$ rpki-client -vvf rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft File: VktpF48mnvuWt2kW94FwdU6PDIc.mft (raw, json) Hash identifier: 70y1u26+Ep1nAMQlgRvim1bBVSbBU9aMbOc7P2H4D4k= Subject key identifier: 34:BA:BE:9F:D6:58:50:D8:52:B0:88:04:89:EF:A1:FA:3C:37:95:D6 Authority key identifier: 56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87 Certificate issuer: /CN=A91A99C5/serialNumber=564B69178F269EFB96B76916F78170754E8F0C87 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft Manifest number: 0F Signing time: Tue 05 Aug 2025 08:44:33 +0000 Manifest this update: Tue 05 Aug 2025 08:44:33 +0000 Manifest next update: Tue 12 Aug 2025 08:44:33 +0000 Files and hashes: 1: VktpF48mnvuWt2kW94FwdU6PDIc.crl (hash: YQmItmmuYBD3FaaABlcgAueA/tCLFMkpMqT/qvAZk3A=) 2: AE31872C5DBD11F083DD7F61C4F9AE02.roa (hash: eyKHyX1nC8rcYA1x+etP21iE0ELwmQ5yf7hxtFXOuMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A99C5, serialNumber=564B69178F269EFB96B76916F78170754E8F0C87 Validity Not Before: Aug 5 08:44:33 2025 GMT Not After : Aug 12 08:44:33 2025 GMT Subject: CN=6891c471-4e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7d:f8:f3:33:86:e5:ca:3c:88:c1:e4:be:75: f6:c9:f8:aa:b5:db:22:de:c6:2c:64:b8:92:99:93: 8e:3b:fb:76:ac:2f:12:5f:7b:71:2f:9c:75:79:5f: 35:88:de:5e:60:7f:ac:50:d9:d5:42:82:dc:a9:bf: 88:fb:ee:06:fc:6a:d5:cb:35:84:16:e9:e7:22:01: a6:0c:da:fc:9d:58:6f:2d:5a:fc:f6:cd:a9:a4:2c: 67:9c:b7:2b:0f:77:96:cc:20:1a:65:91:f4:2e:41: ea:7d:94:c9:e3:8c:7a:98:8d:f5:a5:49:59:c5:6c: fd:94:1d:87:86:b1:37:45:6e:53:73:92:41:63:65: 60:53:76:c4:f7:fe:2e:8f:8d:8c:5d:28:ae:50:55: 0c:33:b1:94:d0:81:4e:71:eb:c2:25:01:8e:8f:21: f1:03:42:16:ff:54:9e:10:85:86:f3:b2:04:fb:e5: 10:6a:23:e1:9e:12:f3:f7:01:58:45:41:b4:b3:87: 50:07:16:32:bd:b9:5f:36:36:38:59:3a:4e:88:b1: bf:62:cf:68:c7:3b:95:ed:c0:7c:78:30:26:b0:3b: 01:44:96:d7:ca:a7:cd:39:3f:d0:e4:ce:04:d8:de: f1:2c:61:6c:f0:36:12:86:15:f6:35:06:91:a5:54: 69:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:BA:BE:9F:D6:58:50:D8:52:B0:88:04:89:EF:A1:FA:3C:37:95:D6 X509v3 Authority Key Identifier: keyid:56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:50:b3:f2:8e:30:7b:f8:c8:14:5e:d1:01:1f:04:70:7c:27: 69:8e:31:47:4b:aa:b9:f2:c7:b8:27:2b:0a:59:48:10:5c:2d: 