$ rpki-client -vvf rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft File: VuOUrxtay4_0gsjGAmn-oOTEJ74.mft (raw, json) Hash identifier: Dy0vgdUyADXUMHVlsFrKk4DZiug/PFL0HPsY4yLqTR0= Subject key identifier: 35:70:34:AC:F7:21:18:39:56:29:C6:7D:DE:BC:E7:82:9D:14:A8:FE Authority key identifier: 56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE Certificate issuer: /CN=A91A995E/serialNumber=56E394AF1B5ACB8FF482C8C60269FEA0E4C427BE Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft Manifest number: 61 Signing time: Fri 05 Sep 2025 07:34:48 +0000 Manifest this update: Fri 05 Sep 2025 07:34:47 +0000 Manifest next update: Fri 12 Sep 2025 07:34:47 +0000 Files and hashes: 1: VuOUrxtay4_0gsjGAmn-oOTEJ74.crl (hash: plHdGVdgOaO2hfm4Bx9GO/8P9fkMZ8Y/E2BmoEURYVE=) 2: 3E41E766FA6411EFB8C12C50C4F9AE02.roa (hash: DEF0xkvw3q1tLXUQiXU0nzrLNhOtTutlaMvyugUJMpQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.crl rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A995E, serialNumber=56E394AF1B5ACB8FF482C8C60269FEA0E4C427BE Validity Not Before: Sep 5 07:34:47 2025 GMT Not After : Sep 12 07:34:47 2025 GMT Subject: CN=68ba9298-f2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:54:a4:11:68:d6:72:aa:07:a6:15:4f:75:ca: ea:88:83:62:50:b5:e8:94:53:92:af:ed:a9:a6:b5: 2c:79:ae:6b:64:3b:76:af:2d:df:9c:77:8d:34:c6: 31:20:78:bd:1a:6c:59:7f:89:ce:d1:87:ae:9d:f8: 76:9c:01:43:a6:7f:16:41:b8:3c:b5:79:5a:4a:ad: 84:77:50:20:ad:8a:24:bf:d3:2e:0e:29:f8:cf:cf: fc:e9:ff:fa:30:8d:38:2c:a7:db:c9:54:0b:29:0c: 96:4e:63:61:ec:08:22:d9:c2:14:6f:ea:91:1b:10: ac:31:d1:1f:03:43:49:f5:7a:35:cd:1c:de:67:e4: 21:80:05:aa:7d:3c:8c:c6:07:5c:ed:12:ed:24:2f: b4:e2:2f:04:01:6d:7e:4b:58:5b:6c:3c:28:61:85: 2c:d0:c3:63:c3:c2:fb:49:ac:42:f1:a5:09:be:1d: 5e:17:4f:86:a2:7d:2d:a0:00:93:eb:d6:1f:ad:10: 33:b3:ee:af:c7:97:74:2d:e2:f6:3b:c9:6d:33:ae: f3:40:7a:ec:c8:63:7a:3f:be:2b:a1:2c:5e:d8:7a: d3:46:08:f4:9f:f2:35:3d:fb:95:26:d5:7a:84:4a: d5:b2:15:1d:39:60:88:91:f8:39:e9:7e:0a:61:4b: ca:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:70:34:AC:F7:21:18:39:56:29:C6:7D:DE:BC:E7:82:9D:14:A8:FE X509v3 Authority Key Identifier: keyid:56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:79:9f:8e:12:47:ae:43:8d:04:91:c6:7f:f3:f9:d4:e8:52: 9e:e7:86:af:04:b6:b1:d2:77:8a:6d:e0:a6:37:68:ac:72:22: