$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft File: VN6ZlQt_yVgf6KyWHze3iY81zcM.mft (raw, json) Hash identifier: ufqQIC8SPaLDyjDQtNFHmGwB+sBCVKHCd599Zhk478s= Subject key identifier: 3E:E8:B7:C0:5F:50:8A:57:67:DB:58:9C:EC:15:36:F7:C1:4F:51:10 Authority key identifier: 54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3 Certificate issuer: /CN=A917E458/serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft Manifest number: 2E Signing time: Sat 09 Aug 2025 08:12:17 +0000 Manifest this update: Sat 09 Aug 2025 08:12:16 +0000 Manifest next update: Sat 16 Aug 2025 08:12:16 +0000 Files and hashes: 1: VN6ZlQt_yVgf6KyWHze3iY81zcM.crl (hash: kWIldj6qT1xXEQuj6eOgJAu83IsboTz4YD+4VZdZpR4=) 2: 8F8A915C590C11F0AC0A3639C4F9AE02.roa (hash: 65bo4JvkKG1LiWSEJwhJil93bHGvwvvTBpuZe2kaGMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E458, serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3 Validity Not Before: Aug 9 08:12:16 2025 GMT Not After : Aug 16 08:12:16 2025 GMT Subject: CN=689702e0-af94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c3:ca:ec:20:b1:66:9e:8b:53:23:5f:ca:06: c5:90:56:a7:8d:43:ea:82:3b:e9:8e:e4:f4:a7:3b: e0:4c:2c:09:2f:5d:e6:5c:1c:09:ca:31:ec:d6:fc: 78:e7:98:81:ae:99:89:11:1a:a9:ef:63:21:4b:45: 06:99:06:e3:d6:24:bf:5b:69:cd:53:36:35:5f:ac: 33:7a:08:37:7b:b0:18:eb:6e:81:87:ed:75:d9:29: 3e:4f:29:4c:0a:8d:da:a9:5d:5e:ec:70:82:2e:85: 63:42:a7:4b:aa:e0:60:32:bc:ec:c4:e9:15:55:c6: d3:87:ee:95:76:a5:93:fb:1e:9e:51:14:75:21:8d: 33:9e:d3:d6:4f:be:da:58:ad:fe:c2:46:22:67:5c: 31:8d:e9:d4:f5:e4:1f:03:b4:46:75:af:77:0c:88: 3a:03:2b:d3:b4:25:d6:b7:b9:49:3c:99:76:01:e1: fb:6b:f5:c6:6f:87:81:28:1a:6c:0f:cb:db:71:c0: 2d:0a:48:bb:a0:fd:a3:5e:07:33:f2:1c:5b:4e:78: 99:f5:41:b3:14:33:20:f4:d1:f2:df:d8:2a:a1:49: c2:20:38:56:f9:9a:a5:b4:d9:2d:88:42:9d:a6:6c: 8b:1e:a8:a3:5f:fc:27:42:52:bb:08:f2:1e:e3:ac: 01:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E8:B7:C0:5F:50:8A:57:67:DB:58:9C:EC:15:36:F7:C1:4F:51:10 X509v3 Authority Key Identifier: keyid:54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f8:9c:b0:df:0c:07:1d:94:ed:be:d4:10:db:30:cc:34:ca: 5b:eb:72:b0:81:6b:19:e5:db:42:96:36:6f:55:67:1e:6c:37: 42:bb:1a:42:5c:d7:1f:f1:b1:49:9b:28:17:8b:23:a6:ab:d0: 57:5c:f1:ad:47:94:90:43:e1:17:b8:9e:96:fd:c0:0d:5d:36: 73:35:39:62:8f:a2:67:6d:6b:4e:0d:72:2c:1b:69:a8:2a:95: 63:2f:81:5b:e4:5a:01:99:7b:01:f5:f1:a9:a4:dc:0f:70:28: fe:cf:a8:52:1a:40:da:1e:6f:0c:c2:56:db:86:76:43:f5:fd: d3:09:85:43:71:40:59:28:97:15:90:82:d5:4d:a6:65:32:04: c0:c0:6a:ca:b5:c6:6b:fe:35:1d:d0:86:a5:57:0d:3f:61:9a: e8:40:e9:02:d8:ef:eb:8b:7d:e2:32:1c:a2:d1:13:e2:07:a4: 18:92:fb:3f:14:9b:a4:09:8c:8f:3b:74:0b:57:49:2c:b1:e2: 87:8c:92:f4:d0:49:30:95:c7:7c:61:54:b8:68:25:95:1f:f3: 43:b2:1f:d8:73:28:f8:11:88:8c:cb:75:20:0c:5c:b3:d4:38: 6e:bf:d9:39:62:dc:09:c1:ca:d5:5e:c3:27:7c:b1:2d:0d:7a: e3:ae:96:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTQ1ODExMC8GA1UEBRMoNTRERTk5OTUwQjdGQzk1ODFGRThBQzk2MUYzN0I3ODk4 RjM1Q0RDMzAeFw0yNTA4MDkwODEyMTZaFw0yNTA4MTYwODEyMTZaMBgxFjAUBgNV BAMTDTY4OTcwMmUwLWFmOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJw8rsILFmnotTI1/KBsWQVqeNQ+qCO+mO5PSnO+BMLAkvXeZcHAnKMezW/Hjn mIGumYkRGqnvYyFLRQaZBuPWJL9bac1TNjVfrDN6CDd7sBjrboGH7XXZKT5PKUwK jdqpXV7scIIuhWNCp0uq4GAyvOzE6RVVxtOH7pV2pZP7Hp5RFHUhjTOe09ZPvtpY rf7CRiJnXDGN6dT15B8DtEZ1r3cMiDoDK9O0Jda3uUk8mXYB4ftr9cZvh4EoGmwP y9txwC0KSLug/aNeBzPyHFtOeJn1QbMUMyD00fLf2CqhScIgOFb5mqW02S2IQp2m bIseqKNf/CdCUrsI8h7jrAHdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPui3wF9Q ildn21ic7BU298FPURAwHwYDVR0jBBgwFoAUVN6ZlQt/yVgf6KyWHze3iY81zcMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNDU4LzFFQzcyRjIyMzBE ODExRjBBN0JFMkU0RkM0RjlBRTAyL1ZONlpsUXRfeVZnZjZLeVdIemUzaVk4MXpj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVk42WmxRdF95VmdmNkt5V0h6ZTNpWTgxemNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF NDU4LzFFQzcyRjIyMzBEODExRjBBN0JFMkU0RkM0RjlBRTAyL1ZONlpsUXRfeVZn ZjZLeVdIemUzaVk4MXpjTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA74nLDfDAcdlO2+1BDbMMw0ylvrcrCBaxnl20KWNm9VZx5sN0K7GkJc 1x/xsUmbKBeLI6ar0Fdc8a1HlJBD4Re4npb9wA1dNnM1OWKPomdta04Nciwbaagq lWMvgVvkWgGZewH18amk3A9wKP7PqFIaQNoebwzCVtuGdkP1/dMJhUNxQFkolxWQ gtVNpmUyBMDAasq1xmv+NR3QhqVXDT9hmuhA6QLY7+uLfeIyHKLRE+IHpBiS+z8U m6QJjI87dAtXSSyx4oeMkvTQSTCVx3xhVLhoJZUf80OyH9hzKPgRiIzLdSAMXLPU OG6/2Tli3AnBytVewyd8sS0NeuOulks= -----END CERTIFICATE-----Generated at Sun Aug 10 16:10:28 2025 by rpki-client