0b:d9:27:c6:2c:56:e7:0b:4e:4b:11:8c:3c:29:a1:61:66:8c: 90:ee:83:5b:73:06:17:eb:aa:37:b5:42:9b:0a:cc:a6:48:15: a8:0d:17:66:bc:f4:37:8e:3e:a6:4f:a4:fb:eb:cb:d6:46:76: e2:5a:23:cf:1d:2b:d4:0d:8e:af:fd:48:92:af:92:10:11:02: 43:56:6d:70:92:54:bd:cb:60:08:ad:e9:8b:f2:90:c4:b6:d4: a6:18:a4:76:3f:f8:7b:bf:be:1a:66:3f:d2:39:94:f0:b5:c9: fb:04:79:2b:97:65:55:58:80:25:d8:25:4e:67:f6:10:01:57: ee:6f:74:b5:7d:97:06:e3:4d:d3:40:cc:b6:f7:67:fb:60:ad: fe:2e:58:53:bd:cc:b2:fa:d4:80:30:a1:45:e6:16:8b:4f:40: 77:8c:9f:4e:c6:d1:a7:b6:32:f2:23:09:d5:45:54:b8:e5:7c: f9:04:22:dc:a2:87:6a:ac:77:77:ca:6d:1b:75:a8:ea:0c:32: c4:1b:36:e5:52:32:07:16:27:33:cb:0c:2e:b7:e0:72:19:57: a2:57:bd:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTlDNTExMC8GA1UEBRMoNTY0QjY5MTc4RjI2OUVGQjk2Qjc2OTE2Rjc4MTcwNzU0 RThGMEM4NzAeFw0yNTA4MDUwODQ0MzNaFw0yNTA4MTIwODQ0MzNaMBgxFjAUBgNV BAMTDTY4OTFjNDcxLTRlNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeffjzM4blyjyIweS+dfbJ+Kq12yLexixkuJKZk447+3asLxJfe3EvnHV5XzWI 3l5gf6xQ2dVCgtypv4j77gb8atXLNYQW6eciAaYM2vydWG8tWvz2zamkLGectysP d5bMIBplkfQuQep9lMnjjHqYjfWlSVnFbP2UHYeGsTdFblNzkkFjZWBTdsT3/i6P jYxdKK5QVQwzsZTQgU5x68IlAY6PIfEDQhb/VJ4QhYbzsgT75RBqI+GeEvP3AVhF QbSzh1AHFjK9uV82NjhZOk6Isb9iz2jHO5XtwHx4MCawOwFEltfKp805P9DkzgTY 3vEsYWzwNhKGFfY1BpGlVGnfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNLq+n9ZY UNhSsIgEie+h+jw3ldYwHwYDVR0jBBgwFoAUVktpF48mnvuWt2kW94FwdU6PDIcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5OUM1L0ZDMDFFODdDNURC QjExRjA5QUExNzg1MEM0RjlBRTAyL1ZrdHBGNDhtbnZ1V3Qya1c5NEZ3ZFU2UERJ Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVmt0cEY0OG1udnVXdDJrVzk0RndkVTZQREljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 OUM1L0ZDMDFFODdDNURCQjExRjA5QUExNzg1MEM0RjlBRTAyL1ZrdHBGNDhtbnZ1 V3Qya1c5NEZ3ZFU2UERJYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGlQs/KOMHv4yBRe0QEfBHB8J2mOMUdLqrnyx7gnKwpZSBBcLQvZJ8Ys VucLTksRjDwpoWFmjJDug1tzBhfrqje1QpsKzKZIFagNF2a89DeOPqZPpPvry9ZG duJaI88dK9QNjq/9SJKvkhARAkNWbXCSVL3LYAit6YvykMS21KYYpHY/+Hu/vhpm P9I5lPC1yfsEeSuXZVVYgCXYJU5n9hABV+5vdLV9lwbjTdNAzLb3Z/tgrf4uWFO9 zLL61IAwoUXmFotPQHeMn07G0ae2MvIjCdVFVLjlfPkEItyih2qsd3fKbRt1qOoM MsQbNuVSMgcWJzPLDC634HIZV6JXvQc= -----END CERTIFICATE-----Generated at Thu Aug 7 04:39:07 2025 by rpki-client