$ rpki-client -vvf rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft File: VRTBgTfeq40U8RHJD39rfjDQH2Q.mft (raw, json) Hash identifier: dFmiCObCpoaAgt5+DHlH9WEBwF/O4QsEkVUFRgUqsOQ= Subject key identifier: 82:1B:99:69:DC:EB:46:53:36:6E:CA:1B:D8:A1:40:0B:E0:BD:A0:16 Authority key identifier: 55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64 Certificate issuer: /CN=A916D1DA/serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64 Certificate serial: 348D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft Manifest number: 348D Signing time: Sat 14 Jun 2025 14:59:42 +0000 Manifest this update: Sat 14 Jun 2025 14:59:41 +0000 Manifest next update: Sat 21 Jun 2025 14:59:41 +0000 Files and hashes: 1: VRTBgTfeq40U8RHJD39rfjDQH2Q.crl (hash: kBskaf30rSKlnp3eETO9AzC8JsJ3Ofh9t/s5KW1ZqLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13453 (0x348d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D1DA, serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64 Validity Not Before: Jun 14 14:59:41 2025 GMT Not After : Jun 21 14:59:41 2025 GMT Subject: CN=684d8e5e-1f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c7:14:13:85:b9:c6:49:19:02:2c:a8:eb:df: 4b:66:d7:ec:ed:f8:b7:83:64:b3:20:f0:f7:83:1e: 92:a7:b3:3b:51:8d:16:a8:a9:4b:9d:c4:14:cf:f1: c6:a2:15:14:f5:18:96:92:dd:33:b0:f3:81:58:a2: 89:ab:f3:76:1d:fb:0a:a0:be:7e:bc:c3:af:45:0f: 37:f9:48:98:8a:56:29:59:72:16:c1:29:5e:40:2c: d6:09:7e:82:9f:f3:2b:20:82:78:5f:93:1b:bc:03: 1d:83:81:27:73:e0:5e:23:92:75:6e:76:3b:ab:0f: 88:86:85:a3:4e:ca:a3:ef:00:e7:33:4f:e0:1d:38: e8:a3:6d:fd:7a:18:8a:75:a7:03:af:eb:46:5b:c9: 1d:f1:97:0b:af:03:50:88:d9:7f:f7:79:90:cb:00: fa:b2:e4:db:52:dd:68:54:c0:85:66:d5:2e:52:95: 9d:fa:28:45:84:46:d2:73:41:f8:a9:96:ee:d0:ec: 7c:60:05:33:59:2f:cc:85:8d:6c:31:e7:e9:ef:2a: 78:d1:98:0c:7f:47:83:62:bc:31:0f:da:ba:62:d7: 6a:5c:5d:c8:1c:88:94:05:7d:44:ec:55:a6:65:ab: 99:6e:ca:e8:98:c4:57:89:e3:ef:30:a8:07:22:8b: 95:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1B:99:69:DC:EB:46:53:36:6E:CA:1B:D8:A1:40:0B:E0:BD:A0:16 X509v3 Authority Key Identifier: keyid:55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:46:8b:2c:19:6b:dd:a6:fd:f9:7a:c6:b4:47:dd:a1:e4:84: 83:4c:f1:c3:ee:75:cb:b0:7b:a3:e4:39:3d:ef:eb:0a:33:ae: e1:c0:23:ed:04:82:00:49:3a:05:19:22:df:ad:44:bb:69:71: c8:8a:74:28:97:c2:23:85:09:d1:ef:0d:01:f1:d2:12:c5:dd: 44:3f:6e:6f:03:8a:c8:5a:75:26:00:88:08:24:b2:77:99:33: c8:15:af:b2:29:fe:74:5c:ec:71:54:9e:37:20:8a:ba:68:a5: de:b0:d1:b6:e1:c3:ba:47:73:9e:9c:5c:45:7e:00:7a:0a:bb: 9a:bd:55:d9:f2:a4:20:ae:a6:c2:f5:d3:c5:a7:7e:e9:8d:d8: bc:e7:91:22:1c:0b:5c:9b:30:23:0c:da:61:b6:f5:54:ce:3e: 12:83:eb:6c:cb:43:e7:4f:5d:43:4f:d8:28:12:5d:98:c4:b7: 51:60:d0:77:ce:ce:55:e4:a6:04:69:c0:02:0e:1a:8b:79:cc: 68:98:63:ea:50:8c:8c:91:cc:a8:15:6e:1a:12:21:6a:5a:ae: 7b:79:33:f1:23:b9:e6:05:07:46:0d:3b:d7:37:89:03:51:22: c7:75:74:1d:b5:6b:35:27:05:4e:90:3d:35:58:d9:1b:42:8b: f3:be:da:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxREExMTAvBgNVBAUTKDU1MTRDMTgxMzdERUFCOEQxNEYxMTFDOTBGN0Y2QjdF MzBEMDFGNjQwHhcNMjUwNjE0MTQ1OTQxWhcNMjUwNjIxMTQ1OTQxWjAYMRYwFAYD VQQDEw02ODRkOGU1ZS0xZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwscUE4W5xkkZAiyo699LZtfs7fi3g2SzIPD3gx6Sp7M7UY0WqKlLncQUz/HG ohUU9RiWkt0zsPOBWKKJq/N2HfsKoL5+vMOvRQ83+UiYilYpWXIWwSleQCzWCX6C n/MrIIJ4X5MbvAMdg4Enc+BeI5J1bnY7qw+IhoWjTsqj7wDnM0/gHTjoo239ehiK dacDr+tGW8kd8ZcLrwNQiNl/93mQywD6suTbUt1oVMCFZtUuUpWd+ihFhEbSc0H4 qZbu0Ox8YAUzWS/MhY1sMefp7yp40ZgMf0eDYrwxD9q6YtdqXF3IHIiUBX1E7FWm ZauZbsromMRXiePvMKgHIouVKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIIbmWnc 60ZTNm7KG9ihQAvgvaAWMB8GA1UdIwQYMBaAFFUUwYE33quNFPERyQ9/a34w0B9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDFEQS8wMDhDRTUyQTFE OUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0MFU4UkhKRDM5cmZqRFFI MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSVEJnVGZlcTQwVThSSEpEMzlyZmpEUUgyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDFEQS8wMDhDRTUyQTFEOUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0 MFU4UkhKRDM5cmZqRFFIMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLRossGWvdpv35esa0R92h5ISDTPHD7nXLsHuj5Dk97+sKM67hwCPt BIIASToFGSLfrUS7aXHIinQol8IjhQnR7w0B8dISxd1EP25vA4rIWnUmAIgIJLJ3 mTPIFa+yKf50XOxxVJ43IIq6aKXesNG24cO6R3OenFxFfgB6CruavVXZ8qQgrqbC 9dPFp37pjdi855EiHAtcmzAjDNphtvVUzj4Sg+tsy0PnT11DT9goEl2YxLdRYNB3 zs5V5KYEacACDhqLecxomGPqUIyMkcyoFW4aEiFqWq57eTPxI7nmBQdGDTvXN4kD USLHdXQdtWs1JwVOkD01WNkbQovzvtpH -----END CERTIFICATE-----Generated at Sat Jun 14 18:46:55 2025 by rpki-client