$ rpki-client -vvf rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft File: VRT85Dhj9Rga80k4LThBTpYPCW8.mft (raw, json) Hash identifier: HgdUjrv7dfMcTcaczJLai3/BBV5Q7aKPbYBG7C9TCEQ= Subject key identifier: E2:3C:88:B3:C8:38:6D:4E:F0:50:E7:37:38:DA:06:C2:B7:27:B1:D2 Authority key identifier: 55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F Certificate issuer: /CN=A9195262/serialNumber=5514FCE43863F5181AF349382D38414E960F096F Certificate serial: 0918 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft Manifest number: 090F Signing time: Thu 18 Sep 2025 20:33:43 +0000 Manifest this update: Thu 18 Sep 2025 20:33:43 +0000 Manifest next update: Thu 25 Sep 2025 20:33:42 +0000 Files and hashes: 1: VRT85Dhj9Rga80k4LThBTpYPCW8.crl (hash: LL29Cs9iTJk0w1afCKFhxIEIXpFS0LEGg7plgcy42o0=) 2: DFC21CD8B1CF11EAA8732709C4F9AE02.roa (hash: fBbrGPpyBqHG5VjMBpwa+Y1+AP7kUm89FdDIYPNDwG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2328 (0x918) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195262, serialNumber=5514FCE43863F5181AF349382D38414E960F096F Validity Not Before: Sep 18 20:33:43 2025 GMT Not After : Sep 25 20:33:42 2025 GMT Subject: CN=68cc6ca7-d758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:86:88:f6:e3:85:39:a0:3f:c7:cb:09:ff:e3: 36:b2:e6:37:78:ea:a0:4e:dc:27:a6:2e:9a:27:46: e4:6e:11:53:2c:f1:50:36:21:e7:79:f9:4c:a5:b0: 6f:6c:9e:22:22:29:7a:cd:42:4e:19:f1:59:3f:4a: e4:1a:c7:9e:c3:1a:74:40:0b:00:6b:7b:10:5d:4f: 22:f8:53:ca:c2:17:69:2f:9b:d2:05:3e:00:ca:7e: e8:92:99:3d:52:94:74:32:91:41:49:00:fe:a4:92: ee:ae:49:76:cf:b8:05:23:0d:7f:0e:de:00:51:1c: c4:38:da:55:2f:4c:bc:4f:cc:34:32:c2:c8:e5:ab: 00:f1:9f:7e:79:4e:72:80:77:69:88:7a:f8:99:56: 81:c0:49:89:a8:06:7d:74:9f:26:aa:aa:72:9e:e1: 88:94:86:94:29:8f:cf:03:ab:a4:dc:d9:7b:54:8e: f5:44:2f:be:0f:05:70:2b:99:ec:96:27:ef:c7:04: 03:0c:66:f4:e4:a1:b2:bc:01:17:7d:c9:5b:67:ad: 4b:22:41:7c:da:00:ec:a8:82:2c:b0:16:1d:2e:fc: 0f:6c:a2:c2:e3:c1:91:30:48:98:cd:48:b9:fc:68: 03:1c:3c:9e:59:0b:a2:1a:f1:07:eb:73:99:09:f6: 85:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3C:88:B3:C8:38:6D:4E:F0:50:E7:37:38:DA:06:C2:B7:27:B1:D2 X509v3 Authority Key Identifier: keyid:55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:d5:f7:61:34:49:2d:ed:04:a8:c4:73:ce:58:e2:16:ec:58: 1d:a7:96:3c:e7:a7:2f:e4:f1:ad:d1:ef:21:b4:25:79:17:02: f2:ee:b8:93:8c:8e:06:92:66:92:2c:a1:f4:3c:28:e5:bc:80: d4:20:d5:82:03:77:a0:e2:0f:91:f0:11:a5:09:f4:71:ac:84: 38:e2:ab:3e:b8:cb:14:c0:81:3f:d3:a1:b9:78:64:a4:b9:e2: 37:a3:e8:6b:92:1e:c9:7c:31:1d:c5:80:9d:b6:a8:17:08:5d: 49:4b:87:df:33:26:ca:6b:d8:a9:7a:46:1e:17:15:cf:cd:23: 3b:a3:b4:73:ef:6a:3f:b9:bf:3f:88:f9:fc:de:93:6d:a6:4a: 11:0b:92:45:f8:3e:d3:40:a8:36:06:02:d2:9a:0b:87:a5:a7: e3:b8:c2:21:e9:0d:86:8f:9a:51:24:3b:9e:cb:3b:6b:50:f5: 56:82:2f:e0:88:3e:29:bd:ff:2d:a1:31:83:a2:ef:14:c7:0e: fa:85:50:d8:08:01:62:9f:6f:86:4f:a1:fe:c9:f4:18:22:04: 8b:5f:46:a0:a3:0d:91:83:6b:2f:e9:fc:ff:75:fe:f9:67:da: 0f:da:de:fd:68:65:53:8a:ae:a1:03:99:c8:40:c3:ea:60:d7: a9:76:95:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUyNjIxMTAvBgNVBAUTKDU1MTRGQ0U0Mzg2M0Y1MTgxQUYzNDkzODJEMzg0MTRF OTYwRjA5NkYwHhcNMjUwOTE4MjAzMzQzWhcNMjUwOTI1MjAzMzQyWjAYMRYwFAYD VQQDEw02OGNjNmNhNy1kNzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4aI9uOFOaA/x8sJ/+M2suY3eOqgTtwnpi6aJ0bkbhFTLPFQNiHneflMpbBv bJ4iIil6zUJOGfFZP0rkGseewxp0QAsAa3sQXU8i+FPKwhdpL5vSBT4Ayn7okpk9 UpR0MpFBSQD+pJLurkl2z7gFIw1/Dt4AURzEONpVL0y8T8w0MsLI5asA8Z9+eU5y gHdpiHr4mVaBwEmJqAZ9dJ8mqqpynuGIlIaUKY/PA6uk3Nl7VI71RC++DwVwK5ns lifvxwQDDGb05KGyvAEXfclbZ61LIkF82gDsqIIssBYdLvwPbKLC48GRMEiYzUi5 /GgDHDyeWQuiGvEH63OZCfaFtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOI8iLPI OG1O8FDnNzjaBsK3J7HSMB8GA1UdIwQYMBaAFFUU/OQ4Y/UYGvNJOC04QU6WDwlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTI2Mi9GN0E2RDU5Q0Iw RkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlSZ2E4MGs0TFRoQlRwWVBD VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSVDg1RGhqOVJnYTgwazRMVGhCVHBZUENXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTI2Mi9GN0E2RDU5Q0IwRkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlS Z2E4MGs0TFRoQlRwWVBDVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ1fdhNEkt7QSoxHPOWOIW7Fgdp5Y856cv5PGt0e8htCV5FwLy7riT jI4GkmaSLKH0PCjlvIDUINWCA3eg4g+R8BGlCfRxrIQ44qs+uMsUwIE/06G5eGSk ueI3o+hrkh7JfDEdxYCdtqgXCF1JS4ffMybKa9ipekYeFxXPzSM7o7Rz72o/ub8/ iPn83pNtpkoRC5JF+D7TQKg2BgLSmguHpafjuMIh6Q2Gj5pRJDueyztrUPVWgi/g iD4pvf8toTGDou8Uxw76hVDYCAFin2+GT6H+yfQYIgSLX0agow2Rg2sv6fz/df75 Z9oP2t79aGVTiq6hA5nIQMPqYNepdpUo -----END CERTIFICATE-----Generated at Fri Sep 19 12:52:45 2025 by rpki-client