$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft File: VzWraqwyeVRCT5_oyoUzQpnde8I.mft (raw, json) Hash identifier: aouie9OSxXhHwmrCHBs3UlORQtjE2CDeSPk1BifXA2M= Subject key identifier: 13:90:A8:A2:AE:68:51:4C:FC:BC:83:EC:81:0E:03:9D:60:F1:50:1A Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 Certificate issuer: /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Certificate serial: 0F7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft Manifest number: 0F72 Signing time: Fri 08 Aug 2025 17:45:42 +0000 Manifest this update: Fri 08 Aug 2025 17:45:42 +0000 Manifest next update: Fri 15 Aug 2025 17:45:42 +0000 Files and hashes: 1: VzWraqwyeVRCT5_oyoUzQpnde8I.crl (hash: 12d2SbXV/RiLUYchmCbEF4I/C5O6rLHZOXUCa3q6M78=) 2: F27C04B8779E11E997C0204AC4F9AE02.roa (hash: DZGyjsonfYGjBw4hHPzT7rTakbn4N6VzJZPth34e8Gc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3965 (0xf7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE392, serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Validity Not Before: Aug 8 17:45:42 2025 GMT Not After : Aug 15 17:45:42 2025 GMT Subject: CN=689637c6-cdbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7d:2e:34:30:7b:48:23:3e:d4:ac:98:c8:73: ae:6a:8f:a8:77:c8:79:ba:ff:ee:20:4c:e8:13:c4: 4c:58:03:13:0b:75:27:2a:f7:ce:74:02:64:95:c7: 21:0b:42:6a:e6:a5:bf:04:f0:70:c0:e4:55:1e:74: b0:d1:18:f4:4f:7f:0f:ae:75:96:14:58:46:9e:83: 9e:a9:32:93:77:fb:2b:58:0b:bc:fb:5d:d4:f4:0f: a1:43:51:60:6b:4b:c2:80:c3:82:50:85:69:9a:46: 63:b2:9a:24:49:66:ea:ef:3d:3f:7a:5a:c1:90:6d: 43:97:77:c6:e5:e7:8f:50:2f:74:62:18:c5:a7:65: 9e:3f:f9:4b:0d:c6:f0:f5:47:68:b5:de:2e:85:c8: 31:69:ba:0c:15:42:63:ad:a5:2f:23:6a:a0:40:9c: e7:d5:cd:98:cf:36:23:a4:5f:59:c4:cf:6b:f0:03: 52:37:e7:0a:77:ba:1e:e3:0c:b3:a5:ad:5f:c6:ed: 18:2a:7d:87:bc:89:21:c9:cc:b4:5a:77:62:25:62: a8:25:c2:02:32:e4:07:bb:e3:2b:ec:db:02:40:82: d1:60:d0:02:ea:26:39:70:45:9c:58:0b:4d:2b:2c: 47:e4:71:4f:11:2a:b3:7e:4a:95:dc:bb:39:62:cf: 59:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:90:A8:A2:AE:68:51:4C:FC:BC:83:EC:81:0E:03:9D:60:F1:50:1A X509v3 Authority Key Identifier: keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:3b:99:cb:bd:96:ea:d4:6a:63:52:18:7f:7d:c0:2e:4b:3a: 7f:59:fa:02:ce:67:40:0d:8c:47:c3:71:09:d3:f2:01:5a:ec: 5b:d8:a3:36:07:67:c2:27:55:14:54:7e:8d:74:9d:ac:6f:f6: 84:a9:80:9b:f7:65:c2:fb:86:ef:6c:f4:f1:eb:e7:f0:90:cd: f7:31:64:74:1a:cb:4d:5d:c5:a6:aa:93:88:10:80:ac:d3:5d: 35:a6:8b:9b:bb:43:dd:66:d4:2f:87:6d:a4:51:22:09:fa:f7: be:db:e1:bb:90:7b:ad:06:db:45:10:c0:91:9c:d4:b8:39:94: 84:88:4b:67:04:0c:6f:30:23:34:2f:8b:27:83:5b:cf:95:56: 25:9a:3e:7a:d6:9f:db:cd:7d:db:3e:03:33:fb:74:ee:fc:e8: a9:99:89:e0:ce:c7:ba:65:72:f0:07:2f:ab:d0:68:4e:66:cd: ae:e2:5f:9d:be:f0:b3:0b:f2:8c:63:14:f1:06:9b:b6:30:0f: a8:47:3e:d7:fa:fb:74:39:88:83:73:08:26:a5:77:0c:d9:fe: 02:b0:59:a0:c4:84:7b:ad:47:29:da:0f:be:52:25:a3:4d:fc: 35:6b:b7:7c:84:4b:13:f2:79:88:f6:84:55:3e:20:3a:e4:97: 96:b5:f4:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOTIxMTAvBgNVBAUTKDU3MzVBQjZBQUMzMjc5NTQ0MjRGOUZFOENBODUzMzQy OTlERDdCQzIwHhcNMjUwODA4MTc0NTQyWhcNMjUwODE1MTc0NTQyWjAYMRYwFAYD VQQDEw02ODk2MzdjNi1jZGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2H0uNDB7SCM+1KyYyHOuao+od8h5uv/uIEzoE8RMWAMTC3UnKvfOdAJklcch C0Jq5qW/BPBwwORVHnSw0Rj0T38PrnWWFFhGnoOeqTKTd/srWAu8+13U9A+hQ1Fg a0vCgMOCUIVpmkZjspokSWbq7z0/elrBkG1Dl3fG5eePUC90YhjFp2WeP/lLDcbw 9Udotd4uhcgxaboMFUJjraUvI2qgQJzn1c2YzzYjpF9ZxM9r8ANSN+cKd7oe4wyz pa1fxu0YKn2HvIkhycy0WndiJWKoJcICMuQHu+Mr7NsCQILRYNAC6iY5cEWcWAtN KyxH5HFPESqzfkqV3Ls5Ys9ZEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOQqKKu aFFM/LyD7IEOA51g8VAaMB8GA1UdIwQYMBaAFFc1q2qsMnlUQk+f6MqFM0KZ3XvC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Mi82RDZBMkEyODZD RDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVWUkNUNV9veW9VelFwbmRl OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z6V3JhcXd5ZVZSQ1Q1X295b1V6UXBuZGU4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Mi82RDZBMkEyODZDRDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVW UkNUNV9veW9VelFwbmRlOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6O5nLvZbq1GpjUhh/fcAuSzp/WfoCzmdADYxHw3EJ0/IBWuxb2KM2 B2fCJ1UUVH6NdJ2sb/aEqYCb92XC+4bvbPTx6+fwkM33MWR0GstNXcWmqpOIEICs 0101poubu0PdZtQvh22kUSIJ+ve+2+G7kHutBttFEMCRnNS4OZSEiEtnBAxvMCM0 L4sng1vPlVYlmj561p/bzX3bPgMz+3Tu/OipmYngzse6ZXLwBy+r0GhOZs2u4l+d vvCzC/KMYxTxBpu2MA+oRz7X+vt0OYiDcwgmpXcM2f4CsFmgxIR7rUcp2g++UiWj Tfw1a7d8hEsT8nmI9oRVPiA65JeWtfRs -----END CERTIFICATE-----Generated at Fri Aug 8 20:42:19 2025 by rpki-client