$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.mft File: vi_5e5tTTVONpBoJtsCNAjMuhlU.mft (raw, json) Hash identifier: liW6W05I4W+IAYp7xNGxRjKicxYkJ432G3a035fdEl0= Subject key identifier: 60:13:6F:C1:32:FB:AC:05:09:78:71:3B:57:25:41:85:D8:14:3A:02 Authority key identifier: BE:2F:F9:7B:9B:53:4D:53:8D:A4:1A:09:B6:C0:8D:02:33:2E:86:55 Certificate issuer: /CN=A9173D07/serialNumber=BE2FF97B9B534D538DA41A09B6C08D02332E8655 Certificate serial: 0794 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vi_5e5tTTVONpBoJtsCNAjMuhlU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.mft Manifest number: 078E Signing time: Fri 22 Aug 2025 21:35:20 +0000 Manifest this update: Fri 22 Aug 2025 21:35:20 +0000 Manifest next update: Fri 29 Aug 2025 21:35:20 +0000 Files and hashes: 1: vi_5e5tTTVONpBoJtsCNAjMuhlU.crl (hash: h9wdlnQx55xo4X6SA8nYe+0Zr9lxzaFlO5zomxot2+A=) 2: AD2ACD6423F411EB8FBA6A83C4F9AE02.roa (hash: zDoEmMgh0Ofm4a5TBSo1aulp2cylUWbLMdlBm8sXwCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.crl rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vi_5e5tTTVONpBoJtsCNAjMuhlU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1940 (0x794) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D07, serialNumber=BE2FF97B9B534D538DA41A09B6C08D02332E8655 Validity Not Before: Aug 22 21:35:20 2025 GMT Not After : Aug 29 21:35:20 2025 GMT Subject: CN=68a8e298-c175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:73:b3:09:e9:8c:f0:8e:f6:5b:bd:63:eb:66: eb:3b:81:88:b6:a4:20:73:5f:2a:a3:2e:78:d4:b5: 59:11:bf:c9:95:79:be:ae:e2:b6:9a:84:e0:07:0a: 4a:bb:37:77:73:e8:6f:bc:d2:46:85:dc:a6:c7:84: cd:8d:43:da:4d:18:64:9c:f8:d5:fe:6c:93:80:87: b9:eb:d9:6f:f1:92:63:99:bc:03:a9:18:72:41:f0: 56:50:26:1c:7f:61:7a:28:2e:d9:a2:35:06:aa:67: f6:3e:db:66:22:4c:77:df:25:9d:1d:7e:5b:1b:0a: 84:ec:d0:2e:af:51:9a:59:dc:bf:14:3c:9c:15:27: 05:80:a9:6a:b2:48:f8:78:d0:16:93:50:7b:19:19: 63:e5:3f:d0:93:76:20:77:c0:76:a2:ee:b1:e2:62: 5f:5d:4f:57:a4:85:f6:11:a0:14:66:40:68:3b:ce: ee:52:fc:91:41:57:eb:c0:b4:c2:60:d1:37:8a:f3: f1:dd:c5:2c:77:a9:0d:2a:c7:fd:54:ea:ce:2a:24: f1:a2:4f:e9:14:75:57:0e:20:bd:e8:93:09:0b:1b: 1d:4b:1e:e5:4a:fe:bc:17:9a:b6:e4:d8:5e:79:63: 02:a6:55:c5:d1:75:c0:88:ba:ac:52:4c:f7:11:38: b2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:13:6F:C1:32:FB:AC:05:09:78:71:3B:57:25:41:85:D8:14:3A:02 X509v3 Authority Key Identifier: