$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft File: M-VCXQNo-C_4W5uEf0EjitWNTlA.mft (raw, json) Hash identifier: EbeuPVJ366+7A8hgHXKuSAb+e8yNP5nMOaEQHVesVpA= Subject key identifier: E8:91:C8:FD:C7:A5:B6:15:A1:70:DD:49:20:61:4B:16:B7:67:08:E6 Authority key identifier: 33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50 Certificate issuer: /CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft Manifest number: 0111 Signing time: Thu 03 Jul 2025 05:07:15 +0000 Manifest this update: Thu 03 Jul 2025 05:07:14 +0000 Manifest next update: Thu 10 Jul 2025 05:07:14 +0000 Files and hashes: 1: M-VCXQNo-C_4W5uEf0EjitWNTlA.crl (hash: Dqm6SJqExNghdQTuNsOZTA7oJWebMzn+oZA6r6u1Ikw=) 2: D677E18AB9AF11EE97EEDB49C4F9AE02.roa (hash: LUJnGhbUriDz5PEXzwqHVqGRqenH5+Jp3evLId0QNQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD5A, serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50 Validity Not Before: Jul 3 05:07:14 2025 GMT Not After : Jul 10 05:07:14 2025 GMT Subject: CN=68661002-900f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c5:71:ec:f7:5d:62:cf:4f:cb:74:a9:c6:b5: bf:91:98:b0:c6:b6:b4:55:ac:aa:28:77:92:0e:df: 54:81:e9:f9:ba:34:4a:00:0a:97:79:06:65:eb:ef: 42:50:bb:cf:41:7b:b0:7c:84:33:37:25:d1:ab:5d: cc:d6:30:fa:a9:0d:0e:97:49:ff:a6:a3:0f:85:38: ae:8e:7f:d8:db:e4:e1:49:a1:b8:c1:48:51:c3:f4: ec:14:f6:ee:6c:d7:56:12:ff:2f:fd:e0:0d:fc:77: be:b0:1d:e4:72:8c:3b:0a:17:da:31:c7:2d:07:15: 07:69:19:06:e0:c0:3d:fe:27:1c:d5:2e:23:06:d5: 4f:1a:86:b2:ce:8c:9c:f9:7c:aa:6b:a9:45:82:80: d3:e2:b8:f2:50:2b:78:58:29:e8:00:3c:82:96:8b: 19:3e:09:38:08:61:04:2f:d3:f0:16:bf:09:17:e6: 73:d3:25:51:f5:33:28:3b:8c:72:d9:47:76:1f:0c: d6:95:f8:5e:cb:40:96:d9:78:c3:c2:84:f1:19:ac: da:79:70:7a:14:50:5b:4f:3d:8c:6a:e1:82:b0:62: 71:3e:f8:4c:a4:d2:f0:35:a5:31:0c:2f:28:86:f0: 6e:83:27:37:2d:ed:8a:5c:87:68:8d:db:f4:14:57: ce:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:91:C8:FD:C7:A5:B6:15:A1:70:DD:49:20:61:4B:16:B7:67:08:E6 X509v3 Authority Key Identifier: keyid:33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:67:58:1d:cf:f8:20:e5:42:e0:d7:b9:02:aa:fd:aa:24:77: c1:81:0c:07:f0:73:0d:3b:e4:7c:29:00:49:3b:e5:f5:a0:42: 09:78:d0:80:e7:db:97:65:c9:b8:ac:4d:8c:ca:56:6d:49:cb: b6:b9:f6:7d:71:2c:8a:45:e8:86:ed:ad:ac:51:e1:82:95:bc: 47:6b:10:2d:23:b1:29:cd:33:3b:5c:28:d1:78:4c:f2:09:45: ba:c2:87:c7:97:14:ee:c3:77:32:72:d3:c5:bd:b8:6d:37:01: e0:13:b3:ef:a6:c8:de:d5:e7:3e:19:69:b8:d9:02:d3:26:3c: 27:5e:7f:df:e2:c7:4a:0f:9c:6b:4b:6b:b9:d0:60:b9:f8:fd: 39:e4:b5:df:b7:6e:f8:01:83:59:aa:60:4b:45:c7:b4:de:d0: 80:dd:dd:72:4f:25:41:f8:53:39:6f:2b:c8:3a:07:f0:2c:33: 79:68:a1:52:84:32:09:01:da:11:88:ee:48:6f:ca:1e:18:c3: 03:95:2e:83:0a:c5:9d:2a:a1:72:9b:15:37:1a:51:35:ee:be: b7:c6:fa:83:c9:f5:29:32:c0:a6:1a:0a:92:26:44:56:d9:bd: 0d:31:e9:ba:ea:5e:a4:1d:7f:c0:6b:e6:d7:3a:1e:c7:6b:ea: ff:71:eb:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENUExMTAvBgNVBAUTKDMzRTU0MjVEMDM2OEY4MkZGODVCOUI4NDdGNDEyMzhB RDU4RDRFNTAwHhcNMjUwNzAzMDUwNzE0WhcNMjUwNzEwMDUwNzE0WjAYMRYwFAYD VQQDEw02ODY2MTAwMi05MDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8Vx7PddYs9Py3SpxrW/kZiwxra0VayqKHeSDt9Ugen5ujRKAAqXeQZl6+9C ULvPQXuwfIQzNyXRq13M1jD6qQ0Ol0n/pqMPhTiujn/Y2+ThSaG4wUhRw/TsFPbu bNdWEv8v/eAN/He+sB3kcow7ChfaMcctBxUHaRkG4MA9/icc1S4jBtVPGoayzoyc +Xyqa6lFgoDT4rjyUCt4WCnoADyClosZPgk4CGEEL9PwFr8JF+Zz0yVR9TMoO4xy 2Ud2HwzWlfhey0CW2XjDwoTxGazaeXB6FFBbTz2MauGCsGJxPvhMpNLwNaUxDC8o hvBugyc3Le2KXIdojdv0FFfOpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiRyP3H pbYVoXDdSSBhSxa3ZwjmMB8GA1UdIwQYMBaAFDPlQl0DaPgv+FubhH9BI4rVjU5Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ1QS81RkI3REMwOEI5 QUExMUVFQjBEQ0Q4MzRDNEY5QUUwMi9NLVZDWFFOby1DXzRXNXVFZjBFaml0V05U bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL00tVkNYUU5vLUNfNFc1dUVmMEVqaXRXTlRsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ1QS81RkI3REMwOEI5QUExMUVFQjBEQ0Q4MzRDNEY5QUUwMi9NLVZDWFFOby1D XzRXNXVFZjBFaml0V05UbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5Z1gdz/gg5ULg17kCqv2qJHfBgQwH8HMNO+R8KQBJO+X1oEIJeNCA 59uXZcm4rE2MylZtScu2ufZ9cSyKReiG7a2sUeGClbxHaxAtI7EpzTM7XCjReEzy CUW6wofHlxTuw3cyctPFvbhtNwHgE7Pvpsje1ec+GWm42QLTJjwnXn/f4sdKD5xr S2u50GC5+P055LXft274AYNZqmBLRce03tCA3d1yTyVB+FM5byvIOgfwLDN5aKFS hDIJAdoRiO5Ib8oeGMMDlS6DCsWdKqFymxU3GlE17r63xvqDyfUpMsCmGgqSJkRW 2b0NMem66l6kHX/Aa+bXOh7Ha+r/cetp -----END CERTIFICATE-----Generated at Thu Jul 3 22:55:15 2025 by rpki-client