$ rpki-client -vvf rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft File: VRT85Dhj9Rga80k4LThBTpYPCW8.mft (raw, json) Hash identifier: BIWNUbl06eDYDY36NMefBlkgLjhgO7sEC+X50BjXm4Q= Subject key identifier: AC:35:02:DD:32:94:CF:B5:A5:C3:77:94:70:6A:35:DB:D2:B5:F6:6C Authority key identifier: 55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F Certificate issuer: /CN=A9195262/serialNumber=5514FCE43863F5181AF349382D38414E960F096F Certificate serial: 0901 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft Manifest number: 08F8 Signing time: Mon 04 Aug 2025 20:38:50 +0000 Manifest this update: Mon 04 Aug 2025 20:38:50 +0000 Manifest next update: Mon 11 Aug 2025 20:38:50 +0000 Files and hashes: 1: VRT85Dhj9Rga80k4LThBTpYPCW8.crl (hash: 3b0jHnrdU1wY1jLY/OjZ4OinbUVErEbP3zf8sEkSQoI=) 2: DFC21CD8B1CF11EAA8732709C4F9AE02.roa (hash: fBbrGPpyBqHG5VjMBpwa+Y1+AP7kUm89FdDIYPNDwG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 20:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2305 (0x901) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195262, serialNumber=5514FCE43863F5181AF349382D38414E960F096F Validity Not Before: Aug 4 20:38:50 2025 GMT Not After : Aug 11 20:38:50 2025 GMT Subject: CN=68911a5a-d126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ab:6d:7a:6b:92:68:69:05:aa:bf:c9:c1:77: 76:d7:80:32:5f:4b:97:20:39:33:1d:9c:72:c4:75: f8:7f:61:21:c1:75:d4:49:52:08:fb:75:99:15:7e: 93:f5:ef:9e:73:c2:47:36:04:5b:45:2a:79:a4:7c: 59:2d:67:0d:d1:9a:df:99:ee:a2:25:8b:3d:42:ef: 77:f6:a9:fe:27:d5:84:5f:0d:e9:33:67:37:0b:07: 77:54:30:5b:b7:eb:07:a3:15:f9:53:f0:13:cf:0f: 75:04:30:49:73:35:41:ac:df:78:35:e4:79:60:08: d3:6b:33:aa:12:3c:59:dd:cd:e8:02:ff:e7:c6:75: e6:13:73:41:ba:11:24:f5:4a:fa:ae:88:34:5b:64: 3f:4b:84:2d:43:56:a4:68:14:58:6f:2a:55:7f:83: e4:58:36:c2:c3:fe:9e:fc:f0:42:1a:59:37:8e:08: fd:d9:37:b8:b9:23:2a:0d:3b:e6:42:26:0d:04:e1: cb:df:1c:cd:3d:38:57:21:86:13:34:4d:11:1a:20: 08:65:2e:8a:64:8d:f2:c1:f4:66:d6:b1:dc:71:cc: 2d:dc:5e:96:01:96:e5:b6:7e:5c:04:cc:b6:48:ef: b4:b3:18:9e:6e:f8:88:10:b5:da:22:7f:5d:90:74: 2d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:35:02:DD:32:94:CF:B5:A5:C3:77:94:70:6A:35:DB:D2:B5:F6:6C X509v3 Authority Key Identifier: keyid:55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c8:e8:fd:ef:0e:e6:d0:6a:50:24:72:b4:5a:d3:c7:01:0c: f3:ec:a2:61:7f:c4:ba:8e:78:0a:35:c9:99:c3:60:3d:ec:32: 34:25:5e:17:15:a3:ad:f8:78:74:6d:4b:0f:69:51:a1:10:09: 06:b8:4f:47:63:7d:7d:fc:94:9c:51:d6:d4:aa:88:03:e1:2b: f2:1a:71:6e:4a:55:6b:a6:4b:74:91:15:92:d7:10:df:9b:cc: a9:78:22:3e:6a:6d:0c:f8:0e:9c:83:ff:c5:2f:23:0b:90:de: 15:40:17:97:5d:f0:d1:28:fc:2e:66:db:f1:0b:28:5c:31:e8: ca:9f:b3:f2:94:ce:26:fd:e3:25:87:c2:30:2c:6c:77:c2:f5: c5:be:64:2c:b7:82:f7:f1:44:71:35:6f:b4:4d:f7:16:50:6b: 3d:4b:44:6f:5b:01:7e:1f:d7:34:a6:66:a1:49:01:66:a1:e4: f8:b2:57:93:b4:88:18:19:3d:e7:d3:01:e6:1d:01:63:7e:88: 52:8a:70:62:c2:5e:35:89:a4:9d:10:02:b8:d1:c9:80:46:f7: d8:e7:a2:fb:3b:6d:14:89:42:00:7e:c3:8e:05:e9:b8:9d:e1: 8c:83:3e:2c:94:b1:4e:eb:54:8c:a7:e4:3d:b5:68:74:e6:db: ca:9a:01:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUyNjIxMTAvBgNVBAUTKDU1MTRGQ0U0Mzg2M0Y1MTgxQUYzNDkzODJEMzg0MTRF OTYwRjA5NkYwHhcNMjUwODA0MjAzODUwWhcNMjUwODExMjAzODUwWjAYMRYwFAYD VQQDEw02ODkxMWE1YS1kMTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvattemuSaGkFqr/JwXd214AyX0uXIDkzHZxyxHX4f2EhwXXUSVII+3WZFX6T 9e+ec8JHNgRbRSp5pHxZLWcN0Zrfme6iJYs9Qu939qn+J9WEXw3pM2c3Cwd3VDBb t+sHoxX5U/ATzw91BDBJczVBrN94NeR5YAjTazOqEjxZ3c3oAv/nxnXmE3NBuhEk 9Ur6rog0W2Q/S4QtQ1akaBRYbypVf4PkWDbCw/6e/PBCGlk3jgj92Te4uSMqDTvm QiYNBOHL3xzNPThXIYYTNE0RGiAIZS6KZI3ywfRm1rHcccwt3F6WAZbltn5cBMy2 SO+0sxiebviIELXaIn9dkHQtwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKw1At0y lM+1pcN3lHBqNdvStfZsMB8GA1UdIwQYMBaAFFUU/OQ4Y/UYGvNJOC04QU6WDwlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTI2Mi9GN0E2RDU5Q0Iw RkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlSZ2E4MGs0TFRoQlRwWVBD VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSVDg1RGhqOVJnYTgwazRMVGhCVHBZUENXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTI2Mi9GN0E2RDU5Q0IwRkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlS Z2E4MGs0TFRoQlRwWVBDVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbyOj97w7m0GpQJHK0WtPHAQzz7KJhf8S6jngKNcmZw2A97DI0JV4X FaOt+Hh0bUsPaVGhEAkGuE9HY319/JScUdbUqogD4SvyGnFuSlVrpkt0kRWS1xDf m8ypeCI+am0M+A6cg//FLyMLkN4VQBeXXfDRKPwuZtvxCyhcMejKn7PylM4m/eMl h8IwLGx3wvXFvmQst4L38URxNW+0TfcWUGs9S0RvWwF+H9c0pmahSQFmoeT4sleT tIgYGT3n0wHmHQFjfohSinBiwl41iaSdEAK40cmARvfY56L7O20UiUIAfsOOBem4 neGMgz4slLFO61SMp+Q9tWh05tvKmgFd -----END CERTIFICATE-----Generated at Wed Aug 6 14:10:41 2025 by rpki-client