$ rpki-client -vvf rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft File: VRTBgTfeq40U8RHJD39rfjDQH2Q.mft (raw, json) Hash identifier: VD9Ygskeks9QeJlaqnbaNaOV/Et5Ou5u9A73JrwvCP0= Subject key identifier: F4:BB:AF:AB:61:7B:9A:4B:E1:8E:FD:93:27:59:E9:8E:4C:80:C3:51 Authority key identifier: 55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64 Certificate issuer: /CN=A916D1DA/serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64 Certificate serial: 3495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft Manifest number: 3495 Signing time: Mon 30 Jun 2025 15:03:48 +0000 Manifest this update: Mon 30 Jun 2025 15:03:48 +0000 Manifest next update: Mon 07 Jul 2025 15:03:48 +0000 Files and hashes: 1: VRTBgTfeq40U8RHJD39rfjDQH2Q.crl (hash: KqzOcG79QBBWKCIKpnUD/VQo47wZ5MzYDq3qchQdRmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13461 (0x3495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D1DA, serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64 Validity Not Before: Jun 30 15:03:48 2025 GMT Not After : Jul 7 15:03:48 2025 GMT Subject: CN=6862a754-2357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:57:fe:62:3b:83:70:6d:d9:2c:34:31:05: 2d:be:56:99:67:a6:33:bd:51:56:07:f3:14:fd:a7: 5e:26:37:bc:a9:f3:93:02:1c:50:8e:4a:d5:ca:a9: 80:9d:29:aa:a6:54:35:c6:b8:20:e7:34:06:d9:c7: 52:06:26:be:5d:76:7c:55:fb:54:a5:c4:90:c7:fe: eb:f8:e7:64:8a:0b:2e:47:6d:85:8e:87:70:d7:5f: cf:4d:af:8a:1f:55:d5:8a:ca:7b:40:47:e3:de:cc: ef:0d:cd:bf:ea:a3:44:8f:ad:8f:5c:2a:7f:87:94: f7:87:ef:af:04:6f:c2:87:08:60:8b:ac:18:1e:b4: 5c:f7:11:f8:0a:81:e9:ea:4b:cd:0a:4d:d4:00:3a: dc:cd:b9:53:d8:8d:c6:9a:a4:6e:2e:38:b6:cc:d0: b5:36:2a:af:fb:2f:21:6f:07:e7:69:a7:bf:43:2f: 27:c1:98:60:f3:17:71:b7:8d:d8:2f:86:88:31:8a: 23:c6:05:25:8f:50:aa:9c:bc:73:52:92:be:ee:92: a6:58:45:f1:62:a6:70:66:9f:03:fb:c2:ae:47:c1: 57:23:ba:9b:1e:d5:c9:13:6e:ab:4e:ab:da:5d:6f: d0:bc:65:62:77:0e:43:c3:e6:88:67:24:29:68:6f: 71:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BB:AF:AB:61:7B:9A:4B:E1:8E:FD:93:27:59:E9:8E:4C:80:C3:51 X509v3 Authority Key Identifier: keyid:55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:8e:35:a0:99:e5:e3:c4:b6:2c:96:f7:33:14:4d:9b:37:b1: c1:13:01:77:dd:c6:5e:be:95:cc:49:2b:47:1b:ca:bb:92:fa: 39:ea:6f:63:bd:e9:df:44:f2:aa:28:8c:e6:74:48:ba:52:3a: 50:70:7e:2d:f9:fc:fb:0f:15:18:40:01:73:11:33:b4:a4:d1: a5:b5:fe:68:2a:2e:40:ed:3e:69:a8:8a:32:32:15:e2:3e:4a: 75:41:80:03:2f:58:b5:20:94:f8:fe:79:74:f2:09:d8:bd:6b: df:fb:40:2a:0d:28:22:31:fc:f8:0c:46:be:ae:aa:29:ff:87: 9c:d1:91:fe:22:4c:71:de:f6:4d:53:28:aa:9f:6f:9a:6d:df: dd:70:3a:12:68:c7:92:3c:8b:18:d6:13:8d:2e:6e:2a:b9:4a: f9:27:fb:b8:e9:15:c7:b4:88:09:bd:11:6b:52:2f:74:8c:91: 78:da:4f:0d:68:a6:c7:25:df:39:9f:4f:09:ca:b5:a7:62:39: b4:37:7b:0f:8a:ce:8e:53:ea:e6:e3:fa:a8:17:dd:ee:c2:c8: 65:07:b2:7e:4d:fd:75:de:37:26:4f:70:63:f8:05:c7:b3:a9: d4:18:20:a0:24:cd:93:73:fc:ec:52:be:18:0e:e4:cd:4d:5e: 42:7b:f4:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxREExMTAvBgNVBAUTKDU1MTRDMTgxMzdERUFCOEQxNEYxMTFDOTBGN0Y2QjdF MzBEMDFGNjQwHhcNMjUwNjMwMTUwMzQ4WhcNMjUwNzA3MTUwMzQ4WjAYMRYwFAYD VQQDEw02ODYyYTc1NC0yMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxI9X/mI7g3Bt2Sw0MQUtvlaZZ6YzvVFWB/MU/adeJje8qfOTAhxQjkrVyqmA nSmqplQ1xrgg5zQG2cdSBia+XXZ8VftUpcSQx/7r+OdkigsuR22Fjodw11/PTa+K H1XVisp7QEfj3szvDc2/6qNEj62PXCp/h5T3h++vBG/Chwhgi6wYHrRc9xH4CoHp 6kvNCk3UADrczblT2I3GmqRuLji2zNC1Niqv+y8hbwfnaae/Qy8nwZhg8xdxt43Y L4aIMYojxgUlj1CqnLxzUpK+7pKmWEXxYqZwZp8D+8KuR8FXI7qbHtXJE26rTqva XW/QvGVidw5Dw+aIZyQpaG9x5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPS7r6th e5pL4Y79kydZ6Y5MgMNRMB8GA1UdIwQYMBaAFFUUwYE33quNFPERyQ9/a34w0B9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDFEQS8wMDhDRTUyQTFE OUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0MFU4UkhKRDM5cmZqRFFI MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSVEJnVGZlcTQwVThSSEpEMzlyZmpEUUgyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDFEQS8wMDhDRTUyQTFEOUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0 MFU4UkhKRDM5cmZqRFFIMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUjjWgmeXjxLYslvczFE2bN7HBEwF33cZevpXMSStHG8q7kvo56m9j venfRPKqKIzmdEi6UjpQcH4t+fz7DxUYQAFzETO0pNGltf5oKi5A7T5pqIoyMhXi Pkp1QYADL1i1IJT4/nl08gnYvWvf+0AqDSgiMfz4DEa+rqop/4ec0ZH+Ikxx3vZN Uyiqn2+abd/dcDoSaMeSPIsY1hONLm4quUr5J/u46RXHtIgJvRFrUi90jJF42k8N aKbHJd85n08JyrWnYjm0N3sPis6OU+rm4/qoF93uwshlB7J+Tf113jcmT3Bj+AXH s6nUGCCgJM2Tc/zsUr4YDuTNTV5Ce/RJ -----END CERTIFICATE-----Generated at Wed Jul 2 14:37:14 2025 by rpki-client