$ rpki-client -vvf rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft File: VTcR8u_pSETEP3dtRRAYwGSXLJo.mft (raw, json) Hash identifier: gNZDSJDeYPQBB516yeQfzESTulq/DvtR8co8fOQSWl8= Subject key identifier: F0:5B:3B:68:4C:14:1D:39:4C:F4:BD:69:D6:FF:85:76:A2:A4:AA:50 Authority key identifier: 55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A Certificate issuer: /CN=A911AAB5/serialNumber=553711F2EFE94844C43F776D451018C064972C9A Certificate serial: 0C43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft Manifest number: 0C38 Signing time: Fri 22 Aug 2025 18:45:44 +0000 Manifest this update: Fri 22 Aug 2025 18:45:44 +0000 Manifest next update: Fri 29 Aug 2025 18:45:44 +0000 Files and hashes: 1: VTcR8u_pSETEP3dtRRAYwGSXLJo.crl (hash: OygEdBYq4SONx1hIX5Fwhyj4MdA6lyRtR1wwVSgqoUY=) 2: 65EE26547A8711ECBA5D244DC4F9AE02.roa (hash: 9jpZ67QWGAJhgEp9yZYa+B85oL6nxjWkZcfSp/yeSCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3139 (0xc43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AAB5, serialNumber=553711F2EFE94844C43F776D451018C064972C9A Validity Not Before: Aug 22 18:45:44 2025 GMT Not After : Aug 29 18:45:44 2025 GMT Subject: CN=68a8bad8-1fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:6b:a8:ab:6e:1f:59:d2:ff:fb:6c:19:9c: e1:17:08:e4:c7:2c:00:aa:cc:fa:5d:f9:2e:e1:6f: 2e:03:11:b0:db:e3:d7:45:a5:74:9b:ca:3b:6b:15: 0f:4e:1e:90:9c:18:fd:72:fd:ca:49:d2:65:18:6a: 72:df:08:4f:2d:08:28:76:31:d8:23:c1:10:8a:60: 92:76:fc:48:ec:57:7e:34:27:1b:85:40:5a:8c:b7: 33:98:f7:2a:28:5a:a8:9a:37:83:1e:a7:af:f8:97: 7b:45:6b:f9:10:ea:2e:be:eb:93:bc:b5:81:01:e2: b5:b3:56:2a:1e:46:f7:25:a5:bb:4b:e0:89:67:8f: 00:c4:b1:df:43:00:6b:72:49:69:e9:c3:5b:63:a7: 9b:05:0a:98:97:c9:e8:b4:a7:dc:9f:8f:5f:b3:73: 07:d5:32:bd:10:27:fb:17:5b:c8:d4:7f:44:55:be: 6a:60:f6:11:f8:52:ae:8d:f3:56:ad:12:08:19:c2: 79:28:39:c6:e2:46:d0:72:0b:38:d3:81:5e:e7:4e: cc:56:dd:e0:9b:88:16:69:f7:f6:d7:3d:9a:7b:28: 65:6e:a6:74:0d:01:e4:d2:3b:f1:95:41:6e:8a:03: 0e:6e:a7:5e:bf:26:87:8b:ef:98:cd:5a:2b:6a:da: 86:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5B:3B:68:4C:14:1D:39:4C:F4:BD:69:D6:FF:85:76:A2:A4:AA:50 X509v3 Authority Key Identifier: keyid:55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:7f:a5:4c:13:f7:18:33:f1:b3:93:db:61:02:2a:92:db:4d: 7a:a1:d4:51:22:73:3f:1a:31:a8:33:92:cc:ef:e2:92:6b:4e: d3:0f:2b:8d:58:db:81:07:ac:be:06:d7:c6:05:5f:91:97:dd: be:1c:bd:4d:5d:55:72:05:60:b7:4d:fb:25:f8:08:b7:03:d6: 38:f6:90:29:25:75:68:d1:a3:07:e3:29:24:c4:b1:bc:87:74: 2b:43:7e:d6:93:f9:e4:f7:40:1f:84:8d:e1:f7:aa:f8:82:6c: 89:eb:d5:b9:c5:52:d1:fd:c1:fc:0f:74:ed:50:6c:95:0c:31: 6c:4d:11:fa:2f:a9:10:ce:00:ae:19:5f:91:59:b0:14:0c:13: c4:3f:ad:45:d2:36:fa:7d:ae:eb:7d:bc:60:71:ba:6f:72:b4: bd:82:3d:17:51:3a:1f:ee:0f:af:bf:f4:83:ba:31:b8:2a:72: a2:f6:af:8e:23:4e:2c:cd:48:74:9e:95:fb:c6:9b:c8:e9:5b: 68:af:fe:a5:5c:04:be:3c:46:ca:ac:5f:dc:05:78:7c:0c:5c: 42:fc:0e:ae:0f:38:16:11:41:dd:8d:73:14:16:50:c0:8f:66: 1f:5d:bf:1f:e4:4c:2e:d4:6f:e3:82:7f:2d:b4:f3:f0:60:37: 20:35:40:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFBQjUxMTAvBgNVBAUTKDU1MzcxMUYyRUZFOTQ4NDRDNDNGNzc2RDQ1MTAxOEMw NjQ5NzJDOUEwHhcNMjUwODIyMTg0NTQ0WhcNMjUwODI5MTg0NTQ0WjAYMRYwFAYD VQQDEw02OGE4YmFkOC0xZmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwF9rqKtuH1nS//tsGZzhFwjkxywAqsz6Xfku4W8uAxGw2+PXRaV0m8o7axUP Th6QnBj9cv3KSdJlGGpy3whPLQgodjHYI8EQimCSdvxI7Fd+NCcbhUBajLczmPcq KFqomjeDHqev+Jd7RWv5EOouvuuTvLWBAeK1s1YqHkb3JaW7S+CJZ48AxLHfQwBr cklp6cNbY6ebBQqYl8notKfcn49fs3MH1TK9ECf7F1vI1H9EVb5qYPYR+FKujfNW rRIIGcJ5KDnG4kbQcgs404Fe507MVt3gm4gWaff21z2aeyhlbqZ0DQHk0jvxlUFu igMObqdevyaHi++YzVoratqGeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBbO2hM FB05TPS9adb/hXaipKpQMB8GA1UdIwQYMBaAFFU3EfLv6UhExD93bUUQGMBklyya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUFCNS9BM0JERTdBMDEw RjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNFVEVQM2R0UlJBWXdHU1hM Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUY1I4dV9wU0VURVAzZHRSUkFZd0dTWExKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUFCNS9BM0JERTdBMDEwRjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNF VEVQM2R0UlJBWXdHU1hMSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVf6VME/cYM/Gzk9thAiqS2016odRRInM/GjGoM5LM7+KSa07TDyuN WNuBB6y+BtfGBV+Rl92+HL1NXVVyBWC3Tfsl+Ai3A9Y49pApJXVo0aMH4ykkxLG8 h3QrQ37Wk/nk90AfhI3h96r4gmyJ69W5xVLR/cH8D3TtUGyVDDFsTRH6L6kQzgCu GV+RWbAUDBPEP61F0jb6fa7rfbxgcbpvcrS9gj0XUTof7g+vv/SDujG4KnKi9q+O I04szUh0npX7xpvI6Vtor/6lXAS+PEbKrF/cBXh8DFxC/A6uDzgWEUHdjXMUFlDA j2YfXb8f5Ewu1G/jgn8ttPPwYDcgNUBc -----END CERTIFICATE-----Generated at Sun Aug 24 03:11:16 2025 by rpki-client