$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft File: vttNMcgBx4se-jSHY50DVayRNUs.mft (raw, json) Hash identifier: f8yacHVzMrUTTW+J+S5mIe/KaA+kH53iIPJmioyKV9c= Subject key identifier: 1C:F1:D7:1D:93:C9:FB:07:4B:C5:F9:2A:F0:4E:F8:C6:25:81:D3:77 Authority key identifier: BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B Certificate issuer: /CN=A91CB063/serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft Manifest number: 7E Signing time: Fri 05 Sep 2025 07:17:56 +0000 Manifest this update: Fri 05 Sep 2025 07:17:56 +0000 Manifest next update: Fri 12 Sep 2025 07:17:56 +0000 Files and hashes: 1: vttNMcgBx4se-jSHY50DVayRNUs.crl (hash: 2VTiM5PDhu1v01aiSnmhsSsFbuoRtBoMg/NEMTd/hos=) 2: D99266FE4F7911F095AB2D46C4F9AE02.roa (hash: zM2x4PpXDO/09IRoY9uPWWkCUNv9rLsNP/d1xRjR15g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:17:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB063, serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B Validity Not Before: Sep 5 07:17:56 2025 GMT Not After : Sep 12 07:17:56 2025 GMT Subject: CN=68ba8ea4-5a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2e:15:fe:95:94:91:a2:95:25:fb:ba:72:93: b1:03:ea:7c:4a:0c:31:bd:20:a2:32:d7:84:b0:bd: c0:5b:c6:10:22:47:d3:d9:73:0d:68:99:6a:dc:6f: 4b:c2:68:25:54:1b:34:5b:a6:91:a6:48:dd:d0:72: cc:bf:bc:89:0f:50:d4:b1:85:f0:30:7e:75:71:97: ee:c2:8a:b5:d4:1f:4b:30:32:97:48:07:57:cf:c2: ee:f0:1b:85:ea:9e:ca:ba:6d:ca:e4:6f:94:0b:cf: 50:93:82:8e:a2:33:b9:b2:b4:b4:91:65:59:01:82: fb:75:a8:d6:02:af:64:16:39:7c:3f:e6:fa:ed:90: 0c:d7:72:c2:e9:ce:59:5f:3c:01:54:bb:f5:98:cb: 6e:78:47:32:d8:c4:6d:1b:2b:e4:61:a0:7a:7e:a9: a2:be:0e:23:6d:09:00:09:8e:e9:b3:f9:e7:8c:a7: 5b:ea:00:08:c1:9d:77:84:69:9a:8b:92:14:37:1b: 8b:41:35:23:8e:65:c5:6a:67:81:18:8b:ef:65:4c: f2:37:d6:94:60:64:58:58:47:33:96:d6:5c:0b:4f: cc:ff:21:55:fe:7a:37:0d:15:84:a8:96:bb:63:5d: 1b:81:37:b7:1b:a6:d5:7c:b9:cd:a3:d6:45:dd:f9: 04:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F1:D7:1D:93:C9:FB:07:4B:C5:F9:2A:F0:4E:F8:C6:25:81:D3:77 X509v3 Authority Key Identifier: keyid:BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:47:d8:43:58:36:d6:90:a9:17:53:23:0e:8b:20:27:a0:05: 90:a8:f7:6d:d3:7b:a5:e2:c6:91:12:5b:a5:d6:c5:58:79:9f: 1b:87:72:1c:02:62:28:f8:49:fb:62:a3:8e:6f:cd:6d:58:d0: 98:c8:aa:4f:b5:7c:c9:37:f3:3e:2f:ed:2d:05:8e:75:8f:40: 17:8e:10:95:72:a0:e1:1f:e2:45:b0:14:66:52:62:ae:ab:e5: 9d:61:db:af:b2:15:17:22:57:1d:12:ab:0c:60:a6:16:f0:0e: 91:46:1d:0a:f8:46:df:93:a5:a1:4a:9b:5f:d0:13:6e:36:c9: 46:fa:6f:e8:61:10:eb:46:8c:d6:87:12:0f:e2:86:15:2f:e3: f4:53:3e:57:c2:7c:c5:23:de:17:02:08:59:0a:f1:3f:eb:4c: 68:62:88:b7:39:98:38:b9:1e:73:78:0e:42:bb:12:77:75:33: e9:20:1b:36:dc:d1:5e:24:e9:0a:97:95:57:86:74:61:d4:c1: 37:dc:1b:c1:67:4e:da:fe:2a:2e:ab:1d:26:2d:1e:26:a2:ff: d9:be:79:bc:5d:7d:fa:86:8c:cd:16:89:ce:68:be:f7:d2:8c: 72:d5:8f:42:10:69:c0:38:42:fe:9b:be:c6:8e:4f:91:57:dc: 46:6e:fe:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwNjMxMTAvBgNVBAUTKEJFREI0RDMxQzgwMUM3OEIxRUZBMzQ4NzYzOUQwMzU1 QUM5MTM1NEIwHhcNMjUwOTA1MDcxNzU2WhcNMjUwOTEyMDcxNzU2WjAYMRYwFAYD VQQDEw02OGJhOGVhNC01YTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzC4V/pWUkaKVJfu6cpOxA+p8SgwxvSCiMteEsL3AW8YQIkfT2XMNaJlq3G9L wmglVBs0W6aRpkjd0HLMv7yJD1DUsYXwMH51cZfuwoq11B9LMDKXSAdXz8Lu8BuF 6p7Kum3K5G+UC89Qk4KOojO5srS0kWVZAYL7dajWAq9kFjl8P+b67ZAM13LC6c5Z XzwBVLv1mMtueEcy2MRtGyvkYaB6fqmivg4jbQkACY7ps/nnjKdb6gAIwZ13hGma i5IUNxuLQTUjjmXFameBGIvvZUzyN9aUYGRYWEczltZcC0/M/yFV/no3DRWEqJa7 Y10bgTe3G6bVfLnNo9ZF3fkEKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzx1x2T yfsHS8X5KvBO+MYlgdN3MB8GA1UdIwQYMBaAFL7bTTHIAceLHvo0h2OdA1WskTVL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA2My82M0I0NzYwMkQ2 RUQxMUVGOUQ5QkYzNkFDNEY5QUUwMi92dHROTWNnQng0c2UtalNIWTUwRFZheVJO VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z0dE5NY2dCeDRzZS1qU0hZNTBEVmF5Uk5Vcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA2My82M0I0NzYwMkQ2RUQxMUVGOUQ5QkYzNkFDNEY5QUUwMi92dHROTWNnQng0 c2UtalNIWTUwRFZheVJOVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACR9hDWDbWkKkXUyMOiyAnoAWQqPdt03ul4saRElul1sVYeZ8bh3Ic AmIo+En7YqOOb81tWNCYyKpPtXzJN/M+L+0tBY51j0AXjhCVcqDhH+JFsBRmUmKu q+WdYduvshUXIlcdEqsMYKYW8A6RRh0K+Ebfk6WhSptf0BNuNslG+m/oYRDrRozW hxIP4oYVL+P0Uz5XwnzFI94XAghZCvE/60xoYoi3OZg4uR5zeA5CuxJ3dTPpIBs2 3NFeJOkKl5VXhnRh1ME33BvBZ07a/iouqx0mLR4mov/Zvnm8XX36hozNFonOaL73 0oxy1Y9CEGnAOEL+m77Gjk+RV9xGbv70 -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:13 2025 by rpki-client