$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft File: VlIPoddulfCBm23dSWe0VQRphp0.mft (raw, json) Hash identifier: 8uWOYMyyzeUEckUnprX+RU8cvSBzuurfEHLuFU+gjPo= Subject key identifier: DF:EC:FB:BC:19:CA:1A:4B:9E:5F:64:15:EE:16:31:6F:27:76:48:DC Authority key identifier: 56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D Certificate issuer: /CN=A91A91CB/serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft Manifest number: 59 Signing time: Tue 05 Aug 2025 07:45:54 +0000 Manifest this update: Tue 05 Aug 2025 07:45:53 +0000 Manifest next update: Tue 12 Aug 2025 07:45:53 +0000 Files and hashes: 1: VlIPoddulfCBm23dSWe0VQRphp0.crl (hash: l3zs4aGv+pcGLvwOyqfb9rYwIeci8qnKzo2y3pKlxDY=) 2: EE8CD88EEA5A11EF922B276DC4F9AE02.roa (hash: NgoL1gjr88ZdEn/6hgZXntqKOlCBVmw0eMD59yFjWlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:45:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91CB, serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D Validity Not Before: Aug 5 07:45:53 2025 GMT Not After : Aug 12 07:45:53 2025 GMT Subject: CN=6891b6b2-0100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e7:b7:e5:75:cd:f9:5f:5b:4c:60:c6:38:e9: a6:2a:5f:51:25:87:56:3d:03:9c:a1:f6:34:43:ea: f4:20:e3:81:93:b8:4c:28:4b:f9:7e:7e:6e:fe:04: b6:5d:5f:ea:36:f8:e5:81:85:33:53:3a:ad:a5:6e: 9f:81:67:82:8f:5b:30:10:12:17:08:2e:7a:65:1c: ec:66:c7:89:a0:69:38:88:81:57:c0:ee:a8:73:b8: 00:b7:0f:54:71:85:41:6b:ca:1e:a7:7d:5d:fa:4b: 67:9a:0b:2e:12:c2:d2:d5:9e:99:3c:14:78:4d:76: 3b:4e:8d:55:04:de:f5:4b:e0:56:9f:d3:01:37:cf: e7:3e:25:bc:c9:99:7e:36:15:2a:38:06:36:74:7c: 7f:96:f6:f7:12:41:98:cf:89:44:f0:0b:0a:69:bd: 3e:1e:3b:16:4b:09:c0:c3:9e:07:2e:89:6a:e3:ba: 38:5c:1b:2c:bb:75:56:13:77:dd:ac:92:0c:c1:9f: eb:8c:78:72:70:16:f6:70:1a:fc:2c:b2:a1:2b:6d: 30:0e:e6:4b:b2:a6:39:11:7c:a1:3a:45:b9:c3:36: 0e:1d:24:c6:72:69:07:56:4d:19:f9:fa:8a:a1:d5: 91:f1:88:d0:75:ca:37:cf:27:85:88:78:b6:3a:86: 3e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EC:FB:BC:19:CA:1A:4B:9E:5F:64:15:EE:16:31:6F:27:76:48:DC X509v3 Authority Key Identifier: keyid:56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:72:c4:d2:fe:99:37:cf:b4:46:4b:6e:2d:d1:ec:c2:64:ce: aa:ad:72:92:2d:ff:7d:48:5c:96:ce:42:d3:61:0f:f6:05:c1: 22:d1:74:a2:bc:74:51:57:bd:32:ec:b8:8b:8d:1f:bb:65:b0: 7c:17:b7:c2:5f:a5:65:38:81:51:91:b4:69:a9:b3:ca:48:4e: 95:bc:20:a8:12:43:d5:d8:77:e3:57:57:64:d4:c7:d8:56:34: 85:05:04:10:03:86:e7:57:ca:ec:0f:4a:85:11:76:69:6d:f7: a9:f3:73:1c:dd:ef:cc:76:11:68:a7:fd:fd:c5:1d:a3:ad:f9: 64:23:df:2e:5c:e2:31:35:2e:f8:d2:7a:0a:41:8c:f2:4d:ec: ed:25:31:9d:c0:d1:ae:31:59:78:ff:de:a3:32:67:eb:3d:88: f4:9a:ca:a0:75:09:c4:87:46:1f:20:7b:de:0e:92:95:dd:4d: 52:31:b5:eb:9e:53:4b:80:79:2c:03:04:46:9b:1b:28:43:09: f1:b8:36:f6:49:c4:0b:be:a8:02:5f:ef:59:6d:ec:dc:b8:4c: 75:61:37:d6:01:1f:ab:5c:41:50:9a:e2:ef:86:2d:ea:3a:b4: 74:dd:a7:5d:68:8f:d4:6b:20:a3:59:5d:1f:f8:8a:d9:2e:ca: 96:90:d6:3f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTFDQjExMC8GA1UEBRMoNTY1MjBGQTFENzZFOTVGMDgxOUI2RERENDk2N0I0NTUw NDY5ODY5RDAeFw0yNTA4MDUwNzQ1NTNaFw0yNTA4MTIwNzQ1NTNaMBgxFjAUBgNV BAMTDTY4OTFiNmIyLTAxMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDc57fldc35X1tMYMY46aYqX1Elh1Y9A5yh9jRD6vQg44GTuEwoS/l+fm7+BLZd X+o2+OWBhTNTOq2lbp+BZ4KPWzAQEhcILnplHOxmx4mgaTiIgVfA7qhzuAC3D1Rx hUFryh6nfV36S2eaCy4SwtLVnpk8FHhNdjtOjVUE3vVL4Faf0wE3z+c+JbzJmX42 FSo4BjZ0fH+W9vcSQZjPiUTwCwppvT4eOxZLCcDDngcuiWrjujhcGyy7dVYTd92s kgzBn+uMeHJwFvZwGvwssqErbTAO5kuypjkRfKE6RbnDNg4dJMZyaQdWTRn5+oqh 1ZHxiNB1yjfPJ4WIeLY6hj7pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3+z7vBnK GkueX2QV7hYxbyd2SNwwHwYDVR0jBBgwFoAUVlIPoddulfCBm23dSWe0VQRphp0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5MUNCLzVCNkZBMzYwRUE1 QTExRUZCODRBRTQ2OEM0RjlBRTAyL1ZsSVBvZGR1bGZDQm0yM2RTV2UwVlFScGhw MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVmxJUG9kZHVsZkNCbTIzZFNXZTBWUVJwaHAwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 MUNCLzVCNkZBMzYwRUE1QTExRUZCODRBRTQ2OEM0RjlBRTAyL1ZsSVBvZGR1bGZD Qm0yM2RTV2UwVlFScGhwMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIZyxNL+mTfPtEZLbi3R7MJkzqqtcpIt/31IXJbOQtNhD/YFwSLRdKK8 dFFXvTLsuIuNH7tlsHwXt8JfpWU4gVGRtGmps8pITpW8IKgSQ9XYd+NXV2TUx9hW NIUFBBADhudXyuwPSoURdmlt96nzcxzd78x2EWin/f3FHaOt+WQj3y5c4jE1LvjS egpBjPJN7O0lMZ3A0a4xWXj/3qMyZ+s9iPSayqB1CcSHRh8ge94OkpXdTVIxteue U0uAeSwDBEabGyhDCfG4NvZJxAu+qAJf71lt7Ny4THVhN9YBH6tcQVCa4u+GLeo6 tHTdp11oj9RrIKNZXR/4itkuypaQ1j8= -----END CERTIFICATE-----Generated at Wed Aug 6 14:23:03 2025 by rpki-client