$ rpki-client -vvf rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft File: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft (raw, json) Hash identifier: fGbwJoyXzBsXyslpOi6ycDUH6lO6GDl50sXW41Lb9Zc= Subject key identifier: 22:C0:0B:AA:92:40:AB:7A:63:B5:33:3C:05:01:8B:8F:21:3C:57:81 Authority key identifier: 55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 Certificate issuer: /CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft Manifest number: 0121 Signing time: Sat 09 Aug 2025 05:10:39 +0000 Manifest this update: Sat 09 Aug 2025 05:10:39 +0000 Manifest next update: Sat 16 Aug 2025 05:10:39 +0000 Files and hashes: 1: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl (hash: awBu3PSkG1Gr5KqSGiNFWEr9cFyCwJfydNVnCAYGyzs=) 2: FF1C0B44C0D411EEB8303680C4F9AE02.roa (hash: UVR5eOC5r72TP3k3BVK80L1LVMa+jcaIoA99zt0isl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912404E, serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Validity Not Before: Aug 9 05:10:39 2025 GMT Not After : Aug 16 05:10:39 2025 GMT Subject: CN=6896d84f-5dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2c:c5:cc:71:70:36:25:3e:45:fb:cc:76:84: c5:69:c1:91:80:e9:4d:05:0e:81:ea:2f:e6:e5:fc: 25:7a:da:91:9c:9b:19:4b:24:67:d1:c9:c7:74:8f: ba:d5:2a:77:a1:a0:e0:dc:70:83:2e:b0:2c:84:0a: 35:87:b4:b5:68:2d:6d:60:1d:8d:01:a5:d4:ad:ce: 48:70:8d:11:4b:e7:f1:2e:31:a1:c1:85:58:0d:51: 99:83:ad:7d:ac:dc:49:de:97:cd:6e:be:8b:f9:5e: b7:12:66:cd:6f:67:94:4b:25:63:d5:02:2b:62:19: 38:6c:3e:97:bf:cc:be:b7:b7:04:93:67:da:41:d4: d9:d1:8e:4e:ee:0a:94:c6:5a:5e:19:c9:2f:dd:1c: 3b:be:ee:58:a4:6e:f7:eb:03:1f:a4:19:95:35:76: 19:b1:cb:6c:a1:72:9c:a4:fe:7f:a5:83:e0:3b:e8: c5:76:3a:50:b6:14:94:04:4f:b2:90:ba:ae:fb:1b: bc:5e:df:28:ac:72:12:e7:00:39:83:3b:93:d3:f7: d0:92:07:a7:0f:50:70:9b:ea:7e:62:ba:c9:e5:9a: be:01:f1:a3:88:7f:09:1c:21:f5:fb:71:02:bb:7e: 60:0d:2e:4c:e9:26:d2:21:97:ec:fd:16:e4:55:95: c3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C0:0B:AA:92:40:AB:7A:63:B5:33:3C:05:01:8B:8F:21:3C:57:81 X509v3 Authority Key Identifier: keyid:55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a2:22:b1:be:4e:74:29:27:de:90:61:a6:64:90:56:75:a2: 1d:ee:4c:25:4c:1b:1d:dc:a4:7d:ae:91:54:b4:f8:40:b7:ce: b7:85:bb:fd:13:09:9c:d5:a5:06:70:ab:7f:09:f2:a5:41:f9: 3f:65:56:81:5b:64:0c:e0:c0:d4:fc:c8:0a:c6:81:c8:31:30: 71:90:cf:46:3c:0d:a3:3b:03:ca:e9:52:ec:4b:1e:2b:d1:73: 97:c6:3d:78:63:d8:b1:9b:f7:f9:8d:93:aa:32:d4:74:bc:7f: c9:22:d1:6d:f0:a6:d1:f6:d4:e8:72:46:d2:6c:ed:0a:50:c4: eb:92:10:d1:44:07:45:cf:3c:15:77:c8:50:8d:27:5f:71:31: 19:97:13:e2:5b:1a:a2:59:33:66:71:79:67:ec:77:ba:e1:a1: 44:c2:13:8c:1b:17:62:8b:8e:d4:b4:f0:33:53:c2:7a:4e:70: 37:73:3b:d2:7b:91:ae:5f:fe:a8:3c:0b:aa:33:bf:9a:fc:3d: 79:06:6c:64:c0:9e:65:dd:1c:cc:f8:57:a8:1d:b7:fd:4b:1e: c3:f3:4b:07:39:91:6b:eb:fc:9f:36:24:08:af:9b:2a:ed:17: 69:a3:4b:78:fc:8a:18:8c:a5:eb:cb:5c:a3:9a:14:d7:81:d3: d5:42:21:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQwNEUxMTAvBgNVBAUTKDU1MzkwRjNGNkIzQjMwRUQ0QTlDNkZCOUFEODI5N0I4 RUY5OTA2RTAwHhcNMjUwODA5MDUxMDM5WhcNMjUwODE2MDUxMDM5WjAYMRYwFAYD VQQDEw02ODk2ZDg0Zi01ZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyzFzHFwNiU+RfvMdoTFacGRgOlNBQ6B6i/m5fwletqRnJsZSyRn0cnHdI+6 1Sp3oaDg3HCDLrAshAo1h7S1aC1tYB2NAaXUrc5IcI0RS+fxLjGhwYVYDVGZg619 rNxJ3pfNbr6L+V63EmbNb2eUSyVj1QIrYhk4bD6Xv8y+t7cEk2faQdTZ0Y5O7gqU xlpeGckv3Rw7vu5YpG736wMfpBmVNXYZsctsoXKcpP5/pYPgO+jFdjpQthSUBE+y kLqu+xu8Xt8orHIS5wA5gzuT0/fQkgenD1Bwm+p+YrrJ5Zq+AfGjiH8JHCH1+3EC u35gDS5M6SbSIZfs/RbkVZXD2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLAC6qS QKt6Y7UzPAUBi48hPFeBMB8GA1UdIwQYMBaAFFU5Dz9rOzDtSpxvua2Cl7jvmQbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDA0RS80OURGNjUzRUJG NDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01PMUtuRy01cllLWHVPLVpC dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUa1BQMnM3TU8xS25HLTVyWUtYdU8tWkJ1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDA0RS80OURGNjUzRUJGNDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01P MUtuRy01cllLWHVPLVpCdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/oiKxvk50KSfekGGmZJBWdaId7kwlTBsd3KR9rpFUtPhAt863hbv9 Ewmc1aUGcKt/CfKlQfk/ZVaBW2QM4MDU/MgKxoHIMTBxkM9GPA2jOwPK6VLsSx4r 0XOXxj14Y9ixm/f5jZOqMtR0vH/JItFt8KbR9tTockbSbO0KUMTrkhDRRAdFzzwV d8hQjSdfcTEZlxPiWxqiWTNmcXln7He64aFEwhOMGxdii47UtPAzU8J6TnA3czvS e5GuX/6oPAuqM7+a/D15BmxkwJ5l3RzM+FeoHbf9Sx7D80sHOZFr6/yfNiQIr5sq 7Rdpo0t4/IoYjKXry1yjmhTXgdPVQiG7 -----END CERTIFICATE-----Generated at Sun Aug 10 18:48:30 2025 by rpki-client