$ rpki-client -vvf rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft File: VCRPZF3qDVCWaFgNE46CUnn7Vng.mft (raw, json) Hash identifier: ioCftIxyqivGj6neoeDWE1Dly2x2X5CM67O3e8WrmVI= Subject key identifier: 26:6A:6C:F3:C3:10:E5:BB:F6:E1:CB:A7:D5:48:97:DB:1E:96:B4:C6 Authority key identifier: 54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 Certificate issuer: /CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678 Certificate serial: 0D37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft Manifest number: 0D2D Signing time: Fri 22 Aug 2025 18:09:29 +0000 Manifest this update: Fri 22 Aug 2025 18:09:28 +0000 Manifest next update: Fri 29 Aug 2025 18:09:28 +0000 Files and hashes: 1: VCRPZF3qDVCWaFgNE46CUnn7Vng.crl (hash: cKK4kZtg3mCSOM9wW+jLFYnRi4aB8wPkZf4qWHv9/nw=) 2: 690390E80FAA11EB8B893F1EC4F9AE02.roa (hash: 9FxIJk5By9GC/1mM3LBBThqiUIJi3J3T7y2yMdVI55E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3383 (0xd37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B624E, serialNumber=54244F645DEA0D509668580D138E825279FB5678 Validity Not Before: Aug 22 18:09:28 2025 GMT Not After : Aug 29 18:09:28 2025 GMT Subject: CN=68a8b259-9158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:71:04:c1:6c:7f:2d:3a:18:5e:e1:d0:a7:6e: 20:8e:f5:cf:52:95:b4:a9:c6:03:b1:98:c5:3d:2e: 3d:a4:bd:5d:ca:2a:ad:7b:59:62:b5:88:ad:12:be: bc:39:76:ea:56:17:67:99:64:81:3e:1f:7c:8a:91: b6:25:cb:86:4d:be:74:28:de:1e:c3:7d:f9:01:55: a2:14:82:25:db:60:92:f6:af:5e:96:a4:b3:1c:c6: 51:2f:9f:3d:57:df:85:f3:45:23:87:af:98:42:5d: 72:b6:08:e6:ad:3b:fd:dc:2f:f9:0f:92:27:6f:9f: 8e:0b:97:c9:81:cf:d3:20:99:5a:85:c1:fe:d4:f6: 68:86:e8:b7:de:0d:19:d2:cd:1b:66:91:07:51:3e: 8d:82:03:a5:8f:37:c7:e3:6f:06:00:a5:b6:3f:51: 6e:db:6a:bd:74:a1:53:53:3b:7e:06:fc:33:ad:51: 29:e1:18:97:9a:ad:8e:49:6d:9d:bd:ba:1e:b6:ad: 86:d5:c9:68:81:d5:04:94:51:e0:26:b9:42:7e:a8: f9:31:d6:21:54:6b:e3:e8:03:54:14:4d:4d:d9:47: ba:d8:b6:32:b7:e1:4c:da:78:19:40:5a:55:7b:70: 6b:10:0f:7e:52:24:05:7e:3f:a2:de:d3:17:93:39: 21:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6A:6C:F3:C3:10:E5:BB:F6:E1:CB:A7:D5:48:97:DB:1E:96:B4:C6 X509v3 Authority Key Identifier: keyid:54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:6b:bd:d8:12:5c:30:2b:56:cb:ff:9c:97:00:e0:aa:de:60: 6e:08:70:b2:55:f3:2b:2a:2a:b6:22:e3:cb:b3:30:47:54:b1: 5e:d0:09:a2:08:1d:16:4d:fd:5d:0a:0e:fb:8c:1f:9c:32:23: 94:c3:8a:b0:6c:56:10:7b:10:a4:8e:4c:bb:4d:67:51:f2:c9: 68:89:d1:4b:1c:20:c1:e0:78:f9:ae:4d:c1:2e:20:51:ae:d4: d2:35:fa:f4:22:82:f0:e5:87:81:97:b2:a9:e9:53:9f:bd:80: 39:56:e1:c9:48:47:65:87:db:6d:78:5f:18:94:41:b4:58:77: ee:e0:d1:f6:7b:c6:76:87:25:6b:70:11:47:6f:2a:bd:4d:fe: eb:07:fd:68:e5:c1:eb:d2:3c:3e:5a:c2:46:88:79:d5:3c:c0: f2:ea:14:8d:db:8a:45:02:f3:82:87:22:c2:63:4c:8d:98:93: 35:f6:6a:f9:3f:f1:fc:52:74:0c:2f:71:b0:25:6e:31:25:76: 0d:ad:dd:b2:2b:26:e7:bc:51:b7:62:d0:aa:19:e1:92:b7:83: 46:44:32:ee:c0:8e:ef:3b:e8:44:49:15:e9:a9:a9:e0:65:83: 36:e6:7c:c3:de:78:52:f3:3c:3c:23:1b:3a:27:f3:61:65:02: 03:34:ce:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNEUxMTAvBgNVBAUTKDU0MjQ0RjY0NURFQTBENTA5NjY4NTgwRDEzOEU4MjUy NzlGQjU2NzgwHhcNMjUwODIyMTgwOTI4WhcNMjUwODI5MTgwOTI4WjAYMRYwFAYD VQQDEw02OGE4YjI1OS05MTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6nEEwWx/LToYXuHQp24gjvXPUpW0qcYDsZjFPS49pL1dyiqte1litYitEr68 OXbqVhdnmWSBPh98ipG2JcuGTb50KN4ew335AVWiFIIl22CS9q9elqSzHMZRL589 V9+F80Ujh6+YQl1ytgjmrTv93C/5D5Inb5+OC5fJgc/TIJlahcH+1PZohui33g0Z 0s0bZpEHUT6NggOljzfH428GAKW2P1Fu22q9dKFTUzt+BvwzrVEp4RiXmq2OSW2d vboetq2G1clogdUElFHgJrlCfqj5MdYhVGvj6ANUFE1N2Ue62LYyt+FM2ngZQFpV e3BrEA9+UiQFfj+i3tMXkzkhbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZqbPPD EOW79uHLp9VIl9selrTGMB8GA1UdIwQYMBaAFFQkT2Rd6g1QlmhYDROOglJ5+1Z4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI0RS9CRDk1QzM4RUUw M0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURWQ1dhRmdORTQ2Q1VubjdW bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDUlBaRjNxRFZDV2FGZ05FNDZDVW5uN1ZuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjI0RS9CRDk1QzM4RUUwM0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURW Q1dhRmdORTQ2Q1VubjdWbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5a73YElwwK1bL/5yXAOCq3mBuCHCyVfMrKiq2IuPLszBHVLFe0Ami CB0WTf1dCg77jB+cMiOUw4qwbFYQexCkjky7TWdR8sloidFLHCDB4Hj5rk3BLiBR rtTSNfr0IoLw5YeBl7Kp6VOfvYA5VuHJSEdlh9tteF8YlEG0WHfu4NH2e8Z2hyVr cBFHbyq9Tf7rB/1o5cHr0jw+WsJGiHnVPMDy6hSN24pFAvOChyLCY0yNmJM19mr5 P/H8UnQML3GwJW4xJXYNrd2yKybnvFG3YtCqGeGSt4NGRDLuwI7vO+hESRXpqang ZYM25nzD3nhS8zw8Ixs6J/NhZQIDNM58 -----END CERTIFICATE-----Generated at Sat Aug 23 18:59:11 2025 by rpki-client