ec:a6:13:61:ee:ad:40:f4:56:11:ea:85:97:50:eb:83:78:79: 57:55:46:d9:50:c0:40:1c:a1:47:7e:1d:8f:3f:9f:69:0f:2a: 3d:1e:b3:db:0a:88:95:ee:7a:aa:76:34:4b:1b:35:a8:bb:15: 61:0f:99:7a:73:c6:bf:dc:77:a2:db:dc:35:e9:61:35:67:54: 1a:14:4c:b1:57:64:32:4b:78:ca:3a:f1:83:6d:8c:9e:44:79: 8d:88:02:ea:e8:92:53:69:1f:ec:52:35:8c:72:8d:33:c4:34: f1:7e:93:55:e7:87:e6:f0:5e:28:6e:22:ef:64:86:6e:60:13: 2d:f1:42:ae:b3:e4:e2:f3:62:65:cc:d3:1f:02:55:df:0b:ee: 68:b0:21:a3:ec:a3:11:44:9c:7a:ea:d9:aa:a0:cf:d0:2c:07: de:ef:5c:2d:fb:18:8c:83:3b:58:72:77:aa:4c:ae:07:63:4a: 8a:da:41:0f:9f:a9:b1:d6:55:ad:a3:20:18:b0:20:0a:11:6d: cc:0c:37:ca:d1:67:6c:33:8d:31:ac:cf:17:32:64:a2:bc:01: 8b:30:58:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTk1RTExMC8GA1UEBRMoNTZFMzk0QUYxQjVBQ0I4RkY0ODJDOEM2MDI2OUZFQTBF NEM0MjdCRTAeFw0yNTA5MDUwNzM0NDdaFw0yNTA5MTIwNzM0NDdaMBgxFjAUBgNV BAMTDTY4YmE5Mjk4LWYyZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwVKQRaNZyqgemFU91yuqIg2JQteiUU5Kv7ammtSx5rmtkO3avLd+cd400xjEg eL0abFl/ic7Rh66d+HacAUOmfxZBuDy1eVpKrYR3UCCtiiS/0y4OKfjPz/zp//ow jTgsp9vJVAspDJZOY2HsCCLZwhRv6pEbEKwx0R8DQ0n1ejXNHN5n5CGABap9PIzG B1ztEu0kL7TiLwQBbX5LWFtsPChhhSzQw2PDwvtJrELxpQm+HV4XT4aifS2gAJPr 1h+tEDOz7q/Hl3Qt4vY7yW0zrvNAeuzIY3o/viuhLF7YetNGCPSf8jU9+5Um1XqE StWyFR05YIiR+DnpfgphS8qvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNXA0rPch GDlWKcZ93rzngp0UqP4wHwYDVR0jBBgwFoAUVuOUrxtay4/0gsjGAmn+oOTEJ74w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5OTVFLzJFN0FGMjk4RkE2 MjExRUY5NTU1NUMwRUM0RjlBRTAyL1Z1T1VyeHRheTRfMGdzakdBbW4tb09URUo3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVnVPVXJ4dGF5NF8wZ3NqR0Ftbi1vT1RFSjc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 OTVFLzJFN0FGMjk4RkE2MjExRUY5NTU1NUMwRUM0RjlBRTAyL1Z1T1VyeHRheTRf MGdzakdBbW4tb09URUo3NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGN5n44SR65DjQSRxn/z+dToUp7nhq8EtrHSd4pt4KY3aKxyIuymE2Hu rUD0VhHqhZdQ64N4eVdVRtlQwEAcoUd+HY8/n2kPKj0es9sKiJXueqp2NEsbNai7 FWEPmXpzxr/cd6Lb3DXpYTVnVBoUTLFXZDJLeMo68YNtjJ5EeY2IAuroklNpH+xS NYxyjTPENPF+k1Xnh+bwXihuIu9khm5gEy3xQq6z5OLzYmXM0x8CVd8L7miwIaPs oxFEnHrq2aqgz9AsB97vXC37GIyDO1hyd6pMrgdjSoraQQ+fqbHWVa2jIBiwIAoR bcwMN8rRZ2wzjTGszxcyZKK8AYswWPo= -----END CERTIFICATE-----Generated at Sat Sep 6 21:12:14 2025 by rpki-client