$ rpki-client -vvf rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft File: VB3RXhVOUI-wD9skXE528q09iB0.mft (raw, json) Hash identifier: Fz5aAto/xh4/x5Sj021/jfnInJzBRPQaMWXNligS9LU= Subject key identifier: 7E:54:E4:7A:89:B6:68:78:B8:57:0B:2F:3A:5C:24:FE:03:B3:8B:DF Authority key identifier: 54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D Certificate issuer: /CN=A911CE4A/serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft Manifest number: 11 Signing time: Thu 21 Aug 2025 08:17:20 +0000 Manifest this update: Thu 21 Aug 2025 08:17:20 +0000 Manifest next update: Thu 28 Aug 2025 08:17:19 +0000 Files and hashes: 1: VB3RXhVOUI-wD9skXE528q09iB0.crl (hash: QF3tRbnKTwRKpWE1lBO0e7Ckp/hyfCvt5Tk2Nb+JOos=) 2: BA2C0A9E673A11F0B876713DC4F9AE02.roa (hash: qV69gg2P4bFihZzX2d7CSbRtDBRP/ma/ao4YNWgRlJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 08:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CE4A, serialNumber=541DD15E154E508FB00FDB245C4E76F2AD3D881D Validity Not Before: Aug 21 08:17:20 2025 GMT Not After : Aug 28 08:17:19 2025 GMT Subject: CN=68a6d610-4470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:52:53:95:71:47:8b:62:2f:ac:3c:f5:73:a1: 59:4e:e4:b9:9d:18:21:05:30:a7:70:23:75:b4:f7: f9:f6:09:64:e6:ae:66:ca:c8:6f:8d:83:0c:db:39: eb:0b:6a:b9:54:72:e3:8f:75:6b:ae:2d:db:9b:d1: e3:46:01:c6:a1:7b:68:66:dc:0d:c4:0d:e3:0d:d3: dd:07:50:b6:ab:25:40:08:9f:76:c2:69:12:14:a4: e2:20:41:d8:ea:76:96:44:d9:ad:0f:2a:97:fa:0f: d6:fe:49:8b:54:a6:9a:c9:5c:90:cc:ca:d2:7a:72: 36:9b:17:bf:7b:ee:63:bf:a6:eb:d9:f8:f9:a9:73: a3:c6:0d:17:ff:1b:8c:c5:e4:46:63:35:f7:5d:55: 9a:c6:84:ed:9a:67:66:56:57:69:72:23:cd:df:60: 7e:96:6c:f2:7f:66:f3:40:20:4a:fd:da:4c:a3:21: 1e:05:3d:8a:ab:96:2d:4b:ea:19:2e:ec:30:c9:40: 45:74:bc:db:8d:bb:d4:c6:61:92:c7:27:3f:4b:fd: 92:e9:21:8c:67:9c:28:c2:1c:c6:bc:eb:29:e5:87: be:ed:d9:c8:a8:ea:08:31:15:fd:82:c2:9f:58:91: 7b:66:a1:d7:b4:21:7e:1e:10:f3:72:ac:4b:61:c9: 83:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:54:E4:7A:89:B6:68:78:B8:57:0B:2F:3A:5C:24:FE:03:B3:8B:DF X509v3 Authority Key Identifier: keyid:54:1D:D1:5E:15:4E:50:8F:B0:0F:DB:24:5C:4E:76:F2:AD:3D:88:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB3RXhVOUI-wD9skXE528q09iB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE4A/E1EA19F6673811F0AD566D7FC4F9AE02/VB3RXhVOUI-wD9skXE528q09iB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:3c:17:89:06:8f:bc:ec:21:d9:ba:15:9e:c8:8b:7d:31:d4: