$ rpki-client -vvf rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft File: VuOUrxtay4_0gsjGAmn-oOTEJ74.mft (raw, json) Hash identifier: u/MM2cOAt6dLtnjfV090BVsxK5vUequSQrRDQkfjgqI= Subject key identifier: 66:F9:58:B8:7D:4D:8C:DA:BF:AB:A4:48:BB:89:71:E2:B5:F2:26:52 Authority key identifier: 56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE Certificate issuer: /CN=A91A995E/serialNumber=56E394AF1B5ACB8FF482C8C60269FEA0E4C427BE Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft Manifest number: 49 Signing time: Mon 21 Jul 2025 07:34:47 +0000 Manifest this update: Mon 21 Jul 2025 07:34:46 +0000 Manifest next update: Mon 28 Jul 2025 07:34:46 +0000 Files and hashes: 1: VuOUrxtay4_0gsjGAmn-oOTEJ74.crl (hash: wVk9mIdV4vy6k7Vl5hIdo0Qd7Z7RRfiFnKfL0jMZ9ys=) 2: 3E41E766FA6411EFB8C12C50C4F9AE02.roa (hash: DEF0xkvw3q1tLXUQiXU0nzrLNhOtTutlaMvyugUJMpQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.crl rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A995E, serialNumber=56E394AF1B5ACB8FF482C8C60269FEA0E4C427BE Validity Not Before: Jul 21 07:34:46 2025 GMT Not After : Jul 28 07:34:46 2025 GMT Subject: CN=687ded97-9e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9c:bd:38:d0:82:c4:ad:81:ff:23:e6:4a:fb: a6:9e:77:ef:70:50:f9:43:54:be:d6:bc:fb:2d:d3: 5e:1b:00:a8:a7:85:cd:39:47:7f:d6:ab:f0:b0:fd: f6:6e:ad:46:f5:61:a2:91:b4:4f:d9:49:82:f7:86: 69:d2:78:3b:fb:ca:8c:c8:b2:ab:60:53:15:09:6f: 95:05:dc:7c:22:a6:38:1e:de:75:f3:c7:26:a8:04: f5:38:46:3a:3c:a0:bb:bd:06:17:d5:c4:61:95:d9: 33:b6:d0:b2:8d:bb:bc:35:6f:b7:1d:eb:3d:78:85: 46:10:d2:26:9a:34:5a:79:d5:19:ea:45:4a:d2:ea: 08:41:ea:b8:72:47:97:c4:87:f3:57:cb:21:41:a8: 12:47:0b:dd:4b:18:a4:bd:e5:fe:25:fb:65:cb:5e: 0d:97:66:ce:51:95:0c:eb:f9:39:b1:39:49:f5:d1: 54:90:0d:d4:d8:a5:e7:a5:c0:dd:6f:8c:45:74:dc: f8:af:85:5d:1d:83:ce:5f:88:41:19:fd:3b:68:91: 9a:3c:05:4b:b6:9c:c6:17:d3:cc:76:84:60:aa:70: 39:f0:fa:af:04:f4:23:8b:19:ee:9e:90:83:59:ed: 30:62:03:b1:b3:75:1d:9f:29:c7:22:83:ee:cb:31: 7c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F9:58:B8:7D:4D:8C:DA:BF:AB:A4:48:BB:89:71:E2:B5:F2:26:52 X509v3 Authority Key Identifier: keyid:56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:c2:9f:c3:70:69:aa:28:fd:22:a6:a1:f8:cb:77:18:f4:da: e7:e1:93:b7:e6:68:b2:4d:8a:1c:23:5b:47:2a:c5:6c:78:3f: 