$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft File: VzWraqwyeVRCT5_oyoUzQpnde8I.mft (raw, json) Hash identifier: niZN+xL1HTcK7Iv9dDbJG/x3D76Y8dlJr0ElzPfnOJs= Subject key identifier: 49:CF:30:0C:A8:0D:89:6C:A4:DB:BD:88:29:3C:66:67:25:3C:C6:8A Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 Certificate issuer: /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Certificate serial: 0F83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft Manifest number: 0F78 Signing time: Wed 20 Aug 2025 17:38:24 +0000 Manifest this update: Wed 20 Aug 2025 17:38:24 +0000 Manifest next update: Wed 27 Aug 2025 17:38:24 +0000 Files and hashes: 1: VzWraqwyeVRCT5_oyoUzQpnde8I.crl (hash: hna/JvJcqVmtULLW3slWV/tQILmsSqMc274/csX9Eak=) 2: F27C04B8779E11E997C0204AC4F9AE02.roa (hash: DZGyjsonfYGjBw4hHPzT7rTakbn4N6VzJZPth34e8Gc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 17:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3971 (0xf83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE392, serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Validity Not Before: Aug 20 17:38:24 2025 GMT Not After : Aug 27 17:38:24 2025 GMT Subject: CN=68a60810-35c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2c:0b:93:d3:d0:24:d7:75:3b:51:93:40:9c: 78:6c:51:90:b9:ef:ce:1e:e9:db:0c:49:48:ad:e5: 1a:37:db:d4:8a:93:61:73:40:d8:ee:e9:15:ff:ea: d9:e4:f0:22:68:ff:e2:82:b4:d1:fc:e9:71:39:a9: 33:6f:73:ca:78:e6:39:f3:99:35:38:e9:63:dd:18: e7:77:d4:90:0b:b1:fe:69:1e:cb:b9:f8:ce:dc:8c: 3b:be:82:36:98:b0:05:47:bf:15:fc:62:fd:b0:e4: 9c:81:63:c8:80:61:21:35:3b:08:f6:de:75:b7:e8: 09:cc:d0:00:73:c9:b9:78:09:35:f1:ea:46:e9:61: a8:2d:bb:95:f5:4e:52:fa:13:86:7c:a3:9a:af:d2: 2c:31:2f:fd:ba:40:8e:9d:c4:7e:dd:21:f2:41:41: bc:3b:34:6d:be:1d:55:21:bb:dc:c7:b9:e5:c7:ad: 51:37:60:75:2c:4d:e0:72:b8:a0:18:c4:3b:6a:5c: 2a:1e:8e:2f:ac:4a:2f:96:94:a3:87:90:04:ab:1b: 1a:da:11:d2:c7:6d:7a:85:10:6b:7c:71:f8:25:0e: b4:48:ee:aa:a9:98:8b:7f:3f:ca:b1:51:52:2f:85: fa:7a:32:0f:73:d3:1f:da:7a:74:e2:b3:a1:5f:66: 69:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CF:30:0C:A8:0D:89:6C:A4:DB:BD:88:29:3C:66:67:25:3C:C6:8A X509v3 Authority Key Identifier: keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:32:52:47:30:34:ef:6d:03:b2:a0:51:8a:7d:41:25:67:f0: 95:7f:61:37:29:06:7e:e2:e3:0a:b0:74:96:6c:63:97:fe:fd: c0:97:67:94:e3:ef:f5:07:36:49:0b:e1:d8:92:7b:65:30:8f: 27:96:a8:a2:ec:f4:f9:85:4f:e6:58:97:e1:1c:79:8b:52:83: 92:bb:8d:48:c2:f5:95:a2:71:4c:40:bd:50:e6:db:71:cc:65: a5:4a:f3:ce:64:69:e4:a6:aa:03:79:6a:38:14:ed:dc:53:32: 31:1e:02:1d:da:27:8a:ec:b0:49:72:70:48:72:38:4d:39:6e: 8d:e0:ab:8b:ce:cb:cd:4d:a6:aa:02:f2:5b:ac:81:68:0a:1c: ed:fc:cf:05:ee:e1:9f:ea:77:4a:7a:3c:3c:84:c2:22:ba:9c: 83:89:8b:95:7c:a2:3c:f1:04:d2:d9:bb:98:08:13:00:71:03: da:ec:ca:32:f9:48:2e:0e:29:ae:ef:58:7a:55:7b:8a:14:fc: 40:77:76:9d:61:fd:29:9a:e1:36:e4:35:b9:cb:28:18:9e:d0: 5f:d6:6a:7f:9d:41:30:55:d8:8c:45:3c:41:c3:a2:53:4a:51: 22:84:60:0e:93:00:a9:58:32:09:13:69:a3:75:c4:5f:f0:31: 82:8f:ef:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOTIxMTAvBgNVBAUTKDU3MzVBQjZBQUMzMjc5NTQ0MjRGOUZFOENBODUzMzQy OTlERDdCQzIwHhcNMjUwODIwMTczODI0WhcNMjUwODI3MTczODI0WjAYMRYwFAYD VQQDEw02OGE2MDgxMC0zNWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqiwLk9PQJNd1O1GTQJx4bFGQue/OHunbDElIreUaN9vUipNhc0DY7ukV/+rZ 5PAiaP/igrTR/OlxOakzb3PKeOY585k1OOlj3Rjnd9SQC7H+aR7LufjO3Iw7voI2 mLAFR78V/GL9sOScgWPIgGEhNTsI9t51t+gJzNAAc8m5eAk18epG6WGoLbuV9U5S +hOGfKOar9IsMS/9ukCOncR+3SHyQUG8OzRtvh1VIbvcx7nlx61RN2B1LE3gcrig GMQ7alwqHo4vrEovlpSjh5AEqxsa2hHSx216hRBrfHH4JQ60SO6qqZiLfz/KsVFS L4X6ejIPc9Mf2np04rOhX2ZpowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnPMAyo DYlspNu9iCk8ZmclPMaKMB8GA1UdIwQYMBaAFFc1q2qsMnlUQk+f6MqFM0KZ3XvC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Mi82RDZBMkEyODZD RDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVWUkNUNV9veW9VelFwbmRl OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z6V3JhcXd5ZVZSQ1Q1X295b1V6UXBuZGU4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Mi82RDZBMkEyODZDRDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVW UkNUNV9veW9VelFwbmRlOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiMlJHMDTvbQOyoFGKfUElZ/CVf2E3KQZ+4uMKsHSWbGOX/v3Al2eU 4+/1BzZJC+HYkntlMI8nlqii7PT5hU/mWJfhHHmLUoOSu41IwvWVonFMQL1Q5ttx zGWlSvPOZGnkpqoDeWo4FO3cUzIxHgId2ieK7LBJcnBIcjhNOW6N4KuLzsvNTaaq AvJbrIFoChzt/M8F7uGf6ndKejw8hMIiupyDiYuVfKI88QTS2buYCBMAcQPa7Moy +UguDimu71h6VXuKFPxAd3adYf0pmuE25DW5yygYntBf1mp/nUEwVdiMRTxBw6JT SlEihGAOkwCpWDIJE2mjdcRf8DGCj++h -----END CERTIFICATE-----Generated at Fri Aug 22 16:28:47 2025 by rpki-client