$ rpki-client -vvf rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft File: VG-WOuptbna5EQBSY8aKUfuJJ7c.mft (raw, json) Hash identifier: wlwAa9DL+/+hU30VsibX0Tn0FrtldOaO1igfs4Rf8ls= Subject key identifier: C3:FA:3E:38:DD:11:84:E8:5F:F9:EF:45:F2:EA:97:EF:6F:F2:F8:D4 Authority key identifier: 54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7 Certificate issuer: /CN=A91148C8/serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7 Certificate serial: 0B43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft Manifest number: 0B36 Signing time: Wed 20 Aug 2025 19:15:08 +0000 Manifest this update: Wed 20 Aug 2025 19:15:07 +0000 Manifest next update: Wed 27 Aug 2025 19:15:07 +0000 Files and hashes: 1: VG-WOuptbna5EQBSY8aKUfuJJ7c.crl (hash: IoXxtaUNauqcIyrTkUB4kCK+DMcEozwLNCDFu62D9lU=) 2: 7717CED6419911EA9B9A146BC4F9AE02.roa (hash: +lIDB4ZMJfUSud6W0iovrastNVgYPAXPsXe69l2eSPM=) 3: 77A99FC8419911EA9B9A146BC4F9AE02.roa (hash: D3fpRnO+H4w2WyJAekG120AEE5NS6PdOTqoTbZ8Xvyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2883 (0xb43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91148C8, serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7 Validity Not Before: Aug 20 19:15:07 2025 GMT Not After : Aug 27 19:15:07 2025 GMT Subject: CN=68a61ebc-5d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:17:56:cf:03:7b:27:df:39:ed:24:89:64: 1d:ad:cb:16:6f:c1:1f:d9:f8:d1:5d:d9:49:86:38: a2:3c:a8:cd:27:9f:41:cf:4d:0d:cc:83:11:ea:75: f2:d7:86:69:83:27:e7:c6:2f:60:7e:b6:91:fe:b4: 3e:2b:3f:47:64:10:0d:c6:5c:46:50:c0:17:77:35: 42:7c:6e:8e:be:33:f4:b1:2d:69:a4:89:6a:d5:8d: f2:41:64:e0:8f:c0:03:a2:43:dd:57:da:03:0b:9a: 16:f7:23:fe:71:22:06:45:87:08:e9:c4:89:7c:db: 31:b5:84:c0:f2:85:5d:0e:05:d0:fa:b7:17:49:82: 86:f7:1f:f8:9d:25:f1:c7:26:22:d7:2c:b2:8a:bf: 8b:87:e9:00:6d:38:8c:ad:6c:08:df:5d:c1:ca:ab: d0:92:ca:51:9a:13:a8:00:88:2d:9a:88:27:a2:87: 65:cd:e9:e7:f0:61:9f:e1:3a:c0:0a:32:5c:3e:b1: 04:b9:2b:95:bb:4a:ec:2f:9b:a2:e6:4c:f6:76:93: 2a:1d:16:c5:d2:a8:b4:9b:7c:4f:5b:7c:5f:86:b3: ce:78:d2:2e:90:fc:f0:dd:e2:96:e9:13:13:4e:3a: 55:8a:5b:b3:c8:de:c6:f6:ef:d9:ee:3a:27:d6:47: 1b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FA:3E:38:DD:11:84:E8:5F:F9:EF:45:F2:EA:97:EF:6F:F2:F8:D4 X509v3 Authority Key Identifier: keyid:54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:82:f8:e3:ab:b9:3c:a5:3a:2b:f9:62:21:83:7c:8d:6d:b4: 