$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft File: RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft (raw, json) Hash identifier: 7kMyaTeh7dX+0J9WL+/Xa9n6LNsWOuM4NYAYsrv3aps= Subject key identifier: 22:88:DA:32:0E:54:4F:AF:FF:E4:F4:7A:2F:DB:BF:F2:79:B2:14:5A Authority key identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D Certificate issuer: /CN=A91FF1CC/serialNumber=446FAF923BEBAF96357287FE250991C75491454D Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft Manifest number: 66 Signing time: Sat 23 Aug 2025 07:19:58 +0000 Manifest this update: Sat 23 Aug 2025 07:19:57 +0000 Manifest next update: Sat 30 Aug 2025 07:19:57 +0000 Files and hashes: 1: RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl (hash: 02ajm3eopFn85V1wKUdSpZ8UTI14fEt3GnK3FTo94uw=) 2: 1ED36EFC590C11F0913BCB35C4F9AE02.roa (hash: WTYmLvNpyq/A5Kbra5mtKRBFCjY1e4fS3rGmshvrNGY=) 3: B7E221E4024311F0BD990F64C4F9AE02.roa (hash: d1zImNClufU6mQa0qsoJOx/6gPAzww6pSPXhwifVLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=446FAF923BEBAF96357287FE250991C75491454D Validity Not Before: Aug 23 07:19:57 2025 GMT Not After : Aug 30 07:19:57 2025 GMT Subject: CN=68a96b9e-464c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:25:0a:ec:4c:8e:b6:b7:eb:df:c0:17:a5: 2f:21:18:45:59:de:0d:31:5c:a9:bc:aa:11:02:1b: b9:4a:d2:5f:84:0f:92:ff:70:ea:9d:84:52:c4:f6: 53:5d:c3:10:3a:80:6c:e1:c5:7f:06:6a:2a:1f:31: 43:ee:c3:27:0d:db:7b:6f:5a:c4:26:94:52:15:53: 1e:83:a3:e9:e6:3e:c2:67:be:9c:f9:49:be:2d:93: 2d:08:97:c6:e8:88:ac:48:1d:e6:5d:8d:ec:67:ce: db:04:9c:c8:55:72:bc:02:e7:2c:03:f3:3a:b5:3c: 6d:17:98:c7:b8:b3:86:1e:c5:73:25:11:ab:c8:42: 88:e9:ab:09:41:c7:0d:2e:af:1f:86:a3:9f:a0:0e: 11:07:dc:b9:4a:f1:a2:7c:b2:0b:40:21:d2:e2:c3: 8d:80:60:24:2b:8a:b4:96:6e:a8:3b:0c:49:c5:10: 2c:3d:5e:79:bc:55:4a:15:5d:0d:4e:4c:20:bb:b1: 83:92:57:fe:ba:3b:35:06:b6:9c:90:2d:d1:9e:94: 69:85:1a:6e:fe:cb:29:0b:5e:44:85:4a:15:8f:2f: 7c:1c:23:52:f0:e4:ae:38:be:aa:b7:32:aa:8a:a1: 3a:a8:96:b0:8d:62:d5:c7:da:45:19:db:d4:d4:ce: 55:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:88:DA:32:0E:54:4F:AF:FF:E4:F4:7A:2F:DB:BF:F2:79:B2:14:5A X509v3 Authority Key Identifier: keyid:44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:25:71:ea:25:fb:e5:81:b4:42:a0:2b:98:47:2c:14:5d:1f: