$ rpki-client -vvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft File: VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json) Hash identifier: Z1ZKXhpLv1ZCAQTR6BQtrdcWpOMYY+anC2zlHwWiNrE= Subject key identifier: 46:DE:3D:8C:E4:28:B6:25:F8:7F:80:95:C2:02:09:09:4B:64:F9:E9 Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 Certificate issuer: /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft Manifest number: A3 Signing time: Sat 09 Aug 2025 06:43:08 +0000 Manifest this update: Sat 09 Aug 2025 06:43:07 +0000 Manifest next update: Sat 16 Aug 2025 06:43:07 +0000 Files and hashes: 1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: FEb4E7y6P6IsmJXkBtA3ksa2ZGWNWXJli56aCSh5agk=) 2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: APURPczfV1ii5Oz3jn5uLGx4X2/aeoAU9n96jwy9b0A=) 3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: utVxhZKF0BG0gKmfkjY5U3UQKAW2XCaaTxVRnaQMDbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91276FA, serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582 Validity Not Before: Aug 9 06:43:07 2025 GMT Not After : Aug 16 06:43:07 2025 GMT Subject: CN=6896edfb-74dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4f:66:93:95:25:64:18:6b:45:c9:9d:9c:5a: 08:cc:da:10:0b:c4:4b:65:43:32:39:95:8a:9c:b4: c0:9c:33:76:39:07:bd:47:91:dd:2e:d3:2c:5d:45: 28:f8:ef:7d:37:bd:3a:21:e5:21:1a:c2:87:15:93: 5d:7a:20:1a:bd:bc:7a:44:38:4f:e2:34:86:68:1d: cb:75:eb:2a:0d:0a:c3:a9:c2:cb:65:b2:72:be:86: f3:d0:19:8f:47:d2:8c:b9:53:90:91:6a:85:a6:35: 47:96:44:4b:61:97:8b:51:9f:1c:72:92:7e:86:8b: ab:29:c3:a7:4f:61:5b:76:87:4c:5e:df:8b:05:2f: a5:b1:e7:ba:f8:b9:d8:e8:8d:5b:b4:5e:7f:ac:18: 84:e4:98:0d:43:83:cf:ae:db:ce:3a:5d:aa:87:36: 83:a7:94:51:f7:3c:2f:e1:e4:dd:94:85:2d:50:88: 25:26:6b:2e:61:d5:46:d2:ec:93:d6:4f:6f:7b:9d: 8a:b5:64:51:27:ed:40:91:6f:19:65:d3:7f:7b:1e: 6a:d3:86:cc:0e:60:37:2c:1c:40:69:a6:d9:fc:f2: 94:67:51:a8:15:8e:2f:a0:ad:c4:16:cd:ac:a6:f4: fa:e4:7e:81:5c:83:03:83:01:10:8b:2f:18:fd:f5: 2f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DE:3D:8C:E4:28:B6:25:F8:7F:80:95:C2:02:09:09:4B:64:F9:E9 X509v3 Authority Key Identifier: keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:b8:4f:89:7e:d9:70:78:4c:ce:5c:d6:83:be:c0:bb:5c:12: 9d:d8:e5:15:6c:4a:fc:8a:f0:2c:0c:8c:aa:7e:3f:c9:6c:6d: 52:7d:fc:c4:1e:f5:53:42:1a:8a:6d:d4:b5:d6:95:59:e5:51: 35:04:b3:bb:cd:77:9e:cb:35:7b:1c:55:fc:db:5c:55:70:6a: b3:d2:e0:fc:e0:27:8b:92:c8:a6:cd:a8:90:ae:76:c5:41:66: 1a:aa:d6:29:31:7d:3b:d6:6c:4e:7d:47:74:3c:73:a9:ee:8c: 32:ca:c2:73:61:a1:37:35:9b:a1:38:bf:2a:ba:5a:00:ac:6a: 2b:87:c6:e3:0c:04:92:0d:e6:87:77:e5:d6:d0:fd:d8:48:dd: 7d:e1:44:8d:d0:29:2e:ff:1a:9a:28:e5:5c:7a:6c:8c:34:dc: 0f:15:03:8a:ab:11:83:83:f1:44:7a:25:96:04:3a:e7:96:da: 2c:48:ae:70:eb:84:a2:12:ce:b1:5d:22:32:74:ab:cb:38:33: 9d:24:87:84:b8:08:6b:37:a6:8e:4f:fe:f0:1e:b4:0e:dc:0d: c4:51:18:b9:52:4e:7a:5a:aa:67:98:75:7d:3e:b0:21:f9:53: db:91:80:9c:90:c8:99:14:ef:7a:4c:3f:cc:65:19:72:83:12: f4:e9:d7:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2RkExMTAvBgNVBAUTKDU1MzNBN0M1N0JGNERCMUU1MzhGOUU3N0UwQjQ4NjhC OEY5MEM1ODIwHhcNMjUwODA5MDY0MzA3WhcNMjUwODE2MDY0MzA3WjAYMRYwFAYD VQQDEw02ODk2ZWRmYi03NGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2k9mk5UlZBhrRcmdnFoIzNoQC8RLZUMyOZWKnLTAnDN2OQe9R5HdLtMsXUUo +O99N706IeUhGsKHFZNdeiAavbx6RDhP4jSGaB3LdesqDQrDqcLLZbJyvobz0BmP R9KMuVOQkWqFpjVHlkRLYZeLUZ8ccpJ+hourKcOnT2FbdodMXt+LBS+lsee6+LnY 6I1btF5/rBiE5JgNQ4PPrtvOOl2qhzaDp5RR9zwv4eTdlIUtUIglJmsuYdVG0uyT 1k9ve52KtWRRJ+1AkW8ZZdN/ex5q04bMDmA3LBxAaabZ/PKUZ1GoFY4voK3EFs2s pvT65H6BXIMDgwEQiy8Y/fUvNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbePYzk KLYl+H+AlcICCQlLZPnpMB8GA1UdIwQYMBaAFFUzp8V79NseU4+ed+C0houPkMWC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzZGQS85QzUyQTdFODg0 QzkxMUVGQjU0RDBDNDlDNEY5QUUwMi9WVE9ueFh2MDJ4NVRqNTUzNExTR2k0LVF4 WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUT254WHYwMng1VGo1NTM0TFNHaTQtUXhZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzZGQS85QzUyQTdFODg0QzkxMUVGQjU0RDBDNDlDNEY5QUUwMi9WVE9ueFh2MDJ4 NVRqNTUzNExTR2k0LVF4WUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYuE+JftlweEzOXNaDvsC7XBKd2OUVbEr8ivAsDIyqfj/JbG1SffzE HvVTQhqKbdS11pVZ5VE1BLO7zXeeyzV7HFX821xVcGqz0uD84CeLksimzaiQrnbF QWYaqtYpMX071mxOfUd0PHOp7owyysJzYaE3NZuhOL8quloArGorh8bjDASSDeaH d+XW0P3YSN194USN0Cku/xqaKOVcemyMNNwPFQOKqxGDg/FEeiWWBDrnltosSK5w 64SiEs6xXSIydKvLODOdJIeEuAhrN6aOT/7wHrQO3A3EURi5Uk56WqpnmHV9PrAh +VPbkYCckMiZFO96TD/MZRlygxL06de6 -----END CERTIFICATE-----Generated at Sun Aug 10 13:53:45 2025 by rpki-client