$ rpki-client -vvf rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft File: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft (raw, json) Hash identifier: oRCcvbRZKPQJ/QQwUvdFRNegyG4s80l5+zn2vUprwTs= Subject key identifier: 00:C5:68:10:21:E3:F4:4A:80:E0:0C:E0:A6:E6:24:EA:3A:2B:87:4C Authority key identifier: 55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 Certificate issuer: /CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft Manifest number: 0128 Signing time: Sat 23 Aug 2025 04:50:40 +0000 Manifest this update: Sat 23 Aug 2025 04:50:39 +0000 Manifest next update: Sat 30 Aug 2025 04:50:39 +0000 Files and hashes: 1: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl (hash: BaL0tU5bMQ2Mi1evufeeaiI8GMRp/plU9t7mpE46evI=) 2: FF1C0B44C0D411EEB8303680C4F9AE02.roa (hash: UVR5eOC5r72TP3k3BVK80L1LVMa+jcaIoA99zt0isl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912404E, serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Validity Not Before: Aug 23 04:50:39 2025 GMT Not After : Aug 30 04:50:39 2025 GMT Subject: CN=68a948a0-2434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:62:18:24:41:65:38:67:34:65:f5:0c:bd:95: 6d:e6:c5:e2:3b:3e:1a:6b:a4:08:33:c8:33:a5:c8: ea:04:b7:dd:42:0e:85:ad:33:85:42:1f:f4:5d:75: ed:63:7f:9b:33:e6:89:91:61:9a:37:3e:1d:8f:50: 8a:d1:0b:0e:8b:1d:d6:b2:fa:f9:6f:f6:b4:78:38: 2e:41:91:7c:85:4d:2d:bd:3e:a1:bb:7f:6d:10:08: 55:89:b7:67:77:fa:87:ff:2b:39:65:89:f0:21:5e: 30:92:dd:28:d1:12:ba:be:28:57:83:d0:c6:86:97: ad:c6:39:35:f8:31:de:d1:f8:42:25:3f:d9:05:2d: 45:0b:fa:09:ef:f2:2f:94:41:09:08:d0:33:1e:7f: 78:28:91:0c:22:d9:1e:98:63:4b:66:06:1e:1c:a3: ba:5f:ec:11:4d:e3:19:05:9e:2b:d1:34:a9:98:01: 8c:f2:40:65:09:1b:73:95:15:17:35:23:e4:1f:76: a1:82:18:74:9f:78:de:55:94:a9:3f:68:69:8a:e7: c7:c7:ed:6b:0c:d8:e1:da:f0:e9:0a:a5:55:48:17: 99:e2:7c:62:18:d1:ea:60:a3:14:7d:6c:b4:85:94: 94:84:f0:f9:04:2f:2a:0f:57:1e:94:19:83:da:62: 2f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C5:68:10:21:E3:F4:4A:80:E0:0C:E0:A6:E6:24:EA:3A:2B:87:4C X509v3 Authority Key Identifier: keyid:55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:86:c1:c9:d2:d9:14:44:70:7d:2a:3f:56:f0:ef:b9:a4:45: 87:e9:a0:88:cf:a8:1d:99:e7:5d:d4:3a:73:9b:b8:de:71:08: 79:41:5d:e2:75:fd:2d:0a:09:81:45:e2:96:72:a4:4e:2e:20: cf:e6:79:d4:60:5f:12:12:13:9f:dd:46:89:83:9a:b3:69:d8: 8c:19:37:dd:7b:31:3f:a8:b8:25:f2:b9:2c:1a:c7:30:4a:63: a9:9f:6c:36:84:f0:98:5b:14:e4:b2:7d:5d:3c:5d:7e:2a:f5: 39:48:c4:b7:03:91:67:16:b3:e3:45:67:7b:18:36:2b:ae:59: d6:77:ba:e3:20:0e:df:3e:fc:62:92:13:d9:ce:00:25:c5:94: 23:f6:ea:9a:cb:d0:70:e5:bb:28:c2:cf:da:ee:a8:d9:59:b5: 76:94:b5:59:f6:fb:b8:93:44:f8:76:28:79:c2:a7:ce:02:ef: ee:4e:15:f8:45:fa:cb:35:02:fd:95:bd:c6:95:b6:67:95:22: a7:8d:ea:13:1d:e5:5e:55:eb:d4:c4:9a:4e:8d:64:3d:03:90: 4d:22:a9:55:60:02:0b:d6:b1:eb:56:a8:b4:0f:9a:e0:fc:7c: b0:81:f4:cf:a8:a2:6c:80:fd:f9:63:71:ec:7b:97:54:bc:09: aa:4f:e9:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQwNEUxMTAvBgNVBAUTKDU1MzkwRjNGNkIzQjMwRUQ0QTlDNkZCOUFEODI5N0I4 RUY5OTA2RTAwHhcNMjUwODIzMDQ1MDM5WhcNMjUwODMwMDQ1MDM5WjAYMRYwFAYD VQQDEw02OGE5NDhhMC0yNDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGIYJEFlOGc0ZfUMvZVt5sXiOz4aa6QIM8gzpcjqBLfdQg6FrTOFQh/0XXXt Y3+bM+aJkWGaNz4dj1CK0QsOix3Wsvr5b/a0eDguQZF8hU0tvT6hu39tEAhVibdn d/qH/ys5ZYnwIV4wkt0o0RK6vihXg9DGhpetxjk1+DHe0fhCJT/ZBS1FC/oJ7/Iv lEEJCNAzHn94KJEMItkemGNLZgYeHKO6X+wRTeMZBZ4r0TSpmAGM8kBlCRtzlRUX NSPkH3ahghh0n3jeVZSpP2hpiufHx+1rDNjh2vDpCqVVSBeZ4nxiGNHqYKMUfWy0 hZSUhPD5BC8qD1celBmD2mIvjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADFaBAh 4/RKgOAM4KbmJOo6K4dMMB8GA1UdIwQYMBaAFFU5Dz9rOzDtSpxvua2Cl7jvmQbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDA0RS80OURGNjUzRUJG NDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01PMUtuRy01cllLWHVPLVpC dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUa1BQMnM3TU8xS25HLTVyWUtYdU8tWkJ1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDA0RS80OURGNjUzRUJGNDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01P MUtuRy01cllLWHVPLVpCdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkhsHJ0tkURHB9Kj9W8O+5pEWH6aCIz6gdmedd1Dpzm7jecQh5QV3i df0tCgmBReKWcqROLiDP5nnUYF8SEhOf3UaJg5qzadiMGTfdezE/qLgl8rksGscw SmOpn2w2hPCYWxTksn1dPF1+KvU5SMS3A5FnFrPjRWd7GDYrrlnWd7rjIA7fPvxi khPZzgAlxZQj9uqay9Bw5bsows/a7qjZWbV2lLVZ9vu4k0T4dih5wqfOAu/uThX4 RfrLNQL9lb3GlbZnlSKnjeoTHeVeVevUxJpOjWQ9A5BNIqlVYAIL1rHrVqi0D5rg /HywgfTPqKJsgP35Y3Hse5dUvAmqT+kz -----END CERTIFICATE-----Generated at Sat Aug 23 19:41:29 2025 by rpki-client