$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft File: vpuQTrdssFxgw-LDeeL6SJoOF3I.mft (raw, json) Hash identifier: OL2oOzHNMra+mQmw7bqTEFNUsWh0S566/bTTnNt/kl0= Subject key identifier: C7:56:C0:3F:2D:C1:64:39:02:B1:C9:61:9A:A2:DB:69:D8:60:59:4E Authority key identifier: BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72 Certificate issuer: /CN=A91E5832/serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft Manifest number: 6A Signing time: Tue 05 Aug 2025 07:32:39 +0000 Manifest this update: Tue 05 Aug 2025 07:32:39 +0000 Manifest next update: Tue 12 Aug 2025 07:32:39 +0000 Files and hashes: 1: vpuQTrdssFxgw-LDeeL6SJoOF3I.crl (hash: vvss1JERSujSmGHjjft/l3oN4t113YfRacYgOQ7Qyhk=) 2: A9C0AECED0BA11EFB7A6B027C4F9AE02.roa (hash: vwuRFoQ8j2nxDneRxv7aNdc+Cd7umBY/3NvhL9KJqC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5832, serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772 Validity Not Before: Aug 5 07:32:39 2025 GMT Not After : Aug 12 07:32:39 2025 GMT Subject: CN=6891b397-c9d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:40:3a:70:13:16:27:0b:fe:32:33:79:05:89: b8:9d:e6:97:10:9e:65:7b:8e:52:13:b8:7d:d6:65: c6:44:02:73:78:7b:eb:c4:5f:74:1d:42:1c:07:cc: 87:9b:03:ad:be:4e:ef:c2:e7:81:de:fe:ab:e3:af: 7e:38:cd:5b:b9:4e:cb:1a:75:a2:78:cc:82:e2:42: 1a:d2:c9:9f:93:4a:18:76:75:16:f9:87:93:90:ee: d7:63:df:4b:ec:5d:77:01:91:e0:57:0b:0e:a2:d3: 8a:f0:e2:9e:b6:0c:78:05:ad:63:6e:b8:58:3c:df: a2:f1:0d:dd:08:59:32:b8:f9:f5:c8:59:62:61:9f: 73:a5:1b:3c:2d:45:d9:20:5b:25:34:26:49:80:d0: ab:5b:1e:58:d1:01:e0:54:0b:84:33:9c:58:25:44: e0:f8:6f:ba:70:39:d8:d3:44:7b:3c:8c:8b:c2:a7: 53:f6:8a:a8:c5:7e:31:76:04:f2:44:ed:f4:79:d6: 02:bd:92:df:f6:25:c3:ad:d4:e4:16:fb:e1:0c:2f: 5f:e7:0a:62:0d:d5:c3:8b:6c:7f:b6:d5:91:c3:06: 59:89:ec:9a:ad:82:f4:ae:ac:45:ad:8b:57:36:61: a1:30:63:13:12:05:87:ee:97:5b:6e:1d:2d:18:ba: f8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:56:C0:3F:2D:C1:64:39:02:B1:C9:61:9A:A2:DB:69:D8:60:59:4E X509v3 Authority Key Identifier: keyid:BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:5f:cc:1a:85:dc:48:70:04:7e:ff:96:ee:27:1c:5f:d9:05: b7:29:a8:85:2f:75:b5:c7:bc:e8:5f:7b:b4:cc:25:6a:c9:b3: 77:92:23:e4:cd:57:cc:5f:c3:fa:6d:04:f3:40:ce:a9:af:d1: ad:6a:0c:a5:5f:08:bf:fc:5f:f8:d9:cb:ef:e8:5c:95:5e:26: f3:ef:e3:c9:40:e0:74:15:64:97:97:02:9c:a1:87:09:0c:8d: fd:22:a5:c9:80:80:39:65:ba:2f:83:2d:11:72:4d:8b:b8:18: ae:0a:42:0e:45:0f:11:68:8e:02:e8:a9:e6:9e:dc:86:e8:06: 3a:2d:10:ac:31:85:fe:42:04:4e:eb:5b:fc:a2:19:3a:3c:36: 50:c6:6b:4c:d2:0b:f2:07:6a:df:b2:51:1c:e1:18:25:02:8d: 4e:d4:45:60:e5:79:97:e8:53:7e:15:cf:02:41:46:ca:03:83: 56:92:a8:f8:00:df:fb:9d:52:e5:4d:8d:9e:d1:27:79:55:5f: 21:3c:47:c6:a4:b6:7f:31:37:3c:29:3b:f4:f9:90:be:89:25: 31:4f:6a:19:ff:f9:e4:dc:89:43:59:71:20:6a:04:34:9e:52: a6:43:58:55:44:8a:c7:bc:c7:cd:09:c8:e5:8f:c4:84:b8:04: 28:33:0f:31 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTgzMjExMC8GA1UEBRMoQkU5QjkwNEVCNzZDQjA1QzYwQzNFMkMzNzlFMkZBNDg5 QTBFMTc3MjAeFw0yNTA4MDUwNzMyMzlaFw0yNTA4MTIwNzMyMzlaMBgxFjAUBgNV BAMTDTY4OTFiMzk3LWM5ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrQDpwExYnC/4yM3kFibid5pcQnmV7jlITuH3WZcZEAnN4e+vEX3QdQhwHzIeb A62+Tu/C54He/qvjr344zVu5TssadaJ4zILiQhrSyZ+TShh2dRb5h5OQ7tdj30vs XXcBkeBXCw6i04rw4p62DHgFrWNuuFg836LxDd0IWTK4+fXIWWJhn3OlGzwtRdkg WyU0JkmA0KtbHljRAeBUC4QznFglROD4b7pwOdjTRHs8jIvCp1P2iqjFfjF2BPJE 7fR51gK9kt/2JcOt1OQW++EML1/nCmIN1cOLbH+21ZHDBlmJ7JqtgvSurEWti1c2 YaEwYxMSBYful1tuHS0YuvghAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUx1bAPy3B ZDkCsclhmqLbadhgWU4wHwYDVR0jBBgwFoAUvpuQTrdssFxgw+LDeeL6SJoOF3Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1ODMyLzI2RTU4MjU0RDBC QTExRUY4OTZDRDAyNkM0RjlBRTAyL3ZwdVFUcmRzc0Z4Z3ctTERlZUw2U0pvT0Yz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdnB1UVRyZHNzRnhndy1MRGVlTDZTSm9PRjNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 ODMyLzI2RTU4MjU0RDBCQTExRUY4OTZDRDAyNkM0RjlBRTAyL3ZwdVFUcmRzc0Z4 Z3ctTERlZUw2U0pvT0YzSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACdfzBqF3EhwBH7/lu4nHF/ZBbcpqIUvdbXHvOhfe7TMJWrJs3eSI+TN V8xfw/ptBPNAzqmv0a1qDKVfCL/8X/jZy+/oXJVeJvPv48lA4HQVZJeXApyhhwkM jf0ipcmAgDllui+DLRFyTYu4GK4KQg5FDxFojgLoqeae3IboBjotEKwxhf5CBE7r W/yiGTo8NlDGa0zSC/IHat+yURzhGCUCjU7URWDleZfoU34VzwJBRsoDg1aSqPgA 3/udUuVNjZ7RJ3lVXyE8R8aktn8xNzwpO/T5kL6JJTFPahn/+eTciUNZcSBqBDSe UqZDWFVEise8x80JyOWPxIS4BCgzDzE= -----END CERTIFICATE-----Generated at Wed Aug 6 10:16:42 2025 by rpki-client