$ rpki-client -vvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft File: VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json) Hash identifier: 9567EW0WZ3A09/DRNvTCKli3fJoknytRLcpphXwVvvM= Subject key identifier: 30:B3:58:73:32:54:D4:22:88:48:0A:C6:5C:D2:73:64:07:00:14:A2 Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 Certificate issuer: /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft Manifest number: AA Signing time: Sat 23 Aug 2025 06:24:55 +0000 Manifest this update: Sat 23 Aug 2025 06:24:55 +0000 Manifest next update: Sat 30 Aug 2025 06:24:55 +0000 Files and hashes: 1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: NN7FBo2Aj5yTcJPdJ7sor3AWCvUCC9zgW71wUdZm1OM=) 2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: APURPczfV1ii5Oz3jn5uLGx4X2/aeoAU9n96jwy9b0A=) 3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: utVxhZKF0BG0gKmfkjY5U3UQKAW2XCaaTxVRnaQMDbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91276FA, serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582 Validity Not Before: Aug 23 06:24:55 2025 GMT Not After : Aug 30 06:24:55 2025 GMT Subject: CN=68a95eb7-4243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:16:fc:83:7c:4f:d9:d4:00:91:f8:01:23:e6: e1:14:5b:61:31:dd:06:26:c2:f6:55:e5:e7:5d:69: 32:e1:b1:5a:3a:b5:ca:2a:8c:91:43:4b:49:70:87: 34:43:c3:d9:80:dd:78:05:03:68:1f:68:9d:53:8c: 24:58:7a:c2:c1:d9:a2:3c:8c:80:b9:b0:b2:61:eb: d8:e7:6c:76:53:4d:f3:78:97:43:e2:95:55:dd:43: 89:35:80:4f:80:38:5c:b5:be:6d:8c:78:28:fb:88: 8c:03:11:b9:28:1e:41:78:d5:18:ae:87:7e:b7:50: 37:cc:38:e5:66:c4:79:f7:25:40:48:9e:1f:02:3d: 19:ea:ee:a4:e7:56:b0:ee:eb:a6:c8:5e:55:e4:5a: e0:22:42:c2:5b:13:da:eb:9d:7b:a2:fb:d1:78:3d: ee:ac:2e:45:23:bc:3a:1e:07:20:b4:99:4b:0e:19: 4b:fc:8a:ef:20:e3:84:6c:e4:cd:7a:21:db:2c:70: 99:24:9c:32:d6:4d:25:54:ea:ec:9e:90:38:54:f7: 5a:9a:1c:35:9c:13:b4:a0:39:80:79:48:91:7d:1e: cc:b5:64:09:9b:ac:33:d3:1b:01:d4:95:a1:75:8e: cb:2b:69:2b:02:a8:f1:13:00:95:4c:de:a9:78:f8: 45:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B3:58:73:32:54:D4:22:88:48:0A:C6:5C:D2:73:64:07:00:14:A2 X509v3 Authority Key Identifier: keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c2:86:8c:9a:11:b9:63:db:f2:ee:60:3e:5f:32:b2:f1:33: f8:70:2e:e4:14:27:68:3a:ea:c2:d4:9a:85:14:b4:c4:f7:b1: ee:68:e7:10:23:cd:9a:c7:7e:3b:5f:5f:b9:0e:95:5f:fc:73: b7:31:e6:29:6b:16:cd:0c:6d:43:fa:4b:fa:a2:57:a7:71:c6: d2:fc:60:df:80:b0:de:35:8a:75:6e:d2:39:11:07:01:f3:e2: 90:d9:d1:07:02:78:ec:2d:4f:cd:59:0f:66:0b:91:fd:73:ce: c4:ef:f4:16:20:05:c9:f1:f0:7b:e2:01:77:a3:58:f9:3a:1e: 36:f0:fc:b3:64:1a:4b:2c:d4:c3:35:11:28:fe:f9:09:9e:b1: b6:26:08:3b:e5:1f:88:c8:94:f5:22:31:04:4e:50:79:4c:ab: f8:34:5b:3d:9c:e7:b8:e9:ea:4d:b0:ec:6e:69:f6:90:ef:a5: fa:d4:23:5c:39:25:f1:99:f3:bf:25:38:62:ae:b9:fa:de:d5: df:bf:81:ba:7b:e5:6c:49:a6:e7:6d:ed:df:8d:fb:a7:b4:54: b5:fa:cf:16:11:01:80:83:94:ef:af:ba:b7:b7:dd:a2:97:2c: 7b:6f:2d:3d:1b:a8:8f:a4:b0:31:f2:51:dc:e6:d8:ca:e0:cf: ef:af:1a:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2RkExMTAvBgNVBAUTKDU1MzNBN0M1N0JGNERCMUU1MzhGOUU3N0UwQjQ4NjhC OEY5MEM1ODIwHhcNMjUwODIzMDYyNDU1WhcNMjUwODMwMDYyNDU1WjAYMRYwFAYD VQQDEw02OGE5NWViNy00MjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxb8g3xP2dQAkfgBI+bhFFthMd0GJsL2VeXnXWky4bFaOrXKKoyRQ0tJcIc0 Q8PZgN14BQNoH2idU4wkWHrCwdmiPIyAubCyYevY52x2U03zeJdD4pVV3UOJNYBP gDhctb5tjHgo+4iMAxG5KB5BeNUYrod+t1A3zDjlZsR59yVASJ4fAj0Z6u6k51aw 7uumyF5V5FrgIkLCWxPa6517ovvReD3urC5FI7w6HgcgtJlLDhlL/IrvIOOEbOTN eiHbLHCZJJwy1k0lVOrsnpA4VPdamhw1nBO0oDmAeUiRfR7MtWQJm6wz0xsB1JWh dY7LK2krAqjxEwCVTN6pePhFCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCzWHMy VNQiiEgKxlzSc2QHABSiMB8GA1UdIwQYMBaAFFUzp8V79NseU4+ed+C0houPkMWC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzZGQS85QzUyQTdFODg0 QzkxMUVGQjU0RDBDNDlDNEY5QUUwMi9WVE9ueFh2MDJ4NVRqNTUzNExTR2k0LVF4 WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUT254WHYwMng1VGo1NTM0TFNHaTQtUXhZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzZGQS85QzUyQTdFODg0QzkxMUVGQjU0RDBDNDlDNEY5QUUwMi9WVE9ueFh2MDJ4 NVRqNTUzNExTR2k0LVF4WUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcwoaMmhG5Y9vy7mA+XzKy8TP4cC7kFCdoOurC1JqFFLTE97HuaOcQ I82ax347X1+5DpVf/HO3MeYpaxbNDG1D+kv6olenccbS/GDfgLDeNYp1btI5EQcB 8+KQ2dEHAnjsLU/NWQ9mC5H9c87E7/QWIAXJ8fB74gF3o1j5Oh428PyzZBpLLNTD NREo/vkJnrG2Jgg75R+IyJT1IjEETlB5TKv4NFs9nOe46epNsOxuafaQ76X61CNc OSXxmfO/JThirrn63tXfv4G6e+VsSabnbe3fjfuntFS1+s8WEQGAg5Tvr7q3t92i lyx7by09G6iPpLAx8lHc5tjK4M/vrxoE -----END CERTIFICATE-----Generated at Sat Aug 23 19:08:20 2025 by rpki-client