$ rpki-client -vvf rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft File: VWyosJdH0HtvaiekBVKNOfpbgkw.mft (raw, json) Hash identifier: JjsBwV3C1LyOlym5UVydZpjFRocvhrOnqpRCRm7Kcfg= Subject key identifier: CC:89:BC:56:84:1C:6A:D4:18:C1:01:C7:B1:39:C0:B7:56:93:4E:D9 Authority key identifier: 55:6C:A8:B0:97:47:D0:7B:6F:6A:27:A4:05:52:8D:39:FA:5B:82:4C Certificate issuer: /CN=A912A4D7/serialNumber=556CA8B09747D07B6F6A27A405528D39FA5B824C Certificate serial: 08A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft Manifest number: 0898 Signing time: Wed 02 Jul 2025 20:50:22 +0000 Manifest this update: Wed 02 Jul 2025 20:50:22 +0000 Manifest next update: Wed 09 Jul 2025 20:50:22 +0000 Files and hashes: 1: VWyosJdH0HtvaiekBVKNOfpbgkw.crl (hash: xfVNHKQgAtmZ8/e7FmRsOtVVpqz93FmbQ0odhsty36g=) 2: 3C24D492BF6911EAA877B317C4F9AE02.roa (hash: NZkd996OCXD4hErR3DmhrfGKjBgYP///vRBLCCwugg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.crl rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:50:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2208 (0x8a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A4D7, serialNumber=556CA8B09747D07B6F6A27A405528D39FA5B824C Validity Not Before: Jul 2 20:50:22 2025 GMT Not After : Jul 9 20:50:22 2025 GMT Subject: CN=68659b8e-98ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6c:d0:76:3a:dc:47:ec:8a:e8:c1:85:c2:9a: 3f:7a:87:4b:a8:93:34:fa:f9:b9:7e:b2:ec:28:41: 65:83:21:53:bb:ff:6d:c3:d2:55:00:4c:98:c4:90: 5c:ed:47:37:43:d0:18:40:5b:64:d2:a7:1c:a7:27: d0:a1:75:90:9b:9c:6d:58:b1:65:1d:20:38:15:94: 7d:bb:cf:95:9a:ec:0d:ae:73:79:83:c0:ac:8b:2c: a9:95:9b:ec:1a:ca:d8:1b:49:a4:d3:d6:88:79:74: b5:fe:7f:05:56:98:cd:5b:cb:af:22:02:95:a3:7c: 01:c2:39:9c:48:6f:8c:9c:03:82:2d:2a:8f:84:88: 5d:f2:82:f2:f5:b8:0f:c2:10:ca:68:61:74:fb:09: 23:2c:a2:bf:0c:4b:96:9f:67:18:19:24:ca:c4:57: 64:41:28:00:09:5a:2c:3f:13:38:6f:86:97:ea:83: c7:73:ee:a3:47:a3:79:80:ae:94:bd:cd:f6:75:77: d6:b4:1b:da:f7:1b:d4:e1:45:39:32:1e:b0:c3:97: 7d:10:dd:df:74:45:80:9d:4b:36:90:34:b2:ca:a2: 11:57:49:ee:a5:e3:6f:5d:36:50:46:30:05:99:ba: c2:80:1e:9f:f8:0b:93:b0:98:73:49:42:4e:34:87: 61:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:89:BC:56:84:1C:6A:D4:18:C1:01:C7:B1:39:C0:B7:56:93:4E:D9 X509v3 Authority Key Identifier: keyid:55:6C:A8:B0:97:47:D0:7B:6F:6A:27:A4:05:52:8D:39:FA:5B:82:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:95:9d:f2:05:c5:33:84:d5:f5:0e:d8:a4:b0:ff:c3:97:5e: