$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft File: M-VCXQNo-C_4W5uEf0EjitWNTlA.mft (raw, json) Hash identifier: B9CSz1heHR2+V6ohPMPR+dod8xDlkqx8l5b2fChk0No= Subject key identifier: 9A:F5:50:8A:66:08:46:DC:3F:19:99:54:FD:4D:07:92:14:1F:4B:44 Authority key identifier: 33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50 Certificate issuer: /CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft Manifest number: 0122 Signing time: Tue 05 Aug 2025 05:11:34 +0000 Manifest this update: Tue 05 Aug 2025 05:11:33 +0000 Manifest next update: Tue 12 Aug 2025 05:11:33 +0000 Files and hashes: 1: M-VCXQNo-C_4W5uEf0EjitWNTlA.crl (hash: ZCk54Va4By8sdbl8ybCrHuT0BVzfS2Zk+4RvbDJeeCU=) 2: D677E18AB9AF11EE97EEDB49C4F9AE02.roa (hash: LUJnGhbUriDz5PEXzwqHVqGRqenH5+Jp3evLId0QNQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD5A, serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50 Validity Not Before: Aug 5 05:11:33 2025 GMT Not After : Aug 12 05:11:33 2025 GMT Subject: CN=68919285-5e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9f:d2:20:11:a7:1e:48:91:44:be:bf:1f:0c: 11:91:da:bd:75:42:82:4d:da:83:dd:93:ab:a6:fb: b4:7f:c5:ed:da:80:85:cd:a1:d5:01:63:8e:1b:8e: 62:4d:91:c7:ce:07:0a:f2:ed:fd:97:4c:4a:8f:84: 66:74:57:60:99:c8:54:f8:7f:4a:ae:1e:16:c1:47: f5:47:d6:a5:0f:f2:8b:42:0d:76:e6:ad:83:68:f8: 54:45:2d:4a:39:18:86:7a:2e:1c:90:c9:dc:1b:b4: 81:5d:72:49:81:b5:6d:d1:a6:e1:fd:49:78:ca:6c: 63:4f:8e:b6:cb:25:b5:c6:48:09:0d:28:08:61:89: 36:71:d3:e9:ad:7a:91:1c:3b:aa:aa:db:f7:ae:87: 15:36:bd:b7:b7:33:c0:c0:d1:ff:e0:3a:5e:6a:24: f2:7b:fe:86:8d:ba:b3:c0:b9:ff:a2:e0:24:8d:34: 16:d5:af:b6:4b:58:7a:7a:ed:50:8f:58:de:17:46: 4c:86:b0:81:60:98:9c:ab:4b:df:e7:3c:5d:0f:2d: b7:ac:d5:46:5d:e0:57:7e:b3:83:ce:2b:2a:45:f5: 68:e3:26:e5:d2:d8:b8:42:e7:21:b9:0b:21:79:d3: e6:c6:1c:e2:7d:11:df:ae:90:26:95:72:21:e3:44: 90:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F5:50:8A:66:08:46:DC:3F:19:99:54:FD:4D:07:92:14:1F:4B:44 X509v3 Authority Key Identifier: keyid:33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:8c:f6:4d:77:fc:b4:36:c1:be:7d:2a:36:0f:04:6c:2e:4b: d5:83:e3:89:76:d7:46:72:52:67:d6:f8:dd:c1:cb:31:8e:6f: 51:2f:db:92:9d:dd:bd:56:8a:87:da:5f:26:6c:f6:0a:4c:18: e8:91:75:de:26:b1:6c:39:b6:4c:1a:b8:83:71:e4:37:96:12: f4:a4:d9:e3:c7:f5:ef:31:e3:86:e7:36:ca:d2:18:3e:d6:ed: a7:b5:56:7c:82:8a:17:7d:7e:98:40:63:ea:c9:96:7d:50:bd: fb:78:5f:16:67:78:56:5f:a1:2f:45:01:6d:dd:40:28:fb:d6: ed:00:7c:4f:5f:b3:73:50:61:ab:b8:65:c8:a0:d3:94:9d:5e: fc:b3:15:31:bb:da:ef:ab:e7:15:e4:a5:28:66:f5:92:9b:c8: 40:3b:3b:8b:b2:34:be:f5:2a:ef:46:42:b7:21:63:bf:9c:44: 3d:0b:fc:e6:66:a1:ea:8a:b8:89:3d:ff:55:c9:71:b6:88:1f: 7f:64:63:b0:39:70:ba:72:11:ab:62:b0:d7:a0:e5:58:fd:29: 4f:e1:f4:f0:d7:bd:f5:9e:62:06:95:c1:78:04:e5:70:b3:91: 69:85:fa:f7:9c:7b:7e:73:08:b7:f2:ea:b9:b0:0f:70:ff:62: 2a:ab:2f:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENUExMTAvBgNVBAUTKDMzRTU0MjVEMDM2OEY4MkZGODVCOUI4NDdGNDEyMzhB RDU4RDRFNTAwHhcNMjUwODA1MDUxMTMzWhcNMjUwODEyMDUxMTMzWjAYMRYwFAYD VQQDEw02ODkxOTI4NS01ZTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4p/SIBGnHkiRRL6/HwwRkdq9dUKCTdqD3ZOrpvu0f8Xt2oCFzaHVAWOOG45i TZHHzgcK8u39l0xKj4RmdFdgmchU+H9Krh4WwUf1R9alD/KLQg125q2DaPhURS1K ORiGei4ckMncG7SBXXJJgbVt0abh/Ul4ymxjT462yyW1xkgJDSgIYYk2cdPprXqR HDuqqtv3rocVNr23tzPAwNH/4DpeaiTye/6GjbqzwLn/ouAkjTQW1a+2S1h6eu1Q j1jeF0ZMhrCBYJicq0vf5zxdDy23rNVGXeBXfrODzisqRfVo4ybl0ti4QuchuQsh edPmxhzifRHfrpAmlXIh40SQZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJr1UIpm CEbcPxmZVP1NB5IUH0tEMB8GA1UdIwQYMBaAFDPlQl0DaPgv+FubhH9BI4rVjU5Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ1QS81RkI3REMwOEI5 QUExMUVFQjBEQ0Q4MzRDNEY5QUUwMi9NLVZDWFFOby1DXzRXNXVFZjBFaml0V05U bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL00tVkNYUU5vLUNfNFc1dUVmMEVqaXRXTlRsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ1QS81RkI3REMwOEI5QUExMUVFQjBEQ0Q4MzRDNEY5QUUwMi9NLVZDWFFOby1D XzRXNXVFZjBFaml0V05UbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxjPZNd/y0NsG+fSo2DwRsLkvVg+OJdtdGclJn1vjdwcsxjm9RL9uS nd29VoqH2l8mbPYKTBjokXXeJrFsObZMGriDceQ3lhL0pNnjx/XvMeOG5zbK0hg+ 1u2ntVZ8gooXfX6YQGPqyZZ9UL37eF8WZ3hWX6EvRQFt3UAo+9btAHxPX7NzUGGr uGXIoNOUnV78sxUxu9rvq+cV5KUoZvWSm8hAOzuLsjS+9SrvRkK3IWO/nEQ9C/zm ZqHqiriJPf9VyXG2iB9/ZGOwOXC6chGrYrDXoOVY/SlP4fTw1731nmIGlcF4BOVw s5Fphfr3nHt+cwi38uq5sA9w/2Iqqy/C -----END CERTIFICATE-----Generated at Thu Aug 7 01:23:13 2025 by rpki-client