$ rpki-client -vvf rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft File: VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft (raw, json) Hash identifier: XDabfXoXjcr7mo2Vk6i5h/0LyvdSahhaSV6o79scVm0= Subject key identifier: 73:3D:06:11:64:CE:F2:EC:8B:86:5E:72:B9:18:E8:BF:8E:FB:D0:2B Authority key identifier: 54:B6:DE:06:91:A9:C6:D5:65:CD:18:01:1D:D2:2B:10:9E:02:37:9B Certificate issuer: /CN=A9116119/serialNumber=54B6DE0691A9C6D565CD18011DD22B109E02379B Certificate serial: 1102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft Manifest number: 10FA Signing time: Wed 02 Jul 2025 17:29:31 +0000 Manifest this update: Wed 02 Jul 2025 17:29:31 +0000 Manifest next update: Wed 09 Jul 2025 17:29:31 +0000 Files and hashes: 1: VLbeBpGpxtVlzRgBHdIrEJ4CN5s.crl (hash: 5YrKGI3jF6IwfSI6B+1kjll5Z1aDS1Glzmytoe1MHVk=) 2: 991E066C1DB711EB95324E17C4F9AE02.roa (hash: /nPv0Yq4GGkQfcr8qvWam0XNmS67EN12p0o/3hMFLgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.crl rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4354 (0x1102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116119, serialNumber=54B6DE0691A9C6D565CD18011DD22B109E02379B Validity Not Before: Jul 2 17:29:31 2025 GMT Not After : Jul 9 17:29:31 2025 GMT Subject: CN=68656c7b-2c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7b:15:c2:40:14:61:c0:02:a0:7d:0a:73:67: 40:ed:b1:1c:63:af:07:22:90:e9:4f:74:ad:d4:71: b6:d0:de:35:2d:b6:49:22:e0:d1:b7:5e:75:e3:cf: b4:1a:3f:6e:42:05:70:65:4c:ad:ab:b1:3c:48:e2: 31:b5:8d:69:88:44:59:a8:dd:4d:a3:8f:33:e3:a9: 8c:6c:a1:fb:68:1e:40:fd:a5:78:bf:7f:9c:3c:93: c0:92:8c:6e:58:92:cc:4e:77:21:6e:f4:88:21:27: 07:84:64:62:34:b7:ba:81:d4:06:76:3c:bc:a9:2c: 5c:82:d0:f2:1a:cc:11:fe:d7:5b:e9:d8:45:d9:0b: ed:f6:70:53:a7:04:c1:08:36:e8:a9:86:ab:da:18: 2b:d0:cb:68:52:1b:42:ed:4c:e4:d2:a7:e4:42:67: 06:1f:e4:b6:a2:c4:10:52:60:10:0d:6a:e1:3d:cc: d5:71:9f:5c:ad:0c:fc:82:45:8d:97:36:3b:10:90: 04:18:65:68:6c:81:fa:58:2d:4c:4f:77:fb:ee:68: 43:4c:60:88:42:5a:58:64:8f:31:fc:8b:85:da:62: e2:f7:f3:5f:5f:23:04:8e:e0:3d:cb:4b:00:b7:c5: b5:fa:08:09:8f:0d:0e:45:97:81:a6:1d:53:d9:eb: b2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3D:06:11:64:CE:F2:EC:8B:86:5E:72:B9:18:E8:BF:8E:FB:D0:2B X509v3 Authority Key Identifier: keyid:54:B6:DE:06:91:A9:C6:D5:65:CD:18:01:1D:D2:2B:10:9E:02:37:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:59:14:08:d0:9c:55:1e:8a:cc:6c:d3:e4:0d:21:5b:a2:6f: 