f9:93:32:81:c9:37:c2:bd:aa:8b:03:cd:78:a7:98:da:8d:85: 81:0c:6c:21:6a:f0:b4:3b:bc:4d:0f:cc:5d:3c:d9:3c:71:f0: 4b:79:1e:0c:cc:cc:c9:70:97:d0:07:73:b5:15:c8:64:df:84: e4:ad:7c:fc:12:88:4f:dc:19:b6:de:f8:0f:61:59:76:c3:60: d0:36:2b:7f:4d:73:f9:1a:e0:a6:90:3a:d5:d0:a2:21:65:b8: e8:9d:31:2d:b8:2f:f6:57:22:c7:2a:90:1e:8b:fa:58:da:13: 9a:e4:89:91:fa:12:9b:2f:b4:5f:48:93:18:34:df:97:93:20: f4:3b:5e:01:42:89:05:6c:5b:c3:f2:9a:b9:57:66:d1:87:38: 1a:f6:fb:f6:5e:70:81:77:ca:9c:f8:9c:ce:71:ac:c0:d2:17: ca:ec:47:f8:28:40:0e:6b:23:b6:54:42:68:b9:7b:98:d9:c1: cc:0e:d4:a9:58:7c:ba:fe:e7:fe:9b:80:4e:e9:84:a3:d0:b7: 7c:fa:46:05:18:51:8f:81:de:18:8b:1a:fa:ae:b6:97:e4:10: 74:29:50:b4:b1:ea:75:c0:ae:ba:c3:cc:aa:fe:45:6d:e2:1f: c5:4f:ad:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE0RDcxMTAvBgNVBAUTKDU1NkNBOEIwOTc0N0QwN0I2RjZBMjdBNDA1NTI4RDM5 RkE1QjgyNEMwHhcNMjUwNzAyMjA1MDIyWhcNMjUwNzA5MjA1MDIyWjAYMRYwFAYD VQQDEw02ODY1OWI4ZS05OGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWzQdjrcR+yK6MGFwpo/eodLqJM0+vm5frLsKEFlgyFTu/9tw9JVAEyYxJBc 7Uc3Q9AYQFtk0qccpyfQoXWQm5xtWLFlHSA4FZR9u8+VmuwNrnN5g8CsiyyplZvs GsrYG0mk09aIeXS1/n8FVpjNW8uvIgKVo3wBwjmcSG+MnAOCLSqPhIhd8oLy9bgP whDKaGF0+wkjLKK/DEuWn2cYGSTKxFdkQSgACVosPxM4b4aX6oPHc+6jR6N5gK6U vc32dXfWtBva9xvU4UU5Mh6ww5d9EN3fdEWAnUs2kDSyyqIRV0nupeNvXTZQRjAF mbrCgB6f+AuTsJhzSUJONIdhcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyJvFaE HGrUGMEBx7E5wLdWk07ZMB8GA1UdIwQYMBaAFFVsqLCXR9B7b2onpAVSjTn6W4JM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTRENy9CRDBDMDNGMkJG NjcxMUVBQjNCQjE4MTVDNEY5QUUwMi9WV3lvc0pkSDBIdHZhaWVrQlZLTk9mcGJn a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZXeW9zSmRIMEh0dmFpZWtCVktOT2ZwYmdrdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTRENy9CRDBDMDNGMkJGNjcxMUVBQjNCQjE4MTVDNEY5QUUwMi9WV3lvc0pkSDBI dHZhaWVrQlZLTk9mcGJna3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+lZ3yBcUzhNX1DtiksP/Dl175kzKByTfCvaqLA814p5jajYWBDGwh avC0O7xND8xdPNk8cfBLeR4MzMzJcJfQB3O1Fchk34TkrXz8EohP3Bm23vgPYVl2 w2DQNit/TXP5GuCmkDrV0KIhZbjonTEtuC/2VyLHKpAei/pY2hOa5ImR+hKbL7Rf SJMYNN+XkyD0O14BQokFbFvD8pq5V2bRhzga9vv2XnCBd8qc+JzOcazA0hfK7Ef4 KEAOayO2VEJouXuY2cHMDtSpWHy6/uf+m4BO6YSj0Ld8+kYFGFGPgd4Yixr6rraX 5BB0KVC0sep1wK66w8yq/kVt4h/FT602 -----END CERTIFICATE-----Generated at Fri Jul 4 04:36:25 2025 by rpki-client