$ rpki-client -vvf rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft File: VRT85Dhj9Rga80k4LThBTpYPCW8.mft (raw, json) Hash identifier: ga+l65vieLZScbyWznMnDwZgexQcu0SurarMVr/IpsY= Subject key identifier: 61:A1:70:DE:AD:A5:18:CA:EA:56:67:FE:F9:51:BA:9B:D2:2C:8A:CC Authority key identifier: 55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F Certificate issuer: /CN=A9195262/serialNumber=5514FCE43863F5181AF349382D38414E960F096F Certificate serial: 090A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft Manifest number: 0901 Signing time: Fri 22 Aug 2025 20:28:38 +0000 Manifest this update: Fri 22 Aug 2025 20:28:38 +0000 Manifest next update: Fri 29 Aug 2025 20:28:38 +0000 Files and hashes: 1: VRT85Dhj9Rga80k4LThBTpYPCW8.crl (hash: 5MywyhdIK/l8/AxE5sw7u8oYnDB3rJomxLEZvIxiyS8=) 2: DFC21CD8B1CF11EAA8732709C4F9AE02.roa (hash: fBbrGPpyBqHG5VjMBpwa+Y1+AP7kUm89FdDIYPNDwG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2314 (0x90a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195262, serialNumber=5514FCE43863F5181AF349382D38414E960F096F Validity Not Before: Aug 22 20:28:38 2025 GMT Not After : Aug 29 20:28:38 2025 GMT Subject: CN=68a8d2f6-6526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:19:fe:eb:93:3d:f7:21:f7:eb:92:af:5a:2a: 46:7b:9e:3c:56:f1:2b:a3:9d:4d:ec:06:8b:c2:b9: 5b:1c:3f:ad:b6:8b:50:d3:36:56:e0:8e:1b:63:35: c2:8f:a9:c8:58:38:79:e8:57:f0:a1:15:9a:d9:a3: 31:1a:3b:a2:9f:00:68:1a:80:54:8e:18:b3:a4:00: 27:d3:a8:44:a3:88:bf:ef:8a:24:6b:44:81:c6:ec: a5:1e:bf:43:48:07:32:a7:cb:01:7b:8a:93:d6:a3: ff:7a:ab:eb:da:18:91:07:39:3d:7e:1a:76:4f:08: 83:9d:ce:b4:ba:3f:e5:96:f8:bf:b9:2c:b6:3e:40: 64:6b:42:0a:33:2b:81:6b:e6:7b:22:dc:d2:33:6f: 19:cf:cf:dd:fb:22:94:06:f2:ca:6a:79:43:d0:a4: 83:18:75:9e:74:16:d3:ab:bf:a0:a3:79:e0:e1:f8: b3:1e:1b:4d:5a:4b:23:7b:4f:7e:14:6a:fd:b6:80: bb:cb:ad:d6:7d:56:8c:79:70:93:4c:51:db:19:de: 6b:39:e6:00:e3:7a:d8:0d:9b:76:cd:e2:25:1e:80: 69:0f:1a:31:d7:51:e3:62:86:bb:90:72:67:58:39: 0c:f3:60:8b:69:8e:c8:83:f6:fb:e3:39:1c:6b:a4: ea:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A1:70:DE:AD:A5:18:CA:EA:56:67:FE:F9:51:BA:9B:D2:2C:8A:CC X509v3 Authority Key Identifier: keyid:55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:6b:04:fa:4c:41:3d:8d:c2:16:74:5b:d3:75:48:25:0a:b9: a0:3f:4b:63:c1:3a:cc:f9:1c:65:19:d1:b1:1e:3a:ab:ee:b4: 3c:b4:8c:a7:4c:f5:a6:4d:bf:d1:97:87:eb:d7:2c:e7:54:3c: 83:a5:af:6d:43:eb:53:21:55:4b:87:b8:53:02:09:31:d9:83: 9a:0e:13:2d:be:01:b0:62:c0:e4:09:50:a1:66:a7:ea:38:96: 03:a4:27:10:bd:05:5e:4a:db:43:2e:5a:ae:93:a9:e7:e3:bf: 78:06:ae:bb:6c:25:d0:2c:fc:c4:0b:33:05:1c:82:73:23:6a: 5f:35:31:ca:23:42:b6:79:0b:f2:36:b1:32:b5:84:df:e8:d4: de:8f:11:06:cb:ba:7a:d0:22:14:b8:17:12:a7:af:4a:35:fc: 49:0c:67:ba:55:1a:53:fe:e6:66:fb:1a:71:33:80:54:7f:cd: a8:6f:70:1f:ff:63:16:67:d7:2b:63:b4:72:7c:03:84:3c:92: 0f:b3:d5:f6:0a:87:57:85:d0:da:c0:f6:4b:74:8f:69:d6:c2: 52:25:85:91:a2:e9:03:78:fe:bd:70:54:95:55:6d:d2:c2:d2: 29:3c:52:b2:b1:66:c3:54:2a:12:70:e4:c3:87:2d:2a:53:d4: 55:8f:0a:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUyNjIxMTAvBgNVBAUTKDU1MTRGQ0U0Mzg2M0Y1MTgxQUYzNDkzODJEMzg0MTRF OTYwRjA5NkYwHhcNMjUwODIyMjAyODM4WhcNMjUwODI5MjAyODM4WjAYMRYwFAYD VQQDEw02OGE4ZDJmNi02NTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xn+65M99yH365KvWipGe548VvEro51N7AaLwrlbHD+ttotQ0zZW4I4bYzXC j6nIWDh56FfwoRWa2aMxGjuinwBoGoBUjhizpAAn06hEo4i/74oka0SBxuylHr9D SAcyp8sBe4qT1qP/eqvr2hiRBzk9fhp2TwiDnc60uj/llvi/uSy2PkBka0IKMyuB a+Z7ItzSM28Zz8/d+yKUBvLKanlD0KSDGHWedBbTq7+go3ng4fizHhtNWksje09+ FGr9toC7y63WfVaMeXCTTFHbGd5rOeYA43rYDZt2zeIlHoBpDxox11HjYoa7kHJn WDkM82CLaY7Ig/b74zkca6TqzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGhcN6t pRjK6lZn/vlRupvSLIrMMB8GA1UdIwQYMBaAFFUU/OQ4Y/UYGvNJOC04QU6WDwlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTI2Mi9GN0E2RDU5Q0Iw RkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlSZ2E4MGs0TFRoQlRwWVBD VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSVDg1RGhqOVJnYTgwazRMVGhCVHBZUENXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTI2Mi9GN0E2RDU5Q0IwRkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlS Z2E4MGs0TFRoQlRwWVBDVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdawT6TEE9jcIWdFvTdUglCrmgP0tjwTrM+RxlGdGxHjqr7rQ8tIyn TPWmTb/Rl4fr1yznVDyDpa9tQ+tTIVVLh7hTAgkx2YOaDhMtvgGwYsDkCVChZqfq OJYDpCcQvQVeSttDLlquk6nn4794Bq67bCXQLPzECzMFHIJzI2pfNTHKI0K2eQvy NrEytYTf6NTejxEGy7p60CIUuBcSp69KNfxJDGe6VRpT/uZm+xpxM4BUf82ob3Af /2MWZ9crY7RyfAOEPJIPs9X2CodXhdDawPZLdI9p1sJSJYWRoukDeP69cFSVVW3S wtIpPFKysWbDVCoScOTDhy0qU9RVjwp7 -----END CERTIFICATE-----Generated at Sat Aug 23 16:25:24 2025 by rpki-client