$ rpki-client -vvf rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft File: VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft (raw, json) Hash identifier: S84NrQFUo743VVA8WH2/XCkCMDrQGj1hgCNjCSoycMA= Subject key identifier: 8B:8C:E0:8A:72:9F:E4:08:28:01:B7:CF:4C:5F:DA:7D:D0:B8:58:18 Authority key identifier: 54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D Certificate issuer: /CN=A912F62D/serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft Manifest number: 4C Signing time: Sat 05 Jul 2025 07:41:08 +0000 Manifest this update: Sat 05 Jul 2025 07:41:07 +0000 Manifest next update: Sat 12 Jul 2025 07:41:07 +0000 Files and hashes: 1: VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl (hash: Y5/QIa3jKppwd2jJE5p6alN7s25/DF2Ug7Qcvgmpl6w=) 2: 6DAFB1EAEA7E11EF93A91726C4F9AE02.roa (hash: RGby5CWUvljyTQmbtKXFF+09T5sv2LL/jpj1mhUT/QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F62D, serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D Validity Not Before: Jul 5 07:41:07 2025 GMT Not After : Jul 12 07:41:07 2025 GMT Subject: CN=6868d714-418c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:15:f2:a3:92:ad:c1:94:5c:bd:35:e9:c4: b0:41:95:05:7c:80:5d:ca:66:a1:e5:e9:e4:5b:f7: 7c:c4:78:71:f5:28:d1:aa:03:b7:2e:34:81:3d:e6: 4a:a0:fc:73:03:20:be:88:b5:99:af:1c:e9:fb:f2: 49:ab:8b:66:30:fb:03:28:b2:34:91:01:2f:9a:f4: 7a:b3:37:9d:b7:25:51:24:28:5a:d8:11:b5:2b:0e: 86:2f:db:6c:f0:b8:a2:e9:32:20:bc:ab:d0:ad:b0: c4:f4:73:74:26:d1:5c:05:02:e0:01:0a:fc:97:2b: 0a:c0:38:e5:12:f7:16:98:f5:4f:04:09:57:8b:fb: 26:5d:35:09:a8:64:cc:d2:e0:f8:72:e6:30:86:cc: 29:5b:9b:b7:48:c8:31:8f:35:e2:c5:32:ba:33:48: 10:fe:46:c6:ab:d5:fc:ed:7a:3e:91:cb:b1:ef:3d: 7c:0c:5e:f9:e1:8b:b8:38:81:81:44:a5:52:5a:73: 4e:e8:15:65:8c:58:43:0a:a7:94:f6:8a:90:49:bb: dc:94:39:43:3f:f1:fe:7f:6b:c7:ba:0a:27:f9:60: 0e:14:92:10:da:c0:2d:23:af:79:2a:e9:39:28:86: c6:d5:51:65:ef:e7:a2:e4:57:10:da:13:07:2b:e3: 5a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8C:E0:8A:72:9F:E4:08:28:01:B7:CF:4C:5F:DA:7D:D0:B8:58:18 X509v3 Authority Key Identifier: keyid:54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:f8:f1:f2:60:1f:9e:20:9e:46:a2:06:67:36:1a:49:e9:25: d3:3b:9f:d8:53:a9:e5:f5:bc:93:21:08:74:ab:46:4a:08:48: f1:05:af:bb:3e:8d:30:f6:da:7e:a1:05:57:a6:e1:8f:7f:6d: a9:82:88:f2:ab:35:b3:f4:f3:38:0c:bb:8a:4f:fe:fa:73:a7: 54:69:45:77:a3:29:91:32:70:45:3e:62:33:a5:0b:58:77:89: d9:78:ce:3c:cf:6d:da:46:2a:a3:b6:9c:b9:f0:9d:80:c3:89: b2:41:6f:02:67:e7:57:d6:74:80:96:a7:52:42:cf:ed:2f:f5: a9:08:15:51:a5:25:cf:9b:ca:78:bb:ea:6d:74:77:b1:6e:e7: 8c:13:2c:ff:00:8d:15:db:f5:6b:d9:f0:77:1e:f0:79:96:0a: fa:53:18:67:31:de:a6:ab:1d:82:f7:84:a4:92:3c:09:35:e6: ca:8f:8e:0d:c8:f0:a5:35:3d:bd:32:cd:1e:5b:b1:66:17:fa: 32:ff:52:3f:22:33:0b:92:84:b7:f9:7d:49:e7:59:64:a7:9e: c0:ed:57:5f:63:62:ec:11:5c:09:b5:1c:e6:70:4b:88:63:74: c5:46:fa:49:a5:9c:a3:57:a0:9f:f8:17:8a:bc:fd:14:e3:bb: 38:44:82:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjYyRDExMC8GA1UEBRMoNTQ5MjQ2MjEwNUNFQjA1MkRCQTlEQUU4QkI2MzVGMDVG Nzc3MTYxRDAeFw0yNTA3MDUwNzQxMDdaFw0yNTA3MTIwNzQxMDdaMBgxFjAUBgNV BAMTDTY4NjhkNzE0LTQxOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy2xXyo5KtwZRcvTXpxLBBlQV8gF3KZqHl6eRb93zEeHH1KNGqA7cuNIE95kqg /HMDIL6ItZmvHOn78kmri2Yw+wMosjSRAS+a9HqzN523JVEkKFrYEbUrDoYv22zw uKLpMiC8q9CtsMT0c3Qm0VwFAuABCvyXKwrAOOUS9xaY9U8ECVeL+yZdNQmoZMzS 4Phy5jCGzClbm7dIyDGPNeLFMrozSBD+Rsar1fztej6Ry7HvPXwMXvnhi7g4gYFE pVJac07oFWWMWEMKp5T2ipBJu9yUOUM/8f5/a8e6Cif5YA4UkhDawC0jr3kq6Tko hsbVUWXv56LkVxDaEwcr41ptAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUi4zginKf 5AgoAbfPTF/afdC4WBgwHwYDVR0jBBgwFoAUVJJGIQXOsFLbqdrou2NfBfd3Fh0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNjJELzJEQTU3QzNDRUE3 MDExRUY4MTU0QzM2QkM0RjlBRTAyL1ZKSkdJUVhPc0ZMYnFkcm91Mk5mQmZkM0Zo MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVkpKR0lRWE9zRkxicWRyb3UyTmZCZmQzRmgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG NjJELzJEQTU3QzNDRUE3MDExRUY4MTU0QzM2QkM0RjlBRTAyL1ZKSkdJUVhPc0ZM YnFkcm91Mk5mQmZkM0ZoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJn48fJgH54gnkaiBmc2GknpJdM7n9hTqeX1vJMhCHSrRkoISPEFr7s+ jTD22n6hBVem4Y9/bamCiPKrNbP08zgMu4pP/vpzp1RpRXejKZEycEU+YjOlC1h3 idl4zjzPbdpGKqO2nLnwnYDDibJBbwJn51fWdICWp1JCz+0v9akIFVGlJc+byni7 6m10d7Fu54wTLP8AjRXb9WvZ8Hce8HmWCvpTGGcx3qarHYL3hKSSPAk15sqPjg3I 8KU1Pb0yzR5bsWYX+jL/Uj8iMwuShLf5fUnnWWSnnsDtV19jYuwRXAm1HOZwS4hj dMVG+kmlnKNXoJ/4F4q8/RTjuzhEgsM= -----END CERTIFICATE-----Generated at Sat Jul 5 14:54:17 2025 by rpki-client