1c:f4:ca:66:bb:10:9c:fe:1c:a5:7c:ee:f7:43:2e:28:31:b1: 06:27:4a:98:5b:72:37:da:2a:23:af:04:0f:38:24:9a:64:24: 39:b8:27:91:d1:87:21:19:a7:19:d8:4a:d5:f4:f7:36:5b:e4: 5c:30:6d:46:06:c2:4b:1c:fd:93:02:45:9c:0b:fb:7a:f3:5f: 66:78:22:24:10:7d:29:80:a4:1b:1f:22:e1:84:16:27:8d:63: 5e:95:15:89:51:df:dd:38:5f:64:e1:4f:38:5f:f4:b7:89:08: ea:94:d2:9b:f9:92:7f:48:23:2b:db:ff:18:f7:91:76:80:0f: 25:77:59:4b:06:79:62:56:8a:87:09:f7:6c:9d:b6:f8:84:7f: 1b:88:8b:2b:13:52:48:d8:53:8e:a9:58:21:aa:e2:b4:ea:49: 4d:0a:10:b7:bb:63:86:1b:61:fd:b0:8e:02:ab:b3:77:41:c8: d9:f5:7b:36:a7:65:56:00:0c:60:47:cb:c2:7a:b4:93:36:c9: 39:7e:a1:73:46:a1:87:84:f7:e0:af:99:ec:92:17:69:92:ad: e9:c2:c4:11:f2:32:e6:0d:4f:7d:1b:52:f6:16:e5:d3:52:11: 8c:79:fd:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4QzgxMTAvBgNVBAUTKDU0NkY5NjNBRUE2RDZFNzZCOTExMDA1MjYzQzY4QTUx RkI4OTI3QjcwHhcNMjUwODIwMTkxNTA3WhcNMjUwODI3MTkxNTA3WjAYMRYwFAYD VQQDEw02OGE2MWViYy01ZDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdQXVs8DeyffOe0kiWQdrcsWb8Ef2fjRXdlJhjiiPKjNJ59Bz00NzIMR6nXy 14Zpgyfnxi9gfraR/rQ+Kz9HZBANxlxGUMAXdzVCfG6OvjP0sS1ppIlq1Y3yQWTg j8ADokPdV9oDC5oW9yP+cSIGRYcI6cSJfNsxtYTA8oVdDgXQ+rcXSYKG9x/4nSXx xyYi1yyyir+Lh+kAbTiMrWwI313ByqvQkspRmhOoAIgtmognoodlzenn8GGf4TrA CjJcPrEEuSuVu0rsL5ui5kz2dpMqHRbF0qi0m3xPW3xfhrPOeNIukPzw3eKW6RMT TjpViluzyN7G9u/Z7jon1kcbCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMP6Pjjd EYToX/nvRfLql+9v8vjUMB8GA1UdIwQYMBaAFFRvljrqbW52uREAUmPGilH7iSe3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDhDOC8zMzY0RDMxNjQw Q0ExMUVBODk5MkI4NURDNEY5QUUwMi9WRy1XT3VwdGJuYTVFUUJTWThhS1VmdUpK N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZHLVdPdXB0Ym5hNUVRQlNZOGFLVWZ1Sko3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDhDOC8zMzY0RDMxNjQwQ0ExMUVBODk5MkI4NURDNEY5QUUwMi9WRy1XT3VwdGJu YTVFUUJTWThhS1VmdUpKN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmgvjjq7k8pTor+WIhg3yNbbQc9MpmuxCc/hylfO73Qy4oMbEGJ0qY W3I32iojrwQPOCSaZCQ5uCeR0YchGacZ2ErV9Pc2W+RcMG1GBsJLHP2TAkWcC/t6 819meCIkEH0pgKQbHyLhhBYnjWNelRWJUd/dOF9k4U84X/S3iQjqlNKb+ZJ/SCMr 2/8Y95F2gA8ld1lLBnliVoqHCfdsnbb4hH8biIsrE1JI2FOOqVghquK06klNChC3 u2OGG2H9sI4Cq7N3QcjZ9Xs2p2VWAAxgR8vCerSTNsk5fqFzRqGHhPfgr5nskhdp kq3pwsQR8jLmDU99G1L2FuXTUhGMef3J -----END CERTIFICATE-----Generated at Thu Aug 21 07:33:31 2025 by rpki-client