86:02:9b:be:30:4c:a9:77:7b:7d:49:3b:84:d7:ed:54:ef:94: 30:2c:a0:fb:da:d0:4b:cb:89:c1:a6:d5:98:25:e0:90:71:2c: 67:7f:7d:0c:4e:bf:e9:cb:29:2b:4c:de:f1:36:66:9f:7a:fb: 0a:47:fc:d5:00:40:d9:ae:aa:a4:22:c2:b6:21:13:fa:35:2d: ab:97:67:70:c0:05:58:a5:c2:ba:0a:d6:33:10:40:2a:fb:a1: 6c:c5:00:e0:93:07:e4:91:a2:c7:85:a3:9e:f6:80:ef:af:24: 4c:e9:0f:58:85:8d:aa:e6:3a:8f:1d:e9:e4:6f:0e:20:a1:44: 92:f2:45:15:ad:e0:08:d6:cb:fc:73:c2:00:d7:64:64:6c:e8: a7:43:71:3c:d2:82:7d:a2:91:74:47:84:0a:b1:70:9e:82:fe: fb:29:ba:ec:94:68:78:67:27:6c:1f:e6:12:00:95:3a:aa:f4: 33:47:ce:50:a3:65:b7:d4:96:dd:94:61:21:b1:3f:86:3b:59: 93:de:45:b1:8f:e7:d2:df:be:09:dc:78:8d:a8:51:b4:17:bc: b9:c4:5b:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTk1RTExMC8GA1UEBRMoNTZFMzk0QUYxQjVBQ0I4RkY0ODJDOEM2MDI2OUZFQTBF NEM0MjdCRTAeFw0yNTA3MjEwNzM0NDZaFw0yNTA3MjgwNzM0NDZaMBgxFjAUBgNV BAMTDTY4N2RlZDk3LTllMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsnL040ILErYH/I+ZK+6aed+9wUPlDVL7WvPst014bAKinhc05R3/Wq/Cw/fZu rUb1YaKRtE/ZSYL3hmnSeDv7yozIsqtgUxUJb5UF3Hwipjge3nXzxyaoBPU4Rjo8 oLu9BhfVxGGV2TO20LKNu7w1b7cd6z14hUYQ0iaaNFp51RnqRUrS6ghB6rhyR5fE h/NXyyFBqBJHC91LGKS95f4l+2XLXg2XZs5RlQzr+TmxOUn10VSQDdTYpeelwN1v jEV03PivhV0dg85fiEEZ/TtokZo8BUu2nMYX08x2hGCqcDnw+q8E9COLGe6ekINZ 7TBiA7GzdR2fKccig+7LMXxFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZvlYuH1N jNq/q6RIu4lx4rXyJlIwHwYDVR0jBBgwFoAUVuOUrxtay4/0gsjGAmn+oOTEJ74w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5OTVFLzJFN0FGMjk4RkE2 MjExRUY5NTU1NUMwRUM0RjlBRTAyL1Z1T1VyeHRheTRfMGdzakdBbW4tb09URUo3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVnVPVXJ4dGF5NF8wZ3NqR0Ftbi1vT1RFSjc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 OTVFLzJFN0FGMjk4RkE2MjExRUY5NTU1NUMwRUM0RjlBRTAyL1Z1T1VyeHRheTRf MGdzakdBbW4tb09URUo3NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACPCn8Nwaaoo/SKmofjLdxj02ufhk7fmaLJNihwjW0cqxWx4P4YCm74w TKl3e31JO4TX7VTvlDAsoPva0EvLicGm1Zgl4JBxLGd/fQxOv+nLKStM3vE2Zp96 +wpH/NUAQNmuqqQiwrYhE/o1LauXZ3DABVilwroK1jMQQCr7oWzFAOCTB+SRoseF o572gO+vJEzpD1iFjarmOo8d6eRvDiChRJLyRRWt4AjWy/xzwgDXZGRs6KdDcTzS gn2ikXRHhAqxcJ6C/vspuuyUaHhnJ2wf5hIAlTqq9DNHzlCjZbfUlt2UYSGxP4Y7 WZPeRbGP59LfvgnceI2oUbQXvLnEW1o= -----END CERTIFICATE-----Generated at Mon Jul 21 12:37:35 2025 by rpki-client