$ rpki-client -vvf rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft File: vpHyHHoLwGQ389tbIUIIyHdO680.mft (raw, json) Hash identifier: w58Ybd0pTLTudSsnlGO1QASZYzaiS8VvAYULfDCQxgM= Subject key identifier: 9D:8E:A2:B0:F5:DA:A9:1C:DB:C1:26:2E:3D:49:44:A9:E1:88:7C:18 Authority key identifier: BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD Certificate issuer: /CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft Manifest number: 0140 Signing time: Sat 23 Aug 2025 04:34:13 +0000 Manifest this update: Sat 23 Aug 2025 04:34:12 +0000 Manifest next update: Sat 30 Aug 2025 04:34:12 +0000 Files and hashes: 1: vpHyHHoLwGQ389tbIUIIyHdO680.crl (hash: LLJj4S+56tebhDCfvYeotsfEh3yCl0IUsRppLI/ibcc=) 2: F2AB0C4A68C011EFB9196160C4F9AE02.roa (hash: DaPiCEmlAJvbaPsIVw3SLkMWbmEd02jwt+sb94Y5y+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CEBD, serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD Validity Not Before: Aug 23 04:34:12 2025 GMT Not After : Aug 30 04:34:12 2025 GMT Subject: CN=68a944c4-5da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:90:40:ec:bf:0c:fb:ce:65:f0:cf:06:89:27: 9f:c1:5b:3b:b3:4e:d6:00:e7:40:5c:0e:19:20:2f: 9e:a3:62:fd:50:e0:ec:3e:c7:78:85:97:d2:60:18: b8:d1:e5:b4:cb:60:e6:90:9c:42:3b:af:bb:55:dc: f3:82:9d:89:fa:21:e8:fc:3d:ab:4d:b4:ce:e5:5c: b9:c8:2a:3a:01:3e:19:20:66:0e:62:92:98:b3:52: 08:8f:9e:c4:45:d4:4b:88:24:a7:29:b7:93:49:94: bc:aa:7f:8c:ac:ca:af:d2:e6:b1:98:cc:1a:bb:20: 38:3b:c0:b0:4f:b7:ed:d7:7a:f8:45:71:35:a6:e6: b7:8a:01:df:ec:54:1f:d8:e6:4c:fb:5c:da:40:46: 19:cb:3e:5d:c2:cc:ad:d4:6c:10:4a:e9:88:2d:a2: db:18:7a:9f:f5:26:9f:79:be:23:c9:e8:4f:89:97: 85:55:22:01:74:db:09:09:a8:03:8e:a2:c7:db:8c: 3f:a4:1e:70:e1:ba:4a:c4:87:64:ef:c1:b1:0f:f2: 70:d2:0b:28:07:8b:db:b3:fb:e2:42:f5:14:81:92: 31:0a:b0:c1:39:9b:f9:b3:4d:79:c3:c5:95:d1:0e: 0f:b2:bf:83:0d:e9:99:8b:19:ab:2b:77:3f:fd:93: 6d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8E:A2:B0:F5:DA:A9:1C:DB:C1:26:2E:3D:49:44:A9:E1:88:7C:18 X509v3 Authority Key Identifier: keyid:BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:9f:3a:f0:16:2a:01:d5:5b:dc:79:61:cf:d2:6e:03:6a:52: 72:e2:45:b8:29:f0:86:ab:c8:5d:92:aa:ad:b0:a9:8a:05:ed: dc:4b:6d:af:8e:53:a6:c3:ee:df:d8:5a:73:26:22:99:a8:04: 78:b4:21:9b:50:11:f7:97:e7:a5:5c:6e:5b:56:99:a9:80:11: 5a:c5:f7:30:46:d5:4b:df:c4:55:ad:83:f8:5d:b8:ca:0d:e5: 0e:af:dd:d5:04:39:cf:0c:00:ac:c0:d0:f3:af:89:71:d3:ee: e5:34:28:bb:6a:08:cb:b7:60:f7:fc:d3:ee:2f:7f:89:3b:7f: a8:56:86:2d:b5:2e:e8:00:bf:5e:2e:41:2e:bd:7c:38:33:6b: d8:5e:a0:89:78:aa:ca:b0:7a:ae:18:bd:22:43:99:55:df:e3: 72:ff:8f:26:b9:24:e7:b8:12:b4:86:58:3a:c6:c2:a0:4e:d9: d5:54:3e:27:ff:92:3b:df:61:9c:4d:06:69:8b:7a:10:4a:a4: 41:94:c6:e0:74:11:1a:32:54:08:74:b5:b8:1b:87:f4:4e:6f: 5c:03:e6:ca:74:35:cc:b6:29:59:cf:3d:7f:13:fb:f7:06:fd: 8c:65:f6:7b:c2:42:24:c6:07:20:95:bc:67:b7:db:9d:87:02: 0a:e1:b6:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFQkQxMTAvBgNVBAUTKEJFOTFGMjFDN0EwQkMwNjQzN0YzREI1QjIxNDIwOEM4 Nzc0RUVCQ0QwHhcNMjUwODIzMDQzNDEyWhcNMjUwODMwMDQzNDEyWjAYMRYwFAYD VQQDEw02OGE5NDRjNC01ZGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmJBA7L8M+85l8M8GiSefwVs7s07WAOdAXA4ZIC+eo2L9UODsPsd4hZfSYBi4 0eW0y2DmkJxCO6+7Vdzzgp2J+iHo/D2rTbTO5Vy5yCo6AT4ZIGYOYpKYs1IIj57E RdRLiCSnKbeTSZS8qn+MrMqv0uaxmMwauyA4O8CwT7ft13r4RXE1pua3igHf7FQf 2OZM+1zaQEYZyz5dwsyt1GwQSumILaLbGHqf9Safeb4jyehPiZeFVSIBdNsJCagD jqLH24w/pB5w4bpKxIdk78GxD/Jw0gsoB4vbs/viQvUUgZIxCrDBOZv5s015w8WV 0Q4Psr+DDemZixmrK3c//ZNtiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2OorD1 2qkc28EmLj1JRKnhiHwYMB8GA1UdIwQYMBaAFL6R8hx6C8BkN/PbWyFCCMh3TuvN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0VCRC9DQ0Q4MTQyODk5 QzExMUVFOUExRkRFMUZDNEY5QUUwMi92cEh5SEhvTHdHUTM4OXRiSVVJSXlIZE82 ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZwSHlISG9Md0dRMzg5dGJJVUlJeUhkTzY4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0VCRC9DQ0Q4MTQyODk5QzExMUVFOUExRkRFMUZDNEY5QUUwMi92cEh5SEhvTHdH UTM4OXRiSVVJSXlIZE82ODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBunzrwFioB1VvceWHP0m4DalJy4kW4KfCGq8hdkqqtsKmKBe3cS22v jlOmw+7f2FpzJiKZqAR4tCGbUBH3l+elXG5bVpmpgBFaxfcwRtVL38RVrYP4XbjK DeUOr93VBDnPDACswNDzr4lx0+7lNCi7agjLt2D3/NPuL3+JO3+oVoYttS7oAL9e LkEuvXw4M2vYXqCJeKrKsHquGL0iQ5lV3+Ny/48muSTnuBK0hlg6xsKgTtnVVD4n /5I732GcTQZpi3oQSqRBlMbgdBEaMlQIdLW4G4f0Tm9cA+bKdDXMtilZzz1/E/v3 Bv2MZfZ7wkIkxgcglbxnt9udhwIK4bYB -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:59 2025 by rpki-client