$ rpki-client -vvf rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft File: VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft (raw, json) Hash identifier: zxcFRRGIJH8mzuxaP5KiVymezbXnAiBd3Wo4s8IV5d0= Subject key identifier: C2:06:D9:B1:6D:A9:1F:25:D5:0D:F7:12:46:E9:D1:F7:3E:4C:E2:18 Authority key identifier: 54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D Certificate issuer: /CN=A912F62D/serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft Manifest number: 5E Signing time: Sat 09 Aug 2025 07:37:57 +0000 Manifest this update: Sat 09 Aug 2025 07:37:57 +0000 Manifest next update: Sat 16 Aug 2025 07:37:57 +0000 Files and hashes: 1: VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl (hash: tb+CXHU1+8bronsfJ8asXrABrRitKpKdeuDcmYum47o=) 2: 6DAFB1EAEA7E11EF93A91726C4F9AE02.roa (hash: RGby5CWUvljyTQmbtKXFF+09T5sv2LL/jpj1mhUT/QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F62D, serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D Validity Not Before: Aug 9 07:37:57 2025 GMT Not After : Aug 16 07:37:57 2025 GMT Subject: CN=6896fad5-7b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fa:ad:e0:7a:27:36:9e:2c:2d:bf:dd:ed:9c: b2:9f:67:48:df:39:b0:8b:b5:50:25:ed:6f:7d:96: 84:e6:c4:ce:7d:b6:e7:88:4b:48:3a:1f:1d:6d:54: f4:76:d8:12:2c:22:2e:c2:8f:5b:53:f7:3d:1b:ab: 31:c3:ce:16:0f:81:1b:f6:00:23:a7:a0:2f:45:cd: b8:09:c5:bf:d6:af:e4:21:b1:dd:95:37:34:b7:d6: 56:dc:67:40:3b:0a:bf:7d:87:c7:a8:81:40:c1:f6: 33:c1:33:16:06:6f:99:f5:65:d7:9d:d3:01:46:52: f5:51:b9:ea:e3:38:4d:b7:1d:c9:83:f8:0e:77:28: 46:2f:a9:0e:ab:dc:1b:45:be:eb:94:ac:ac:c2:96: 1e:8a:09:f7:84:3e:59:78:c7:b8:08:26:22:18:d0: 2d:76:48:f6:57:07:f1:84:74:e7:04:9c:ae:b1:66: 40:67:58:69:ca:f1:4b:27:a1:e2:32:44:3a:1c:dd: 59:59:8a:6a:e3:0e:28:ce:6f:25:27:18:4e:d4:85: 5c:53:bc:42:72:c8:bf:ef:5b:c4:70:76:05:55:fb: d4:66:fe:52:1a:72:6f:f4:af:86:5a:45:f2:91:91: 49:bb:64:b0:a4:10:87:cf:67:56:4e:59:55:00:7a: 4d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:06:D9:B1:6D:A9:1F:25:D5:0D:F7:12:46:E9:D1:F7:3E:4C:E2:18 X509v3 Authority Key Identifier: keyid:54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:83:34:03:76:a5:5c:ca:b4:6b:7e:91:e8:bd:eb:49:1e:a1: c9:20:cb:6d:d2:bd:41:4d:58:3f:8d:f2:39:46:76:e8:69:75: 98:6e:24:a4:93:78:a0:a9:de:ee:fc:ed:59:75:5f:33:b3:05: e0:94:3c:14:9b:db:97:e2:86:92:e7:30:55:47:5b:fd:b5:b2: 53:27:1a:0b:d9:da:1f:43:f3:92:c1:59:ef:71:4d:62:fe:8c: ea:dd:90:b1:cf:ae:2e:cc:a5:92:b9:0a:1d:87:b5:1d:a9:b2: 60:49:e5:92:40:c2:f4:d6:f9:bd:3f:dc:07:b6:d9:54:be:f4: 12:bd:5b:04:35:01:c9:ba:28:38:fa:7d:9c:4f:4f:a8:83:d7: 97:28:68:69:87:f2:40:1d:75:bb:ca:31:f4:f5:a3:8a:0d:8e: d7:09:40:b0:2c:54:c6:a6:0f:33:4f:29:03:87:73:27:3b:fc: a0:6d:df:79:a1:7e:47:12:dd:b9:df:b2:70:24:df:1e:d3:5e: 5e:05:17:a9:06:c6:f6:16:33:df:0c:97:07:c2:90:a2:ea:7d: b6:fe:3a:58:17:36:b3:1c:e1:c1:52:74:b4:f6:e4:80:a6:12: 03:68:51:df:a0:7d:2c:25:90:db:66:1f:ac:c9:19:6e:a5:20: 99:ef:32:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjYyRDExMC8GA1UEBRMoNTQ5MjQ2MjEwNUNFQjA1MkRCQTlEQUU4QkI2MzVGMDVG Nzc3MTYxRDAeFw0yNTA4MDkwNzM3NTdaFw0yNTA4MTYwNzM3NTdaMBgxFjAUBgNV BAMTDTY4OTZmYWQ1LTdiMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY+q3geic2niwtv93tnLKfZ0jfObCLtVAl7W99loTmxM59tueIS0g6Hx1tVPR2 2BIsIi7Cj1tT9z0bqzHDzhYPgRv2ACOnoC9FzbgJxb/Wr+Qhsd2VNzS31lbcZ0A7 Cr99h8eogUDB9jPBMxYGb5n1Zded0wFGUvVRuerjOE23HcmD+A53KEYvqQ6r3BtF vuuUrKzClh6KCfeEPll4x7gIJiIY0C12SPZXB/GEdOcEnK6xZkBnWGnK8UsnoeIy RDoc3VlZimrjDijObyUnGE7UhVxTvEJyyL/vW8RwdgVV+9Rm/lIacm/0r4ZaRfKR kUm7ZLCkEIfPZ1ZOWVUAek0pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwgbZsW2p HyXVDfcSRunR9z5M4hgwHwYDVR0jBBgwFoAUVJJGIQXOsFLbqdrou2NfBfd3Fh0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNjJELzJEQTU3QzNDRUE3 MDExRUY4MTU0QzM2QkM0RjlBRTAyL1ZKSkdJUVhPc0ZMYnFkcm91Mk5mQmZkM0Zo MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkpKR0lRWE9zRkxicWRyb3UyTmZCZmQzRmgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG NjJELzJEQTU3QzNDRUE3MDExRUY4MTU0QzM2QkM0RjlBRTAyL1ZKSkdJUVhPc0ZM YnFkcm91Mk5mQmZkM0ZoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD+DNAN2pVzKtGt+kei960keockgy23SvUFNWD+N8jlGduhpdZhuJKST eKCp3u787Vl1XzOzBeCUPBSb25fihpLnMFVHW/21slMnGgvZ2h9D85LBWe9xTWL+ jOrdkLHPri7MpZK5Ch2HtR2psmBJ5ZJAwvTW+b0/3Ae22VS+9BK9WwQ1Acm6KDj6 fZxPT6iD15coaGmH8kAddbvKMfT1o4oNjtcJQLAsVMamDzNPKQOHcyc7/KBt33mh fkcS3bnfsnAk3x7TXl4FF6kGxvYWM98MlwfCkKLqfbb+OlgXNrMc4cFSdLT25ICm EgNoUd+gfSwlkNtmH6zJGW6lIJnvMoo= -----END CERTIFICATE-----Generated at Sun Aug 10 04:53:04 2025 by rpki-client