$ rpki-client -vvf rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft File: VCRPZF3qDVCWaFgNE46CUnn7Vng.mft (raw, json) Hash identifier: Q5dKQGucx8PgHdBbMUEE3/WEn12Ek8TWfwlkLtLYC0w= Subject key identifier: BD:34:7D:21:89:A9:29:B7:8D:96:9F:8A:56:9D:00:7E:23:D5:74:4E Authority key identifier: 54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 Certificate issuer: /CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678 Certificate serial: 0D1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft Manifest number: 0D12 Signing time: Mon 30 Jun 2025 18:16:15 +0000 Manifest this update: Mon 30 Jun 2025 18:16:14 +0000 Manifest next update: Mon 07 Jul 2025 18:16:14 +0000 Files and hashes: 1: VCRPZF3qDVCWaFgNE46CUnn7Vng.crl (hash: QBpA202x1kgA8mFJkmlrQQJavQ8yUlApRaKAPDqdRjw=) 2: 690390E80FAA11EB8B893F1EC4F9AE02.roa (hash: 9FxIJk5By9GC/1mM3LBBThqiUIJi3J3T7y2yMdVI55E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3356 (0xd1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B624E, serialNumber=54244F645DEA0D509668580D138E825279FB5678 Validity Not Before: Jun 30 18:16:14 2025 GMT Not After : Jul 7 18:16:14 2025 GMT Subject: CN=6862d46f-256b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:39:a1:5a:c7:da:cb:95:8d:ed:b2:f7:3a:b3: 95:52:7d:4c:63:9a:8d:ec:bd:3d:b8:cf:37:6e:95: bd:15:d4:28:b7:da:56:66:d0:d0:0a:cb:35:3d:ab: 51:6a:40:4b:dd:bf:ec:3f:ac:cb:c5:02:2a:0c:90: d6:40:7d:fd:ec:47:2d:80:37:7d:55:ca:68:25:0e: d5:50:a1:69:c4:52:5a:54:eb:68:93:99:12:d6:2c: b7:0d:52:86:1c:d1:d4:29:a1:01:6d:d3:c7:72:95: 36:a4:a2:db:b8:4e:45:c7:cb:76:4f:ac:1f:3d:11: 88:37:21:70:87:3a:95:53:8e:ec:19:84:1e:1c:a2: be:81:dd:67:55:8d:9a:2b:86:44:70:3e:cc:d2:22: ef:23:b0:8c:77:a6:5a:63:75:77:60:11:b6:31:5b: 6b:f0:84:56:d6:07:e0:b6:55:31:3a:a0:95:a5:4b: da:28:f2:e4:9f:96:f8:4a:56:f0:d6:cb:9b:fe:84: 9a:05:41:c1:82:12:5e:4f:ee:67:26:27:8b:05:04: 47:1c:39:8b:ac:4e:56:00:01:27:bb:a8:99:6e:a9: 1a:e2:4a:3e:e2:99:3a:dd:ff:8b:63:d1:1a:33:95: 56:a8:ad:58:6f:ec:5d:e8:44:b4:53:41:93:44:3a: b1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:34:7D:21:89:A9:29:B7:8D:96:9F:8A:56:9D:00:7E:23:D5:74:4E X509v3 Authority Key Identifier: keyid:54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:ee:65:9a:69:19:c9:44:84:26:39:95:d0:68:ad:d6:5c:82: 9e:d4:b9:5d:92:10:1b:f0:65:20:20:b8:d7:75:27:96:84:c7: bc:ee:5a:c0:6d:e6:b8:6f:eb:d4:2f:5c:c4:59:37:c2:74:7f: 05:fa:55:79:3b:c5:5b:b3:57:fa:20:15:bf:ba:eb:12:7a:b2: c2:59:ee:e1:cc:ae:aa:9c:8a:b5:04:ee:0f:d1:af:82:35:b4: 88:a8:e6:5b:ca:0b:ef:b5:a1:c7:48:94:b3:5a:69:0f:ca:85: c4:07:a4:ee:c4:24:15:3b:30:18:84:d6:c0:6f:fa:66:9d:e5: 94:50:bc:45:5a:e4:17:c6:bf:df:99:a9:16:8c:65:ff:be:05: 5e:0b:d2:f1:a4:9c:60:ae:3a:a0:0e:ce:e8:7b:30:1d:fb:d0: d0:c2:d8:de:9a:f0:13:fd:a0:b6:32:87:d3:a1:d8:1d:66:af: 46:90:2e:24:64:2c:60:5d:18:8b:67:97:94:f5:8a:88:d8:c3: 08:46:9c:5f:f4:a9:b9:c7:c3:06:bb:1f:5d:13:07:1d:f1:db: 8b:e5:c3:10:66:32:c2:c5:c2:ca:84:45:fe:58:13:fb:bc:f0: f2:65:d7:2c:4f:54:67:66:85:fa:a9:04:be:15:27:7c:c5:9c: 3d:94:ce:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNEUxMTAvBgNVBAUTKDU0MjQ0RjY0NURFQTBENTA5NjY4NTgwRDEzOEU4MjUy NzlGQjU2NzgwHhcNMjUwNjMwMTgxNjE0WhcNMjUwNzA3MTgxNjE0WjAYMRYwFAYD VQQDEw02ODYyZDQ2Zi0yNTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zmhWsfay5WN7bL3OrOVUn1MY5qN7L09uM83bpW9FdQot9pWZtDQCss1PatR akBL3b/sP6zLxQIqDJDWQH397EctgDd9VcpoJQ7VUKFpxFJaVOtok5kS1iy3DVKG HNHUKaEBbdPHcpU2pKLbuE5Fx8t2T6wfPRGINyFwhzqVU47sGYQeHKK+gd1nVY2a K4ZEcD7M0iLvI7CMd6ZaY3V3YBG2MVtr8IRW1gfgtlUxOqCVpUvaKPLkn5b4Slbw 1sub/oSaBUHBghJeT+5nJieLBQRHHDmLrE5WAAEnu6iZbqka4ko+4pk63f+LY9Ea M5VWqK1Yb+xd6ES0U0GTRDqxDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL00fSGJ qSm3jZafiladAH4j1XROMB8GA1UdIwQYMBaAFFQkT2Rd6g1QlmhYDROOglJ5+1Z4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI0RS9CRDk1QzM4RUUw M0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURWQ1dhRmdORTQ2Q1VubjdW bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDUlBaRjNxRFZDV2FGZ05FNDZDVW5uN1ZuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjI0RS9CRDk1QzM4RUUwM0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURW Q1dhRmdORTQ2Q1VubjdWbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC17mWaaRnJRIQmOZXQaK3WXIKe1LldkhAb8GUgILjXdSeWhMe87lrA bea4b+vUL1zEWTfCdH8F+lV5O8Vbs1f6IBW/uusSerLCWe7hzK6qnIq1BO4P0a+C NbSIqOZbygvvtaHHSJSzWmkPyoXEB6TuxCQVOzAYhNbAb/pmneWUULxFWuQXxr/f makWjGX/vgVeC9LxpJxgrjqgDs7oezAd+9DQwtjemvAT/aC2MofTodgdZq9GkC4k ZCxgXRiLZ5eU9YqI2MMIRpxf9Km5x8MGux9dEwcd8duL5cMQZjLCxcLKhEX+WBP7 vPDyZdcsT1RnZoX6qQS+FSd8xZw9lM7F -----END CERTIFICATE-----Generated at Wed Jul 2 06:55:57 2025 by rpki-client