$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft File: M-VCXQNo-C_4W5uEf0EjitWNTlA.mft (raw, json) Hash identifier: vN4cOR2shrUvtyhpndPRnfRH1VyII7t/jduJXCK7m1k= Subject key identifier: 54:F9:85:90:7D:17:96:83:F7:38:41:93:75:7B:9A:BD:B3:88:EF:FC Authority key identifier: 33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50 Certificate issuer: /CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft Manifest number: 0119 Signing time: Sat 19 Jul 2025 05:03:27 +0000 Manifest this update: Sat 19 Jul 2025 05:03:27 +0000 Manifest next update: Sat 26 Jul 2025 05:03:26 +0000 Files and hashes: 1: M-VCXQNo-C_4W5uEf0EjitWNTlA.crl (hash: Hoxg7Rm6+VzlAkk7XGJ9ya3xPOkBpcL9aXHe9I79vZA=) 2: D677E18AB9AF11EE97EEDB49C4F9AE02.roa (hash: LUJnGhbUriDz5PEXzwqHVqGRqenH5+Jp3evLId0QNQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD5A, serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50 Validity Not Before: Jul 19 05:03:27 2025 GMT Not After : Jul 26 05:03:26 2025 GMT Subject: CN=687b271f-dd78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3c:ca:0e:a8:78:9e:8c:df:81:0d:25:48:74: 7e:da:89:44:6f:81:c5:d4:ac:bd:a6:0e:af:66:01: e1:29:92:bb:50:bc:99:48:51:1b:f6:a8:70:18:2c: 89:93:03:56:b9:db:db:71:94:91:98:f6:77:50:70: 6f:35:93:d6:78:82:80:4a:70:ed:3e:0d:5f:e1:c2: 93:00:08:2f:5d:68:48:26:d5:9d:d7:6b:41:73:e6: b2:43:e4:0c:97:0f:26:29:04:e2:da:fe:30:d9:c9: 4a:9d:e5:5b:68:06:d3:a8:ee:19:f9:e5:e2:7e:99: f7:97:d1:96:f5:07:a2:22:15:d1:6c:a4:8f:3f:b6: ea:b1:f9:b1:e4:4f:01:f2:8a:39:b6:3b:de:51:c2: 01:9d:96:6b:f9:33:73:53:76:ce:61:d8:14:c6:08: 87:a1:18:fc:8c:6b:71:23:63:9d:29:da:b0:84:f3: 40:e3:b5:5d:47:8f:5e:d6:d3:ec:f0:70:3b:0f:1c: d7:d6:e4:be:e2:c2:0e:73:8d:ef:dd:ce:bd:18:d1: 76:06:cb:52:9d:ca:af:71:0e:ee:f8:07:af:c9:10: 6f:4a:a2:c1:99:fc:51:ca:d4:e9:e4:b9:4a:a8:a0: d5:fa:80:26:89:68:68:3c:f6:27:c1:83:3d:b4:e9: 9d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F9:85:90:7D:17:96:83:F7:38:41:93:75:7B:9A:BD:B3:88:EF:FC X509v3 Authority Key Identifier: keyid:33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:17:09:18:0f:9b:b9:71:3b:0e:10:7c:45:8e:57:87:72:47: ad:c8:99:c0:6b:ff:f7:64:54:83:5f:9c:94:07:bd:56:6a:26: 0b:d7:b3:ee:74:fe:34:78:99:89:bc:79:32:f0:c7:5a:e1:ab: ea:ad:35:6e:03:6f:ae:40:10:5f:c1:50:b0:69:22:dc:32:f2: e5:f2:8e:83:b8:b8:39:16:2e:e1:33:58:ee:ef:90:2c:9a:85: a7:d6:3b:6f:89:dd:5e:72:9b:cd:eb:d2:f4:2b:87:48:32:27: c2:c4:56:ee:a5:45:38:08:d6:50:5a:29:2c:cf:e5:39:07:21: 4a:8b:ba:5b:fd:4a:51:12:42:93:59:14:8d:87:07:6d:86:bc: 84:b4:d9:58:f9:fb:01:73:51:7c:37:b3:ae:3e:8d:9f:39:c4: 03:7f:2b:b4:4e:09:19:3e:29:0d:f2:23:8b:67:ac:1b:29:d3: 1f:8a:28:36:82:2e:bf:66:04:bb:f0:6a:77:3e:00:a8:6c:ca: a0:95:ea:de:f6:dc:4d:b3:98:5d:c3:40:46:80:79:af:cf:cf: 83:23:80:88:95:86:fa:2b:29:69:cd:ee:a5:33:0f:08:e5:4f: 04:44:f0:86:53:9a:88:3c:d1:4f:b6:3f:c8:f4:bd:d1:bb:57: 9a:2b:65:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENUExMTAvBgNVBAUTKDMzRTU0MjVEMDM2OEY4MkZGODVCOUI4NDdGNDEyMzhB RDU4RDRFNTAwHhcNMjUwNzE5MDUwMzI3WhcNMjUwNzI2MDUwMzI2WjAYMRYwFAYD VQQDEw02ODdiMjcxZi1kZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTzKDqh4nozfgQ0lSHR+2olEb4HF1Ky9pg6vZgHhKZK7ULyZSFEb9qhwGCyJ kwNWudvbcZSRmPZ3UHBvNZPWeIKASnDtPg1f4cKTAAgvXWhIJtWd12tBc+ayQ+QM lw8mKQTi2v4w2clKneVbaAbTqO4Z+eXifpn3l9GW9QeiIhXRbKSPP7bqsfmx5E8B 8oo5tjveUcIBnZZr+TNzU3bOYdgUxgiHoRj8jGtxI2OdKdqwhPNA47VdR49e1tPs 8HA7DxzX1uS+4sIOc43v3c69GNF2BstSncqvcQ7u+AevyRBvSqLBmfxRytTp5LlK qKDV+oAmiWhoPPYnwYM9tOmdYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFT5hZB9 F5aD9zhBk3V7mr2ziO/8MB8GA1UdIwQYMBaAFDPlQl0DaPgv+FubhH9BI4rVjU5Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ1QS81RkI3REMwOEI5 QUExMUVFQjBEQ0Q4MzRDNEY5QUUwMi9NLVZDWFFOby1DXzRXNXVFZjBFaml0V05U bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL00tVkNYUU5vLUNfNFc1dUVmMEVqaXRXTlRsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ1QS81RkI3REMwOEI5QUExMUVFQjBEQ0Q4MzRDNEY5QUUwMi9NLVZDWFFOby1D XzRXNXVFZjBFaml0V05UbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYFwkYD5u5cTsOEHxFjleHcketyJnAa//3ZFSDX5yUB71WaiYL17Pu dP40eJmJvHky8Mda4avqrTVuA2+uQBBfwVCwaSLcMvLl8o6DuLg5Fi7hM1ju75As moWn1jtvid1ecpvN69L0K4dIMifCxFbupUU4CNZQWiksz+U5ByFKi7pb/UpREkKT WRSNhwdthryEtNlY+fsBc1F8N7OuPo2fOcQDfyu0TgkZPikN8iOLZ6wbKdMfiig2 gi6/ZgS78Gp3PgCobMqglere9txNs5hdw0BGgHmvz8+DI4CIlYb6Kylpze6lMw8I 5U8ERPCGU5qIPNFPtj/I9L3Ru1eaK2WO -----END CERTIFICATE-----Generated at Mon Jul 21 02:06:49 2025 by rpki-client