$ rpki-client -vvf rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft File: vgp-rCoKt52-BO5kAC1UgnWkzKY.mft (raw, json) Hash identifier: PE71/nJ02ny80d1yvMGMol6o3Ywj66ceN/n+2RLnYCA= Subject key identifier: 5F:67:CB:34:B3:25:47:4E:F2:C0:0D:ED:01:83:27:2D:5D:62:83:D2 Authority key identifier: BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6 Certificate issuer: /CN=A91C769F/serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6 Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft Manifest number: 0188 Signing time: Sat 19 Jul 2025 03:43:37 +0000 Manifest this update: Sat 19 Jul 2025 03:43:36 +0000 Manifest next update: Sat 26 Jul 2025 03:43:36 +0000 Files and hashes: 1: vgp-rCoKt52-BO5kAC1UgnWkzKY.crl (hash: HQFYZqDJCEKJb1GpChY5lX1GwG2rfOybUQ/TmkuMh28=) 2: 0A469648099611EEB1AA195CC4F9AE02.roa (hash: A02rwfVNBQfsMotmEpSHcGKxAIis7L1vdf/V5rNai7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C769F, serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6 Validity Not Before: Jul 19 03:43:36 2025 GMT Not After : Jul 26 03:43:36 2025 GMT Subject: CN=687b1469-ab71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:64:97:5a:b7:e2:5b:df:c0:02:86:e2:64:c0: dd:15:b1:47:64:4e:19:28:9b:98:d7:af:d1:94:05: 76:c2:40:7e:69:e8:b0:ea:d1:6f:89:05:07:7e:a7: 4b:bf:f6:14:82:04:49:d8:93:b9:ad:d1:1a:10:08: 79:7c:c0:55:1a:52:9c:6f:3a:a6:a3:b2:21:71:12: f8:fd:26:af:6d:f2:1a:3c:b1:c0:c2:98:2e:de:59: 92:e4:70:22:e4:61:9c:05:3b:3e:58:c7:1d:38:b2: 55:60:1d:93:9c:8d:bd:f0:14:0d:c5:f5:f4:40:23: f7:7e:a5:e0:e4:50:20:80:7b:9d:9d:63:3f:7a:ac: 2c:2e:b0:bf:11:b1:19:04:a1:88:a0:85:9b:1a:9b: 8d:78:3e:d0:2a:a1:b4:f0:ed:5b:a4:a5:5b:ad:a0: ca:ff:af:f5:64:8b:a3:43:94:82:dc:b9:5c:34:1a: a4:b7:1b:b7:49:5d:f2:64:1e:bd:67:a3:9e:56:a4: b4:84:a8:e2:08:b9:c8:80:5d:b6:49:e3:26:5c:0f: eb:f9:9a:bc:f5:d3:d1:fe:4e:9c:7b:e2:80:23:77: c4:ff:11:48:a4:f1:fb:a7:6e:9a:eb:a9:55:2a:af: 9d:5c:1f:4c:6f:2a:38:b6:b1:2f:c3:df:4e:c3:23: 8c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:67:CB:34:B3:25:47:4E:F2:C0:0D:ED:01:83:27:2D:5D:62:83:D2 X509v3 Authority Key Identifier: keyid:BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:ce:61:fe:b7:52:0a:13:a6:53:6c:78:f5:5c:b6:7e:83:f0: 53:b2:a6:bb:da:c9:83:aa:5f:85:2f:53:d2:c2:ca:5a:79:58: 84:f9:96:63:5d:30:97:b2:f5:8d:bc:31:0d:b5:4a:ce:a1:69: 54:00:34:c0:f4:60:49:19:00:c2:02:43:f2:66:9e:1f:dd:09: f3:c5:45:78:b1:52:67:bb:e7:f8:43:3c:43:92:3e:83:b7:93: 68:a9:3e:95:3f:a0:d0:24:49:61:3f:81:0c:7a:35:a7:1e:20: ab:6c:b7:a6:f8:ea:17:63:a8:a0:37:c0:f0:36:95:cd:a5:62: ef:43:18:55:e0:68:52:b7:0c:d4:2b:4e:f6:9e:34:61:bc:14: 26:60:93:4a:bd:4b:b2:51:82:79:d2:c0:03:bd:48:a1:84:10: 51:13:9c:c7:1d:74:61:26:f7:cd:71:3d:87:89:52:3a:8b:82: 3b:bc:7a:21:b5:6e:cc:33:d3:ec:8e:84:ee:e7:c2:98:56:bd: 9d:2b:cc:85:91:fa:95:26:3c:77:10:1d:74:36:fc:a8:3a:57: 21:8a:e9:37:3b:1f:79:40:5f:70:9c:2a:57:dd:86:02:9d:10: 61:1b:28:a2:aa:46:9a:c8:f3:b6:c6:7c:14:23:b2:42:c3:57: 5b:47:72:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc2OUYxMTAvBgNVBAUTKEJFMEE3RUFDMkEwQUI3OURCRTA0RUU2NDAwMkQ1NDgy NzVBNENDQTYwHhcNMjUwNzE5MDM0MzM2WhcNMjUwNzI2MDM0MzM2WjAYMRYwFAYD VQQDEw02ODdiMTQ2OS1hYjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5mSXWrfiW9/AAobiZMDdFbFHZE4ZKJuY16/RlAV2wkB+aeiw6tFviQUHfqdL v/YUggRJ2JO5rdEaEAh5fMBVGlKcbzqmo7IhcRL4/SavbfIaPLHAwpgu3lmS5HAi 5GGcBTs+WMcdOLJVYB2TnI298BQNxfX0QCP3fqXg5FAggHudnWM/eqwsLrC/EbEZ BKGIoIWbGpuNeD7QKqG08O1bpKVbraDK/6/1ZIujQ5SC3LlcNBqktxu3SV3yZB69 Z6OeVqS0hKjiCLnIgF22SeMmXA/r+Zq89dPR/k6ce+KAI3fE/xFIpPH7p26a66lV Kq+dXB9Mbyo4trEvw99OwyOMvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9nyzSz JUdO8sAN7QGDJy1dYoPSMB8GA1UdIwQYMBaAFL4KfqwqCredvgTuZAAtVIJ1pMym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzY5Ri82QUQxMTdBNDA5 OTExMUVFQkQyRTBFNThDNEY5QUUwMi92Z3AtckNvS3Q1Mi1CTzVrQUMxVWduV2t6 S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZncC1yQ29LdDUyLUJPNWtBQzFVZ25Xa3pLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzY5Ri82QUQxMTdBNDA5OTExMUVFQkQyRTBFNThDNEY5QUUwMi92Z3AtckNvS3Q1 Mi1CTzVrQUMxVWduV2t6S1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxzmH+t1IKE6ZTbHj1XLZ+g/BTsqa72smDql+FL1PSwspaeViE+ZZj XTCXsvWNvDENtUrOoWlUADTA9GBJGQDCAkPyZp4f3QnzxUV4sVJnu+f4QzxDkj6D t5NoqT6VP6DQJElhP4EMejWnHiCrbLem+OoXY6igN8DwNpXNpWLvQxhV4GhStwzU K072njRhvBQmYJNKvUuyUYJ50sADvUihhBBRE5zHHXRhJvfNcT2HiVI6i4I7vHoh tW7MM9PsjoTu58KYVr2dK8yFkfqVJjx3EB10NvyoOlchiuk3Ox95QF9wnCpX3YYC nRBhGyiiqkaayPO2xnwUI7JCw1dbR3Ju -----END CERTIFICATE-----Generated at Sun Jul 20 03:51:14 2025 by rpki-client