$ rpki-client -vvf rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft File: VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft (raw, json) Hash identifier: s502etm4U9NJyi8EY8EIZ90n6E2EB27E4Ou0hV9J+/o= Subject key identifier: 4B:4E:56:FA:E7:57:28:4D:41:46:F2:D4:23:72:68:29:D2:1E:98:BF Authority key identifier: 54:24:14:FB:E3:FF:23:2A:AC:C6:2E:73:DD:C3:7E:27:52:82:ED:4A Certificate issuer: /CN=A917295C/serialNumber=542414FBE3FF232AACC62E73DDC37E275282ED4A Certificate serial: 0649 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft Manifest number: 0642 Signing time: Wed 02 Jul 2025 22:57:22 +0000 Manifest this update: Wed 02 Jul 2025 22:57:21 +0000 Manifest next update: Wed 09 Jul 2025 22:57:21 +0000 Files and hashes: 1: VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl (hash: AgShXVwa31cspWEBOlNq7Ofl55uKy5ggWAvNrHWWWig=) 2: AE810C76CC8811EC85E73563C4F9AE02.roa (hash: KY/NWRg0nkZbgcah/UEEpqWN9t5PCkRr4Ny3AGbpHGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1609 (0x649) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917295C, serialNumber=542414FBE3FF232AACC62E73DDC37E275282ED4A Validity Not Before: Jul 2 22:57:21 2025 GMT Not After : Jul 9 22:57:21 2025 GMT Subject: CN=6865b952-679a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:12:d5:0a:bc:89:3a:26:02:05:da:1d:16:25: 0e:47:22:90:0f:5f:be:d8:4a:47:21:1c:da:25:59: 44:bc:ac:cf:95:d8:77:e5:c2:44:a8:5a:ab:e6:9b: 12:93:4a:d5:a8:12:4a:f4:9b:9e:49:6e:e6:f9:5f: 23:b7:a0:b1:40:3b:ac:ba:64:4a:2b:48:ae:65:21: 7b:68:e2:d9:92:e8:05:e1:87:9d:05:35:bb:24:c3: b7:58:be:d9:26:e4:73:05:cc:08:80:77:03:13:ca: 92:0b:0f:56:cd:48:1f:cf:40:b8:95:a1:81:c6:da: 4e:67:61:1e:0b:71:64:2f:4d:7a:37:ef:53:8a:c9: 87:07:0d:6f:9a:be:a0:98:04:0d:54:a4:8e:1e:86: 20:c8:dd:5a:48:d8:2f:e3:13:77:ae:1a:0c:34:98: e4:8a:99:63:4f:1f:b9:52:cb:32:88:b6:79:1e:ce: 47:7f:0d:40:e2:ba:6b:c3:2e:90:05:52:f0:be:c3: ee:0b:dc:0a:63:2d:23:72:2c:9a:c2:a6:19:04:35: 42:a8:91:e1:08:c7:aa:ad:84:32:d8:e4:87:74:5e: e6:75:0c:5d:fc:ad:85:bb:aa:0d:16:b0:6f:9d:a5: 78:d9:46:1d:07:ca:01:df:ce:01:8f:47:5a:5c:2f: 23:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4E:56:FA:E7:57:28:4D:41:46:F2:D4:23:72:68:29:D2:1E:98:BF X509v3 Authority Key Identifier: keyid:54:24:14:FB:E3:FF:23:2A:AC:C6:2E:73:DD:C3:7E:27:52:82:ED:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917295C/1F2074C8968211EBA399115BC4F9AE02/VCQU--P_Iyqsxi5z3cN-J1KC7Uo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:e5:9b:e2:58:68:54:a8:a3:a6:21:00:01:31:bb:8a:f7:83: b7:b7:50:d3:cf:93:8e:b8:b2:be:a3:c8:08:7a:6f:a4:c2:0a: 33:b7:7f:c8:e3:6f:3c:5e:b9:4d:5f:43:a7:4c:fc:31:50:48: 25:fe:fe:66:0f:33:93:61:1c:68:b7:ef:e3:39:17:07:e7:46: 45:02:fb:82:a2:91:9e:e1:35:fb:80:60:56:39:a7:b4:ac:db: 29:9e:7c:f3:39:d2:0a:32:90:6a:41:0e:11:d0:b7:15:d4:29: 4e:c8:02:90:25:54:b8:82:ef:2f:48:26:06:c4:d9:a8:a1:70: 53:5e:93:56:07:46:a9:e7:62:25:f2:54:31:fb:38:e9:e7:50: fb:f4:29:00:35:76:e9:65:24:d3:cc:0b:4d:3b:ee:b6:cd:4d: 72:4e:b4:10:fe:d7:00:32:b4:8d:9b:99:36:65:b1:e8:38:86: 12:8a:24:64:e8:2b:4f:51:c0:f0:a5:61:9e:e7:b7:5c:d5:d4: ac:ed:34:aa:03:a3:19:35:cf:c3:e2:bf:76:fb:b2:c3:e6:0d: 90:7c:ef:96:36:89:8b:9f:50:5e:0a:44:e1:76:75:51:9d:6d: 49:a6:93:68:03:d7:52:59:5c:a5:68:6f:b5:09:ff:ac:99:ec: ce:7b:a5:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5NUMxMTAvBgNVBAUTKDU0MjQxNEZCRTNGRjIzMkFBQ0M2MkU3M0REQzM3RTI3 NTI4MkVENEEwHhcNMjUwNzAyMjI1NzIxWhcNMjUwNzA5MjI1NzIxWjAYMRYwFAYD VQQDEw02ODY1Yjk1Mi02NzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRLVCryJOiYCBdodFiUORyKQD1++2EpHIRzaJVlEvKzPldh35cJEqFqr5psS k0rVqBJK9JueSW7m+V8jt6CxQDusumRKK0iuZSF7aOLZkugF4YedBTW7JMO3WL7Z JuRzBcwIgHcDE8qSCw9WzUgfz0C4laGBxtpOZ2EeC3FkL016N+9TismHBw1vmr6g mAQNVKSOHoYgyN1aSNgv4xN3rhoMNJjkipljTx+5UssyiLZ5Hs5Hfw1A4rprwy6Q BVLwvsPuC9wKYy0jciyawqYZBDVCqJHhCMeqrYQy2OSHdF7mdQxd/K2Fu6oNFrBv naV42UYdB8oB384Bj0daXC8jIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtOVvrn VyhNQUby1CNyaCnSHpi/MB8GA1UdIwQYMBaAFFQkFPvj/yMqrMYuc93DfidSgu1K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk1Qy8xRjIwNzRDODk2 ODIxMUVCQTM5OTExNUJDNEY5QUUwMi9WQ1FVLS1QX0l5cXN4aTV6M2NOLUoxS0M3 VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDUVUtLVBfSXlxc3hpNXozY04tSjFLQzdVby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk1Qy8xRjIwNzRDODk2ODIxMUVCQTM5OTExNUJDNEY5QUUwMi9WQ1FVLS1QX0l5 cXN4aTV6M2NOLUoxS0M3VW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA5ZviWGhUqKOmIQABMbuK94O3t1DTz5OOuLK+o8gIem+kwgozt3/I 4288XrlNX0OnTPwxUEgl/v5mDzOTYRxot+/jORcH50ZFAvuCopGe4TX7gGBWOae0 rNspnnzzOdIKMpBqQQ4R0LcV1ClOyAKQJVS4gu8vSCYGxNmooXBTXpNWB0ap52Il 8lQx+zjp51D79CkANXbpZSTTzAtNO+62zU1yTrQQ/tcAMrSNm5k2ZbHoOIYSiiRk 6CtPUcDwpWGe57dc1dSs7TSqA6MZNc/D4r92+7LD5g2QfO+WNomLn1BeCkThdnVR nW1JppNoA9dSWVylaG+1Cf+smezOe6Va -----END CERTIFICATE-----Generated at Fri Jul 4 07:58:45 2025 by rpki-client