be:ef:2f:5a:58:8c:c8:dd:aa:79:30:29:96:65:bb:7d:41:9c: a8:64:00:9c:49:d7:81:3d:ef:6e:c9:21:3e:77:e4:32:1b:9e: a8:ee:d5:46:63:9f:ce:a5:a0:f5:a1:60:d8:b8:5e:fc:1f:5a: 1c:b5:52:5b:97:b3:c2:28:bf:8e:15:0c:71:5e:d5:6c:11:59: e9:d0:99:57:5d:43:5e:8b:07:43:60:3d:14:52:70:08:ea:1e: 7f:f8:98:d8:d5:8b:db:9f:1c:3c:cc:61:25:ba:93:66:a0:fb: cd:fd:76:92:55:86:1a:46:ef:b1:0a:a8:a9:9f:5e:f6:47:39: 76:79:8d:f5:7f:5f:40:8d:35:4d:81:0b:17:f9:a7:ea:2f:c3: bf:d4:d8:e9:44:38:2d:52:3b:ac:71:0b:02:22:d9:56:89:d5: 0d:33:68:60:3d:75:2a:1d:3b:03:8d:9e:63:92:71:f1:4e:2a: 21:9f:3a:99:8e:6a:55:65:9a:94:a9:70:8a:8a:40:68:98:27: 3b:b3:79:dc:45:95:08:48:6c:93:d8:d9:2a:34:b1:38:ac:06: b0:fb:2e:36:e9:24:c5:77:a6:15:fa:be:bc:f1:bb:ce:e2:32: da:45:65:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Q0U0QTExMC8GA1UEBRMoNTQxREQxNUUxNTRFNTA4RkIwMEZEQjI0NUM0RTc2RjJB RDNEODgxRDAeFw0yNTA4MjEwODE3MjBaFw0yNTA4MjgwODE3MTlaMBgxFjAUBgNV BAMTDTY4YTZkNjEwLTQ0NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRUlOVcUeLYi+sPPVzoVlO5LmdGCEFMKdwI3W09/n2CWTmrmbKyG+NgwzbOesL arlUcuOPdWuuLdub0eNGAcahe2hm3A3EDeMN090HULarJUAIn3bCaRIUpOIgQdjq dpZE2a0PKpf6D9b+SYtUpprJXJDMytJ6cjabF7977mO/puvZ+Pmpc6PGDRf/G4zF 5EZjNfddVZrGhO2aZ2ZWV2lyI83fYH6WbPJ/ZvNAIEr92kyjIR4FPYqrli1L6hku 7DDJQEV0vNuNu9TGYZLHJz9L/ZLpIYxnnCjCHMa86ynlh77t2cio6ggxFf2Cwp9Y kXtmode0IX4eEPNyrEthyYOXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUflTkeom2 aHi4VwsvOlwk/gOzi98wHwYDVR0jBBgwFoAUVB3RXhVOUI+wD9skXE528q09iB0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDRTRBL0UxRUExOUY2Njcz ODExRjBBRDU2NkQ3RkM0RjlBRTAyL1ZCM1JYaFZPVUktd0Q5c2tYRTUyOHEwOWlC MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkIzUlhoVk9VSS13RDlza1hFNTI4cTA5aUIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD RTRBL0UxRUExOUY2NjczODExRjBBRDU2NkQ3RkM0RjlBRTAyL1ZCM1JYaFZPVUkt d0Q5c2tYRTUyOHEwOWlCMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABQ8F4kGj7zsIdm6FZ7Ii30x1L7vL1pYjMjdqnkwKZZlu31BnKhkAJxJ 14E9727JIT535DIbnqju1UZjn86loPWhYNi4XvwfWhy1UluXs8Iov44VDHFe1WwR WenQmVddQ16LB0NgPRRScAjqHn/4mNjVi9ufHDzMYSW6k2ag+839dpJVhhpG77EK qKmfXvZHOXZ5jfV/X0CNNU2BCxf5p+ovw7/U2OlEOC1SO6xxCwIi2VaJ1Q0zaGA9 dSodOwONnmOScfFOKiGfOpmOalVlmpSpcIqKQGiYJzuzedxFlQhIbJPY2So0sTis BrD7LjbpJMV3phX6vrzxu87iMtpFZQI= -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:13 2025 by rpki-client