$ rpki-client -vvf rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft File: VCRPZF3qDVCWaFgNE46CUnn7Vng.mft (raw, json) Hash identifier: PbP16MeGxIsAUVLpeMc+QmIZ6O/1WpzwrF+EsyRC6wo= Subject key identifier: 71:DD:13:29:88:10:80:50:3F:B8:E1:0D:B1:61:52:81:FF:2E:44:1E Authority key identifier: 54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 Certificate issuer: /CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678 Certificate serial: 0D30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft Manifest number: 0D26 Signing time: Fri 08 Aug 2025 18:15:46 +0000 Manifest this update: Fri 08 Aug 2025 18:15:45 +0000 Manifest next update: Fri 15 Aug 2025 18:15:45 +0000 Files and hashes: 1: VCRPZF3qDVCWaFgNE46CUnn7Vng.crl (hash: 9eksWNsUoB+7omdKkpbIxBI3gsof4LojeOers2ReJXY=) 2: 690390E80FAA11EB8B893F1EC4F9AE02.roa (hash: 9FxIJk5By9GC/1mM3LBBThqiUIJi3J3T7y2yMdVI55E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3376 (0xd30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B624E, serialNumber=54244F645DEA0D509668580D138E825279FB5678 Validity Not Before: Aug 8 18:15:45 2025 GMT Not After : Aug 15 18:15:45 2025 GMT Subject: CN=68963ed1-32e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9d:70:b8:b5:81:d5:e8:c3:71:f4:a4:88:b7: 74:d1:4b:a0:37:94:c3:43:71:8c:59:ae:f6:82:c6: 55:a7:45:4b:53:13:b1:6d:64:1b:fb:ea:99:6c:f1: 27:c6:8d:7f:f2:e9:62:7b:c3:3c:ad:f3:0e:40:78: 44:b3:99:b5:f3:83:21:7a:36:84:b0:f2:92:c4:9b: 41:32:b0:dd:78:6c:2e:68:1b:f7:54:cd:58:40:ab: 4a:3a:dc:42:64:20:f5:34:16:fe:24:87:25:74:c1: 06:6b:7c:56:5e:ec:24:fd:76:05:41:a7:a3:38:fd: 73:35:92:2d:31:c3:eb:4b:2b:c3:2d:8e:57:4e:f9: 1d:30:b9:cc:a7:63:35:fd:ce:2b:f9:dd:be:81:e2: 96:28:3f:b4:ee:8b:77:a7:5e:0f:54:a6:1d:e2:0d: 94:8e:3b:d6:b2:24:21:d5:84:17:82:97:59:93:f5: 01:9e:92:95:b9:f7:13:73:75:5b:5c:c2:01:94:9c: 11:46:65:98:06:49:f4:7e:2e:91:9b:e6:e1:7b:19: f2:41:03:a8:e1:dc:1e:07:31:2b:ac:75:a2:ad:c4: f5:2d:7b:fd:e0:44:6c:f9:30:25:81:81:c8:71:9c: 44:0e:46:44:ed:69:67:22:2c:57:14:d0:14:6a:6c: 65:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DD:13:29:88:10:80:50:3F:B8:E1:0D:B1:61:52:81:FF:2E:44:1E X509v3 Authority Key Identifier: keyid:54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a3:d2:2d:9b:73:ac:30:00:a4:01:28:6e:1a:57:86:da:87: 73:06:c4:b3:29:7a:ad:bb:e9:a7:70:65:1b:6b:ed:d4:4d:9e: 4a:17:1b:fe:8d:09:e5:e3:f2:d8:d2:a8:07:d0:24:45:bf:58: c6:8f:79:a7:cb:11:4b:d9:cb:67:7a:6f:eb:d5:df:32:3d:96: 8a:7d:60:fe:62:58:9b:54:10:17:50:dc:a4:01:c7:82:57:56: 8a:41:90:4c:ff:e1:33:b2:f4:68:45:d8:05:63:37:fc:eb:0e: 93:05:12:34:55:09:af:70:0d:5b:58:cb:df:ef:69:64:7b:9d: 04:02:bb:1b:5a:cf:23:13:78:d6:33:79:be:e8:b2:1f:3e:2c: 59:b5:43:04:4f:84:5b:61:69:68:b6:ab:36:3f:b3:80:6e:16: 7e:91:4c:91:2a:31:6b:07:fa:26:f2:04:14:97:c0:4e:a2:66: 0d:a9:95:56:65:b7:e8:13:61:06:6f:fd:b7:3c:17:e8:12:e5: 0f:f4:95:1d:0c:02:9d:62:c3:c6:a0:d6:66:1d:ee:8b:51:95: 21:52:86:8a:da:50:8f:05:d2:c1:aa:72:3e:8b:b2:e5:c7:36: 2b:3f:72:8b:8b:99:d5:d6:41:f9:98:ba:88:c1:7d:86:4e:2d: 62:66:47:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNEUxMTAvBgNVBAUTKDU0MjQ0RjY0NURFQTBENTA5NjY4NTgwRDEzOEU4MjUy NzlGQjU2NzgwHhcNMjUwODA4MTgxNTQ1WhcNMjUwODE1MTgxNTQ1WjAYMRYwFAYD VQQDEw02ODk2M2VkMS0zMmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJ1wuLWB1ejDcfSkiLd00UugN5TDQ3GMWa72gsZVp0VLUxOxbWQb++qZbPEn xo1/8ulie8M8rfMOQHhEs5m184MhejaEsPKSxJtBMrDdeGwuaBv3VM1YQKtKOtxC ZCD1NBb+JIcldMEGa3xWXuwk/XYFQaejOP1zNZItMcPrSyvDLY5XTvkdMLnMp2M1 /c4r+d2+geKWKD+07ot3p14PVKYd4g2UjjvWsiQh1YQXgpdZk/UBnpKVufcTc3Vb XMIBlJwRRmWYBkn0fi6Rm+bhexnyQQOo4dweBzErrHWircT1LXv94ERs+TAlgYHI cZxEDkZE7WlnIixXFNAUamxlowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHdEymI EIBQP7jhDbFhUoH/LkQeMB8GA1UdIwQYMBaAFFQkT2Rd6g1QlmhYDROOglJ5+1Z4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI0RS9CRDk1QzM4RUUw M0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURWQ1dhRmdORTQ2Q1VubjdW bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDUlBaRjNxRFZDV2FGZ05FNDZDVW5uN1ZuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjI0RS9CRDk1QzM4RUUwM0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURW Q1dhRmdORTQ2Q1VubjdWbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdo9Itm3OsMACkAShuGleG2odzBsSzKXqtu+mncGUba+3UTZ5KFxv+ jQnl4/LY0qgH0CRFv1jGj3mnyxFL2ctnem/r1d8yPZaKfWD+YlibVBAXUNykAceC V1aKQZBM/+EzsvRoRdgFYzf86w6TBRI0VQmvcA1bWMvf72lke50EArsbWs8jE3jW M3m+6LIfPixZtUMET4RbYWlotqs2P7OAbhZ+kUyRKjFrB/om8gQUl8BOomYNqZVW ZbfoE2EGb/23PBfoEuUP9JUdDAKdYsPGoNZmHe6LUZUhUoaK2lCPBdLBqnI+i7Ll xzYrP3KLi5nV1kH5mLqIwX2GTi1iZkdx -----END CERTIFICATE-----Generated at Fri Aug 8 20:49:19 2025 by rpki-client