3c:f1:57:42:d6:e8:bd:33:23:26:2c:0f:8c:9d:f6:a0:25:77: 74:6c:4a:15:78:20:95:d8:31:f6:bc:cf:46:2c:6a:54:f9:af: 4d:2f:c1:4a:7f:5f:21:42:f1:0b:76:da:b9:71:b2:36:23:ca: 28:8f:7a:af:73:3e:a7:46:58:66:b8:b1:63:5c:5f:31:77:45: 17:bb:3d:61:dd:f1:ab:9c:53:da:e9:9d:6d:54:43:3a:60:6b: fb:b3:a6:03:69:82:b8:db:0d:73:db:0b:4a:e8:6c:6e:74:34: c6:70:38:71:07:29:58:e7:17:d1:9f:d7:84:76:84:c5:f4:85: ff:3b:6b:b6:26:d2:b5:04:e1:32:a2:86:4b:d9:c6:10:eb:c5: fd:00:1f:66:e4:ec:a2:da:d5:ee:d1:e8:44:5a:53:31:6b:5f: 31:05:64:41:d6:cb:c2:f6:ae:f7:f6:83:f0:ad:f2:e1:d7:af: d7:ee:a3:d4:a6:2b:63:24:d1:82:67:59:02:a4:64:91:79:a5: d8:c3:f8:ed:69:15:61:38:e8:4c:2c:5c:25:e3:25:fc:14:78: 69:f3:93:20:0f:55:da:81:6d:28:d1:e8:c0:c4:d5:87:1b:7a: b4:fe:ad:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYxMTkxMTAvBgNVBAUTKDU0QjZERTA2OTFBOUM2RDU2NUNEMTgwMTFERDIyQjEw OUUwMjM3OUIwHhcNMjUwNzAyMTcyOTMxWhcNMjUwNzA5MTcyOTMxWjAYMRYwFAYD VQQDEw02ODY1NmM3Yi0yYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7HsVwkAUYcACoH0Kc2dA7bEcY68HIpDpT3St1HG20N41LbZJIuDRt15148+0 Gj9uQgVwZUytq7E8SOIxtY1piERZqN1No48z46mMbKH7aB5A/aV4v3+cPJPAkoxu WJLMTnchbvSIIScHhGRiNLe6gdQGdjy8qSxcgtDyGswR/tdb6dhF2Qvt9nBTpwTB CDboqYar2hgr0MtoUhtC7Uzk0qfkQmcGH+S2osQQUmAQDWrhPczVcZ9crQz8gkWN lzY7EJAEGGVobIH6WC1MT3f77mhDTGCIQlpYZI8x/IuF2mLi9/NfXyMEjuA9y0sA t8W1+ggJjw0ORZeBph1T2euyBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHM9BhFk zvLsi4ZecrkY6L+O+9ArMB8GA1UdIwQYMBaAFFS23gaRqcbVZc0YAR3SKxCeAjeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjExOS81NDQ4MTc5RTFB QkMxMUU5QkRBNEZDNDhDNEY5QUUwMi9WTGJlQnBHcHh0Vmx6UmdCSGRJckVKNENO NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZMYmVCcEdweHRWbHpSZ0JIZElyRUo0Q041cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjExOS81NDQ4MTc5RTFBQkMxMUU5QkRBNEZDNDhDNEY5QUUwMi9WTGJlQnBHcHh0 Vmx6UmdCSGRJckVKNENONXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBWRQI0JxVHorMbNPkDSFbom888VdC1ui9MyMmLA+MnfagJXd0bEoV eCCV2DH2vM9GLGpU+a9NL8FKf18hQvELdtq5cbI2I8ooj3qvcz6nRlhmuLFjXF8x d0UXuz1h3fGrnFPa6Z1tVEM6YGv7s6YDaYK42w1z2wtK6GxudDTGcDhxBylY5xfR n9eEdoTF9IX/O2u2JtK1BOEyooZL2cYQ68X9AB9m5Oyi2tXu0ehEWlMxa18xBWRB 1svC9q739oPwrfLh16/X7qPUpitjJNGCZ1kCpGSReaXYw/jtaRVhOOhMLFwl4yX8 FHhp85MgD1XagW0o0ejAxNWHG3q0/q2F -----END CERTIFICATE-----Generated at Thu Jul 3 09:12:01 2025 by rpki-client