$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft File: VQWhoodm2zGCLEYVhuaO3fKnk_o.mft (raw, json) Hash identifier: 8d39UDzTqp906AV9qX4MfKZ60cHpr4vHt8zLCzMR0Ss= Subject key identifier: E2:E8:E5:D8:89:B4:98:F0:20:50:A1:12:78:20:88:EE:DD:6D:C1:63 Authority key identifier: 55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA Certificate issuer: /CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft Manifest number: C2 Signing time: Tue 09 Sep 2025 05:56:29 +0000 Manifest this update: Tue 09 Sep 2025 05:56:29 +0000 Manifest next update: Tue 16 Sep 2025 05:56:29 +0000 Files and hashes: 1: VQWhoodm2zGCLEYVhuaO3fKnk_o.crl (hash: 4x/b2ABudjhzzdai2rd0jDAyISka/s+0e1cEmiKqj14=) 2: 95737270643711EFBCD1344AC4F9AE02.roa (hash: 0MmgAOsynAk/z75v6F6/3mM/hRV1GTY1/gUKJqE0crQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91850AD, serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA Validity Not Before: Sep 9 05:56:29 2025 GMT Not After : Sep 16 05:56:29 2025 GMT Subject: CN=68bfc18d-1347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9f:26:ca:22:d1:37:fb:b5:69:87:4b:27:98: f6:72:c6:d6:3a:99:5e:b1:95:11:ed:16:9e:13:39: e9:60:8d:ea:4d:04:ec:19:6d:78:f6:49:d7:5a:aa: 11:eb:54:90:41:97:ea:89:da:28:3e:ce:e3:a1:38: c2:3c:da:6e:95:5a:dc:39:56:5a:78:e2:5e:55:59: 5f:06:a2:5c:23:70:82:be:95:b0:e4:0d:aa:70:f7: 3b:fb:36:bd:11:04:dc:3f:75:7c:54:4e:d6:fe:11: f1:3a:67:3e:79:39:0e:c4:06:0b:d1:c3:00:8d:67: b8:3e:a4:ef:fc:28:3a:d4:fa:87:11:6e:22:07:1b: bc:7e:04:9b:db:23:5a:4e:09:03:ec:c4:7b:f2:2a: c4:bf:38:5d:af:89:c1:f5:b4:33:24:6d:4e:f0:2c: 6f:9a:88:47:ec:d3:ce:c6:e1:71:ee:9e:84:23:de: f4:e4:8a:a7:0b:97:27:a3:46:80:6d:12:b3:6d:61: ae:e2:17:49:92:15:d9:ef:9b:c6:58:9a:3a:ea:46: b0:02:30:5a:6d:6b:82:62:02:f9:7d:4f:76:00:26: f3:a6:ba:84:28:3f:cd:f6:99:7c:3f:c8:1c:6c:6e: 52:7c:84:53:d4:1a:f1:5b:1d:28:15:fb:dc:0a:da: ee:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E8:E5:D8:89:B4:98:F0:20:50:A1:12:78:20:88:EE:DD:6D:C1:63 X509v3 Authority Key Identifier: keyid:55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:0b:c4:cc:d1:b3:90:b9:4a:9e:d0:f6:e5:ac:fd:33:08:3b: d7:be:b1:88:dd:f1:8b:98:c3:94:68:7b:3e:d8:04:5d:57:a3: cb:1d:bf:55:d2:13:8a:88:d1:15:26:76:04:94:19:4f:cd:e6: 68:67:cc:26:10:92:38:d2:c6:29:00:79:55:3b:47:a5:49:a3: 7f:f7:7b:8b:95:1c:10:26:24:a7:04:02:1f:ce:2c:58:79:b1: 0e:43:ef:e7:28:df:bb:ca:06:5c:a7:ae:df:05:95:62:d9:50: c0:64:ce:6a:45:ac:93:ea:ae:f7:5d:f0:c5:4a:89:ac:ae:4a: 47:60:e4:ad:e6:b3:85:69:4e:e5:a3:a0:4b:49:af:54:64:c1: 8e:e9:ab:14:ab:c7:69:e8:e4:d6:e8:42:3c:5c:bf:ec:37:ab: 74:73:49:5a:ff:6c:4e:bd:90:b6:ca:66:46:d8:1a:f0:7b:25: b3:b8:4f:63:cb:6a:67:22:70:23:b1:a9:9a:74:95:77:11:8c: 99:a3:76:d4:f2:2d:96:e5:9f:e5:b3:8e:81:3e:f0:0d:b2:4f: d1:61:b3:93:b4:c9:a6:39:ef:e9:f7:d7:7b:67:df:fe:23:fe: be:a5:a9:18:b2:13:00:fe:7b:9f:84:fc:4e:dc:14:62:29:2e: 1c:13:5f:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUwQUQxMTAvBgNVBAUTKDU1MDVBMUEyODc2NkRCMzE4MjJDNDYxNTg2RTY4RURE RjJBNzkzRkEwHhcNMjUwOTA5MDU1NjI5WhcNMjUwOTE2MDU1NjI5WjAYMRYwFAYD VQQDEw02OGJmYzE4ZC0xMzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJ8myiLRN/u1aYdLJ5j2csbWOplesZUR7RaeEznpYI3qTQTsGW149knXWqoR 61SQQZfqidooPs7joTjCPNpulVrcOVZaeOJeVVlfBqJcI3CCvpWw5A2qcPc7+za9 EQTcP3V8VE7W/hHxOmc+eTkOxAYL0cMAjWe4PqTv/Cg61PqHEW4iBxu8fgSb2yNa TgkD7MR78irEvzhdr4nB9bQzJG1O8CxvmohH7NPOxuFx7p6EI9705IqnC5cno0aA bRKzbWGu4hdJkhXZ75vGWJo66kawAjBabWuCYgL5fU92ACbzprqEKD/N9pl8P8gc bG5SfIRT1BrxWx0oFfvcCtru8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLo5diJ tJjwIFChEnggiO7dbcFjMB8GA1UdIwQYMBaAFFUFoaKHZtsxgixGFYbmjt3yp5P6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTBBRC82QTBBQzgwMjY0 MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9WUVdob29kbTJ6R0NMRVlWaHVhTzNmS25r X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZRV2hvb2RtMnpHQ0xFWVZodWFPM2ZLbmtfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTBBRC82QTBBQzgwMjY0MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9WUVdob29kbTJ6 R0NMRVlWaHVhTzNmS25rX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoC8TM0bOQuUqe0PblrP0zCDvXvrGI3fGLmMOUaHs+2ARdV6PLHb9V 0hOKiNEVJnYElBlPzeZoZ8wmEJI40sYpAHlVO0elSaN/93uLlRwQJiSnBAIfzixY ebEOQ+/nKN+7ygZcp67fBZVi2VDAZM5qRayT6q73XfDFSomsrkpHYOSt5rOFaU7l o6BLSa9UZMGO6asUq8dp6OTW6EI8XL/sN6t0c0la/2xOvZC2ymZG2BrweyWzuE9j y2pnInAjsamadJV3EYyZo3bU8i2W5Z/ls46BPvANsk/RYbOTtMmmOe/p99d7Z9/+ I/6+pakYshMA/nufhPxO3BRiKS4cE1// -----END CERTIFICATE-----Generated at Tue Sep 9 16:37:23 2025 by rpki-client