$ rpki-client -vvf rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft File: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft (raw, json) Hash identifier: QbBZbYDkYpkxwO8SqSwNCSq4lpcXT9ndqcRLuY9cyE8= Subject key identifier: 20:09:96:5F:FA:77:41:A7:75:CD:D0:AD:94:79:F9:B1:CB:84:CB:1A Authority key identifier: 55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 Certificate issuer: /CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft Manifest number: 012F Signing time: Fri 05 Sep 2025 04:59:41 +0000 Manifest this update: Fri 05 Sep 2025 04:59:41 +0000 Manifest next update: Fri 12 Sep 2025 04:59:41 +0000 Files and hashes: 1: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl (hash: Uds9cPfubESqprguSn6GCCF9P2Rxvjcru3AGdbbi864=) 2: FF1C0B44C0D411EEB8303680C4F9AE02.roa (hash: UVR5eOC5r72TP3k3BVK80L1LVMa+jcaIoA99zt0isl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 04:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912404E, serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Validity Not Before: Sep 5 04:59:41 2025 GMT Not After : Sep 12 04:59:41 2025 GMT Subject: CN=68ba6e3d-4914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:30:37:9f:89:54:44:7b:fb:dd:f2:32:49:d1: 8f:5f:c1:1d:3a:90:a4:56:c4:7c:f6:0f:71:c4:c4: 18:e0:5d:b7:13:55:e3:22:4d:df:98:0b:cf:92:6e: 89:90:fc:06:7e:39:43:37:b0:f0:c9:ec:46:ee:fe: e3:84:30:40:2d:1f:3c:f4:6e:5a:14:e5:e4:31:7e: 68:a1:83:d0:bb:b2:de:ad:90:e3:b4:35:88:3d:5e: 2a:b2:d3:ef:b4:20:da:a7:23:b1:cd:8f:58:27:1c: 83:f6:4a:de:26:0e:51:c0:6a:23:67:36:6c:50:43: 27:3a:e8:cf:ee:dc:2f:f9:63:57:3c:5e:3f:79:a0: 98:bc:92:5a:5b:18:f8:38:69:a3:dd:e8:7f:a7:ad: ef:f0:bf:38:10:da:82:76:32:23:cb:98:e0:0d:5a: a8:a9:18:a5:0f:65:0c:6e:2b:0e:ab:8b:34:25:4b: 14:65:d7:66:3b:c7:f8:fb:ea:44:7c:f1:86:ba:eb: c9:60:38:f8:f1:48:c3:bf:7a:3a:c5:ea:e6:c5:e5: 8f:b2:75:9c:b1:06:93:31:5a:3c:a3:54:09:1e:0a: ca:80:cb:e1:4c:55:a9:1b:ba:34:74:50:4b:81:4a: 32:51:6a:c2:d7:25:66:5a:63:29:9c:41:63:da:5f: c0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:09:96:5F:FA:77:41:A7:75:CD:D0:AD:94:79:F9:B1:CB:84:CB:1A X509v3 Authority Key Identifier: keyid:55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:c9:06:49:ea:a6:a3:b6:92:5e:68:de:60:1a:72:2c:d9:9c: 1c:4c:13:93:4d:4f:9b:e6:60:5a:2d:fe:98:66:ec:8c:42:15: 63:1e:79:95:d3:1c:ae:32:5a:a7:df:b9:24:b1:f1:e8:08:ae: 81:7d:2d:c5:a5:63:92:dc:dc:ac:fb:1f:05:99:a9:9d:84:1b: d3:70:15:2f:73:42:35:b3:e1:25:87:d4:77:33:d8:b7:12:9a: 57:cf:25:26:12:20:9e:a9:cc:e5:77:07:4e:3a:43:4a:d6:e8: 95:bb:78:3c:08:52:fe:c3:c8:00:0b:c9:57:49:09:0e:b0:c8: 29:d6:3b:81:3f:8a:6d:76:f9:92:04:b2:0a:41:74:22:e0:4b: b2:b9:90:87:cc:03:1d:45:7f:6c:27:04:eb:66:50:4f:2c:47: 52:2c:4e:0d:e1:4b:af:7f:9e:a1:58:9c:12:ff:35:53:11:e1: 9a:ed:73:c2:48:04:8f:e3:af:87:4a:bd:c8:e1:4b:82:fa:94: 63:15:ae:3f:e4:e3:ad:ae:25:07:25:60:61:13:2e:1c:94:4e: de:8c:af:ea:dd:56:5a:be:ba:51:1d:a8:2d:e5:5c:71:5a:48: e4:61:7a:1e:61:46:ae:d7:4c:57:38:15:3c:04:ce:fa:a6:4d: e6:10:6a:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQwNEUxMTAvBgNVBAUTKDU1MzkwRjNGNkIzQjMwRUQ0QTlDNkZCOUFEODI5N0I4 RUY5OTA2RTAwHhcNMjUwOTA1MDQ1OTQxWhcNMjUwOTEyMDQ1OTQxWjAYMRYwFAYD VQQDEw02OGJhNmUzZC00OTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zA3n4lURHv73fIySdGPX8EdOpCkVsR89g9xxMQY4F23E1XjIk3fmAvPkm6J kPwGfjlDN7DwyexG7v7jhDBALR889G5aFOXkMX5ooYPQu7LerZDjtDWIPV4qstPv tCDapyOxzY9YJxyD9kreJg5RwGojZzZsUEMnOujP7twv+WNXPF4/eaCYvJJaWxj4 OGmj3eh/p63v8L84ENqCdjIjy5jgDVqoqRilD2UMbisOq4s0JUsUZddmO8f4++pE fPGGuuvJYDj48UjDv3o6xermxeWPsnWcsQaTMVo8o1QJHgrKgMvhTFWpG7o0dFBL gUoyUWrC1yVmWmMpnEFj2l/AawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAJll/6 d0Gndc3QrZR5+bHLhMsaMB8GA1UdIwQYMBaAFFU5Dz9rOzDtSpxvua2Cl7jvmQbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDA0RS80OURGNjUzRUJG NDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01PMUtuRy01cllLWHVPLVpC dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUa1BQMnM3TU8xS25HLTVyWUtYdU8tWkJ1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDA0RS80OURGNjUzRUJGNDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01P MUtuRy01cllLWHVPLVpCdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGyQZJ6qajtpJeaN5gGnIs2ZwcTBOTTU+b5mBaLf6YZuyMQhVjHnmV 0xyuMlqn37kksfHoCK6BfS3FpWOS3Nys+x8FmamdhBvTcBUvc0I1s+Elh9R3M9i3 EppXzyUmEiCeqczldwdOOkNK1uiVu3g8CFL+w8gAC8lXSQkOsMgp1juBP4ptdvmS BLIKQXQi4EuyuZCHzAMdRX9sJwTrZlBPLEdSLE4N4Uuvf56hWJwS/zVTEeGa7XPC SASP46+HSr3I4UuC+pRjFa4/5OOtriUHJWBhEy4clE7ejK/q3VZavrpRHagt5Vxx WkjkYXoeYUau10xXOBU8BM76pk3mEGr/ -----END CERTIFICATE-----Generated at Sat Sep 6 15:30:49 2025 by rpki-client