$ rpki-client -vvf rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft File: vgp-rCoKt52-BO5kAC1UgnWkzKY.mft (raw, json) Hash identifier: 4cu4e72bcQ+v9mgzIYSTZ7yjmz1UjP116Kf9mQJej6c= Subject key identifier: 25:11:12:A5:E7:82:EA:97:0C:99:A9:63:AE:EB:F8:B6:25:12:99:39 Authority key identifier: BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6 Certificate issuer: /CN=A91C769F/serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft Manifest number: 01A8 Signing time: Mon 15 Sep 2025 03:32:53 +0000 Manifest this update: Mon 15 Sep 2025 03:32:53 +0000 Manifest next update: Mon 22 Sep 2025 03:32:53 +0000 Files and hashes: 1: vgp-rCoKt52-BO5kAC1UgnWkzKY.crl (hash: IfY62nulXNxnxj0htsl2R3JVG8T5nMYpKwT64hMFPKE=) 2: 0A469648099611EEB1AA195CC4F9AE02.roa (hash: Zi6/ctlIHdRI7KN6Yh7e6rA5XoPEKo7FY3oH88+Pz2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Sep 2025 03:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C769F, serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6 Validity Not Before: Sep 15 03:32:53 2025 GMT Not After : Sep 22 03:32:53 2025 GMT Subject: CN=68c788e5-f164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c9:95:f6:89:6f:21:66:68:0c:8a:ea:c3:13: 28:7d:e3:c0:af:a3:08:1a:3c:8e:9b:b8:b3:3d:03: 5d:1d:b5:12:28:0a:14:da:94:39:c7:a8:8c:0c:f6: 91:6b:c9:42:1a:80:d5:aa:52:03:4f:f0:3c:c6:e6: 97:2c:92:e4:91:45:34:66:87:96:3e:f2:58:69:57: 11:66:9e:b8:68:b7:a2:d0:ce:d5:7c:36:35:64:67: 4b:5c:03:23:88:15:5e:ee:5b:0e:17:c5:e8:7f:72: 8f:f1:ec:b8:cc:2e:d5:f9:6f:85:a6:a0:c8:28:4f: 4b:18:27:3c:2a:10:9d:54:f7:0e:eb:86:38:26:50: 31:6f:7a:1b:fc:8c:bf:77:44:26:2b:09:fa:a6:70: b5:6b:1c:19:0a:10:63:60:1c:8d:95:e7:33:2a:d4: f4:fd:15:19:54:4b:7e:35:16:14:e6:ff:71:52:47: 96:3c:86:d0:89:71:72:0f:ae:07:c6:8f:11:22:f0: 5d:cb:fa:6c:7e:66:3c:36:28:e1:14:af:0d:a9:12: 9d:65:15:25:a9:fb:d5:ad:db:0d:9e:2e:0b:36:31: 2e:14:8c:43:28:5e:e6:9c:e6:f3:e4:3c:40:aa:40: d2:a4:6e:da:bb:75:68:7c:d8:7f:78:6d:d6:72:c5: 61:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:11:12:A5:E7:82:EA:97:0C:99:A9:63:AE:EB:F8:B6:25:12:99:39 X509v3 Authority Key Identifier: keyid:BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:95:e6:90:3a:fe:41:4d:81:6b:21:d8:e9:1a:24:72:9e:52: e8:ac:7b:da:c3:01:76:92:0f:d3:0e:85:44:11:66:0a:0b:94: a6:3e:da:b2:3c:32:5a:65:32:29:56:1e:09:c2:71:bb:b2:ab: 22:91:86:53:fe:2c:eb:57:a8:99:ae:9e:a9:d7:60:02:6c:a0: 95:38:ff:e0:07:0f:03:f9:b6:fa:73:c2:36:e0:1e:06:fa:01: 22:4b:ae:96:72:50:5d:2d:d8:24:37:09:e7:07:56:93:a1:ec: 3a:9e:a9:bd:96:b7:a0:30:74:4c:b8:15:67:23:c0:0c:2f:25: a7:3e:0f:97:f9:6c:ea:40:36:f4:60:c5:f8:50:3a:09:1e:7b: d9:20:7a:38:16:ae:7b:f5:f2:c5:d8:a7:d3:4e:9a:89:00:8b: fc:ff:75:4a:99:06:60:86:9f:f0:7b:8b:20:da:b8:06:fe:3f: 8b:e4:fe:1d:bc:26:e0:0b:e5:a8:80:1a:40:10:63:21:4e:a2: d1:6e:99:a1:89:75:f3:3e:71:22:18:c9:74:62:e1:0e:7f:de: 6b:4c:6d:9d:d9:4a:15:10:0f:1a:4e:3e:14:35:39:33:a6:62: 9c:af:4e:98:15:17:31:4c:bd:71:b2:01:71:0f:0d:83:64:0a: c2:e9:d5:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc2OUYxMTAvBgNVBAUTKEJFMEE3RUFDMkEwQUI3OURCRTA0RUU2NDAwMkQ1NDgy NzVBNENDQTYwHhcNMjUwOTE1MDMzMjUzWhcNMjUwOTIyMDMzMjUzWjAYMRYwFAYD VQQDEw02OGM3ODhlNS1mMTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6cmV9olvIWZoDIrqwxMofePAr6MIGjyOm7izPQNdHbUSKAoU2pQ5x6iMDPaR a8lCGoDVqlIDT/A8xuaXLJLkkUU0ZoeWPvJYaVcRZp64aLei0M7VfDY1ZGdLXAMj iBVe7lsOF8Xof3KP8ey4zC7V+W+FpqDIKE9LGCc8KhCdVPcO64Y4JlAxb3ob/Iy/ d0QmKwn6pnC1axwZChBjYByNleczKtT0/RUZVEt+NRYU5v9xUkeWPIbQiXFyD64H xo8RIvBdy/psfmY8NijhFK8NqRKdZRUlqfvVrdsNni4LNjEuFIxDKF7mnObz5DxA qkDSpG7au3VofNh/eG3WcsVhsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUREqXn guqXDJmpY67r+LYlEpk5MB8GA1UdIwQYMBaAFL4KfqwqCredvgTuZAAtVIJ1pMym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzY5Ri82QUQxMTdBNDA5 OTExMUVFQkQyRTBFNThDNEY5QUUwMi92Z3AtckNvS3Q1Mi1CTzVrQUMxVWduV2t6 S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZncC1yQ29LdDUyLUJPNWtBQzFVZ25Xa3pLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzY5Ri82QUQxMTdBNDA5OTExMUVFQkQyRTBFNThDNEY5QUUwMi92Z3AtckNvS3Q1 Mi1CTzVrQUMxVWduV2t6S1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeleaQOv5BTYFrIdjpGiRynlLorHvawwF2kg/TDoVEEWYKC5SmPtqy PDJaZTIpVh4JwnG7sqsikYZT/izrV6iZrp6p12ACbKCVOP/gBw8D+bb6c8I24B4G +gEiS66WclBdLdgkNwnnB1aToew6nqm9lregMHRMuBVnI8AMLyWnPg+X+WzqQDb0 YMX4UDoJHnvZIHo4Fq579fLF2KfTTpqJAIv8/3VKmQZghp/we4sg2rgG/j+L5P4d vCbgC+WogBpAEGMhTqLRbpmhiXXzPnEiGMl0YuEOf95rTG2d2UoVEA8aTj4UNTkz pmKcr06YFRcxTL1xsgFxDw2DZArC6dW1 -----END CERTIFICATE-----Generated at Mon Sep 15 12:13:36 2025 by rpki-client