$ rpki-client -vvf rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft File: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft (raw, json) Hash identifier: 4+8NEjKBbkYV2CM1vbCQVn04kh0Qr2pNo5kzWnjdXC4= Subject key identifier: 57:63:F9:D7:11:4C:74:21:97:16:90:F5:A1:A3:BD:4E:31:A0:B7:D1 Authority key identifier: 56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE Certificate issuer: /CN=A91433B3/serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft Manifest number: 01C7 Signing time: Tue 05 Aug 2025 03:20:15 +0000 Manifest this update: Tue 05 Aug 2025 03:20:14 +0000 Manifest next update: Tue 12 Aug 2025 03:20:14 +0000 Files and hashes: 1: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl (hash: lT/yM9LQPrRXSwUAbMwvy/HKodGmxM817NuMGXUPtlA=) 2: AB6C302EB5F311EDA0148B2DC4F9AE02.roa (hash: 4FOvuF+lrbDRETyeVF9s3HBZnjQN5y+IfUmzH88TfmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91433B3, serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE Validity Not Before: Aug 5 03:20:14 2025 GMT Not After : Aug 12 03:20:14 2025 GMT Subject: CN=6891786f-6f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dc:42:47:49:61:64:44:c4:22:27:18:07:fe: 57:91:d4:99:76:5a:34:8d:7a:1a:60:be:24:b0:6f: f8:4f:18:19:43:9c:92:94:7f:08:e3:02:e1:d7:f5: e8:cc:d6:25:35:84:22:5b:23:d7:8a:0e:0e:9d:91: b2:df:f9:7b:5d:b2:9a:59:be:c0:6e:90:c4:c6:ca: 32:1e:fd:10:78:fc:80:7f:ca:ab:42:be:42:dd:9c: 86:94:fb:b0:18:bd:22:e4:f9:e9:ed:af:aa:69:04: 6e:89:3d:d4:83:aa:a9:51:7e:17:ee:2f:58:b1:b8: 92:01:d8:b9:b7:cd:97:01:2c:22:fb:2e:0c:22:27: d2:7c:2c:44:2a:5f:dd:9c:09:b0:07:3e:0d:f6:94: eb:46:d9:a5:c0:3f:91:a0:77:7b:3f:9b:d4:32:12: c7:c0:2f:95:3f:d4:2f:fa:95:45:f3:bd:4a:ee:33: da:e9:24:1f:27:f9:35:a8:fa:de:b1:1e:c6:6d:46: b7:37:09:a5:7e:92:2e:91:6d:09:66:11:f4:f3:23: 70:8a:08:c6:91:b5:24:b9:70:cf:7a:bd:5c:25:fc: 23:df:5c:cb:52:87:91:01:6b:17:4f:37:0e:4a:20: 37:1d:4d:11:c2:81:f5:06:9c:ad:aa:28:5e:fa:92: 69:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:63:F9:D7:11:4C:74:21:97:16:90:F5:A1:A3:BD:4E:31:A0:B7:D1 X509v3 Authority Key Identifier: keyid:56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a2:61:4e:a3:5e:ea:da:ec:da:aa:4b:dc:19:ff:5d:40:fd: 62:ad:74:1d:38:53:63:76:36:00:b1:c6:f0:93:65:d7:b3:d4: 80:64:0d:a7:1c:ec:54:39:c1:7e:28:ee:ef:63:b1:f0:f1:b7: 45:01:69:0f:f9:44:c7:94:d0:6e:a4:15:b4:31:ae:a2:b1:6f: 20:91:ff:8f:1c:83:58:6f:79:16:2a:ad:8e:27:4e:75:ec:3b: ff:c8:ae:c6:4b:d2:81:59:52:23:c2:5b:29:19:8b:f9:a0:ef: f1:fb:0b:ad:8c:42:38:64:1a:1e:ee:09:67:06:e9:f2:94:f8: aa:e1:b2:a0:36:0d:59:5e:e3:6a:8e:78:3e:9c:5d:fe:4c:bb: d9:b1:51:69:71:5a:a9:da:df:2f:fa:11:1c:54:9e:23:59:68: 71:62:67:63:db:16:d3:e4:d7:c9:9e:18:fe:a4:b0:63:bc:5d: 63:74:b6:78:80:9b:67:a5:5a:5a:92:b5:45:80:e9:1d:66:b5: ba:71:f9:76:1e:4d:05:46:94:5c:aa:8b:23:4e:a2:c5:48:0c: 71:c8:5a:08:ca:86:48:46:2a:45:81:66:89:10:14:46:f2:0a: 15:b5:7d:d1:ce:57:01:fb:23:d0:c6:9d:a1:c3:69:20:90:33: ef:4e:be:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzQjMxMTAvBgNVBAUTKDU2QkI2RjMxMzdEOEREOUVCOTdFMzgzQkM3RjQ2MUQ5 MEY4NURERkUwHhcNMjUwODA1MDMyMDE0WhcNMjUwODEyMDMyMDE0WjAYMRYwFAYD VQQDEw02ODkxNzg2Zi02ZjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dxCR0lhZETEIicYB/5XkdSZdlo0jXoaYL4ksG/4TxgZQ5ySlH8I4wLh1/Xo zNYlNYQiWyPXig4OnZGy3/l7XbKaWb7AbpDExsoyHv0QePyAf8qrQr5C3ZyGlPuw GL0i5Pnp7a+qaQRuiT3Ug6qpUX4X7i9YsbiSAdi5t82XASwi+y4MIifSfCxEKl/d nAmwBz4N9pTrRtmlwD+RoHd7P5vUMhLHwC+VP9Qv+pVF871K7jPa6SQfJ/k1qPre sR7GbUa3NwmlfpIukW0JZhH08yNwigjGkbUkuXDPer1cJfwj31zLUoeRAWsXTzcO SiA3HU0RwoH1Bpytqihe+pJpJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdj+dcR THQhlxaQ9aGjvU4xoLfRMB8GA1UdIwQYMBaAFFa7bzE32N2euX44O8f0YdkPhd3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzNCMy9CREZFMThDQ0I1 RjAxMUVEQTdEMEVGN0NDNEY5QUUwMi9WcnR2TVRmWTNaNjVmamc3eF9SaDJRLUYz ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZydHZNVGZZM1o2NWZqZzd4X1JoMlEtRjNmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzNCMy9CREZFMThDQ0I1RjAxMUVEQTdEMEVGN0NDNEY5QUUwMi9WcnR2TVRmWTNa NjVmamc3eF9SaDJRLUYzZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdomFOo17q2uzaqkvcGf9dQP1irXQdOFNjdjYAscbwk2XXs9SAZA2n HOxUOcF+KO7vY7Hw8bdFAWkP+UTHlNBupBW0Ma6isW8gkf+PHINYb3kWKq2OJ051 7Dv/yK7GS9KBWVIjwlspGYv5oO/x+wutjEI4ZBoe7glnBunylPiq4bKgNg1ZXuNq jng+nF3+TLvZsVFpcVqp2t8v+hEcVJ4jWWhxYmdj2xbT5NfJnhj+pLBjvF1jdLZ4 gJtnpVpakrVFgOkdZrW6cfl2Hk0FRpRcqosjTqLFSAxxyFoIyoZIRipFgWaJEBRG 8goVtX3RzlcB+yPQxp2hw2kgkDPvTr6Y -----END CERTIFICATE-----Generated at Thu Aug 7 04:33:12 2025 by rpki-client