keyid:BE:2F:F9:7B:9B:53:4D:53:8D:A4:1A:09:B6:C0:8D:02:33:2E:86:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vi_5e5tTTVONpBoJtsCNAjMuhlU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:2a:1b:30:9a:12:d5:c9:96:a7:d1:45:75:30:53:a6:0e:c8: dd:8c:46:ec:ca:71:d7:32:ee:4c:be:97:f2:b4:fa:7e:00:41: 05:81:09:ad:39:bb:1a:04:d8:1f:70:51:0f:4b:db:62:88:ae: 65:d1:f6:94:cf:ac:98:de:20:d0:48:c9:f8:5b:ea:a3:06:ee: 51:e4:b8:4b:ea:13:10:db:44:e5:90:6e:1e:e9:d5:a2:f6:a2: 95:83:af:1b:28:48:54:0a:4c:be:5e:0f:74:4f:df:a3:80:f0: 1d:f2:2d:a0:ef:97:0c:80:46:3d:83:9b:19:b3:3c:25:28:1f: ff:d8:57:cd:ad:37:8d:5d:6b:58:56:94:9c:5a:5a:d1:38:47: 27:76:d3:3a:c1:52:4b:c1:b4:e1:49:43:b9:53:d6:b1:3d:74: 9b:c8:2c:f9:d0:97:c4:44:0d:63:7e:af:19:6e:cc:d8:ad:5f: 94:fe:75:c8:13:e2:06:06:6e:90:ee:f3:dd:f3:fe:29:7a:ae: 23:59:04:21:4c:bf:30:fd:11:cb:50:7d:9f:8a:75:6c:61:5a: a2:e2:87:0a:d2:d3:ef:8c:c1:41:57:2b:6f:bf:70:f1:2a:6a: 66:66:8c:a9:e1:03:26:67:fc:06:b9:63:54:7f:20:ba:54:f8: a5:fa:df:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNEMDcxMTAvBgNVBAUTKEJFMkZGOTdCOUI1MzRENTM4REE0MUEwOUI2QzA4RDAy MzMyRTg2NTUwHhcNMjUwODIyMjEzNTIwWhcNMjUwODI5MjEzNTIwWjAYMRYwFAYD VQQDEw02OGE4ZTI5OC1jMTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3OzCemM8I72W71j62brO4GItqQgc18qoy541LVZEb/JlXm+ruK2moTgBwpK uzd3c+hvvNJGhdymx4TNjUPaTRhknPjV/myTgIe569lv8ZJjmbwDqRhyQfBWUCYc f2F6KC7ZojUGqmf2PttmIkx33yWdHX5bGwqE7NAur1GaWdy/FDycFScFgKlqskj4 eNAWk1B7GRlj5T/Qk3Ygd8B2ou6x4mJfXU9XpIX2EaAUZkBoO87uUvyRQVfrwLTC YNE3ivPx3cUsd6kNKsf9VOrOKiTxok/pFHVXDiC96JMJCxsdSx7lSv68F5q25Nhe eWMCplXF0XXAiLqsUkz3ETiyhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGATb8Ey +6wFCXhxO1clQYXYFDoCMB8GA1UdIwQYMBaAFL4v+XubU01TjaQaCbbAjQIzLoZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0QwNy9CRjlBRkY0QzFD RDIxMUVCOTlENThCMkNDNEY5QUUwMi92aV81ZTV0VFRWT05wQm9KdHNDTkFqTXVo bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZpXzVlNXRUVFZPTnBCb0p0c0NOQWpNdWhsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0QwNy9CRjlBRkY0QzFDRDIxMUVCOTlENThCMkNDNEY5QUUwMi92aV81ZTV0VFRW T05wQm9KdHNDTkFqTXVobFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbKhswmhLVyZan0UV1MFOmDsjdjEbsynHXMu5MvpfytPp+AEEFgQmt ObsaBNgfcFEPS9tiiK5l0faUz6yY3iDQSMn4W+qjBu5R5LhL6hMQ20TlkG4e6dWi 9qKVg68bKEhUCky+Xg90T9+jgPAd8i2g75cMgEY9g5sZszwlKB//2FfNrTeNXWtY VpScWlrROEcndtM6wVJLwbThSUO5U9axPXSbyCz50JfERA1jfq8ZbszYrV+U/nXI E+IGBm6Q7vPd8/4peq4jWQQhTL8w/RHLUH2finVsYVqi4ocK0tPvjMFBVytvv3Dx KmpmZoyp4QMmZ/wGuWNUfyC6VPil+t/y -----END CERTIFICATE-----Generated at Sat Aug 23 17:12:08 2025 by rpki-client