$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft File: vttNMcgBx4se-jSHY50DVayRNUs.mft (raw, json) Hash identifier: GUgy0tokXubDwxWBicHPs2yJzeZ1ER/5p+oJFMK/zHw= Subject key identifier: 37:1E:10:E5:C5:2C:CB:DC:EF:D0:20:91:E6:E8:5F:F6:C1:1E:57:E7 Authority key identifier: BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B Certificate issuer: /CN=A91CB063/serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft Manifest number: 77 Signing time: Sat 23 Aug 2025 07:08:20 +0000 Manifest this update: Sat 23 Aug 2025 07:08:20 +0000 Manifest next update: Sat 30 Aug 2025 07:08:20 +0000 Files and hashes: 1: vttNMcgBx4se-jSHY50DVayRNUs.crl (hash: DjTKmsLD8go0RYRSTqkJ6uaxBz10+MxIc305mWbKGvY=) 2: D99266FE4F7911F095AB2D46C4F9AE02.roa (hash: zM2x4PpXDO/09IRoY9uPWWkCUNv9rLsNP/d1xRjR15g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB063, serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B Validity Not Before: Aug 23 07:08:20 2025 GMT Not After : Aug 30 07:08:20 2025 GMT Subject: CN=68a968e4-ff20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ef:d5:51:ee:88:73:65:e4:b0:db:ed:32:83: 4a:b1:4e:5d:ef:be:24:6d:b8:59:51:ff:9a:b2:d4: 1a:eb:d8:51:e5:a3:91:c6:3c:dd:c9:69:4d:d5:ae: 2c:13:a4:44:28:4f:de:b4:b9:09:2b:40:51:e9:a2: 93:c0:e9:fc:cb:9c:00:c3:3b:b5:b2:cf:0f:0c:04: f1:e9:a4:61:bf:88:8d:0e:c6:a1:a0:39:c1:44:a9: a5:04:c9:03:ba:f1:60:ea:2e:df:39:fb:a4:2d:e0: ef:80:93:13:da:0c:43:36:41:55:02:06:71:16:34: dd:1d:23:32:bf:ef:f8:39:fd:52:64:03:9a:bf:3d: d4:66:d9:6a:bd:b1:74:03:0e:28:5e:53:33:c7:ae: 05:3f:4d:54:c9:17:14:9c:37:a8:32:81:15:dc:24: fc:dd:ab:85:57:f1:7a:1b:14:50:61:c2:c7:ef:95: fc:12:54:b5:db:5d:99:e4:c3:0a:70:bd:ad:c8:3b: 2c:47:31:02:b4:09:26:5a:7f:87:a6:58:cd:e5:15: ce:1a:97:f3:5e:7f:73:49:16:20:78:a3:57:05:d6: a8:3c:e8:40:4b:29:e6:9f:94:a2:71:7a:56:c7:2b: be:12:48:55:51:27:ad:bd:08:ba:74:9b:04:9d:7f: e5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1E:10:E5:C5:2C:CB:DC:EF:D0:20:91:E6:E8:5F:F6:C1:1E:57:E7 X509v3 Authority Key Identifier: keyid:BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:bd:10:8b:ac:86:20:09:78:79:30:2d:58:48:c1:33:b1:a7: 18:eb:e2:81:8f:e1:42:25:56:53:39:d5:71:c9:94:c3:9a:ad: 43:7c:b3:a1:db:6c:8d:53:87:ab:32:b3:b5:72:36:14:cd:1e: 7f:e9:a8:a5:8a:11:b6:fa:3a:a4:26:4a:b7:18:6c:45:1f:fc: f9:79:8a:76:20:37:9f:9a:7a:10:ef:d7:51:4a:1b:40:a3:fa: 66:c9:57:0b:6b:96:88:e8:d9:b1:5a:30:89:81:f9:2d:8d:4f: 96:1a:2f:ad:e5:2c:93:32:6c:76:30:73:dc:38:2b:70:c8:27: 56:ba:d1:6b:a6:12:2e:22:13:3e:90:be:62:4c:a5:e2:69:40: 75:ad:11:c9:3e:98:ad:56:35:b6:c6:22:f9:b0:b7:2f:21:af: cc:08:56:2b:db:22:a6:e9:50:a2:dc:91:f5:f1:39:38:eb:f8: 04:e7:a4:ad:4e:bb:7c:26:65:4e:dc:f5:82:23:f2:34:44:9f: 10:18:ba:19:3d:cb:86:0d:61:c1:23:9c:60:e4:aa:4e:e0:8f: 1c:ed:40:12:24:72:ab:a7:e6:a6:1b:fc:e3:3e:df:5d:b2:95: 02:f3:06:30:71:39:9a:ff:77:a3:1d:9e:65:a7:e9:77:1f:75: 64:38:e0:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjA2MzExMC8GA1UEBRMoQkVEQjREMzFDODAxQzc4QjFFRkEzNDg3NjM5RDAzNTVB QzkxMzU0QjAeFw0yNTA4MjMwNzA4MjBaFw0yNTA4MzAwNzA4MjBaMBgxFjAUBgNV BAMTDTY4YTk2OGU0LWZmMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDP79VR7ohzZeSw2+0yg0qxTl3vviRtuFlR/5qy1Brr2FHlo5HGPN3JaU3VriwT pEQoT960uQkrQFHpopPA6fzLnADDO7Wyzw8MBPHppGG/iI0OxqGgOcFEqaUEyQO6 8WDqLt85+6Qt4O+AkxPaDEM2QVUCBnEWNN0dIzK/7/g5/VJkA5q/PdRm2Wq9sXQD DiheUzPHrgU/TVTJFxScN6gygRXcJPzdq4VX8XobFFBhwsfvlfwSVLXbXZnkwwpw va3IOyxHMQK0CSZaf4emWM3lFc4al/Nef3NJFiB4o1cF1qg86EBLKeaflKJxelbH K74SSFVRJ629CLp0mwSdf+UTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNx4Q5cUs y9zv0CCR5uhf9sEeV+cwHwYDVR0jBBgwFoAUvttNMcgBx4se+jSHY50DVayRNUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCMDYzLzYzQjQ3NjAyRDZF RDExRUY5RDlCRjM2QUM0RjlBRTAyL3Z0dE5NY2dCeDRzZS1qU0hZNTBEVmF5Uk5V cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdnR0Tk1jZ0J4NHNlLWpTSFk1MERWYXlSTlVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC MDYzLzYzQjQ3NjAyRDZFRDExRUY5RDlCRjM2QUM0RjlBRTAyL3Z0dE5NY2dCeDRz ZS1qU0hZNTBEVmF5Uk5Vcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEq9EIushiAJeHkwLVhIwTOxpxjr4oGP4UIlVlM51XHJlMOarUN8s6Hb bI1Th6sys7VyNhTNHn/pqKWKEbb6OqQmSrcYbEUf/Pl5inYgN5+aehDv11FKG0Cj +mbJVwtrlojo2bFaMImB+S2NT5YaL63lLJMybHYwc9w4K3DIJ1a60WumEi4iEz6Q vmJMpeJpQHWtEck+mK1WNbbGIvmwty8hr8wIVivbIqbpUKLckfXxOTjr+ATnpK1O u3wmZU7c9YIj8jREnxAYuhk9y4YNYcEjnGDkqk7gjxztQBIkcqun5qYb/OM+312y lQLzBjBxOZr/d6MdnmWn6XcfdWQ44HA= -----END CERTIFICATE-----Generated at Sat Aug 23 20:27:10 2025 by rpki-client