$ rpki-client -vvf rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft File: VG-WOuptbna5EQBSY8aKUfuJJ7c.mft (raw, json) Hash identifier: bGchxHZ6cnq0mqSWdH6otVCoKmtFYfAf+0E/ZwPjrjg= Subject key identifier: 72:66:45:7A:78:A1:2D:B1:20:38:F3:4B:A2:AF:8E:6C:5B:CB:7C:03 Authority key identifier: 54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7 Certificate issuer: /CN=A91148C8/serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7 Certificate serial: 0B1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft Manifest number: 0B10 Signing time: Fri 06 Jun 2025 19:17:21 +0000 Manifest this update: Fri 06 Jun 2025 19:17:20 +0000 Manifest next update: Fri 13 Jun 2025 19:17:20 +0000 Files and hashes: 1: VG-WOuptbna5EQBSY8aKUfuJJ7c.crl (hash: E6SWqX+haUAMNgjt0tO69GtxwPwhwAPHv08zdZelGbw=) 2: 7717CED6419911EA9B9A146BC4F9AE02.roa (hash: +lIDB4ZMJfUSud6W0iovrastNVgYPAXPsXe69l2eSPM=) 3: 77A99FC8419911EA9B9A146BC4F9AE02.roa (hash: D3fpRnO+H4w2WyJAekG120AEE5NS6PdOTqoTbZ8Xvyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 19:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2845 (0xb1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91148C8, serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7 Validity Not Before: Jun 6 19:17:20 2025 GMT Not After : Jun 13 19:17:20 2025 GMT Subject: CN=68433ec0-0f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4b:b6:ba:e8:43:3b:0b:b1:a1:50:da:13:ea: 87:a5:69:40:fb:2c:d8:11:8a:0f:fc:17:c1:cc:19: 13:5b:d0:af:1b:e1:28:f1:44:18:be:11:1f:62:b1: 61:57:02:ed:c5:32:7e:59:b8:c0:f5:4e:82:66:5e: 58:6f:fb:2e:8e:ff:25:e5:6e:2c:da:ee:47:09:ae: 95:eb:23:92:54:76:ef:fe:85:8d:49:06:1c:c9:b5: 6b:20:4b:ff:84:f9:e0:89:79:10:21:25:0a:47:f6: 5a:6e:6e:cb:44:9d:57:81:83:74:34:6f:99:1f:56: fa:8f:13:c7:6d:4c:9e:95:7a:8b:cb:db:f6:8f:35: c0:7e:8a:2e:81:ac:85:53:c1:db:2b:55:23:aa:f2: 6c:7a:42:3b:ad:04:8a:ca:69:42:35:d0:b8:29:89: 61:97:c1:3e:c3:ec:44:e6:9f:54:df:61:a8:8b:6d: e2:2e:33:9d:c8:eb:cf:d9:78:fb:1f:03:ed:8e:6b: e5:41:b1:ad:b2:67:6e:b0:db:4f:0a:ca:bf:cb:17: 88:b3:06:55:e9:f2:a0:33:1d:d2:de:00:8c:1d:ab: 23:8d:28:bb:05:41:aa:f6:7b:f9:93:7e:27:5c:d1: 45:c6:d8:68:0a:63:fc:38:8e:00:23:8c:42:74:ca: 0a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:66:45:7A:78:A1:2D:B1:20:38:F3:4B:A2:AF:8E:6C:5B:CB:7C:03 X509v3 Authority Key Identifier: