$ rpki-client -vvf rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft File: VTcR8u_pSETEP3dtRRAYwGSXLJo.mft (raw, json) Hash identifier: dj33J6UbeepUq26u5Pds9/Y2ZiTOHt3T9XeShtSZVik= Subject key identifier: B7:00:78:90:FB:2D:37:94:D6:49:2F:54:C0:30:39:29:B8:A8:ED:AB Authority key identifier: 55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A Certificate issuer: /CN=A911AAB5/serialNumber=553711F2EFE94844C43F776D451018C064972C9A Certificate serial: 0C44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft Manifest number: 0C39 Signing time: Sun 24 Aug 2025 18:37:08 +0000 Manifest this update: Sun 24 Aug 2025 18:37:08 +0000 Manifest next update: Sun 31 Aug 2025 18:37:08 +0000 Files and hashes: 1: VTcR8u_pSETEP3dtRRAYwGSXLJo.crl (hash: zwI9DMP8eMinURNR7sBGkk+ynJg7x9ljny9WWbI9rYs=) 2: 65EE26547A8711ECBA5D244DC4F9AE02.roa (hash: 9jpZ67QWGAJhgEp9yZYa+B85oL6nxjWkZcfSp/yeSCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3140 (0xc44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AAB5, serialNumber=553711F2EFE94844C43F776D451018C064972C9A Validity Not Before: Aug 24 18:37:08 2025 GMT Not After : Aug 31 18:37:08 2025 GMT Subject: CN=68ab5bd4-9cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:be:d7:f7:2c:27:08:86:e7:fc:05:1b:b3:c6: dd:5a:33:17:d4:51:00:59:78:f6:cf:4f:1b:b5:fe: ca:4f:5a:3f:8e:5c:1b:41:ba:1d:fa:d4:1a:70:6e: b0:72:1c:21:ac:31:6f:73:9d:3f:ae:dd:98:5f:ca: 40:66:cf:6a:a4:2c:9c:39:75:90:4d:ca:89:da:30: c2:21:fc:e6:4e:cc:89:17:5a:62:f6:f6:61:ba:60: 87:ea:e0:ce:e9:40:9b:23:6d:93:8f:ae:ba:d6:b2: 2d:3d:4b:a5:e6:6e:73:c0:bf:6e:af:fc:90:a2:5c: 7c:d0:d2:8e:b3:0e:6b:f5:77:ee:da:4c:3e:4c:b3: c2:3b:b3:70:c0:a5:98:f9:6e:c5:2a:21:93:20:0a: d6:ed:cc:1b:5e:9e:95:02:63:e5:d0:fc:0a:05:59: 02:eb:42:6d:d5:f0:16:10:39:e2:fc:d8:c5:ef:3f: 2e:61:16:b7:f2:a3:87:88:a0:7b:3d:61:a4:85:66: 75:5c:49:4a:0b:c2:16:0f:ef:bd:57:b0:12:e9:e4: 92:17:74:0a:a3:79:2f:81:ae:d0:41:f5:66:0f:b1: 3a:50:b1:9b:f3:a5:97:af:e0:9c:f1:d6:74:99:32: bc:54:e2:46:11:50:5f:ad:10:e0:d9:d9:a8:04:c0: 12:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:00:78:90:FB:2D:37:94:D6:49:2F:54:C0:30:39:29:B8:A8:ED:AB X509v3 Authority Key Identifier: keyid:55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:2b:e4:93:dc:b2:a7:fb:5f:3e:08:0b:47:d5:e6:98:0f:e5: 61:0b:5d:c7:30:30:d4:1f:dc:22:1b:b6:77:c7:2c:b1:d6:89: 33:7a:e6:20:20:3e:54:ea:59:77:27:31:1d:b0:40:22:1d:c3: e6:21:4e:a4:f5:4a:89:3f:a9:64:06:56:a6:d8:13:1b:5a:c3: af:96:a0:0c:3d:ae:10:8e:cf:af:2e:da:11:c0:8a:f2:b4:96: 84:d4:d0:ee:38:39:b9:1d:21:e5:9b:4e:24:a1:f3:fd:4d:16: 47:73:4e:cd:c0:9f:6f:ae:e2:95:d7:47:1d:58:23:f3:8f:61: ed:9b:06:3f:8f:71:63:35:22:ba:1e:07:8a:2e:41:30:83:e5: 3f:81:1b:4a:0f:1a:0f:30:4a:18:1b:84:58:aa:b4:4a:77:0e: 13:d2:0f:2e:cb:07:35:af:8f:78:be:bd:76:92:5c:d6:cd:5f: 22:b9:00:ab:99:85:59:62:4c:8b:f2:e6:36:82:1a:be:8c:d8: 7a:c0:0d:0a:ae:8e:39:2e:7f:07:c3:61:ab:3e:1d:34:ed:27: 66:48:13:50:61:d2:29:f5:1b:03:1d:02:98:08:d9:98:ef:32: 18:54:5c:56:c4:0e:cb:c9:e3:ed:af:04:04:e4:a0:ff:89:a8: d1:7a:a1:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFBQjUxMTAvBgNVBAUTKDU1MzcxMUYyRUZFOTQ4NDRDNDNGNzc2RDQ1MTAxOEMw NjQ5NzJDOUEwHhcNMjUwODI0MTgzNzA4WhcNMjUwODMxMTgzNzA4WjAYMRYwFAYD VQQDEw02OGFiNWJkNC05Y2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp77X9ywnCIbn/AUbs8bdWjMX1FEAWXj2z08btf7KT1o/jlwbQbod+tQacG6w chwhrDFvc50/rt2YX8pAZs9qpCycOXWQTcqJ2jDCIfzmTsyJF1pi9vZhumCH6uDO 6UCbI22Tj6661rItPUul5m5zwL9ur/yQolx80NKOsw5r9Xfu2kw+TLPCO7NwwKWY +W7FKiGTIArW7cwbXp6VAmPl0PwKBVkC60Jt1fAWEDni/NjF7z8uYRa38qOHiKB7 PWGkhWZ1XElKC8IWD++9V7AS6eSSF3QKo3kvga7QQfVmD7E6ULGb86WXr+Cc8dZ0 mTK8VOJGEVBfrRDg2dmoBMAS6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcAeJD7 LTeU1kkvVMAwOSm4qO2rMB8GA1UdIwQYMBaAFFU3EfLv6UhExD93bUUQGMBklyya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUFCNS9BM0JERTdBMDEw RjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNFVEVQM2R0UlJBWXdHU1hM Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUY1I4dV9wU0VURVAzZHRSUkFZd0dTWExKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUFCNS9BM0JERTdBMDEwRjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNF VEVQM2R0UlJBWXdHU1hMSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6K+ST3LKn+18+CAtH1eaYD+VhC13HMDDUH9wiG7Z3xyyx1okzeuYg ID5U6ll3JzEdsEAiHcPmIU6k9UqJP6lkBlam2BMbWsOvlqAMPa4Qjs+vLtoRwIry tJaE1NDuODm5HSHlm04kofP9TRZHc07NwJ9vruKV10cdWCPzj2HtmwY/j3FjNSK6 HgeKLkEwg+U/gRtKDxoPMEoYG4RYqrRKdw4T0g8uywc1r494vr12klzWzV8iuQCr mYVZYkyL8uY2ghq+jNh6wA0Kro45Ln8Hw2GrPh007SdmSBNQYdIp9RsDHQKYCNmY 7zIYVFxWxA7LyePtrwQE5KD/iajReqHM -----END CERTIFICATE-----Generated at Sun Aug 24 21:48:19 2025 by rpki-client