$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft File: vttNMcgBx4se-jSHY50DVayRNUs.mft (raw, json) Hash identifier: YI5cihMJZtBdcP0maB8MzvtPlyjwA7p2ateFnwMS//Q= Subject key identifier: 6F:6E:4C:08:A0:46:FD:89:2A:82:AE:10:71:42:0D:37:22:96:79:93 Authority key identifier: BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B Certificate issuer: /CN=A91CB063/serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft Manifest number: 51 Signing time: Thu 19 Jun 2025 06:40:52 +0000 Manifest this update: Thu 19 Jun 2025 06:40:51 +0000 Manifest next update: Thu 26 Jun 2025 06:40:51 +0000 Files and hashes: 1: vttNMcgBx4se-jSHY50DVayRNUs.crl (hash: 66uWrTJSK5H7w6oWstuheZdh03j+LHrs1Dux9KBRnrk=) 2: ED795D30D6ED11EFBC37E16BC4F9AE02.roa (hash: ytwFD4jangW+gR76bRXjWLpiY6QBAfomC9SAsY7jMYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB063, serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B Validity Not Before: Jun 19 06:40:51 2025 GMT Not After : Jun 26 06:40:51 2025 GMT Subject: CN=6853b0f3-129c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:88:c8:ef:25:5d:2b:d4:df:83:36:37:a6:10: 8b:3b:77:c6:d5:1f:65:31:9c:d6:31:d7:7a:cb:b7: 65:96:d5:e7:de:20:26:8e:9f:ff:20:77:2a:53:9b: c7:79:7e:ba:e7:e9:65:81:12:e9:4a:69:c1:f6:c5: 95:89:40:fd:47:71:0d:36:90:1b:44:3f:98:9b:82: b3:69:4d:b6:96:57:c2:2c:e5:74:09:7f:7f:51:78: 0f:08:2a:5c:ca:e7:ed:30:4d:bc:cd:21:ca:e3:9d: d9:99:11:89:da:48:8a:23:bb:2e:97:85:d4:02:95: a6:b4:f1:ac:3a:cf:77:94:52:dc:41:a6:3c:52:79: 65:29:7c:62:c7:15:14:c7:48:a7:44:f7:d0:3a:04: 2b:58:a5:c1:b0:f5:09:c7:fd:58:94:d5:4e:e5:fc: 75:df:c9:d5:ab:af:9f:30:e2:62:15:0f:f0:e8:eb: f1:c0:89:a4:d7:0b:07:1f:8a:c9:87:b6:1b:62:56: 5d:73:41:46:62:55:98:fd:c6:75:3b:d5:c5:92:9b: 2b:33:5c:50:62:f4:cb:d0:8c:3c:6f:23:2a:7a:88: b9:4d:37:80:cf:12:71:e1:08:ea:c1:76:38:d6:09: cd:02:0a:7f:ea:a0:78:ab:ba:49:77:f5:8d:9f:ab: f5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6E:4C:08:A0:46:FD:89:2A:82:AE:10:71:42:0D:37:22:96:79:93 X509v3 Authority Key Identifier: keyid:BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a2:91:8a:32:fb:f6:d9:f6:70:bd:2b:11:d2:30:9f:20:5f: 38:cd:4f:02:44:44:bd:15:fc:50:41:71:1a:8c:92:4f:93:3b: f2:17:4c:5c:5e:6b:95:92:98:52:7f:9b:5f:d7:5f:f2:d6:57: 2d:90:30:ed:5a:94:3a:05:51:5f:74:91:b0:ee:b6:3d:ce:81: ab:b7:f9:da:c9:2e:17:00:87:ae:ce:00:fb:66:c6:41:ba:83: 02:ec:8a:f1:1b:07:f7:07:a1:d3:4e:28:5e:8d:20:7f:da:ba: e3:27:2c:a8:ad:ea:25:b2:ab:ca:fe:cf:aa:72:0d:b5:4e:7a: 36:1d:88:71:aa:1b:43:de:41:54:71:79:fc:19:71:58:68:77: 39:e4:a2:ef:f8:68:34:8f:e7:e2:fb:48:9b:21:ec:a9:19:4c: 22:71:28:a9:ff:d4:34:64:aa:d4:be:3d:21:35:0b:15:d2:84: 68:e6:47:c6:f0:15:e8:3e:55:67:58:8c:48:8a:95:5c:d9:6e: 95:c2:bb:fb:27:9c:c8:66:63:81:76:70:c9:72:50:d6:75:07: 8a:1b:01:e3:af:d7:15:f1:42:b7:3d:6d:b8:c9:35:03:4d:85: eb:26:38:20:8d:7b:0a:e3:10:7e:b0:d9:32:bb:0d:69:5f:50: a3:d4:80:8f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjA2MzExMC8GA1UEBRMoQkVEQjREMzFDODAxQzc4QjFFRkEzNDg3NjM5RDAzNTVB QzkxMzU0QjAeFw0yNTA2MTkwNjQwNTFaFw0yNTA2MjYwNjQwNTFaMBgxFjAUBgNV BAMTDTY4NTNiMGYzLTEyOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAiMjvJV0r1N+DNjemEIs7d8bVH2UxnNYx13rLt2WW1efeICaOn/8gdypTm8d5 frrn6WWBEulKacH2xZWJQP1HcQ02kBtEP5ibgrNpTbaWV8Is5XQJf39ReA8IKlzK 5+0wTbzNIcrjndmZEYnaSIojuy6XhdQClaa08aw6z3eUUtxBpjxSeWUpfGLHFRTH SKdE99A6BCtYpcGw9QnH/ViU1U7l/HXfydWrr58w4mIVD/Do6/HAiaTXCwcfismH thtiVl1zQUZiVZj9xnU71cWSmyszXFBi9MvQjDxvIyp6iLlNN4DPEnHhCOrBdjjW Cc0CCn/qoHirukl39Y2fq/VHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb25MCKBG /Ykqgq4QcUINNyKWeZMwHwYDVR0jBBgwFoAUvttNMcgBx4se+jSHY50DVayRNUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCMDYzLzYzQjQ3NjAyRDZF RDExRUY5RDlCRjM2QUM0RjlBRTAyL3Z0dE5NY2dCeDRzZS1qU0hZNTBEVmF5Uk5V cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdnR0Tk1jZ0J4NHNlLWpTSFk1MERWYXlSTlVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC MDYzLzYzQjQ3NjAyRDZFRDExRUY5RDlCRjM2QUM0RjlBRTAyL3Z0dE5NY2dCeDRz ZS1qU0hZNTBEVmF5Uk5Vcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJqikYoy+/bZ9nC9KxHSMJ8gXzjNTwJERL0V/FBBcRqMkk+TO/IXTFxe a5WSmFJ/m1/XX/LWVy2QMO1alDoFUV90kbDutj3Ogau3+drJLhcAh67OAPtmxkG6 gwLsivEbB/cHodNOKF6NIH/auuMnLKit6iWyq8r+z6pyDbVOejYdiHGqG0PeQVRx efwZcVhodznkou/4aDSP5+L7SJsh7KkZTCJxKKn/1DRkqtS+PSE1CxXShGjmR8bw Feg+VWdYjEiKlVzZbpXCu/snnMhmY4F2cMlyUNZ1B4obAeOv1xXxQrc9bbjJNQNN hesmOCCNewrjEH6w2TK7DWlfUKPUgI8= -----END CERTIFICATE-----Generated at Fri Jun 20 19:12:31 2025 by rpki-client