$ rpki-client -vvf rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft File: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft (raw, json) Hash identifier: PIVjUQ90OkB526XLTKk40PaL2BxOURZSf9y1DVD/26w= Subject key identifier: CA:E3:4A:54:76:F1:0B:88:C5:E3:A4:6A:17:DA:74:B9:FA:50:C6:B9 Authority key identifier: 55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 Certificate issuer: /CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft Manifest number: 0105 Signing time: Sun 15 Jun 2025 04:15:40 +0000 Manifest this update: Sun 15 Jun 2025 04:15:40 +0000 Manifest next update: Sun 22 Jun 2025 04:15:40 +0000 Files and hashes: 1: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl (hash: Ieex13eJWbKJq0ZJWgltR1dGOkOkDhPeqiyqfremIsg=) 2: FF1C0B44C0D411EEB8303680C4F9AE02.roa (hash: UVR5eOC5r72TP3k3BVK80L1LVMa+jcaIoA99zt0isl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912404E, serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Validity Not Before: Jun 15 04:15:40 2025 GMT Not After : Jun 22 04:15:40 2025 GMT Subject: CN=684e48ec-da12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:55:e1:40:cb:8a:cc:83:66:25:5b:18:6f:87: 11:d5:98:16:ff:96:83:13:02:f4:96:a6:b1:ee:95: 0b:3f:61:ac:d6:da:4c:37:2e:bf:f6:f4:ff:72:fd: ab:f1:90:eb:17:34:81:11:00:26:2b:67:31:9f:b7: 13:5d:d8:40:f7:2c:02:f7:60:73:b7:29:4b:19:e5: ec:99:ff:e6:5d:58:80:f3:88:18:ab:ef:3d:c7:d4: f4:2b:88:e7:b2:83:ac:22:c5:92:9a:bc:99:d1:e7: f8:fe:1f:55:dc:19:79:24:d2:0d:b5:75:68:54:c6: 98:45:5c:65:fe:36:13:ff:c9:48:5c:7d:d5:e0:cf: dd:ad:ca:5f:28:10:3b:b3:2d:a8:69:70:22:36:ad: fa:c3:7b:6a:15:7f:b5:77:2d:bd:6e:e7:0e:6b:f9: 87:49:e1:be:92:a7:f3:ba:76:4d:21:10:08:72:3a: 4d:7d:7b:58:47:a2:d6:62:5f:8d:bd:2d:6c:55:a1: 38:9e:3e:af:0c:d9:30:e9:cf:d4:5b:f4:e9:0d:d7: 72:66:57:41:49:9e:17:9a:d3:cf:65:3e:97:53:90: d7:a4:24:1e:3c:e2:66:2f:36:92:4d:38:44:c8:15: df:a4:d9:7c:1c:c9:6f:b4:d7:cc:dd:8a:fb:b7:bd: dc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E3:4A:54:76:F1:0B:88:C5:E3:A4:6A:17:DA:74:B9:FA:50:C6:B9 X509v3 Authority Key Identifier: keyid:55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c2:0c:e1:e0:cf:c8:11:df:08:d7:1a:89:91:5b:40:58:c2: e6:c4:b7:57:b8:b9:dc:53:35:a7:43:3b:44:6b:fa:57:04:ed: b5:aa:03:c7:d3:fa:c6:c1:b4:e2:6a:ab:1b:de:a1:30:51:ee: 7a:ef:8e:6d:d7:6d:80:81:ba:13:ae:8e:ab:dc:45:35:ed:b4: ad:7b:c8:15:4d:7e:f4:c5:df:70:74:e1:7b:54:b5:85:2f:45: b7:0b:0f:d5:9c:eb:9c:28:2d:ad:83:df:50:e3:13:78:a5:bb: d5:7b:38:7e:72:c0:55:34:ed:2b:e4:d7:7b:8f:79:7b:63:53: 60:16:15:8b:b0:3e:b0:fb:b6:63:0b:7f:7f:36:1d:51:47:8a: c0:ab:c4:94:ba:e6:6b:67:5b:cc:e2:fc:83:4d:14:c0:a2:f0: 51:fb:2e:52:33:fc:85:d8:b3:8e:a0:bc:62:7e:f2:14:c3:35: 76:a6:e4:1a:6c:c5:7b:f2:31:5c:68:44:33:e4:7d:3a:d8:4d: 5a:1f:4b:02:22:13:a8:85:07:17:d6:5a:a8:04:7b:c3:0f:5c: b9:82:2e:01:09:84:b2:f8:10:a1:ca:b2:6b:5f:34:8b:c9:b4: 9a:3f:4a:ee:0a:7b:3e:49:8a:c7:e7:86:37:d6:0b:d5:27:aa: 8a:49:f4:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQwNEUxMTAvBgNVBAUTKDU1MzkwRjNGNkIzQjMwRUQ0QTlDNkZCOUFEODI5N0I4 RUY5OTA2RTAwHhcNMjUwNjE1MDQxNTQwWhcNMjUwNjIyMDQxNTQwWjAYMRYwFAYD VQQDEw02ODRlNDhlYy1kYTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVXhQMuKzINmJVsYb4cR1ZgW/5aDEwL0lqax7pULP2Gs1tpMNy6/9vT/cv2r 8ZDrFzSBEQAmK2cxn7cTXdhA9ywC92BztylLGeXsmf/mXViA84gYq+89x9T0K4jn soOsIsWSmryZ0ef4/h9V3Bl5JNINtXVoVMaYRVxl/jYT/8lIXH3V4M/drcpfKBA7 sy2oaXAiNq36w3tqFX+1dy29bucOa/mHSeG+kqfzunZNIRAIcjpNfXtYR6LWYl+N vS1sVaE4nj6vDNkw6c/UW/TpDddyZldBSZ4XmtPPZT6XU5DXpCQePOJmLzaSTThE yBXfpNl8HMlvtNfM3Yr7t73c5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrjSlR2 8QuIxeOkahfadLn6UMa5MB8GA1UdIwQYMBaAFFU5Dz9rOzDtSpxvua2Cl7jvmQbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDA0RS80OURGNjUzRUJG NDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01PMUtuRy01cllLWHVPLVpC dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUa1BQMnM3TU8xS25HLTVyWUtYdU8tWkJ1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDA0RS80OURGNjUzRUJGNDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01P MUtuRy01cllLWHVPLVpCdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNwgzh4M/IEd8I1xqJkVtAWMLmxLdXuLncUzWnQztEa/pXBO21qgPH 0/rGwbTiaqsb3qEwUe56745t122AgboTro6r3EU17bSte8gVTX70xd9wdOF7VLWF L0W3Cw/VnOucKC2tg99Q4xN4pbvVezh+csBVNO0r5Nd7j3l7Y1NgFhWLsD6w+7Zj C39/Nh1RR4rAq8SUuuZrZ1vM4vyDTRTAovBR+y5SM/yF2LOOoLxifvIUwzV2puQa bMV78jFcaEQz5H062E1aH0sCIhOohQcX1lqoBHvDD1y5gi4BCYSy+BChyrJrXzSL ybSaP0ruCns+SYrH54Y31gvVJ6qKSfTo -----END CERTIFICATE-----Generated at Sun Jun 15 10:18:42 2025 by rpki-client