$ rpki-client -vvf rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft File: VuOUrxtay4_0gsjGAmn-oOTEJ74.mft (raw, json) Hash identifier: Fcv3R4wzXCWoX3ta5sIzQOW9UXCSJ+A4xo/5NL4LCZ8= Subject key identifier: 85:5F:CE:BA:0E:06:6E:93:C8:5E:62:BD:03:0E:28:58:8E:FB:F2:06 Authority key identifier: 56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE Certificate issuer: /CN=A91A995E/serialNumber=56E394AF1B5ACB8FF482C8C60269FEA0E4C427BE Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft Manifest number: 40 Signing time: Thu 03 Jul 2025 07:44:06 +0000 Manifest this update: Thu 03 Jul 2025 07:44:05 +0000 Manifest next update: Thu 10 Jul 2025 07:44:05 +0000 Files and hashes: 1: VuOUrxtay4_0gsjGAmn-oOTEJ74.crl (hash: 3gSE6JwfulGUFdUUX5vcVpSnwmnkJSkL/gQFaP2dqmU=) 2: 3E41E766FA6411EFB8C12C50C4F9AE02.roa (hash: DEF0xkvw3q1tLXUQiXU0nzrLNhOtTutlaMvyugUJMpQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.crl rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A995E, serialNumber=56E394AF1B5ACB8FF482C8C60269FEA0E4C427BE Validity Not Before: Jul 3 07:44:05 2025 GMT Not After : Jul 10 07:44:05 2025 GMT Subject: CN=686634c5-eaa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a8:5f:13:87:c0:d9:8d:03:ff:15:fa:6c:3f: a1:85:66:78:34:96:7a:a2:29:e1:05:9c:6f:10:88: 3e:2d:c3:b9:e0:2e:54:1e:a1:c7:1f:86:b1:e4:bc: a1:79:66:9f:8f:4a:bb:f8:73:81:38:2e:b5:c9:40: c2:a4:75:99:fe:b3:a9:a5:42:df:06:a9:6a:b8:4e: 7d:d0:09:42:b3:ec:ca:a8:c0:03:8c:3e:89:64:1d: f6:23:86:41:bb:9e:8a:98:5c:cc:ab:2d:22:1f:3f: 24:7e:8e:99:ba:5d:b9:cf:e9:af:5c:94:29:2c:6b: cf:64:2d:d2:8b:05:81:ed:39:02:ba:76:a3:23:2c: 97:4d:64:ab:27:73:f7:9e:19:51:ea:28:85:81:84: af:7f:bf:96:f1:54:bc:78:fb:5d:e4:e3:88:d8:8b: b4:d7:81:18:a8:6c:69:b1:b6:3c:1c:6a:d3:cb:f5: d0:58:27:75:a5:0c:af:5d:d9:cd:99:0b:5c:d6:60: fe:ff:de:09:e2:80:f1:9d:b3:d4:43:1e:fa:17:4f: fa:fe:f8:1d:01:ec:c3:0c:a5:80:f9:a7:e4:7b:d7: f6:33:f3:a2:75:7f:d8:c4:19:c6:5c:f5:fb:a4:94: b0:7a:ef:e8:72:e0:1a:3d:73:91:0a:00:b3:09:31: 73:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5F:CE:BA:0E:06:6E:93:C8:5E:62:BD:03:0E:28:58:8E:FB:F2:06 X509v3 Authority Key Identifier: keyid:56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:1c:7d:0b:2e:c4:3e:67:d7:5a:98:d6:b1:62:6f:98:19:67: ad:60:0c:b0:d7:a5:05:de:de:76:84:39:c9:b7:5b:7f:9d:03: b5:cf:dd:c7:aa:68:44:73:2c:95:06:9e:3b:74:e9:06:89:f8: 80:e8:e6:df:42:86:42:27:37:e3:d8:fc:3c:00:07:23:3a:7a: df:4e:31:d5:08:26:5d:b4:0f:e8:28:e9:da:3d:b2:63:25:4d: 88:d6:4a:48:e6:d4:b8:03:63:00:d2:70:94:25:98:ae:10:a5: b8:44:92:45:e4:0e:34:1e:7e:2d:40:13:48:91:88:60:4f:89: 8f:7a:e6:a1:9a:9d:34:75:51:ea:53:6d:0a:d6:1b:91:47:d1: 95:be:9d:66:31:b0:2d:b3:1e:8e:5e:b1:f6:4c:3b:ce:f1:7b: 7f:93:91:7f:03:24:9c:a8:ff:a4:39:25:b8:bf:99:fd:b1:4d: fa:d1:ea:78:67:61:39:8c:a5:93:fc:7c:1f:33:88:b5:42:ea: ce:be:97:c1:7b:09:6a:99:6e:3f:fa:b9:cd:12:d7:cb:4c:83: 84:de:e8:1f:65:f2:22:04:e4:70:99:c1:fd:3d:25:68:2a:19: 99:0b:1c:43:f6:06:37:3e:68:5d:1f:24:d6:f1:79:8d:78:80: bf:ac:5d:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTk1RTExMC8GA1UEBRMoNTZFMzk0QUYxQjVBQ0I4RkY0ODJDOEM2MDI2OUZFQTBF NEM0MjdCRTAeFw0yNTA3MDMwNzQ0MDVaFw0yNTA3MTAwNzQ0MDVaMBgxFjAUBgNV BAMTDTY4NjYzNGM1LWVhYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUqF8Th8DZjQP/FfpsP6GFZng0lnqiKeEFnG8QiD4tw7ngLlQeoccfhrHkvKF5 Zp+PSrv4c4E4LrXJQMKkdZn+s6mlQt8GqWq4Tn3QCUKz7MqowAOMPolkHfYjhkG7 noqYXMyrLSIfPyR+jpm6XbnP6a9clCksa89kLdKLBYHtOQK6dqMjLJdNZKsnc/ee GVHqKIWBhK9/v5bxVLx4+13k44jYi7TXgRiobGmxtjwcatPL9dBYJ3WlDK9d2c2Z C1zWYP7/3gnigPGds9RDHvoXT/r++B0B7MMMpYD5p+R71/Yz86J1f9jEGcZc9fuk lLB67+hy4Bo9c5EKALMJMXP1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhV/Oug4G bpPIXmK9Aw4oWI778gYwHwYDVR0jBBgwFoAUVuOUrxtay4/0gsjGAmn+oOTEJ74w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5OTVFLzJFN0FGMjk4RkE2 MjExRUY5NTU1NUMwRUM0RjlBRTAyL1Z1T1VyeHRheTRfMGdzakdBbW4tb09URUo3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVnVPVXJ4dGF5NF8wZ3NqR0Ftbi1vT1RFSjc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 OTVFLzJFN0FGMjk4RkE2MjExRUY5NTU1NUMwRUM0RjlBRTAyL1Z1T1VyeHRheTRf MGdzakdBbW4tb09URUo3NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADkcfQsuxD5n11qY1rFib5gZZ61gDLDXpQXe3naEOcm3W3+dA7XP3ceq aERzLJUGnjt06QaJ+IDo5t9ChkInN+PY/DwAByM6et9OMdUIJl20D+go6do9smMl TYjWSkjm1LgDYwDScJQlmK4QpbhEkkXkDjQefi1AE0iRiGBPiY965qGanTR1UepT bQrWG5FH0ZW+nWYxsC2zHo5esfZMO87xe3+TkX8DJJyo/6Q5Jbi/mf2xTfrR6nhn YTmMpZP8fB8ziLVC6s6+l8F7CWqZbj/6uc0S18tMg4Te6B9l8iIE5HCZwf09JWgq GZkLHEP2Bjc+aF0fJNbxeY14gL+sXT0= -----END CERTIFICATE-----Generated at Thu Jul 3 23:19:29 2025 by rpki-client