bd:3f:47:0d:fd:92:8e:52:c5:0e:e2:8a:27:78:db:9b:0c:c9: 73:d5:1c:18:b8:48:bb:29:1a:dd:40:6d:2d:e9:9c:9a:93:17: 0f:d5:24:d2:59:62:96:14:06:72:9a:15:8b:b3:51:be:a5:8e: 2a:85:a4:a5:66:68:ef:07:d0:84:46:06:42:68:be:22:19:be: 74:b9:d3:c1:28:24:37:33:af:b4:5e:17:17:24:6c:00:bf:3d: 51:46:87:cc:71:4b:0b:18:7e:3a:ed:37:ba:b1:66:71:e2:2d: 5d:b9:a6:11:20:b7:9f:e8:b5:b2:ad:07:f7:28:b5:3b:9a:29: d0:5a:aa:cd:76:74:f7:b9:cd:89:43:58:33:e2:4c:20:da:a6: c8:8c:ed:90:c4:4e:1a:7f:04:f5:ba:ce:b7:1f:34:af:45:c0: b2:72:11:14:34:5d:06:e1:6d:bc:3d:80:31:30:1d:30:8c:c8: 91:24:c9:30:b7:31:65:3c:12:26:79:f6:b1:6e:83:b3:15:75: 58:ed:3d:b2:76:9f:f1:b5:f8:13:8d:42:8c:a2:7c:0a:e6:c8: 12:06:bd:c6:9f:dc:09:90:c6:0f:e2:72:1a:2d:e9:73:f6:7d: e1:be:75:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjFDQzExMC8GA1UEBRMoNDQ2RkFGOTIzQkVCQUY5NjM1NzI4N0ZFMjUwOTkxQzc1 NDkxNDU0RDAeFw0yNTA4MjMwNzE5NTdaFw0yNTA4MzAwNzE5NTdaMBgxFjAUBgNV BAMTDTY4YTk2YjllLTQ2NGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxzCUK7EyOtrfr38AXpS8hGEVZ3g0xXKm8qhECG7lK0l+ED5L/cOqdhFLE9lNd wxA6gGzhxX8GaiofMUPuwycN23tvWsQmlFIVUx6Do+nmPsJnvpz5Sb4tky0Il8bo iKxIHeZdjexnztsEnMhVcrwC5ywD8zq1PG0XmMe4s4YexXMlEavIQojpqwlBxw0u rx+Go5+gDhEH3LlK8aJ8sgtAIdLiw42AYCQrirSWbqg7DEnFECw9Xnm8VUoVXQ1O TCC7sYOSV/66OzUGtpyQLdGelGmFGm7+yykLXkSFShWPL3wcI1Lw5K44vqq3MqqK oTqolrCNYtXH2kUZ29TUzlU/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIojaMg5U T6//5PR6L9u/8nmyFFowHwYDVR0jBBgwFoAURG+vkjvrr5Y1cof+JQmRx1SRRU0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMUNDLzNBRkMzM0UyRUY2 MzExRUZCRjY0QUI2QUM0RjlBRTAyL1JHLXZranZycjVZMWNvZi1KUW1SeDFTUlJV MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkctdmtqdnJyNVkxY29mLUpRbVJ4MVNSUlUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG MUNDLzNBRkMzM0UyRUY2MzExRUZCRjY0QUI2QUM0RjlBRTAyL1JHLXZranZycjVZ MWNvZi1KUW1SeDFTUlJVMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGwlceol++WBtEKgK5hHLBRdH70/Rw39ko5SxQ7iiid425sMyXPVHBi4 SLspGt1AbS3pnJqTFw/VJNJZYpYUBnKaFYuzUb6ljiqFpKVmaO8H0IRGBkJoviIZ vnS508EoJDczr7ReFxckbAC/PVFGh8xxSwsYfjrtN7qxZnHiLV25phEgt5/otbKt B/cotTuaKdBaqs12dPe5zYlDWDPiTCDapsiM7ZDEThp/BPW6zrcfNK9FwLJyERQ0 XQbhbbw9gDEwHTCMyJEkyTC3MWU8EiZ59rFug7MVdVjtPbJ2n/G1+BONQoyifArm yBIGvcaf3AmQxg/ichot6XP2feG+dUE= -----END CERTIFICATE-----Generated at Sat Aug 23 19:34:34 2025 by rpki-client