$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft File: vttNMcgBx4se-jSHY50DVayRNUs.mft (raw, json) Hash identifier: VaYSAukWn8Doduk9o1wQakNP5nUlnYiwIRLxBcK9qaA= Subject key identifier: E6:B3:1D:0B:91:55:91:11:D6:75:14:98:BF:86:A1:F3:9A:41:45:D7 Authority key identifier: BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B Certificate issuer: /CN=A91CB063/serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft Manifest number: 64 Signing time: Mon 21 Jul 2025 07:17:50 +0000 Manifest this update: Mon 21 Jul 2025 07:17:50 +0000 Manifest next update: Mon 28 Jul 2025 07:17:50 +0000 Files and hashes: 1: vttNMcgBx4se-jSHY50DVayRNUs.crl (hash: 3aGPK1TxPKk0NFL8ZUMPwBFYMJDHOJNFsJleQV7kUCQ=) 2: BDA493A24F6211F0BEBA9A1EC4F9AE02.roa (hash: dRXB3QC7YqCROgx2X7ZnRm6lNHfbbszGkLMLxQOaMCY=) 3: D99266FE4F7911F095AB2D46C4F9AE02.roa (hash: al+hawxdd/Lfvjm9XY3Pf4WOTHr8q+SKzXdyvZRDRqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB063, serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B Validity Not Before: Jul 21 07:17:50 2025 GMT Not After : Jul 28 07:17:50 2025 GMT Subject: CN=687de99e-64bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:93:70:19:f5:3d:73:70:5a:1d:a9:02:18:53: f9:8e:11:3e:8f:99:10:28:11:61:16:2f:07:73:9f: c0:3d:38:21:d3:e5:3a:03:36:0a:b2:7b:8c:21:1c: 7f:76:94:78:bf:de:66:09:07:e8:ec:74:8b:0d:fd: 2f:4a:5b:fa:dd:a3:f8:ab:85:aa:b1:f0:ba:39:c8: 92:20:18:ce:1d:8c:4d:f9:3c:52:93:bd:57:d1:7d: 19:86:b5:97:de:a7:52:6b:7a:d1:7c:a5:11:cb:92: 0d:90:01:15:31:76:c9:b4:c4:46:ad:69:2d:2a:f5: e1:7c:ff:94:2e:72:c3:ed:9d:02:74:55:3c:ed:5b: 70:43:df:9f:6e:f5:47:05:d8:5b:94:7f:bc:fe:47: ef:9c:19:61:af:20:29:89:78:2e:82:c4:41:b1:e2: 58:9c:36:7f:dd:2a:40:0e:02:e4:41:2b:7b:59:f7: 65:9c:61:fc:7f:b1:83:98:ab:e3:ab:41:7e:15:1c: df:0e:b2:04:06:4e:c8:68:cd:a4:25:8f:1c:15:f8: d9:10:0c:58:ae:ad:7b:99:96:f8:af:56:2d:29:96: 6f:14:56:d2:7d:cd:72:35:28:ea:88:0e:c6:3a:c2: d6:12:eb:62:91:ed:f2:b9:37:42:3a:cd:53:d4:ef: 32:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B3:1D:0B:91:55:91:11:D6:75:14:98:BF:86:A1:F3:9A:41:45:D7 X509v3 Authority Key Identifier: keyid:BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:d3:b3:d7:ef:01:53:52:cc:76:b0:08:e3:38:6b:8e:1f:d1: 56:8d:ed:ca:44:40:d7:9b:75:e3:10:c6:af:f1:30:b4:46:22: 