$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft File: vtASVxhUXB5QgDHT_1-26Chqf9g.mft (raw, json) Hash identifier: JkJLrLo9mioZYGw0ZVhZbBXZMucDfzN5A+3IcxTWw/w= Subject key identifier: A5:EE:91:30:DA:20:11:E5:00:81:56:08:F8:1F:9B:5A:35:FA:08:5D Authority key identifier: BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8 Certificate issuer: /CN=A91E72DE/serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8 Certificate serial: 020E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft Manifest number: 020B Signing time: Sun 15 Jun 2025 01:41:30 +0000 Manifest this update: Sun 15 Jun 2025 01:41:30 +0000 Manifest next update: Sun 22 Jun 2025 01:41:30 +0000 Files and hashes: 1: vtASVxhUXB5QgDHT_1-26Chqf9g.crl (hash: hmJGhU6qrfPvkKbCmIARKsT/liB8zT+4oBKDH2GFzQw=) 2: DBA023303B6F11ED903B484FC4F9AE02.roa (hash: wuoqyYVDiG/sRQZo+9RPf+TSJtEdkwDtdHHUSy4QKA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E72DE, serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8 Validity Not Before: Jun 15 01:41:30 2025 GMT Not After : Jun 22 01:41:30 2025 GMT Subject: CN=684e24ca-348e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:04:3a:02:a2:e2:5f:1c:9a:f5:48:c3:96:46: 3b:62:5a:b3:c4:f6:92:c7:ac:df:37:40:71:b1:fc: 14:f6:d7:3d:37:63:e1:27:59:7e:c4:ca:64:9b:a0: 6d:82:eb:91:66:a7:25:eb:ec:6a:6a:d7:56:1d:5f: 54:d4:ed:cc:a2:fd:05:c3:a9:1e:8a:f0:24:1c:da: 92:66:e1:12:ef:c5:54:82:ca:67:44:44:7f:0f:4e: 75:25:d6:03:d1:86:c2:03:ca:ad:f5:d4:66:2b:65: be:22:59:1d:f9:29:70:be:a5:69:84:16:8f:80:58: 0a:78:fc:31:91:a0:4c:46:34:34:27:f4:7f:1b:c5: aa:36:b5:74:41:cf:2f:a9:ce:dc:bd:54:db:58:4a: 0f:11:6e:b8:6f:d1:9f:cd:61:ee:2e:90:3f:4e:13: 38:43:d8:a7:95:6c:38:cf:28:64:21:d6:8e:44:da: 62:2d:31:7f:07:26:e0:0d:1a:42:a5:0d:ef:fc:53: fd:fb:e8:80:a9:21:8f:4d:c3:5b:c1:9f:7c:cc:22: 31:1f:c7:77:72:a8:7b:88:90:5f:b5:29:c4:58:e0: 40:37:ba:99:0c:fc:1f:87:fd:d6:25:2d:14:d2:3d: c8:9e:1c:80:27:be:19:e2:68:73:bf:73:0a:55:58: 94:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EE:91:30:DA:20:11:E5:00:81:56:08:F8:1F:9B:5A:35:FA:08:5D X509v3 Authority Key Identifier: keyid:BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:08:ff:89:5c:d5:0e:46:74:21:a2:48:94:0c:06:e2:74:6a: 8a:c5:14:8b:78:8e:f8:6a:f9:f5:c3:da:14:78:62:36:0c:97: 98:da:d9:1a:3c:63:53:a6:b7:9b:27:b3:13:67:9e:00:5d:c0: ce:ee:88:72:ac:e0:a8:6f:75:39:db:f9:35:f5:9d:67:5f:e0: 7d:5e:83:a7:bd:94:0e:ba:f1:58:a7:f8:78:4f:68:6a:de:9f: 97:1a:aa:1c:f1:bd:6e:87:1a:d9:66:e7:b1:39:72:ab:1a:5b: 1f:38:16:2c:43:93:32:d3:3c:b0:01:1b:b8:f7:c2:a1:cc:9e: 40:56:44:ad:55:8d:26:1a:38:1a:df:b7:40:91:ef:0b:ed:54: 51:ac:d7:3e:53:d5:5e:2c:3a:ae:82:2c:da:5d:e5:41:5c:e6: 2b:a3:dd:fe:1d:39:2b:88:de:cb:4b:b5:8a:89:16:ec:fe:41: 82:08:7e:7a:94:95:65:82:9a:cd:36:80:e3:c7:f5:18:34:d4: ab:50:d9:f7:c3:a3:52:81:91:c9:f4:14:1e:4c:d5:80:b9:8b: a2:e8:c2:35:a9:fc:12:1c:1f:a1:94:cb:90:63:fa:b4:03:ec: 10:8d:fe:b6:bb:9b:62:0e:47:22:c9:f1:96:5f:13:f3:0f:e9: 5c:b5:bb:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyREUxMTAvBgNVBAUTKEJFRDAxMjU3MTg1NDVDMUU1MDgwMzFEM0ZGNUZCNkU4 Mjg2QTdGRDgwHhcNMjUwNjE1MDE0MTMwWhcNMjUwNjIyMDE0MTMwWjAYMRYwFAYD VQQDEw02ODRlMjRjYS0zNDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswQ6AqLiXxya9UjDlkY7YlqzxPaSx6zfN0BxsfwU9tc9N2PhJ1l+xMpkm6Bt guuRZqcl6+xqatdWHV9U1O3Mov0Fw6keivAkHNqSZuES78VUgspnRER/D051JdYD 0YbCA8qt9dRmK2W+Ilkd+SlwvqVphBaPgFgKePwxkaBMRjQ0J/R/G8WqNrV0Qc8v qc7cvVTbWEoPEW64b9GfzWHuLpA/ThM4Q9inlWw4zyhkIdaORNpiLTF/BybgDRpC pQ3v/FP9++iAqSGPTcNbwZ98zCIxH8d3cqh7iJBftSnEWOBAN7qZDPwfh/3WJS0U 0j3InhyAJ74Z4mhzv3MKVViU3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXukTDa IBHlAIFWCPgfm1o1+ghdMB8GA1UdIwQYMBaAFL7QElcYVFweUIAx0/9ftugoan/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJERS84REU0RTRDMDNC NkQxMUVEQjJCM0IzNEVDNEY5QUUwMi92dEFTVnhoVVhCNVFnREhUXzEtMjZDaHFm OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z0QVNWeGhVWEI1UWdESFRfMS0yNkNocWY5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzJERS84REU0RTRDMDNCNkQxMUVEQjJCM0IzNEVDNEY5QUUwMi92dEFTVnhoVVhC NVFnREhUXzEtMjZDaHFmOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaCP+JXNUORnQhokiUDAbidGqKxRSLeI74avn1w9oUeGI2DJeY2tka PGNTprebJ7MTZ54AXcDO7ohyrOCob3U52/k19Z1nX+B9XoOnvZQOuvFYp/h4T2hq 3p+XGqoc8b1uhxrZZuexOXKrGlsfOBYsQ5My0zywARu498KhzJ5AVkStVY0mGjga 37dAke8L7VRRrNc+U9VeLDqugizaXeVBXOYro93+HTkriN7LS7WKiRbs/kGCCH56 lJVlgprNNoDjx/UYNNSrUNn3w6NSgZHJ9BQeTNWAuYui6MI1qfwSHB+hlMuQY/q0 A+wQjf62u5tiDkciyfGWXxPzD+lctbuh -----END CERTIFICATE-----Generated at Sun Jun 15 08:32:42 2025 by rpki-client