$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft File: VCuU2GJc9xGWT9E3QSldJ616kAQ.mft (raw, json) Hash identifier: y0Z2WflI7B8CPxO2zFWBf23IWV419T9q9A5Tn/Kc4Ws= Subject key identifier: 7F:1E:01:3E:01:42:69:FF:5F:6F:34:13:A0:63:DF:87:FF:EE:FC:01 Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 Certificate issuer: /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft Manifest number: 0205 Signing time: Sun 07 Sep 2025 03:23:00 +0000 Manifest this update: Sun 07 Sep 2025 03:22:59 +0000 Manifest next update: Sun 14 Sep 2025 03:22:59 +0000 Files and hashes: 1: VCuU2GJc9xGWT9E3QSldJ616kAQ.crl (hash: AqmqPFokpQRNCTH9VtwVHA1Q2uLrD3/S428TZvvsa4Q=) 2: 3352C1BAECFC11EFA398671BC4F9AE02.roa (hash: Im9wfZuP6zDy1h0Hl9Jq0NXIaM8u/vuOASHLbchH8jE=) 3: 020607A2498711EFBB260663C4F9AE02.roa (hash: T6rwUDI540K7kNvAic9olkLe7ckJW9yi5Gt2J/Ejnw0=) 4: D13FCAEAA62E11EFBC284C42C4F9AE02.roa (hash: K8NnxbaCBJETQFsMtKq3Bzg51wGMgmnozQ6OqtNXVto=) 5: 05F505961AA311F0A475D464C4F9AE02.roa (hash: DJ6ceD+nzuCFrSpyZtlueLHrerXM29TFRnLIJO8v0Cs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 03:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Validity Not Before: Sep 7 03:22:59 2025 GMT Not After : Sep 14 03:22:59 2025 GMT Subject: CN=68bcfa93-e4b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3d:e8:ee:14:a4:63:62:16:d3:d8:77:2c:a3: b8:02:5b:68:78:d1:ae:d3:ad:6b:e1:f0:22:10:84: 75:ed:55:f4:02:05:e4:d1:d4:bb:eb:0d:54:0e:86: 91:c4:ff:d9:8c:f1:57:1f:12:f0:f6:2c:ca:75:7b: fd:0d:9c:c4:7e:47:7f:40:0e:7d:bf:b3:e1:4b:5e: 6d:b1:7e:a5:cf:ab:f5:34:9d:4d:fc:ba:1d:60:5e: 94:11:6d:65:c7:46:ca:34:06:fe:b0:8c:4f:b4:d8: 09:f4:cd:b4:8f:c8:e2:d3:28:b8:2b:73:44:60:ba: 5e:f8:b9:2f:95:28:89:ce:6f:dd:0f:3c:3d:1e:fa: 36:f9:8a:43:67:c6:3d:f2:c6:c1:f2:10:9b:e4:c1: 79:06:73:37:41:8d:e5:58:2f:d6:0f:c0:75:ea:76: 17:ee:ff:55:3f:68:38:fb:21:61:4c:b2:cb:98:69: 0d:41:e6:b1:7d:9a:cc:f9:04:81:71:74:92:2c:a7: f7:f5:67:7a:7a:0f:a8:34:67:b6:21:b9:f5:53:ce: 40:7a:9d:45:2c:3f:0f:c4:89:f4:97:15:23:22:32: d7:91:73:0c:cf:eb:2b:cc:eb:7d:a5:e7:72:8a:89: 7e:15:14:09:51:19:bd:03:df:90:f4:fd:bf:7f:48: f3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:1E:01:3E:01:42:69:FF:5F:6F:34:13:A0:63:DF:87:FF:EE:FC:01 X509v3 Authority Key Identifier: keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:7d:50:38:5c:8f:61:d8:05:29:d2:4f:5e:c5:84:81:fe:20: 