$ rpki-client -vvf rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft File: VCRPZF3qDVCWaFgNE46CUnn7Vng.mft (raw, json) Hash identifier: DMixLz/oC5QuqsMKBf70aXWfutnup87X/o4+C9tFNAE= Subject key identifier: 01:C3:89:7A:E2:5A:C9:AF:F4:5D:B4:D0:DD:01:5B:F5:B2:25:4A:FC Authority key identifier: 54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 Certificate issuer: /CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678 Certificate serial: 0D26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft Manifest number: 0D1C Signing time: Sun 20 Jul 2025 18:05:25 +0000 Manifest this update: Sun 20 Jul 2025 18:05:25 +0000 Manifest next update: Sun 27 Jul 2025 18:05:25 +0000 Files and hashes: 1: VCRPZF3qDVCWaFgNE46CUnn7Vng.crl (hash: h6GMVEGRfsxiEyvkOhqoatoCIYUJch+n/qCLE95ea2I=) 2: 690390E80FAA11EB8B893F1EC4F9AE02.roa (hash: 9FxIJk5By9GC/1mM3LBBThqiUIJi3J3T7y2yMdVI55E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3366 (0xd26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B624E, serialNumber=54244F645DEA0D509668580D138E825279FB5678 Validity Not Before: Jul 20 18:05:25 2025 GMT Not After : Jul 27 18:05:25 2025 GMT Subject: CN=687d2fe5-5f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9b:98:a7:46:27:e4:df:b1:4c:7a:75:57:7d: d7:49:3b:33:ec:3f:2e:7c:f9:55:d4:04:c6:8e:66: fc:ee:da:58:cb:f7:ab:e1:1a:06:d7:34:19:3d:23: 6e:4e:24:6c:c2:fd:e7:8c:75:31:8d:dc:df:8f:06: df:27:b5:59:eb:22:f5:0e:92:66:a2:b3:07:e5:5f: 77:ff:cc:36:d5:91:ce:72:00:b9:00:e8:16:e9:fe: dd:1c:3c:cd:54:e9:94:2e:4e:fe:50:9b:6a:53:69: 8a:c2:b3:3f:96:70:46:dd:8d:1e:df:46:59:63:8c: cd:e2:3a:ae:8c:53:8c:a0:60:c4:bd:14:db:03:9c: b9:f2:d2:03:d0:a6:c0:a2:08:37:a1:23:ad:58:60: 07:bc:22:9e:e5:82:ef:cf:c1:2d:ec:70:09:16:e9: 23:5c:cc:c3:a7:18:b0:06:cb:d2:5d:3d:da:98:93: 92:12:a6:ae:e4:25:c9:0d:6f:fe:ed:67:f1:7b:38: dc:35:df:60:5c:88:bb:2b:b6:36:a0:fd:5e:73:d2: 8c:54:4a:7b:bf:b1:45:72:78:ca:fe:4e:50:79:2d: 69:e9:6e:d6:91:b3:03:37:00:70:cd:9f:db:81:98: 7b:a9:45:92:52:8a:87:48:bd:7c:e2:50:40:2e:6f: 92:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C3:89:7A:E2:5A:C9:AF:F4:5D:B4:D0:DD:01:5B:F5:B2:25:4A:FC X509v3 Authority Key Identifier: keyid:54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:e5:99:db:9c:01:14:6f:6c:bb:cf:26:b0:3b:61:5a:ba:31: c5:c4:74:05:3c:dc:37:03:b9:0b:61:f5:eb:f3:7c:37:46:f7: c2:d9:45:42:63:c6:33:22:49:90:ed:5b:2b:94:5b:fb:2e:04: a6:24:af:86:84:2c:07:ab:c3:b3:37:77:99:ab:52:48:6d:92: 30:6f:34:11:93:fb:57:2e:fc:e7:20:66:a0:f8:f6:cf:26:ee: 96:5d:b7:5a:a6:e4:d8:8a:dc:77:ef:80:2f:01:6d:3f:fc:e9: 46:48:5f:7e:c6:c7:13:99:1d:d2:5e:71:55:7f:44:a7:1c:11: fa:5e:ef:47:34:d9:63:76:b6:64:cb:1a:9b:25:05:e3:ee:a7: ff:5e:83:31:09:b5:c8:aa:8a:d5:fb:4d:df:77:da:1f:e9:02: d0:ce:2e:9c:4c:b7:a9:d6:03:7f:fb:35:49:cc:49:1c:26:6e: 38:7e:d1:1e:07:a1:c7:90:89:fc:3a:cc:c1:aa:bc:92:29:07: b6:7d:ee:87:b4:17:96:8c:05:bc:29:81:7d:be:06:e3:34:c8: a9:8d:6b:86:05:95:a8:df:91:76:26:00:94:66:bf:b7:25:39: 26:d4:ad:46:82:75:2f:25:ac:07:79:35:56:8f:80:9e:4a:5d: 88:a1:e2:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNEUxMTAvBgNVBAUTKDU0MjQ0RjY0NURFQTBENTA5NjY4NTgwRDEzOEU4MjUy NzlGQjU2NzgwHhcNMjUwNzIwMTgwNTI1WhcNMjUwNzI3MTgwNTI1WjAYMRYwFAYD VQQDEw02ODdkMmZlNS01ZjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZuYp0Yn5N+xTHp1V33XSTsz7D8ufPlV1ATGjmb87tpYy/er4RoG1zQZPSNu TiRswv3njHUxjdzfjwbfJ7VZ6yL1DpJmorMH5V93/8w21ZHOcgC5AOgW6f7dHDzN VOmULk7+UJtqU2mKwrM/lnBG3Y0e30ZZY4zN4jqujFOMoGDEvRTbA5y58tID0KbA ogg3oSOtWGAHvCKe5YLvz8Et7HAJFukjXMzDpxiwBsvSXT3amJOSEqau5CXJDW/+ 7WfxezjcNd9gXIi7K7Y2oP1ec9KMVEp7v7FFcnjK/k5QeS1p6W7WkbMDNwBwzZ/b gZh7qUWSUoqHSL184lBALm+S7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHDiXri Wsmv9F200N0BW/WyJUr8MB8GA1UdIwQYMBaAFFQkT2Rd6g1QlmhYDROOglJ5+1Z4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI0RS9CRDk1QzM4RUUw M0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURWQ1dhRmdORTQ2Q1VubjdW bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDUlBaRjNxRFZDV2FGZ05FNDZDVW5uN1ZuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjI0RS9CRDk1QzM4RUUwM0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURW Q1dhRmdORTQ2Q1VubjdWbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn5ZnbnAEUb2y7zyawO2FaujHFxHQFPNw3A7kLYfXr83w3RvfC2UVC Y8YzIkmQ7VsrlFv7LgSmJK+GhCwHq8OzN3eZq1JIbZIwbzQRk/tXLvznIGag+PbP Ju6WXbdapuTYitx374AvAW0//OlGSF9+xscTmR3SXnFVf0SnHBH6Xu9HNNljdrZk yxqbJQXj7qf/XoMxCbXIqorV+03fd9of6QLQzi6cTLep1gN/+zVJzEkcJm44ftEe B6HHkIn8OszBqrySKQe2fe6HtBeWjAW8KYF9vgbjNMipjWuGBZWo35F2JgCUZr+3 JTkm1K1GgnUvJawHeTVWj4CeSl2IoeII -----END CERTIFICATE-----Generated at Mon Jul 21 06:55:15 2025 by rpki-client