PDrAsj6jJFIq+mp2u+Wp4AC06fzRc1fR+ OumcvCWlG1JuKl50xk3bvPIl1Jgp9eLeBZJf/jZnNbvdrul4YvHVH7xWysqniwh3 lNrmHov8OuZiNc0nodV7Rdn7341M3gNia0Ij5kEMyucB67e4QqZfyBVnPUnS7g5t EVlePVMtxw3o8H36hToOMtXvdFjQvRz4mHDGAxf8wPgOb91yotcinPUoDmS6jnS8 TtRQWBfKLkp1lgV2MZ3xVo2MRJ/mXPGE -----END CERTIFICATE-----Generated at Mon Jul 21 05:51:06 2025 by rpki-client