$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft File: vttNMcgBx4se-jSHY50DVayRNUs.mft (raw, json) Hash identifier: uTC4sX6xaESzE7drYVATNSjfuGcAZuR6NgCNbAw5TLg= Subject key identifier: 65:A4:32:CE:50:74:BF:E3:41:88:6E:B6:2A:F2:4B:13:B5:F0:AC:89 Authority key identifier: BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B Certificate issuer: /CN=A91CB063/serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft Manifest number: 5B Signing time: Thu 03 Jul 2025 07:27:22 +0000 Manifest this update: Thu 03 Jul 2025 07:27:21 +0000 Manifest next update: Thu 10 Jul 2025 07:27:21 +0000 Files and hashes: 1: vttNMcgBx4se-jSHY50DVayRNUs.crl (hash: 8M2ApOkod1OyybqAkWYkTP1Gly32bbU1yfwb+I6xzbw=) 2: BDA493A24F6211F0BEBA9A1EC4F9AE02.roa (hash: dRXB3QC7YqCROgx2X7ZnRm6lNHfbbszGkLMLxQOaMCY=) 3: D99266FE4F7911F095AB2D46C4F9AE02.roa (hash: al+hawxdd/Lfvjm9XY3Pf4WOTHr8q+SKzXdyvZRDRqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB063, serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B Validity Not Before: Jul 3 07:27:21 2025 GMT Not After : Jul 10 07:27:21 2025 GMT Subject: CN=686630da-1290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4c:d2:6f:7f:ed:19:93:e4:10:d2:b8:3f:be: e7:ab:2a:fb:e3:be:79:bb:5d:b6:60:3d:13:12:53: c7:3b:b1:5f:5d:5d:33:41:bc:cd:1c:cf:81:8a:40: 36:4f:ae:3e:ee:94:bb:bb:0c:0d:16:7b:59:4c:4b: 50:86:04:b7:88:a6:23:fb:28:2a:59:44:fd:32:e3: ed:50:95:c7:04:8b:23:f6:ad:d6:1b:2d:d2:3c:4b: 46:40:56:a4:64:a3:38:f7:5c:eb:06:59:27:43:3a: 27:bf:ee:71:82:0f:db:d9:4f:ad:c5:03:13:96:bb: 9c:da:ef:1d:2a:6d:d1:10:29:dd:08:0a:88:db:01: c6:92:6a:34:c5:99:b7:77:16:25:05:f1:91:25:a9: 05:5a:69:99:c3:38:bb:3e:ed:ae:cd:3f:d4:ac:9a: 78:ad:09:88:75:d8:c8:96:5d:05:60:15:6b:b3:fd: 03:e2:4b:92:9e:53:49:2c:6f:e8:58:52:f7:90:46: 90:9f:51:d8:f0:d0:69:1e:4c:a4:40:c2:a3:3d:9a: 16:4b:18:46:6f:4a:de:0b:3c:36:0b:fc:a1:66:80: 97:99:6e:b3:7c:4b:2c:9e:4e:4b:4e:58:1b:25:14: a2:69:7f:b8:8e:ce:65:ad:2b:86:d1:fb:a0:95:18: 4f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A4:32:CE:50:74:BF:E3:41:88:6E:B6:2A:F2:4B:13:B5:F0:AC:89 X509v3 Authority Key Identifier: keyid:BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:de:95:19:a3:b1:ed:55:a8:b3:5f:ee:76:16:31:34:44:e6: 9d:f0:2f:a3:f7:41:c9:07:08:61:16:8a:83:c5:c6:5d:11:26: d2:e8:4b:5a:ea:41:d1:c0:24:f2:28:70:0b:79:68:86:4f:71: 49:fa:9b:ad:7a:12:f9:8c:39:ac:f6:3b:8a:9b:19:35:35:62: ae:f5:00:a3:9c:58:99:5f:26:4a:b3:d2:64:9f:48:e5:78:2f: db:97:ba:35:99:71:8a:90:c2:e3:7d:65:0d:bf:82:b6:a9:00: 20:80:11:8f:64:14:78:d6:fb:d0:d6:4d:89:4c:19:ac:22:27: 77:6d:3e:12:fe:1e:d7:f2:a6:c5:fb:15:12:3f:3f:b7:cd:bc: 72:1f:39:b9:17:3d:9a:02:84:a7:c9:2d:1e:c1:75:8f:32:e9: 0b:88:3d:10:45:e4:81:f5:c4:21:b5:65:aa:f0:e7:c6:1b:ce: 82:11:df:97:d4:05:6f:90:44:39:aa:e5:0d:86:6d:a1:07:ce: 7f:3f:4b:b7:bd:ad:8a:b6:d8:51:43:1f:34:47:1a:94:52:2a: e8:b3:8e:70:78:8c:2d:11:4a:b3:b1:8f:73:d2:64:9a:ff:df: e9:88:e7:a6:21:de:87:e8:38:a2:3c:9a:3a:60:ab:7d:13:7b: 9a:e4:d7:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjA2MzExMC8GA1UEBRMoQkVEQjREMzFDODAxQzc4QjFFRkEzNDg3NjM5RDAzNTVB QzkxMzU0QjAeFw0yNTA3MDMwNzI3MjFaFw0yNTA3MTAwNzI3MjFaMBgxFjAUBgNV BAMTDTY4NjYzMGRhLTEyOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZTNJvf+0Zk+QQ0rg/vuerKvvjvnm7XbZgPRMSU8c7sV9dXTNBvM0cz4GKQDZP rj7ulLu7DA0We1lMS1CGBLeIpiP7KCpZRP0y4+1QlccEiyP2rdYbLdI8S0ZAVqRk ozj3XOsGWSdDOie/7nGCD9vZT63FAxOWu5za7x0qbdEQKd0ICojbAcaSajTFmbd3 FiUF8ZElqQVaaZnDOLs+7a7NP9SsmnitCYh12MiWXQVgFWuz/QPiS5KeU0ksb+hY UveQRpCfUdjw0GkeTKRAwqM9mhZLGEZvSt4LPDYL/KFmgJeZbrN8SyyeTktOWBsl FKJpf7iOzmWtK4bR+6CVGE/PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZaQyzlB0 v+NBiG62KvJLE7XwrIkwHwYDVR0jBBgwFoAUvttNMcgBx4se+jSHY50DVayRNUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCMDYzLzYzQjQ3NjAyRDZF RDExRUY5RDlCRjM2QUM0RjlBRTAyL3Z0dE5NY2dCeDRzZS1qU0hZNTBEVmF5Uk5V cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdnR0Tk1jZ0J4NHNlLWpTSFk1MERWYXlSTlVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC MDYzLzYzQjQ3NjAyRDZFRDExRUY5RDlCRjM2QUM0RjlBRTAyL3Z0dE5NY2dCeDRz ZS1qU0hZNTBEVmF5Uk5Vcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMDelRmjse1VqLNf7nYWMTRE5p3wL6P3QckHCGEWioPFxl0RJtLoS1rq QdHAJPIocAt5aIZPcUn6m616EvmMOaz2O4qbGTU1Yq71AKOcWJlfJkqz0mSfSOV4 L9uXujWZcYqQwuN9ZQ2/grapACCAEY9kFHjW+9DWTYlMGawiJ3dtPhL+HtfypsX7 FRI/P7fNvHIfObkXPZoChKfJLR7BdY8y6QuIPRBF5IH1xCG1Zarw58YbzoIR35fU BW+QRDmq5Q2GbaEHzn8/S7e9rYq22FFDHzRHGpRSKuizjnB4jC0RSrOxj3PSZJr/ 3+mI56Yh3ofoOKI8mjpgq30Te5rk12E= -----END CERTIFICATE-----Generated at Fri Jul 4 11:14:03 2025 by rpki-client