$ rpki-client -vvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft File: VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json) Hash identifier: irxpZp0TYEER1bkyLlpUwN85kZbrHwqmJWCml8YAhC4= Subject key identifier: 58:6C:E5:A0:03:C8:98:A1:F8:9D:3D:B0:3B:5F:92:3B:B5:D0:7B:AA Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 Certificate issuer: /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft Manifest number: B1 Signing time: Fri 05 Sep 2025 06:32:27 +0000 Manifest this update: Fri 05 Sep 2025 06:32:27 +0000 Manifest next update: Fri 12 Sep 2025 06:32:27 +0000 Files and hashes: 1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: 6q1psTdq4/+rQKTpHB9mM9NTkUgDlR1hl14xRfM3mec=) 2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: APURPczfV1ii5Oz3jn5uLGx4X2/aeoAU9n96jwy9b0A=) 3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: utVxhZKF0BG0gKmfkjY5U3UQKAW2XCaaTxVRnaQMDbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91276FA, serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582 Validity Not Before: Sep 5 06:32:27 2025 GMT Not After : Sep 12 06:32:27 2025 GMT Subject: CN=68ba83fb-5aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:c9:56:01:39:a5:26:9a:dd:8d:cd:d2:02:0c: 07:22:f8:6c:28:f1:97:1e:52:da:41:25:23:6e:76: 07:c6:4d:63:15:96:d6:5e:56:c6:5b:58:26:39:78: 0e:a0:de:27:56:f7:5f:51:fd:55:02:53:b9:50:d3: de:b9:b3:5f:a6:db:65:08:23:3d:0a:1f:9b:66:bd: ff:9d:33:08:5d:25:47:af:14:4b:1b:94:5f:53:8c: a7:1b:e8:88:2c:6f:e1:b4:b3:a3:2e:b2:c4:04:e3: c5:e2:e2:28:c8:26:f5:85:9c:f4:66:90:e4:a0:c7: a2:e5:45:2d:99:92:76:e1:29:d2:36:e0:86:69:1f: 27:f4:d2:7e:46:c0:63:d6:a4:0b:7b:08:a0:1b:3b: 45:78:ef:96:17:c9:47:2c:f4:0a:f3:da:de:63:4f: d7:4e:38:c8:26:6a:83:9e:15:67:99:0b:d7:33:67: 42:2a:a3:e5:c7:55:ce:c4:36:a4:67:80:93:df:2c: 8d:10:8d:e0:56:0b:0d:b5:51:f4:9a:75:51:a8:ad: 11:86:c0:31:74:a1:44:2c:9b:59:8c:85:84:8a:dd: 0b:b5:a0:2e:78:38:15:0e:83:15:0b:30:f1:57:f9: c1:9a:65:30:4d:a7:9e:b8:92:11:26:ac:cf:60:eb: 25:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6C:E5:A0:03:C8:98:A1:F8:9D:3D:B0:3B:5F:92:3B:B5:D0:7B:AA X509v3 Authority Key Identifier: keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:b5:ef:64:cc:9a:32:18:41:e9:70:71:59:d9:99:db:a0:c1: c7:d6:52:7f:8f:ea:69:a7:37:9b:6f:c3:a0:eb:bb:28:22:18: ce:70:29:c3:85:80:76:04:26:48:1d:25:f7:bf:7c:1f:d5:6f: f5:95:ae:09:c4:10:ec:8e:6a:14:d3:b1:61:5b:e6:2b:f6:54: 0a:8f:1d:2a:61:11:4c:c5:15:a1:db:fe:9c:a5:43:3b:1d:72: 8b:71:e3:71:03:34:bd:7d:b8:04:27:ce:87:99:00:ad:16:84: 89:24:28:44:ce:0a:72:6f:5f:74:3d:39:a1:fe:99:5c:5f:6f: 4c:77:93:ce:a9:f6:bf:14:da:40:c9:68:e6:32:9a:ed:10:9e: d5:a9:97:c1:10:d1:d0:98:f8:7b:ff:4a:24:0c:cb:8c:21:42: 6b:f6:fb:a2:41:c5:79:02:62:a7:86:75:15:fa:84:92:29:8e: be:4c:eb:86:1e:52:af:a9:4c:6d:e2:37:60:01:5a:2b:88:e9: fd:87:c6:c4:64:16:b7:35:1a:22:8f:f7:fa:8a:54:ff:cf:b1: ea:ce:ab:bb:9e:e0:11:db:c0:eb:5b:26:85:40:e1:a2:79:68: 36:0b:88:4f:a6:41:1d:de:1e:3d:4a:08:2b:5c:0d:f4:99:a0: 79:a4:e2:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2RkExMTAvBgNVBAUTKDU1MzNBN0M1N0JGNERCMUU1MzhGOUU3N0UwQjQ4NjhC OEY5MEM1ODIwHhcNMjUwOTA1MDYzMjI3WhcNMjUwOTEyMDYzMjI3WjAYMRYwFAYD VQQDEw02OGJhODNmYi01YWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/slWATmlJprdjc3SAgwHIvhsKPGXHlLaQSUjbnYHxk1jFZbWXlbGW1gmOXgO oN4nVvdfUf1VAlO5UNPeubNfpttlCCM9Ch+bZr3/nTMIXSVHrxRLG5RfU4ynG+iI LG/htLOjLrLEBOPF4uIoyCb1hZz0ZpDkoMei5UUtmZJ24SnSNuCGaR8n9NJ+RsBj 1qQLewigGztFeO+WF8lHLPQK89reY0/XTjjIJmqDnhVnmQvXM2dCKqPlx1XOxDak Z4CT3yyNEI3gVgsNtVH0mnVRqK0RhsAxdKFELJtZjIWEit0LtaAueDgVDoMVCzDx V/nBmmUwTaeeuJIRJqzPYOslMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhs5aAD yJih+J09sDtfkju10HuqMB8GA1UdIwQYMBaAFFUzp8V79NseU4+ed+C0houPkMWC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzZGQS85QzUyQTdFODg0 QzkxMUVGQjU0RDBDNDlDNEY5QUUwMi9WVE9ueFh2MDJ4NVRqNTUzNExTR2k0LVF4 WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUT254WHYwMng1VGo1NTM0TFNHaTQtUXhZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzZGQS85QzUyQTdFODg0QzkxMUVGQjU0RDBDNDlDNEY5QUUwMi9WVE9ueFh2MDJ4 NVRqNTUzNExTR2k0LVF4WUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxte9kzJoyGEHpcHFZ2ZnboMHH1lJ/j+pppzebb8Og67soIhjOcCnD hYB2BCZIHSX3v3wf1W/1la4JxBDsjmoU07FhW+Yr9lQKjx0qYRFMxRWh2/6cpUM7 HXKLceNxAzS9fbgEJ86HmQCtFoSJJChEzgpyb190PTmh/plcX29Md5POqfa/FNpA yWjmMprtEJ7VqZfBENHQmPh7/0okDMuMIUJr9vuiQcV5AmKnhnUV+oSSKY6+TOuG HlKvqUxt4jdgAVoriOn9h8bEZBa3NRoij/f6ilT/z7Hqzqu7nuAR28DrWyaFQOGi eWg2C4hPpkEd3h49SggrXA30maB5pOIj -----END CERTIFICATE-----Generated at Sat Sep 6 17:19:44 2025 by rpki-client