$ rpki-client -vvf rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft File: VuOUrxtay4_0gsjGAmn-oOTEJ74.mft (raw, json) Hash identifier: ayevF3DF+6qrSvR8rCCWbpHg4gCKEPrs97n4RoyN3dA= Subject key identifier: 14:CF:0C:60:76:52:5A:18:AB:57:D6:24:F1:C3:8E:87:44:15:55:E2 Authority key identifier: 56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE Certificate issuer: /CN=A91A995E/serialNumber=56E394AF1B5ACB8FF482C8C60269FEA0E4C427BE Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft Manifest number: 5A Signing time: Sat 23 Aug 2025 07:24:53 +0000 Manifest this update: Sat 23 Aug 2025 07:24:53 +0000 Manifest next update: Sat 30 Aug 2025 07:24:53 +0000 Files and hashes: 1: VuOUrxtay4_0gsjGAmn-oOTEJ74.crl (hash: jTWyBWmjWAhh0QFB4MH2d9mTgW+NMbiEBzOBkq6Gzas=) 2: 3E41E766FA6411EFB8C12C50C4F9AE02.roa (hash: DEF0xkvw3q1tLXUQiXU0nzrLNhOtTutlaMvyugUJMpQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.crl rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A995E, serialNumber=56E394AF1B5ACB8FF482C8C60269FEA0E4C427BE Validity Not Before: Aug 23 07:24:53 2025 GMT Not After : Aug 30 07:24:53 2025 GMT Subject: CN=68a96cc5-11b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c2:83:fa:0c:6a:7a:04:f1:aa:36:11:aa:9e: be:2a:c7:73:84:a4:a6:f6:cd:51:5e:da:62:ff:85: 70:78:ff:71:09:c5:53:e2:df:19:db:29:ad:9a:20: 04:89:a9:c4:e6:9d:c9:fc:ac:7f:01:7b:41:93:96: ba:33:b1:29:36:87:db:19:a7:11:8c:c8:82:df:43: ae:d0:fa:dd:0a:e4:08:06:eb:77:fb:d3:ea:6a:bb: 0e:74:92:4d:ea:40:9f:a4:d7:f0:76:16:7d:7f:51: a0:04:94:be:44:0a:bb:e2:9b:0e:7e:69:fb:ff:1a: af:33:ab:a9:95:a3:87:99:1e:56:a1:de:85:dd:d8: bc:7d:c2:eb:7a:d6:c9:7f:a6:7e:b2:e5:5e:21:fe: ca:d4:ab:e3:66:81:57:93:d3:08:f7:fb:0c:05:f9: 37:fb:96:88:dc:26:0c:76:9a:da:c3:eb:63:ff:50: 24:37:ba:5d:ee:29:ef:cc:e0:01:4d:d0:32:81:b7: 83:cd:4a:59:d8:99:36:4d:bf:63:80:60:cc:f4:45: 49:7b:73:dd:1d:c3:56:62:80:83:59:39:50:f9:6d: da:4f:9e:d7:6f:24:02:3c:de:68:7d:ad:b0:d7:57: c1:70:b4:23:68:54:a4:01:b3:c2:f1:01:5c:04:c0: 29:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CF:0C:60:76:52:5A:18:AB:57:D6:24:F1:C3:8E:87:44:15:55:E2 X509v3 Authority Key Identifier: keyid:56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:bd:2a:ce:61:50:6e:06:1a:9a:8f:cf:ae:04:2e:e9:05:12: e4:23:39:ba:36:27:8e:d0:b5:1c:df:98:9b:1b:68:49:db:11: