$ rpki-client -vvf rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft File: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft (raw, json) Hash identifier: motOerzc2vDrO1r+AxximLrZ8EXM6YvMl5IfT6ct5zI= Subject key identifier: 17:BC:84:A0:8E:19:C9:AD:31:06:70:47:F7:C3:08:75:DA:4E:CE:8C Authority key identifier: 55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 Certificate issuer: /CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft Manifest number: 010E Signing time: Thu 03 Jul 2025 05:10:39 +0000 Manifest this update: Thu 03 Jul 2025 05:10:38 +0000 Manifest next update: Thu 10 Jul 2025 05:10:38 +0000 Files and hashes: 1: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl (hash: VzSEhvlJJTObJ6GfnlUnM5VtScekPviUKt8r5az7PRk=) 2: FF1C0B44C0D411EEB8303680C4F9AE02.roa (hash: UVR5eOC5r72TP3k3BVK80L1LVMa+jcaIoA99zt0isl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912404E, serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Validity Not Before: Jul 3 05:10:38 2025 GMT Not After : Jul 10 05:10:38 2025 GMT Subject: CN=686610cf-b6ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a4:5b:dd:58:d1:6f:3d:43:38:81:71:f5:9e: a6:60:9c:f1:1f:95:4e:4d:0f:b1:2e:36:79:9d:cb: a3:e0:91:15:e4:3b:9c:10:f2:00:53:da:c7:2f:c0: 7f:79:a2:02:ce:11:47:be:1b:39:fd:e0:6e:47:b6: 30:8d:58:74:da:fe:ad:c4:12:8c:f6:30:61:c2:57: 6e:48:97:a0:a7:ec:d7:fa:f8:a9:2e:8c:86:62:c7: 25:f0:0d:f9:f1:b3:2b:97:a6:6f:fb:d9:7b:a5:7e: 7a:67:e6:5d:13:9a:2d:9e:40:7b:32:73:5f:bf:a7: 53:5a:f2:8a:b3:38:54:54:40:df:57:55:5c:74:b2: c8:cf:30:8c:37:2b:23:5a:47:5e:49:ec:34:c3:12: b5:7d:4d:dd:99:48:83:94:73:3e:50:4c:ee:89:99: b1:3e:54:67:81:08:d5:f8:04:69:b2:24:7c:04:2d: 35:d7:4f:3b:b4:99:53:9c:b2:2d:2b:01:c4:d8:93: 1f:4c:83:0c:48:30:e1:93:15:97:b4:02:e6:45:cb: 7c:cd:a3:8a:e0:19:a6:4f:1c:eb:ba:d4:00:c7:65: e2:b4:3a:08:be:be:4b:70:a1:cd:cd:c8:7c:a3:5e: 63:fd:79:21:b2:f3:59:e0:39:7d:eb:f1:4d:3a:c2: 33:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BC:84:A0:8E:19:C9:AD:31:06:70:47:F7:C3:08:75:DA:4E:CE:8C X509v3 Authority Key Identifier: keyid:55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:50:8e:d4:77:14:40:55:bf:f1:ec:67:7b:f6:20:c5:70:97: c1:45:ee:fa:80:ad:84:6f:23:29:d9:67:a3:8b:f1:1d:c3:53: f7:7a:b2:76:53:f4:bd:0f:8f:b3:06:fc:6f:f6:40:a3:a9:65: fe:01:4f:e2:44:9f:b6:bc:15:18:59:c7:7c:f7:eb:5c:5a:a0: 8e:ea:b0:ff:7a:5a:28:5e:9a:98:b2:56:d1:5a:0e:3e:94:22: 6c:83:8e:30:4e:96:c1:64:dd:3d:5c:93:da:41:0a:48:c4:cb: 86:db:ab:4f:bf:c7:6e:8a:4e:c7:ff:e6:9b:59:57:e1:0f:56: 35:0d:3f:3c:e5:db:50:2c:2b:29:0b:ae:91:19:9e:2a:cb:fd: 76:ec:5e:6c:a0:d4:72:f2:9d:e6:fa:4a:e6:b5:70:e6:db:5b: 0e:2d:6f:4f:01:e6:80:ef:ca:7e:8e:cb:ba:16:2d:bb:1d:7b: 59:b7:33:06:ec:80:ef:a9:3a:f8:46:e0:8b:db:1d:c0:bd:c8: 8b:d5:b2:5e:3a:41:04:f0:13:49:45:b9:af:5b:c0:f8:73:3e: b2:ed:00:f6:bd:be:18:37:9a:19:74:e8:e6:8a:4d:8c:99:05: 4d:ec:fb:51:18:c0:7e:ad:66:7b:30:1e:be:ff:27:59:d8:a5: 2a:93:cc:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQwNEUxMTAvBgNVBAUTKDU1MzkwRjNGNkIzQjMwRUQ0QTlDNkZCOUFEODI5N0I4 RUY5OTA2RTAwHhcNMjUwNzAzMDUxMDM4WhcNMjUwNzEwMDUxMDM4WjAYMRYwFAYD VQQDEw02ODY2MTBjZi1iNmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qRb3VjRbz1DOIFx9Z6mYJzxH5VOTQ+xLjZ5ncuj4JEV5DucEPIAU9rHL8B/ eaICzhFHvhs5/eBuR7YwjVh02v6txBKM9jBhwlduSJegp+zX+vipLoyGYscl8A35 8bMrl6Zv+9l7pX56Z+ZdE5otnkB7MnNfv6dTWvKKszhUVEDfV1VcdLLIzzCMNysj WkdeSew0wxK1fU3dmUiDlHM+UEzuiZmxPlRngQjV+ARpsiR8BC011087tJlTnLIt KwHE2JMfTIMMSDDhkxWXtALmRct8zaOK4BmmTxzrutQAx2XitDoIvr5LcKHNzch8 o15j/XkhsvNZ4Dl96/FNOsIzYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBe8hKCO GcmtMQZwR/fDCHXaTs6MMB8GA1UdIwQYMBaAFFU5Dz9rOzDtSpxvua2Cl7jvmQbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDA0RS80OURGNjUzRUJG NDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01PMUtuRy01cllLWHVPLVpC dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUa1BQMnM3TU8xS25HLTVyWUtYdU8tWkJ1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDA0RS80OURGNjUzRUJGNDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01P MUtuRy01cllLWHVPLVpCdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoUI7UdxRAVb/x7Gd79iDFcJfBRe76gK2EbyMp2Weji/Edw1P3erJ2 U/S9D4+zBvxv9kCjqWX+AU/iRJ+2vBUYWcd89+tcWqCO6rD/elooXpqYslbRWg4+ lCJsg44wTpbBZN09XJPaQQpIxMuG26tPv8duik7H/+abWVfhD1Y1DT885dtQLCsp C66RGZ4qy/127F5soNRy8p3m+krmtXDm21sOLW9PAeaA78p+jsu6Fi27HXtZtzMG 7IDvqTr4RuCL2x3AvciL1bJeOkEE8BNJRbmvW8D4cz6y7QD2vb4YN5oZdOjmik2M mQVN7PtRGMB+rWZ7MB6+/ydZ2KUqk8xP -----END CERTIFICATE-----Generated at Fri Jul 4 14:47:01 2025 by rpki-client