keyid:54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:85:70:6c:30:c4:49:43:3d:3b:36:80:06:5d:e7:94:27:2b: f0:cb:d3:ca:df:4d:27:1a:8d:56:d8:27:9a:48:58:38:db:89: b1:21:7a:7c:98:d6:da:ad:dd:3c:c4:51:5f:5d:68:9c:2e:33: 23:23:f3:4c:0a:74:04:0f:a2:5a:1e:9c:6e:84:61:9f:a9:68: 75:33:76:02:e7:d2:ea:86:dd:db:f3:13:1a:88:25:76:ee:da: db:26:03:3a:78:3a:36:00:6a:9b:90:04:76:11:84:05:60:a4: 3c:73:c4:a7:86:a9:3c:e3:0f:9e:b4:2f:41:43:fd:94:ce:fe: ec:38:1a:8f:2d:24:ef:99:d4:95:61:29:20:23:8c:13:39:9e: fe:79:8f:d4:c3:72:22:03:1f:0f:55:b5:81:e7:0e:b5:a4:e4: 0c:24:92:9c:be:a7:62:4a:f4:af:e5:5c:c0:75:2f:f1:88:da: d9:50:33:4f:82:66:8d:02:1b:cd:ac:3d:d1:e9:f8:22:45:31: 23:2b:a2:9d:d4:ce:b4:bf:93:63:e0:b0:58:5b:ea:d3:e3:d6: 78:e6:8c:89:35:4b:01:a9:b1:df:51:3e:a2:7e:f4:33:12:41: c3:91:01:89:8b:70:94:0d:b6:75:2b:d0:03:65:c5:41:6a:68: e4:f0:2d:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4QzgxMTAvBgNVBAUTKDU0NkY5NjNBRUE2RDZFNzZCOTExMDA1MjYzQzY4QTUx RkI4OTI3QjcwHhcNMjUwNjA2MTkxNzIwWhcNMjUwNjEzMTkxNzIwWjAYMRYwFAYD VQQDEw02ODQzM2VjMC0wZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0u2uuhDOwuxoVDaE+qHpWlA+yzYEYoP/BfBzBkTW9CvG+Eo8UQYvhEfYrFh VwLtxTJ+WbjA9U6CZl5Yb/sujv8l5W4s2u5HCa6V6yOSVHbv/oWNSQYcybVrIEv/ hPngiXkQISUKR/Zabm7LRJ1XgYN0NG+ZH1b6jxPHbUyelXqLy9v2jzXAfoougayF U8HbK1UjqvJsekI7rQSKymlCNdC4KYlhl8E+w+xE5p9U32Goi23iLjOdyOvP2Xj7 HwPtjmvlQbGtsmdusNtPCsq/yxeIswZV6fKgMx3S3gCMHasjjSi7BUGq9nv5k34n XNFFxthoCmP8OI4AI4xCdMoKXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJmRXp4 oS2xIDjzS6Kvjmxby3wDMB8GA1UdIwQYMBaAFFRvljrqbW52uREAUmPGilH7iSe3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDhDOC8zMzY0RDMxNjQw Q0ExMUVBODk5MkI4NURDNEY5QUUwMi9WRy1XT3VwdGJuYTVFUUJTWThhS1VmdUpK N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZHLVdPdXB0Ym5hNUVRQlNZOGFLVWZ1Sko3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDhDOC8zMzY0RDMxNjQwQ0ExMUVBODk5MkI4NURDNEY5QUUwMi9WRy1XT3VwdGJu YTVFUUJTWThhS1VmdUpKN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7hXBsMMRJQz07NoAGXeeUJyvwy9PK300nGo1W2CeaSFg424mxIXp8 mNbard08xFFfXWicLjMjI/NMCnQED6JaHpxuhGGfqWh1M3YC59Lqht3b8xMaiCV2 7trbJgM6eDo2AGqbkAR2EYQFYKQ8c8Snhqk84w+etC9BQ/2Uzv7sOBqPLSTvmdSV YSkgI4wTOZ7+eY/Uw3IiAx8PVbWB5w61pOQMJJKcvqdiSvSv5VzAdS/xiNrZUDNP gmaNAhvNrD3R6fgiRTEjK6Kd1M60v5Nj4LBYW+rT49Z45oyJNUsBqbHfUT6ifvQz EkHDkQGJi3CUDbZ1K9ADZcVBamjk8C2t -----END CERTIFICATE-----Generated at Sat Jun 7 15:45:39 2025 by rpki-client