a3:39:e4:2a:91:76:93:ca:c2:76:76:fd:8b:ae:3d:7e:ff:3d: fa:36:63:db:a0:32:3a:24:3c:c3:99:8c:78:05:6a:45:a5:98: c2:f6:f1:20:b6:5c:a4:37:c0:dd:0c:4c:21:71:69:43:5c:60: 79:f8:59:08:d4:78:77:d8:38:a3:60:f9:b5:6c:73:cb:6a:24: f3:6f:49:11:2e:ad:1a:73:bd:29:8b:4b:15:fa:dd:da:49:95: fe:c2:c5:9e:56:bc:69:bc:9f:7f:be:2b:4c:68:07:9a:7b:e9: 37:37:9b:4e:c6:70:30:fb:32:15:af:0e:1f:a6:b3:20:d1:c7: 5c:01:e3:12:1b:27:87:f0:15:0d:8b:c0:66:cd:6c:cc:bf:90: de:d2:b1:ce:52:e2:6f:42:4c:c1:67:db:33:bb:75:b8:3b:73: 70:a7:b0:1f:aa:34:d0:1a:ee:87:6d:69:a5:35:0d:a2:1e:99: 2c:d7:63:c3:58:e2:3b:60:73:5e:3f:28:1c:17:0a:22:c2:15: 03:85:9f:bb:ac:ee:76:24:23:bf:cb:7c:07:e5:18:c9:01:ec: 52:c9:f2:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTk1RTExMC8GA1UEBRMoNTZFMzk0QUYxQjVBQ0I4RkY0ODJDOEM2MDI2OUZFQTBF NEM0MjdCRTAeFw0yNTA4MjMwNzI0NTNaFw0yNTA4MzAwNzI0NTNaMBgxFjAUBgNV BAMTDTY4YTk2Y2M1LTExYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgwoP6DGp6BPGqNhGqnr4qx3OEpKb2zVFe2mL/hXB4/3EJxVPi3xnbKa2aIASJ qcTmncn8rH8Be0GTlrozsSk2h9sZpxGMyILfQ67Q+t0K5AgG63f70+pquw50kk3q QJ+k1/B2Fn1/UaAElL5ECrvimw5+afv/Gq8zq6mVo4eZHlah3oXd2Lx9wut61sl/ pn6y5V4h/srUq+NmgVeT0wj3+wwF+Tf7lojcJgx2mtrD62P/UCQ3ul3uKe/M4AFN 0DKBt4PNSlnYmTZNv2OAYMz0RUl7c90dw1ZigINZOVD5bdpPntdvJAI83mh9rbDX V8FwtCNoVKQBs8LxAVwEwCmbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFM8MYHZS WhirV9Yk8cOOh0QVVeIwHwYDVR0jBBgwFoAUVuOUrxtay4/0gsjGAmn+oOTEJ74w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5OTVFLzJFN0FGMjk4RkE2 MjExRUY5NTU1NUMwRUM0RjlBRTAyL1Z1T1VyeHRheTRfMGdzakdBbW4tb09URUo3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVnVPVXJ4dGF5NF8wZ3NqR0Ftbi1vT1RFSjc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 OTVFLzJFN0FGMjk4RkE2MjExRUY5NTU1NUMwRUM0RjlBRTAyL1Z1T1VyeHRheTRf MGdzakdBbW4tb09URUo3NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHm9Ks5hUG4GGpqPz64ELukFEuQjObo2J47QtRzfmJsbaEnbEaM55CqR dpPKwnZ2/YuuPX7/Pfo2Y9ugMjokPMOZjHgFakWlmML28SC2XKQ3wN0MTCFxaUNc YHn4WQjUeHfYOKNg+bVsc8tqJPNvSREurRpzvSmLSxX63dpJlf7CxZ5WvGm8n3++ K0xoB5p76Tc3m07GcDD7MhWvDh+msyDRx1wB4xIbJ4fwFQ2LwGbNbMy/kN7Ssc5S 4m9CTMFn2zO7dbg7c3CnsB+qNNAa7odtaaU1DaIemSzXY8NY4jtgc14/KBwXCiLC FQOFn7us7nYkI7/LfAflGMkB7FLJ8tY= -----END CERTIFICATE-----Generated at Sat Aug 23 10:31:20 2025 by rpki-client