$ rpki-client -vvf rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft File: VKJNxo3yZA57s_8PNreO-IQAww8.mft (raw, json) Hash identifier: GnlPB6MmglaYkMxn/EGi7QveVLo2pq3pAM0eoL3nMzk= Subject key identifier: 5B:81:66:D5:9A:ED:1B:06:2D:FB:E9:C0:D6:7B:50:3B:26:F3:B9:5D Authority key identifier: 54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F Certificate issuer: /CN=A91362EB/serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft Manifest number: 20 Signing time: Fri 05 Sep 2025 08:21:20 +0000 Manifest this update: Fri 05 Sep 2025 08:21:19 +0000 Manifest next update: Fri 12 Sep 2025 08:21:19 +0000 Files and hashes: 1: VKJNxo3yZA57s_8PNreO-IQAww8.crl (hash: MtWCnW21aKMpESyajgBeXbvIDAK4+ZE/UqT2Ao0l1J0=) 2: 0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa (hash: /uTCkM+7T3MX4CR0F7TNTBgsSs4yKxKjHNmhUVycHRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91362EB, serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F Validity Not Before: Sep 5 08:21:19 2025 GMT Not After : Sep 12 08:21:19 2025 GMT Subject: CN=68ba9d80-eb70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4e:48:6b:2b:2f:30:e2:7d:82:4f:04:9d:ac: 56:24:3d:5f:dd:f0:4e:b6:c2:78:86:b5:cd:78:30: fb:97:8a:61:51:19:4d:37:8f:11:4e:e7:2d:1e:cb: 22:15:ff:e3:91:43:f0:66:af:e1:5a:90:09:85:09: ce:43:c2:97:9f:81:d1:87:a4:24:6c:22:fb:b5:f1: bd:d6:82:2c:56:cf:16:c2:93:77:c7:e3:33:90:b1: fa:f4:b5:51:e9:f3:df:96:00:c6:d1:2d:7a:da:de: 47:c6:d4:4f:c3:bb:6c:b8:65:4c:03:2d:06:96:e3: a1:f0:92:f0:7e:00:e2:02:a9:0b:17:45:ec:81:f0: 40:db:7a:cc:b6:ff:b2:17:5a:e6:d6:d1:d6:cb:fe: 79:aa:c5:9a:c2:9f:aa:ea:56:fb:e3:6f:1f:3f:8f: aa:c7:f8:0a:0f:cc:88:86:bc:79:15:90:4b:e9:26: cd:fb:a8:a8:f2:4c:4c:52:0e:36:2b:de:7d:d9:49: a7:01:a5:4e:47:54:6a:3f:e0:e9:19:a2:9f:a0:84: 3e:c8:74:bb:d3:f1:a6:e8:21:4b:62:cb:da:ef:5c: 76:d1:60:dd:76:5c:27:47:3f:ec:0d:7e:34:64:0f: 4c:b2:a7:98:01:1e:9c:17:f5:d3:b4:97:d8:15:fa: be:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:81:66:D5:9A:ED:1B:06:2D:FB:E9:C0:D6:7B:50:3B:26:F3:B9:5D X509v3 Authority Key Identifier: keyid:54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:0e:65:16:fb:77:a0:22:c8:1d:b2:3d:d2:68:35:bd:19:2e: 7e:ea:4b:37:de:97:94:34:08:85:3d:c1:f4:9c:4b:40:f2:95: 27:a9:f2:91:e5:d0:75:78:5f:7c:5a:aa:7e:b5:9d:77:15:8f: 6b:73:ed:37:28:64:fa:c9:06:c3:08:63:10:1e:72:39:ea:0e: 09:cb:0f:c3:9e:aa:a1:66:58:ee:d2:8c:aa:0e:82:41:c2:64: 39:07:a4:f6:0c:10:c8:27:9b:41:53:b4:95:ba:d2:3e:00:97: d4:f0:78:ca:aa:4a:7f:44:ac:78:05:b4:bb:27:ad:09:11:e8: f6:38:b4:a4:c2:6d:cb:7f:9e:58:21:b4:ab:e9:29:11:8c:ea: b4:18:56:fc:0d:15:41:64:c3:ef:e4:ff:59:2b:3c:ab:5c:50: 5d:98:0c:bd:bf:c6:b2:b0:c0:8e:25:cb:b1:86:56:5d:c7:e2: a6:d0:5f:3c:e9:eb:16:6b:7d:c5:8f:11:ab:c6:7b:cc:9e:29: 85:0d:e4:58:c1:1b:2e:a6:39:12:93:0c:c9:57:cb:7d:d7:1b: c8:1e:5b:dc:02:40:b0:99:9b:cd:5b:d9:82:58:cf:aa:fb:d0: 3b:d9:4b:ae:44:6b:1b:6a:d3:00:f9:51:00:9d:c1:0a:3b:59: 0d:26:35:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjJFQjExMC8GA1UEBRMoNTRBMjREQzY4REYyNjQwRTdCQjNGRjBGMzZCNzhFRjg4 NDAwQzMwRjAeFw0yNTA5MDUwODIxMTlaFw0yNTA5MTIwODIxMTlaMBgxFjAUBgNV BAMTDTY4YmE5ZDgwLWViNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQTkhrKy8w4n2CTwSdrFYkPV/d8E62wniGtc14MPuXimFRGU03jxFO5y0eyyIV /+ORQ/Bmr+FakAmFCc5DwpefgdGHpCRsIvu18b3WgixWzxbCk3fH4zOQsfr0tVHp 89+WAMbRLXra3kfG1E/Du2y4ZUwDLQaW46HwkvB+AOICqQsXReyB8EDbesy2/7IX WubW0dbL/nmqxZrCn6rqVvvjbx8/j6rH+AoPzIiGvHkVkEvpJs37qKjyTExSDjYr 3n3ZSacBpU5HVGo/4OkZop+ghD7IdLvT8aboIUtiy9rvXHbRYN12XCdHP+wNfjRk D0yyp5gBHpwX9dO0l9gV+r5rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUW4Fm1Zrt GwYt++nA1ntQOybzuV0wHwYDVR0jBBgwFoAUVKJNxo3yZA57s/8PNreO+IQAww8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MkVCL0RGNTQ1Q0M4NUM5 OTExRjBCNEJFMUUyMUM0RjlBRTAyL1ZLSk54bzN5WkE1N3NfOFBOcmVPLUlRQXd3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVktKTnhvM3laQTU3c184UE5yZU8tSVFBd3c4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 MkVCL0RGNTQ1Q0M4NUM5OTExRjBCNEJFMUUyMUM0RjlBRTAyL1ZLSk54bzN5WkE1 N3NfOFBOcmVPLUlRQXd3OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACQOZRb7d6AiyB2yPdJoNb0ZLn7qSzfel5Q0CIU9wfScS0DylSep8pHl 0HV4X3xaqn61nXcVj2tz7TcoZPrJBsMIYxAecjnqDgnLD8OeqqFmWO7SjKoOgkHC ZDkHpPYMEMgnm0FTtJW60j4Al9TweMqqSn9ErHgFtLsnrQkR6PY4tKTCbct/nlgh tKvpKRGM6rQYVvwNFUFkw+/k/1krPKtcUF2YDL2/xrKwwI4ly7GGVl3H4qbQXzzp 6xZrfcWPEavGe8yeKYUN5FjBGy6mORKTDMlXy33XG8geW9wCQLCZm81b2YJYz6r7 0DvZS65Eaxtq0wD5UQCdwQo7WQ0mNe4= -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:14 2025 by rpki-client