7c:03:8b:ab:f6:34:b1:44:77:7f:a3:06:5e:b4:2b:84:00:92: ce:40:33:95:c6:f4:b7:9a:29:d0:46:8e:b1:d4:c3:92:09:58: 5d:fc:dc:a1:42:cd:2e:0d:a1:fe:7d:85:b7:f1:cb:4f:74:40: 69:a2:dd:47:01:cb:b5:c4:2b:37:82:a7:d9:80:46:1f:42:6e: 29:71:57:b5:4d:ee:3e:bb:99:38:38:be:d7:82:93:7d:ae:69: 0d:a7:71:1e:80:33:04:f6:ac:0f:6e:e9:b7:33:da:e1:52:c1: cb:2e:4f:f3:e2:00:ae:f6:70:a3:6d:61:c8:a2:6e:41:24:00: 56:4c:2f:f1:ca:67:af:57:e6:6d:ac:02:42:a1:fc:7b:f4:61: d1:e0:0c:9e:fb:60:90:c7:4f:d4:82:c6:37:90:af:a7:4e:e5: a1:ee:f6:ed:60:68:cb:68:b9:7e:8b:91:e6:48:d4:27:3b:c4: 01:c4:1f:8b:dc:a2:36:a5:09:5f:14:5d:b9:47:81:75:35:1f: f2:a0:ee:1a:ee:a3:99:ff:a3:0c:6f:cd:db:8b:e1:4a:31:68: cb:75:3a:02:66:b9:e6:b5:34:3c:c6:76:56:87:36:43:01:03: a8:2c:96:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDU0MkI5NEQ4NjI1Q0Y3MTE5NjRGRDEzNzQxMjk1RDI3 QUQ3QTkwMDQwHhcNMjUwOTA3MDMyMjU5WhcNMjUwOTE0MDMyMjU5WjAYMRYwFAYD VQQDEw02OGJjZmE5My1lNGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5T3o7hSkY2IW09h3LKO4AltoeNGu061r4fAiEIR17VX0AgXk0dS76w1UDoaR xP/ZjPFXHxLw9izKdXv9DZzEfkd/QA59v7PhS15tsX6lz6v1NJ1N/LodYF6UEW1l x0bKNAb+sIxPtNgJ9M20j8ji0yi4K3NEYLpe+LkvlSiJzm/dDzw9Hvo2+YpDZ8Y9 8sbB8hCb5MF5BnM3QY3lWC/WD8B16nYX7v9VP2g4+yFhTLLLmGkNQeaxfZrM+QSB cXSSLKf39Wd6eg+oNGe2Ibn1U85Aep1FLD8PxIn0lxUjIjLXkXMMz+srzOt9pedy iol+FRQJURm9A9+Q9P2/f0jzAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8eAT4B Qmn/X280E6Bj34f/7vwBMB8GA1UdIwQYMBaAFFQrlNhiXPcRlk/RN0EpXSetepAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC8xNjFENEMwQUU0 Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4R1dUOUUzUVNsZEo2MTZr QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDdVUyR0pjOXhHV1Q5RTNRU2xkSjYxNmtBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC8xNjFENEMwQUU0Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4 R1dUOUUzUVNsZEo2MTZrQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsfVA4XI9h2AUp0k9exYSB/iB8A4ur9jSxRHd/owZetCuEAJLOQDOV xvS3minQRo6x1MOSCVhd/NyhQs0uDaH+fYW38ctPdEBpot1HAcu1xCs3gqfZgEYf Qm4pcVe1Te4+u5k4OL7XgpN9rmkNp3EegDME9qwPbum3M9rhUsHLLk/z4gCu9nCj bWHIom5BJABWTC/xymevV+ZtrAJCofx79GHR4Aye+2CQx0/UgsY3kK+nTuWh7vbt YGjLaLl+i5HmSNQnO8QBxB+L3KI2pQlfFF25R4F1NR/yoO4a7qOZ/6MMb83bi+FK MWjLdToCZrnmtTQ8xnZWhzZDAQOoLJaK -----END CERTIFICATE-----Generated at Mon Sep 8 08:46:24 2025 by rpki-client