$ rpki-client -vvf rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft File: vgp-rCoKt52-BO5kAC1UgnWkzKY.mft (raw, json) Hash identifier: Ag0S6+5bl8MuVyEkprfOFWDlhCJeLMAFadX+Sqdtn/Y= Subject key identifier: C8:7E:21:0E:60:68:92:8E:D4:13:CA:43:DF:A4:C7:92:CC:FC:7A:06 Authority key identifier: BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6 Certificate issuer: /CN=A91C769F/serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6 Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft Manifest number: 019C Signing time: Sat 23 Aug 2025 03:27:30 +0000 Manifest this update: Sat 23 Aug 2025 03:27:30 +0000 Manifest next update: Sat 30 Aug 2025 03:27:30 +0000 Files and hashes: 1: vgp-rCoKt52-BO5kAC1UgnWkzKY.crl (hash: 6WFf2UMBCD1YrKh3VxllyKLtK2u1CEy7SozKud80zkw=) 2: 0A469648099611EEB1AA195CC4F9AE02.roa (hash: Zi6/ctlIHdRI7KN6Yh7e6rA5XoPEKo7FY3oH88+Pz2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C769F, serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6 Validity Not Before: Aug 23 03:27:30 2025 GMT Not After : Aug 30 03:27:30 2025 GMT Subject: CN=68a93522-a0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:8d:aa:54:08:a7:e0:81:e9:43:2c:1d:ac: a9:40:bb:05:5a:50:b5:ac:1d:8e:ce:b2:c6:3d:ca: a1:ec:54:c8:b3:0a:6c:5e:63:78:cc:b1:e1:d2:74: ce:62:fa:13:0e:2a:ca:00:a5:6d:75:55:41:13:b2: 5f:da:8e:a9:58:ba:2f:b6:57:f4:3c:1b:11:4a:a9: e3:d2:c1:ea:d6:6f:b2:ec:a8:b8:8b:28:da:33:97: 93:52:0b:49:21:52:92:91:27:15:9f:f4:17:67:d4: 26:ac:43:96:43:5d:3d:69:31:21:6e:ad:62:27:f9: 5d:7a:23:19:02:9b:e7:d5:d8:e0:ca:64:f6:7b:d8: fd:1c:c4:74:2d:02:a4:99:44:0c:e0:f1:31:98:b5: 56:2d:32:e8:85:21:9f:14:d4:d5:31:9a:53:53:58: 4f:da:6c:d1:ca:6c:07:58:9d:6e:6b:d3:49:ab:39: 8b:b3:ae:16:aa:b8:92:93:6b:da:6f:da:31:74:99: cd:0e:30:a3:dd:f6:e9:f3:fc:cf:da:12:70:10:eb: ba:60:c2:55:c2:c6:a6:c8:a8:e3:fc:9f:18:42:b2: 2b:da:e2:ff:d1:f8:3a:df:48:51:5c:21:f2:e2:bf: 21:11:30:f2:01:f5:f3:ba:21:35:65:16:3b:74:8a: 0f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7E:21:0E:60:68:92:8E:D4:13:CA:43:DF:A4:C7:92:CC:FC:7A:06 X509v3 Authority Key Identifier: keyid:BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:66:54:92:70:12:88:dd:a4:5f:db:fa:c4:63:91:68:5a:34: a3:d2:86:a7:18:4a:fa:42:f4:c4:b0:87:8e:5e:5b:ee:ae:02: 4e:60:91:7e:c9:81:d2:5f:06:f3:cc:b8:be:b9:0b:ce:0a:d1: 0b:fa:03:11:8e:57:30:15:fd:af:a4:97:44:ef:95:15:23:58: b0:c4:80:c3:55:0f:0b:62:fe:9b:a2:62:5b:8e:e6:80:3b:7e: 22:1c:7e:f0:5e:2a:32:f6:6c:d3:b4:bb:78:8c:9a:73:ce:7c: da:ea:44:7c:db:e3:c2:ab:05:57:50:a1:78:57:f3:42:97:f2: f8:99:74:7a:a6:cb:e4:3e:1a:ec:c3:9b:ec:6e:18:8f:15:de: ad:0a:ec:cd:05:57:9c:bd:4b:e7:3f:31:91:9e:71:c1:73:f0: 1e:69:7d:e6:f6:21:80:00:ba:18:aa:d1:59:15:39:19:38:88: 8e:b1:b6:ec:50:1b:38:03:ec:c5:98:f4:bf:10:c1:05:45:7d: 3e:cb:31:56:2f:8d:5e:77:8d:1f:42:fd:25:f3:fd:af:0f:86: e6:7e:2b:4f:51:40:3d:b0:bf:a9:1d:e1:f5:73:23:c4:93:b4: 17:94:1f:63:55:b4:de:12:8b:25:7d:df:43:c7:ad:32:08:cb: 0a:36:1f:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc2OUYxMTAvBgNVBAUTKEJFMEE3RUFDMkEwQUI3OURCRTA0RUU2NDAwMkQ1NDgy NzVBNENDQTYwHhcNMjUwODIzMDMyNzMwWhcNMjUwODMwMDMyNzMwWjAYMRYwFAYD VQQDEw02OGE5MzUyMi1hMGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgONqlQIp+CB6UMsHaypQLsFWlC1rB2OzrLGPcqh7FTIswpsXmN4zLHh0nTO YvoTDirKAKVtdVVBE7Jf2o6pWLovtlf0PBsRSqnj0sHq1m+y7Ki4iyjaM5eTUgtJ IVKSkScVn/QXZ9QmrEOWQ109aTEhbq1iJ/ldeiMZApvn1djgymT2e9j9HMR0LQKk mUQM4PExmLVWLTLohSGfFNTVMZpTU1hP2mzRymwHWJ1ua9NJqzmLs64WqriSk2va b9oxdJnNDjCj3fbp8/zP2hJwEOu6YMJVwsamyKjj/J8YQrIr2uL/0fg630hRXCHy 4r8hETDyAfXzuiE1ZRY7dIoP8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMh+IQ5g aJKO1BPKQ9+kx5LM/HoGMB8GA1UdIwQYMBaAFL4KfqwqCredvgTuZAAtVIJ1pMym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzY5Ri82QUQxMTdBNDA5 OTExMUVFQkQyRTBFNThDNEY5QUUwMi92Z3AtckNvS3Q1Mi1CTzVrQUMxVWduV2t6 S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZncC1yQ29LdDUyLUJPNWtBQzFVZ25Xa3pLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzY5Ri82QUQxMTdBNDA5OTExMUVFQkQyRTBFNThDNEY5QUUwMi92Z3AtckNvS3Q1 Mi1CTzVrQUMxVWduV2t6S1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/ZlSScBKI3aRf2/rEY5FoWjSj0oanGEr6QvTEsIeOXlvurgJOYJF+ yYHSXwbzzLi+uQvOCtEL+gMRjlcwFf2vpJdE75UVI1iwxIDDVQ8LYv6bomJbjuaA O34iHH7wXioy9mzTtLt4jJpzznza6kR82+PCqwVXUKF4V/NCl/L4mXR6psvkPhrs w5vsbhiPFd6tCuzNBVecvUvnPzGRnnHBc/AeaX3m9iGAALoYqtFZFTkZOIiOsbbs UBs4A+zFmPS/EMEFRX0+yzFWL41ed40fQv0l8/2vD4bmfitPUUA9sL+pHeH1cyPE k7QXlB9jVbTeEoslfd9Dx60yCMsKNh/V -----END CERTIFICATE-----Generated at Sat Aug 23 20:37:09 2025 by rpki-client