$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft File: VJnONj3wXJSTIjSIKXmbEO_x05I.mft (raw, json) Hash identifier: W3LN+HNBboBp/R46yZHyCQNBCLCQ7LiKxiy4T7AOFQM= Subject key identifier: DB:53:03:32:13:2F:28:38:1A:06:56:D8:33:A3:F9:38:23:5B:AF:D0 Authority key identifier: 54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92 Certificate issuer: /CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392 Certificate serial: 02E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft Manifest number: 02D6 Signing time: Thu 07 Aug 2025 01:58:51 +0000 Manifest this update: Thu 07 Aug 2025 01:58:50 +0000 Manifest next update: Thu 14 Aug 2025 01:58:50 +0000 Files and hashes: 1: VJnONj3wXJSTIjSIKXmbEO_x05I.crl (hash: Ja8hIY6KQZLYEkBqfriAW3xcFXTMPUYcfQbPympYkSs=) 2: 8698FF1E541811F0A468570BC4F9AE02.roa (hash: lt0lWEwyc0zSVnjcDugVvrMstEgK43kjh39ECWh3xXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 739 (0x2e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DB83, serialNumber=5499CE363DF05C949322348829799B10EFF1D392 Validity Not Before: Aug 7 01:58:50 2025 GMT Not After : Aug 14 01:58:50 2025 GMT Subject: CN=6894085a-e511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:23:2c:ad:df:5a:0c:86:0e:6e:bc:43:49:e8: c6:bd:ff:19:ca:ea:37:a0:55:16:6e:d4:49:33:5b: f4:b7:76:3b:30:24:58:f3:26:1e:3c:f3:30:03:0a: 88:17:d4:80:c6:89:49:54:15:d8:21:e2:e0:aa:9e: f8:59:86:2f:a5:da:7f:54:4b:8d:d5:05:eb:57:cf: ce:85:27:cf:b7:b6:e3:82:fe:9a:83:2a:2c:d1:41: 17:37:c7:39:ef:b4:b1:f5:41:41:c2:38:57:15:d3: 96:5d:7a:78:b3:38:1a:b3:f1:87:1e:72:65:c1:58: c0:79:92:e0:77:d9:ab:52:3d:8b:41:f8:64:1e:55: 74:ca:ef:a3:20:0c:2f:30:f8:99:bc:28:c7:f2:cc: 70:fc:b8:11:69:0a:d1:b1:ee:95:96:f4:48:ec:2a: b5:bc:94:cc:a5:43:88:50:75:43:5a:9c:76:29:53: cd:0c:e7:1e:17:36:d8:42:38:79:bf:2c:bf:3e:52: 02:77:35:f8:23:2d:f1:5c:ad:26:4e:a5:63:94:35: 64:1d:ec:9f:72:cc:61:b7:a7:6a:1f:df:a0:a2:e6: c0:d4:43:45:ef:7c:3f:b3:ff:a2:c9:87:f5:30:71: 40:88:32:e9:dd:5e:8f:c8:14:1b:78:b1:52:68:dd: fb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:53:03:32:13:2F:28:38:1A:06:56:D8:33:A3:F9:38:23:5B:AF:D0 X509v3 Authority Key Identifier: keyid:54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:b9:44:be:0b:0a:66:0b:9e:b1:51:69:4f:cb:49:24:db:2a: d8:ee:01:27:6e:19:7b:d1:54:2a:90:d1:c5:c7:47:47:6b:43: 27:e2:32:9f:85:e8:f9:c4:ca:34:2d:2e:c4:9a:5a:2d:bf:37: 50:30:f1:c2:93:31:c4:44:7c:3e:6d:0b:a3:72:a2:fc:6a:71: 91:76:b1:31:bb:df:17:e6:cf:5d:05:e9:c0:13:72:73:4a:b4: cd:7b:cf:86:5d:1b:3d:f3:d6:5d:40:16:62:cc:71:ff:10:fd: c9:78:83:8f:0d:a6:54:57:e9:6a:74:ca:c2:84:e4:f3:34:0e: 77:cd:74:f0:19:ce:fe:52:60:4a:93:d1:cd:20:0d:f6:4f:e4: 7f:c0:db:4b:1a:dc:e9:ac:79:11:2e:5f:bc:9c:06:f6:24:c7: 46:db:5f:c1:c7:e1:e0:98:1a:57:40:94:fe:c8:84:ca:ca:1a: 7a:6d:b2:8c:ee:41:eb:b4:5b:90:31:02:5e:3e:42:f8:23:45: 3e:02:43:4d:13:38:a2:9f:6f:9c:7f:1e:2c:9b:88:79:3b:fe: 10:b2:64:c2:b7:1d:29:3a:3b:5d:5d:ec:b5:62:83:ef:99:eb: ee:55:23:a7:19:6b:a9:76:7b:39:50:90:c2:5b:91:7d:17:c3: 3b:61:39:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRCODMxMTAvBgNVBAUTKDU0OTlDRTM2M0RGMDVDOTQ5MzIyMzQ4ODI5Nzk5QjEw RUZGMUQzOTIwHhcNMjUwODA3MDE1ODUwWhcNMjUwODE0MDE1ODUwWjAYMRYwFAYD VQQDEw02ODk0MDg1YS1lNTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSMsrd9aDIYObrxDSejGvf8Zyuo3oFUWbtRJM1v0t3Y7MCRY8yYePPMwAwqI F9SAxolJVBXYIeLgqp74WYYvpdp/VEuN1QXrV8/OhSfPt7bjgv6agyos0UEXN8c5 77Sx9UFBwjhXFdOWXXp4szgas/GHHnJlwVjAeZLgd9mrUj2LQfhkHlV0yu+jIAwv MPiZvCjH8sxw/LgRaQrRse6VlvRI7Cq1vJTMpUOIUHVDWpx2KVPNDOceFzbYQjh5 vyy/PlICdzX4Iy3xXK0mTqVjlDVkHeyfcsxht6dqH9+goubA1ENF73w/s/+iyYf1 MHFAiDLp3V6PyBQbeLFSaN37+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtTAzIT Lyg4GgZW2DOj+TgjW6/QMB8GA1UdIwQYMBaAFFSZzjY98FyUkyI0iCl5mxDv8dOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI4My8xRUZFMjkyQ0ZC NUQxMUVDQkI2MTBDODVDNEY5QUUwMi9WSm5PTmozd1hKU1RJalNJS1htYkVPX3gw NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZKbk9OajN3WEpTVElqU0lLWG1iRU9feDA1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REI4My8xRUZFMjkyQ0ZCNUQxMUVDQkI2MTBDODVDNEY5QUUwMi9WSm5PTmozd1hK U1RJalNJS1htYkVPX3gwNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXuUS+CwpmC56xUWlPy0kk2yrY7gEnbhl70VQqkNHFx0dHa0Mn4jKf hej5xMo0LS7EmlotvzdQMPHCkzHERHw+bQujcqL8anGRdrExu98X5s9dBenAE3Jz SrTNe8+GXRs989ZdQBZizHH/EP3JeIOPDaZUV+lqdMrChOTzNA53zXTwGc7+UmBK k9HNIA32T+R/wNtLGtzprHkRLl+8nAb2JMdG21/Bx+HgmBpXQJT+yITKyhp6bbKM 7kHrtFuQMQJePkL4I0U+AkNNEziin2+cfx4sm4h5O/4QsmTCtx0pOjtdXey1YoPv mevuVSOnGWupdns5UJDCW5F9F8M7YTno -----END CERTIFICATE-----Generated at Fri Aug 8 20:49:30 2025 by rpki-client