99:87:09:be:0d:c2:ac:3f:75:67:e9:72:38:bb:58:d2:e6:11: 04:9b:61:17:6d:4c:d0:a1:7f:b0:9c:3b:c8:11:59:2a:44:c2: 68:d7:cc:f6:c9:4e:63:9b:d6:37:35:d0:1c:e9:ea:8b:b3:b2: 9f:e4:ea:13:1b:d8:1d:11:96:db:f9:dd:67:8e:2f:ac:34:5a: d9:29:93:ff:2d:01:cf:dc:89:8e:58:1a:fb:e8:6a:81:73:95: eb:53:0d:51:18:e1:68:f8:30:dd:1f:ed:0a:1c:bf:cb:e1:a8: 23:a5:bb:13:0c:f7:45:2d:d3:bd:3d:3f:6b:57:62:c9:45:6e: 0b:f9:f5:72:76:b6:18:76:07:ed:7a:89:7f:e5:9d:e0:6a:94: 1b:8a:f1:c0:de:aa:84:74:4d:1e:9b:99:c2:ee:96:30:b1:89: 07:f8:66:a0:1a:f7:ea:04:84:40:af:52:85:cd:27:68:89:78: ca:f8:4f:df:57:64:65:a8:cb:8a:ab:d2:19:22:d2:c6:cb:9d: 78:91:0e:51:bc:f7:a2:8f:7a:f9:a6:01:f3:7e:6f:66:20:71: aa:37:3a:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjA2MzExMC8GA1UEBRMoQkVEQjREMzFDODAxQzc4QjFFRkEzNDg3NjM5RDAzNTVB QzkxMzU0QjAeFw0yNTA3MjEwNzE3NTBaFw0yNTA3MjgwNzE3NTBaMBgxFjAUBgNV BAMTDTY4N2RlOTllLTY0YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtk3AZ9T1zcFodqQIYU/mOET6PmRAoEWEWLwdzn8A9OCHT5ToDNgqye4whHH92 lHi/3mYJB+jsdIsN/S9KW/rdo/irhaqx8Lo5yJIgGM4djE35PFKTvVfRfRmGtZfe p1JretF8pRHLkg2QARUxdsm0xEataS0q9eF8/5QucsPtnQJ0VTztW3BD359u9UcF 2FuUf7z+R++cGWGvICmJeC6CxEGx4licNn/dKkAOAuRBK3tZ92WcYfx/sYOYq+Or QX4VHN8OsgQGTshozaQljxwV+NkQDFiurXuZlvivVi0plm8UVtJ9zXI1KOqIDsY6 wtYS62KR7fK5N0I6zVPU7zKbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5rMdC5FV kRHWdRSYv4ah85pBRdcwHwYDVR0jBBgwFoAUvttNMcgBx4se+jSHY50DVayRNUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCMDYzLzYzQjQ3NjAyRDZF RDExRUY5RDlCRjM2QUM0RjlBRTAyL3Z0dE5NY2dCeDRzZS1qU0hZNTBEVmF5Uk5V cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdnR0Tk1jZ0J4NHNlLWpTSFk1MERWYXlSTlVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC MDYzLzYzQjQ3NjAyRDZFRDExRUY5RDlCRjM2QUM0RjlBRTAyL3Z0dE5NY2dCeDRz ZS1qU0hZNTBEVmF5Uk5Vcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKfTs9fvAVNSzHawCOM4a44f0VaN7cpEQNebdeMQxq/xMLRGIpmHCb4N wqw/dWfpcji7WNLmEQSbYRdtTNChf7CcO8gRWSpEwmjXzPbJTmOb1jc10Bzp6ouz sp/k6hMb2B0Rltv53WeOL6w0Wtkpk/8tAc/ciY5YGvvoaoFzletTDVEY4Wj4MN0f 7Qocv8vhqCOluxMM90Ut0709P2tXYslFbgv59XJ2thh2B+16iX/lneBqlBuK8cDe qoR0TR6bmcLuljCxiQf4ZqAa9+oEhECvUoXNJ2iJeMr4T99XZGWoy4qr0hki0sbL nXiRDlG896KPevmmAfN+b2Ygcao3Oqk= -----END CERTIFICATE-----Generated at Mon Jul 21 18:30:40 2025 by rpki-client