$ rpki-client -vvf rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft File: VTcR8u_pSETEP3dtRRAYwGSXLJo.mft (raw, json) Hash identifier: nL5cWKBVJYsfFg7PHRMjdkVTLxSIlctXjLk8IxYDius= Subject key identifier: 34:98:6B:B3:C2:7B:2B:31:4D:1C:1D:B7:9A:D3:F8:BE:B5:C2:F5:C0 Authority key identifier: 55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A Certificate issuer: /CN=A911AAB5/serialNumber=553711F2EFE94844C43F776D451018C064972C9A Certificate serial: 0C29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft Manifest number: 0C1E Signing time: Wed 02 Jul 2025 18:54:35 +0000 Manifest this update: Wed 02 Jul 2025 18:54:35 +0000 Manifest next update: Wed 09 Jul 2025 18:54:35 +0000 Files and hashes: 1: VTcR8u_pSETEP3dtRRAYwGSXLJo.crl (hash: 2/jgagAnrKWkKzO12xuDIF5eUW7DoEvzGALDHTMNpHE=) 2: 65EE26547A8711ECBA5D244DC4F9AE02.roa (hash: 9jpZ67QWGAJhgEp9yZYa+B85oL6nxjWkZcfSp/yeSCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3113 (0xc29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AAB5, serialNumber=553711F2EFE94844C43F776D451018C064972C9A Validity Not Before: Jul 2 18:54:35 2025 GMT Not After : Jul 9 18:54:35 2025 GMT Subject: CN=6865806b-8b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8f:a6:5a:a3:8d:69:0b:72:b9:dc:cf:84:5f: e8:a9:c6:f1:01:5c:9c:0b:b6:d6:fa:b1:c0:58:44: bb:e8:a4:a2:33:50:28:c5:10:76:03:81:c9:c7:e7: 4d:1a:7d:57:f4:24:f8:68:e8:d4:78:9e:4f:30:89: df:bc:a0:07:20:fa:6e:01:91:8d:27:7e:26:b6:90: 9b:88:eb:c5:8f:c2:13:a2:82:35:38:e0:23:ed:65: 4d:a8:20:33:ff:17:8d:ba:74:c8:9a:5c:c4:c2:e7: 7a:5e:42:81:80:b4:81:90:59:98:95:92:76:57:08: 8f:4e:54:ce:53:68:35:d7:ba:e9:be:14:cf:97:13: 42:37:61:8c:cf:ca:04:a2:a3:04:fa:d2:23:5a:6d: 4a:4d:5d:cc:d0:09:e4:c6:8f:74:79:ae:81:0d:17: c3:a3:19:94:d6:1d:2f:cd:a7:41:d8:dd:b8:7d:be: c3:08:8d:21:04:e5:63:d2:b4:49:64:2a:dc:c9:c4: a4:94:7e:bc:14:47:69:92:f2:97:6b:5e:e5:3d:47: c8:04:45:ca:36:e3:3b:a8:11:c9:08:ed:d2:29:c4: b8:b3:9c:6b:1b:1f:3a:a1:81:43:81:5d:27:b8:b0: e4:9f:c2:16:9f:cb:ba:52:78:76:30:be:52:8c:90: aa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:98:6B:B3:C2:7B:2B:31:4D:1C:1D:B7:9A:D3:F8:BE:B5:C2:F5:C0 X509v3 Authority Key Identifier: keyid:55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:95:5f:cf:5f:7d:8f:96:05:3b:18:f1:77:87:5e:46:26:27: 27:f7:a1:bd:c5:b3:52:64:49:d0:30:58:83:2c:cd:d0:b6:03: 1e:b6:8c:3b:9f:eb:ae:63:ad:2c:cf:8b:b1:18:de:58:7c:ab: 49:d0:9e:43:0e:01:5a:f5:a3:7d:3d:0e:88:d6:48:e6:dc:07: 6d:69:e1:dd:de:c8:35:11:1d:70:37:0c:36:cc:e8:b7:4d:2b: bb:27:b0:dc:e0:e6:8e:31:5e:30:fe:5f:e1:e6:6b:71:f4:d7: 98:a0:37:c6:77:be:55:c2:4a:f6:0a:39:f3:91:1c:75:f2:9a: d3:69:b0:74:ae:7c:67:1d:8d:18:e4:fd:db:52:18:ec:40:13: 40:64:3b:fe:1a:10:42:ae:5a:1d:a7:f4:73:1a:d0:d6:84:a5: 10:b1:ee:fb:fc:48:0d:40:b4:eb:d0:42:68:8b:2b:90:4b:e3: 92:2a:4c:3b:5e:1d:74:e6:62:c7:88:15:54:8a:36:84:5f:9e: 60:48:63:02:e4:ce:f4:da:f7:d9:ab:94:e1:91:7f:91:e2:af: 3c:7d:b0:05:6f:d8:ed:52:7a:b2:a0:5b:d5:1c:6b:1e:c7:20: c3:1d:80:31:b7:39:5a:3e:09:bb:b5:e4:7b:ef:f6:bd:d3:7f: b0:f8:f5:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFBQjUxMTAvBgNVBAUTKDU1MzcxMUYyRUZFOTQ4NDRDNDNGNzc2RDQ1MTAxOEMw NjQ5NzJDOUEwHhcNMjUwNzAyMTg1NDM1WhcNMjUwNzA5MTg1NDM1WjAYMRYwFAYD VQQDEw02ODY1ODA2Yi04YjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4+mWqONaQtyudzPhF/oqcbxAVycC7bW+rHAWES76KSiM1AoxRB2A4HJx+dN Gn1X9CT4aOjUeJ5PMInfvKAHIPpuAZGNJ34mtpCbiOvFj8ITooI1OOAj7WVNqCAz /xeNunTImlzEwud6XkKBgLSBkFmYlZJ2VwiPTlTOU2g117rpvhTPlxNCN2GMz8oE oqME+tIjWm1KTV3M0Ankxo90ea6BDRfDoxmU1h0vzadB2N24fb7DCI0hBOVj0rRJ ZCrcycSklH68FEdpkvKXa17lPUfIBEXKNuM7qBHJCO3SKcS4s5xrGx86oYFDgV0n uLDkn8IWn8u6Unh2ML5SjJCqdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSYa7PC eysxTRwdt5rT+L61wvXAMB8GA1UdIwQYMBaAFFU3EfLv6UhExD93bUUQGMBklyya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUFCNS9BM0JERTdBMDEw RjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNFVEVQM2R0UlJBWXdHU1hM Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUY1I4dV9wU0VURVAzZHRSUkFZd0dTWExKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUFCNS9BM0JERTdBMDEwRjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNF VEVQM2R0UlJBWXdHU1hMSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1lV/PX32PlgU7GPF3h15GJicn96G9xbNSZEnQMFiDLM3QtgMetow7 n+uuY60sz4uxGN5YfKtJ0J5DDgFa9aN9PQ6I1kjm3AdtaeHd3sg1ER1wNww2zOi3 TSu7J7Dc4OaOMV4w/l/h5mtx9NeYoDfGd75Vwkr2CjnzkRx18prTabB0rnxnHY0Y 5P3bUhjsQBNAZDv+GhBCrlodp/RzGtDWhKUQse77/EgNQLTr0EJoiyuQS+OSKkw7 Xh105mLHiBVUijaEX55gSGMC5M702vfZq5ThkX+R4q88fbAFb9jtUnqyoFvVHGse xyDDHYAxtzlaPgm7teR77/a903+w+PU3 -----END CERTIFICATE-----Generated at Wed Jul 2 22:18:40 2025 by rpki-client