$ rpki-client -vvf rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft File: VsaTBbXrpUJVXYx4xWGremzRqiw.mft (raw, json) Hash identifier: Jk80gSB3K8aLl0dg+D7Px6thVrODVh8zL21/ocwl3I8= Subject key identifier: CB:93:44:FF:AD:84:7B:F3:4D:78:42:F4:01:70:06:38:98:DC:95:DC Authority key identifier: 56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C Certificate issuer: /CN=A911EEF8/serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft Manifest number: 6C Signing time: Thu 03 Jul 2025 07:14:32 +0000 Manifest this update: Thu 03 Jul 2025 07:14:31 +0000 Manifest next update: Thu 10 Jul 2025 07:14:31 +0000 Files and hashes: 1: VsaTBbXrpUJVXYx4xWGremzRqiw.crl (hash: sSWxZbVzcmPktGzC0nmo1RmmXKhqbaSXs4PbDMlM7QE=) 2: 0EC0EC1CC71F11EF85C66E2FC4F9AE02.roa (hash: +qrfRV2PMdtXAnNnZKKe18T1gS8IeX0szeLZzmY8t+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EEF8, serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C Validity Not Before: Jul 3 07:14:31 2025 GMT Not After : Jul 10 07:14:31 2025 GMT Subject: CN=68662dd8-a9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a8:3e:ab:36:24:48:6b:2e:02:cd:13:3a:2c: d0:98:22:7c:ab:88:ae:9a:d1:cf:7f:7f:43:25:eb: 55:5e:00:f4:d9:bd:4d:28:b1:f5:c5:f0:40:c9:71: 47:1e:f6:81:c8:5e:f8:a2:2c:ac:be:23:b3:74:a8: 14:17:3f:14:6e:04:63:a8:a8:4f:4b:0b:2c:52:ca: 02:0b:14:4e:cd:0a:ca:85:20:c5:3f:94:34:d8:26: 43:cf:19:cc:2a:1f:78:40:ff:49:b4:db:ab:f7:a6: 2f:86:af:a3:19:07:fc:ed:3f:f7:80:2f:9c:8c:fc: a0:4f:3b:6b:84:6b:66:a8:04:68:fe:ce:0f:14:a6: 6b:12:f7:a7:bd:c7:a5:d4:0e:a0:d7:e1:6e:88:bd: 1b:37:ef:bc:25:7d:0a:5f:84:59:06:b4:4c:4f:50: 67:3c:5f:06:64:ef:33:90:8c:ce:9f:17:81:3d:03: 99:7e:f6:ab:e1:ae:73:f3:bd:4d:58:45:12:22:81: 69:52:87:b2:83:10:7a:7d:39:67:3f:6c:1f:51:db: 0c:d0:a9:10:8e:0a:c3:41:fc:ef:d2:64:28:d9:46: e6:f4:68:41:3d:0a:fd:b5:89:d1:e1:83:38:f5:a9: 17:6e:98:3a:42:36:61:65:68:92:4e:78:f5:a1:30: 3d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:93:44:FF:AD:84:7B:F3:4D:78:42:F4:01:70:06:38:98:DC:95:DC X509v3 Authority Key Identifier: keyid:56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:0f:e6:49:f0:b8:16:54:6b:2c:51:6d:5a:3c:48:bd:43:7d: b6:b6:79:24:ff:fa:e1:17:ab:42:ca:c3:3e:e6:75:75:73:66: 21:04:24:30:4a:4a:40:62:9b:62:be:28:a6:d0:e2:a7:cf:a2: ab:42:3c:6c:e8:67:50:c1:69:2d:d0:14:b6:a1:3c:fa:61:42: ef:0a:69:1d:6d:e9:4e:20:45:5d:d9:50:ed:89:f1:7f:a7:06: bc:6e:93:5e:e8:40:9f:89:ea:cc:66:e0:1a:27:b3:0c:bd:15: 7e:65:3c:64:49:79:8d:e2:48:9d:02:e9:56:2d:2c:1b:2a:fb: cc:fa:05:0f:d7:48:1e:ce:f2:70:26:31:7a:9f:99:c1:fd:1f: 7c:ce:c9:b2:a4:b8:b6:a9:32:da:ee:c8:c3:97:c6:d4:11:e2: a9:93:5d:1b:6a:00:8c:7c:1d:48:cc:b2:bb:07:35:0a:c0:b0: 02:60:26:3e:ff:1d:27:7e:bc:bf:1d:66:4b:9e:8d:aa:6d:74: dd:1b:60:46:80:a9:bb:26:67:45:ed:37:8b:f3:6c:7d:31:13: 12:a6:18:ff:7b:5a:66:be:16:f8:87:7c:1c:65:a3:9d:0d:57: 16:15:cb:f2:f6:23:93:8e:5a:71:3b:3b:5b:74:92:e0:a2:23: e7:42:c1:0a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RUVGODExMC8GA1UEBRMoNTZDNjkzMDVCNUVCQTU0MjU1NUQ4Qzc4QzU2MUFCN0E2 Q0QxQUEyQzAeFw0yNTA3MDMwNzE0MzFaFw0yNTA3MTAwNzE0MzFaMBgxFjAUBgNV BAMTDTY4NjYyZGQ4LWE5ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqqD6rNiRIay4CzRM6LNCYInyriK6a0c9/f0Ml61VeAPTZvU0osfXF8EDJcUce 9oHIXviiLKy+I7N0qBQXPxRuBGOoqE9LCyxSygILFE7NCsqFIMU/lDTYJkPPGcwq H3hA/0m026v3pi+Gr6MZB/ztP/eAL5yM/KBPO2uEa2aoBGj+zg8UpmsS96e9x6XU DqDX4W6IvRs377wlfQpfhFkGtExPUGc8XwZk7zOQjM6fF4E9A5l+9qvhrnPzvU1Y RRIigWlSh7KDEHp9OWc/bB9R2wzQqRCOCsNB/O/SZCjZRub0aEE9Cv21idHhgzj1 qRdumDpCNmFlaJJOePWhMD0xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUy5NE/62E e/NNeEL0AXAGOJjcldwwHwYDVR0jBBgwFoAUVsaTBbXrpUJVXYx4xWGremzRqiww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFRUY4Lzk3OTlFNkQwQkJD NDExRUZCOTg1QkUzRkM0RjlBRTAyL1ZzYVRCYlhycFVKVlhZeDR4V0dyZW16UnFp dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVnNhVEJiWHJwVUpWWFl4NHhXR3JlbXpScWl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF RUY4Lzk3OTlFNkQwQkJDNDExRUZCOTg1QkUzRkM0RjlBRTAyL1ZzYVRCYlhycFVK VlhZeDR4V0dyZW16UnFpdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMYP5knwuBZUayxRbVo8SL1Dfba2eST/+uEXq0LKwz7mdXVzZiEEJDBK SkBim2K+KKbQ4qfPoqtCPGzoZ1DBaS3QFLahPPphQu8KaR1t6U4gRV3ZUO2J8X+n Brxuk17oQJ+J6sxm4Bonswy9FX5lPGRJeY3iSJ0C6VYtLBsq+8z6BQ/XSB7O8nAm MXqfmcH9H3zOybKkuLapMtruyMOXxtQR4qmTXRtqAIx8HUjMsrsHNQrAsAJgJj7/ HSd+vL8dZkuejaptdN0bYEaAqbsmZ0XtN4vzbH0xExKmGP97Wma+FviHfBxlo50N VxYVy/L2I5OOWnE7O1t0kuCiI+dCwQo= -----END CERTIFICATE-----Generated at Thu Jul 3 08:13:53 2025 by rpki-client