$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft File: M-VCXQNo-C_4W5uEf0EjitWNTlA.mft (raw, json) Hash identifier: 8KHhOVqaOzSSsaPdTVtT9lNlNyLSPPK6PBAz/OeR1pg= Subject key identifier: A3:96:CF:A2:6B:A1:12:28:56:5E:91:94:C7:A0:F3:5F:CF:10:6F:3A Authority key identifier: 33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50 Certificate issuer: /CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft Manifest number: 0131 Signing time: Wed 03 Sep 2025 05:03:23 +0000 Manifest this update: Wed 03 Sep 2025 05:03:23 +0000 Manifest next update: Wed 10 Sep 2025 05:03:23 +0000 Files and hashes: 1: M-VCXQNo-C_4W5uEf0EjitWNTlA.crl (hash: RVoLDcWoCWoCgO7rHGOrst9uFNg/sP7ergkb/NFH3YI=) 2: D677E18AB9AF11EE97EEDB49C4F9AE02.roa (hash: LUJnGhbUriDz5PEXzwqHVqGRqenH5+Jp3evLId0QNQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 05:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD5A, serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50 Validity Not Before: Sep 3 05:03:23 2025 GMT Not After : Sep 10 05:03:23 2025 GMT Subject: CN=68b7cc1b-4a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e7:d3:1f:00:0c:97:9f:29:d2:84:60:86:3a: 44:05:4e:88:52:a0:c8:bb:40:0a:c7:52:18:40:2e: ef:89:4d:d0:53:24:37:a7:ee:47:64:e4:96:dd:35: a1:68:36:38:41:ed:09:6c:c9:8e:a5:91:45:b3:52: df:58:14:b4:27:a9:af:37:93:e1:28:c6:34:fd:ba: ea:bc:30:3b:3a:9e:c6:a9:35:6f:70:71:36:24:57: 99:e6:b2:b6:61:5c:dc:f3:08:b6:40:65:55:c0:05: fb:ac:17:62:ba:02:e0:6d:08:9b:f4:54:bd:27:38: c5:dd:f3:1b:28:8e:98:59:ce:ae:23:cf:70:27:a7: 82:6a:ce:c6:3d:aa:ba:70:01:76:03:ba:f7:ac:45: c2:67:e9:0b:22:1e:00:51:f4:b4:ac:64:10:1c:29: f2:ba:e0:1a:08:c5:89:68:03:e4:04:b7:ce:13:6a: b5:16:85:49:23:1e:f5:ff:a9:f9:ba:86:a8:b8:df: 3f:ca:52:a0:70:2b:76:cb:0d:d0:52:a8:16:12:0e: 03:98:af:7e:3f:85:41:f4:6f:e9:91:f2:a3:9d:70: f7:80:8a:72:2b:2c:61:90:03:f8:bf:8d:11:5c:f9: 4a:4a:a5:16:1e:e8:84:b7:2b:09:aa:5a:b1:ca:3a: 8d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:96:CF:A2:6B:A1:12:28:56:5E:91:94:C7:A0:F3:5F:CF:10:6F:3A X509v3 Authority Key Identifier: keyid:33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:42:4a:2c:b7:33:5c:54:c1:32:dc:80:48:59:7c:a3:c6:ba: 59:90:30:0b:55:70:7a:24:cd:fc:2b:35:69:40:b4:fa:8f:09: f1:37:df:e1:f6:49:a2:06:d7:c2:87:54:a9:59:e5:9c:94:78: bd:76:7d:e9:b1:5c:4d:98:54:57:4f:6c:aa:db:a1:a1:d6:41: 6c:75:5f:9a:d6:a5:33:67:a2:98:b6:e1:df:b1:57:88:1e:79: 9e:97:0d:d3:56:f5:22:52:a4:ee:9b:d2:62:f4:d8:60:d2:56: 1a:45:ac:3f:4f:d9:2b:d4:f7:75:fe:d7:a2:31:84:3f:a5:92: ba:52:22:56:3b:b7:25:8d:87:6a:18:2a:b0:71:6b:b9:20:ed: 32:89:c0:fb:ba:d3:eb:6b:20:af:ec:6f:bd:b0:35:30:ff:3b: f5:cb:aa:ce:fb:0f:52:54:09:46:2c:a7:a4:aa:60:3e:67:6a: 12:70:00:95:18:31:4f:7b:31:04:e1:32:bc:c3:eb:43:c0:ac: b6:e5:a5:f4:e0:33:c7:fc:f8:a0:8d:02:3f:6f:a1:16:24:c6: ae:bb:0f:2c:30:86:03:2c:69:15:76:ef:23:eb:64:88:39:d8: e1:80:78:12:b6:ff:10:5d:24:38:d6:f8:41:28:fb:98:aa:98: a7:8a:fd:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENUExMTAvBgNVBAUTKDMzRTU0MjVEMDM2OEY4MkZGODVCOUI4NDdGNDEyMzhB RDU4RDRFNTAwHhcNMjUwOTAzMDUwMzIzWhcNMjUwOTEwMDUwMzIzWjAYMRYwFAYD VQQDEw02OGI3Y2MxYi00YTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk+fTHwAMl58p0oRghjpEBU6IUqDIu0AKx1IYQC7viU3QUyQ3p+5HZOSW3TWh aDY4Qe0JbMmOpZFFs1LfWBS0J6mvN5PhKMY0/brqvDA7Op7GqTVvcHE2JFeZ5rK2 YVzc8wi2QGVVwAX7rBdiugLgbQib9FS9JzjF3fMbKI6YWc6uI89wJ6eCas7GPaq6 cAF2A7r3rEXCZ+kLIh4AUfS0rGQQHCnyuuAaCMWJaAPkBLfOE2q1FoVJIx71/6n5 uoaouN8/ylKgcCt2yw3QUqgWEg4DmK9+P4VB9G/pkfKjnXD3gIpyKyxhkAP4v40R XPlKSqUWHuiEtysJqlqxyjqNrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOWz6Jr oRIoVl6RlMeg81/PEG86MB8GA1UdIwQYMBaAFDPlQl0DaPgv+FubhH9BI4rVjU5Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ1QS81RkI3REMwOEI5 QUExMUVFQjBEQ0Q4MzRDNEY5QUUwMi9NLVZDWFFOby1DXzRXNXVFZjBFaml0V05U bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL00tVkNYUU5vLUNfNFc1dUVmMEVqaXRXTlRsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ1QS81RkI3REMwOEI5QUExMUVFQjBEQ0Q4MzRDNEY5QUUwMi9NLVZDWFFOby1D XzRXNXVFZjBFaml0V05UbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMQkostzNcVMEy3IBIWXyjxrpZkDALVXB6JM38KzVpQLT6jwnxN9/h 9kmiBtfCh1SpWeWclHi9dn3psVxNmFRXT2yq26Gh1kFsdV+a1qUzZ6KYtuHfsVeI Hnmelw3TVvUiUqTum9Ji9Nhg0lYaRaw/T9kr1Pd1/teiMYQ/pZK6UiJWO7cljYdq GCqwcWu5IO0yicD7utPrayCv7G+9sDUw/zv1y6rO+w9SVAlGLKekqmA+Z2oScACV GDFPezEE4TK8w+tDwKy25aX04DPH/PigjQI/b6EWJMauuw8sMIYDLGkVdu8j62SI OdjhgHgStv8QXSQ41vhBKPuYqpiniv0w -----END CERTIFICATE-----Generated at Thu Sep 4 14:06:18 2025 by rpki-client