$ rpki-client -vvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft File: vadiHhrG4FsLoMLvFUF0yL5cE7k.mft (raw, json) Hash identifier: plorqU+jhSm56xmtxath6+YwdKPcwx/kVAnzH8fmle0= Subject key identifier: 17:B0:81:F8:BB:F4:BE:AD:7A:BC:39:7B:9B:AE:C9:A7:7C:55:F1:73 Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 Certificate issuer: /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft Manifest number: 01E8 Signing time: Sun 29 Jun 2025 01:47:53 +0000 Manifest this update: Sun 29 Jun 2025 01:47:52 +0000 Manifest next update: Sun 06 Jul 2025 01:47:52 +0000 Files and hashes: 1: vadiHhrG4FsLoMLvFUF0yL5cE7k.crl (hash: XAJa0VIM/LQBb1vbHU3qxEShoHybbYnBGK/xl7yzULY=) 2: 673F4DC6894911EEB032426EC4F9AE02.roa (hash: A4cWT1FQnbB1RV9fDjJNCe1bIriG2tb4PlUO0o2Lg90=) 3: A8A932CC894911EE8CA8D26EC4F9AE02.roa (hash: eI5qe3WuZ3ca7j939pJeQIuLSMWClo4MltkC7KKSMl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 01:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912885B, serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Validity Not Before: Jun 29 01:47:52 2025 GMT Not After : Jul 6 01:47:52 2025 GMT Subject: CN=68609b49-a691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cc:b7:0d:d1:39:35:51:4e:64:4f:e9:62:7f: 3c:25:7f:48:cb:fe:4d:68:6b:58:28:d7:89:2a:0b: 6d:49:ef:f8:14:f4:9e:9e:75:fb:01:ff:a7:39:03: 97:a2:69:5d:e9:e9:b1:bb:2f:a2:e0:78:53:5c:b2: 72:2f:ec:64:68:12:b4:7d:eb:24:26:57:4b:9e:d8: cb:5b:27:89:5d:1b:65:e7:4e:cb:cb:d7:47:eb:90: 6c:54:34:c4:87:e2:98:5e:58:10:e3:17:f5:45:21: 15:e4:3b:96:9f:6a:ed:cc:69:3e:22:c8:f4:fc:eb: ec:e9:cd:50:4d:4e:cb:1b:44:c8:b3:c3:a0:bc:32: 54:50:47:05:25:64:f2:60:18:c0:55:c7:82:d5:31: 79:45:e1:a3:ae:56:90:72:de:f8:22:66:3b:e8:4f: 46:2c:29:1d:b5:5f:84:b0:8c:a4:42:dd:f9:08:90: 44:f6:8f:00:05:d6:80:b6:2c:1a:ef:66:70:3c:ce: 67:f6:69:4d:4d:e4:1d:84:91:6a:1d:64:ec:42:fe: 7c:51:ff:90:40:d0:10:ff:80:d5:dd:df:bf:b2:75: f0:a5:42:18:98:05:a9:96:34:6d:76:23:f8:ef:6e: e1:84:d9:72:29:20:e8:dd:c3:86:64:9d:8c:66:e9: a5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B0:81:F8:BB:F4:BE:AD:7A:BC:39:7B:9B:AE:C9:A7:7C:55:F1:73 X509v3 Authority Key Identifier: keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:eb:fe:4c:b8:2c:24:04:28:46:f6:6c:96:65:0a:e6:6e:4e: 26:3b:fd:a3:eb:54:d8:bf:c3:46:9a:e6:57:a5:41:97:1f:37: de:2b:5e:93:e9:a8:b2:c6:5b:f7:25:bd:04:67:2b:90:bd:a7: 8f:98:91:5a:bc:fe:ac:8a:5e:54:88:35:e6:45:f6:4c:89:72: 94:b6:97:3a:63:8f:38:76:6a:25:0d:aa:98:fc:7b:4b:35:34: 4e:54:80:d9:cc:f4:26:46:78:30:23:a6:71:f6:de:ea:54:84: 35:e7:80:68:b1:d1:f3:79:d1:89:f7:54:1c:13:e0:cb:22:98: 40:a2:97:be:94:17:5d:23:2d:7a:82:70:86:8d:58:5b:bf:e4: a1:eb:91:20:36:21:b7:2d:78:92:9d:02:b6:75:c6:c5:2b:f9: f4:95:3f:8f:f2:ca:ae:cc:b0:ae:09:6c:5f:b2:99:e7:6e:e8: 61:3a:13:9d:6b:7d:41:2f:b4:74:dc:da:65:e8:ff:01:02:62: 3d:45:b7:43:dc:0a:5e:53:ea:e3:56:e8:b4:4f:8b:ec:9d:3d: 2f:7d:e3:96:73:5e:eb:bf:bb:de:98:9a:5f:39:40:ec:7f:25: b3:84:f2:08:b9:4f:44:b6:d5:93:3d:11:f1:37:af:21:bc:96: a3:13:b3:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4NUIxMTAvBgNVBAUTKEJEQTc2MjFFMUFDNkUwNUIwQkEwQzJFRjE1NDE3NEM4 QkU1QzEzQjkwHhcNMjUwNjI5MDE0NzUyWhcNMjUwNzA2MDE0NzUyWjAYMRYwFAYD VQQDEw02ODYwOWI0OS1hNjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcy3DdE5NVFOZE/pYn88JX9Iy/5NaGtYKNeJKgttSe/4FPSennX7Af+nOQOX omld6emxuy+i4HhTXLJyL+xkaBK0feskJldLntjLWyeJXRtl507Ly9dH65BsVDTE h+KYXlgQ4xf1RSEV5DuWn2rtzGk+Isj0/Ovs6c1QTU7LG0TIs8OgvDJUUEcFJWTy YBjAVceC1TF5ReGjrlaQct74ImY76E9GLCkdtV+EsIykQt35CJBE9o8ABdaAtiwa 72ZwPM5n9mlNTeQdhJFqHWTsQv58Uf+QQNAQ/4DV3d+/snXwpUIYmAWpljRtdiP4 727hhNlyKSDo3cOGZJ2MZumlgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBewgfi7 9L6terw5e5uuyad8VfFzMB8GA1UdIwQYMBaAFL2nYh4axuBbC6DC7xVBdMi+XBO5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODg1Qi9BOTlDMTg5MDZD NzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRGc0xvTUx2RlVGMHlMNWNF N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZhZGlIaHJHNEZzTG9NTHZGVUYweUw1Y0U3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODg1Qi9BOTlDMTg5MDZDNzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRG c0xvTUx2RlVGMHlMNWNFN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx6/5MuCwkBChG9myWZQrmbk4mO/2j61TYv8NGmuZXpUGXHzfeK16T 6aiyxlv3Jb0EZyuQvaePmJFavP6sil5UiDXmRfZMiXKUtpc6Y484dmolDaqY/HtL NTROVIDZzPQmRngwI6Zx9t7qVIQ154BosdHzedGJ91QcE+DLIphAope+lBddIy16 gnCGjVhbv+Sh65EgNiG3LXiSnQK2dcbFK/n0lT+P8squzLCuCWxfspnnbuhhOhOd a31BL7R03Npl6P8BAmI9RbdD3ApeU+rjVui0T4vsnT0vfeOWc17rv7vemJpfOUDs fyWzhPIIuU9EttWTPRHxN68hvJajE7Py -----END CERTIFICATE-----Generated at Mon Jun 30 15:43:57 2025 by rpki-client