$ rpki-client -vvf rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft File: Vg3ED_OlCfnv21Jg7huzhi222N8.mft (raw, json) Hash identifier: yd2kvdtVXafwpTywSiAcgoBNYLMO+ppE5ti//3X3LY8= Subject key identifier: D1:0A:74:28:2F:BF:11:74:05:70:9B:BA:91:62:D1:BF:44:AE:68:FD Authority key identifier: 56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF Certificate issuer: /CN=A912E926/serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft Manifest number: 018B Signing time: Thu 03 Jul 2025 03:36:28 +0000 Manifest this update: Thu 03 Jul 2025 03:36:28 +0000 Manifest next update: Thu 10 Jul 2025 03:36:27 +0000 Files and hashes: 1: Vg3ED_OlCfnv21Jg7huzhi222N8.crl (hash: VyMrIVJ1+FLzC+d5fRF6r+xYXwgDKkahOVA+4LszMos=) 2: 46BF7E7CFA0611ED802A1C29C4F9AE02.roa (hash: jnuMHWmzh0Mkxo/UqfQiHQK9zwVM6oBly72+HKRXMlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E926, serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF Validity Not Before: Jul 3 03:36:28 2025 GMT Not After : Jul 10 03:36:27 2025 GMT Subject: CN=6865fabc-62a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:49:ff:87:3f:09:46:fb:56:b2:bd:56:f7:8a: 16:0c:cc:70:59:eb:ef:4a:22:39:28:4a:12:94:70: 67:82:d8:ce:64:bc:88:fb:8c:15:f3:ab:59:d7:06: 92:ca:66:9b:6d:ee:57:68:da:6d:72:0a:76:a6:ea: ad:33:06:b4:ee:ae:82:9a:21:1f:dd:50:09:b6:18: 10:fa:4a:69:fa:cc:30:30:40:d4:f8:47:c0:08:f0: c0:a4:88:2e:90:a6:b9:9d:58:a8:4d:c2:e5:d1:af: e0:09:84:da:57:7e:c7:ea:4a:df:72:97:18:93:56: 66:c8:94:c1:29:e6:45:a9:d5:de:e6:dd:60:61:01: ea:88:da:ad:08:65:df:39:01:40:f6:e8:42:57:00: 94:5e:00:b8:e5:9f:5a:d7:81:a7:30:3d:ec:1a:72: e7:cd:fb:44:4b:be:fe:af:47:2a:64:8b:04:83:a5: 8b:3c:8c:13:82:94:99:c9:b2:c0:cd:b8:fe:87:aa: de:f4:5b:10:a2:88:f1:31:41:00:aa:97:2c:12:72: 0b:0d:1a:c4:9f:f5:39:6c:c1:67:dd:1d:56:51:ae: 3b:db:0a:45:44:83:63:34:e2:d4:f7:e9:c9:a4:2d: cf:91:b2:5c:d1:44:91:fc:1c:f3:eb:13:39:a7:b3: 2f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0A:74:28:2F:BF:11:74:05:70:9B:BA:91:62:D1:BF:44:AE:68:FD X509v3 Authority Key Identifier: keyid:56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ee:f3:82:5c:7a:c1:89:ed:b1:04:79:2a:8d:ba:34:f7:6a: 25:1a:2e:b6:17:30:b2:d5:69:4e:ad:48:bf:59:a0:d8:94:c8: 98:4a:cb:f2:3b:bf:80:bb:b5:e2:e2:95:04:c3:99:08:85:a0: 3b:61:12:d1:9f:30:83:f5:d5:a2:8d:22:6a:84:ef:0b:d2:b1: f5:10:d0:f4:f9:9b:84:33:9a:10:c7:ec:53:ad:d9:9b:ff:7c: 9c:7d:7b:10:83:15:aa:e8:ae:1c:41:20:e9:8f:7d:da:c3:15: a8:44:d8:da:db:f3:e4:ff:04:28:5f:f9:45:68:92:ec:06:90: 73:84:97:44:55:50:3c:0e:32:e0:10:07:48:b4:e1:ac:43:90: 2a:90:a1:91:5a:87:f4:ac:6b:19:2b:fe:9e:04:90:e7:53:cf: b8:b2:c6:29:b3:26:0f:fd:7d:91:d0:46:ca:65:56:f0:7d:5a: ba:9a:84:5e:95:1b:c8:b7:5f:72:45:9e:a5:4e:b1:b8:c1:41: 8d:d6:f4:63:13:63:30:69:46:71:5f:c1:65:f4:63:60:ca:3e: f4:17:f4:aa:55:1b:44:e1:33:a1:af:e5:08:28:5a:45:85:78: 80:e5:70:36:3b:12:f2:14:14:50:72:76:d5:56:71:e1:dc:79: 70:0e:69:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MjYxMTAvBgNVBAUTKDU2MERDNDBGRjNBNTA5RjlFRkRCNTI2MEVFMUJCMzg2 MkRCNkQ4REYwHhcNMjUwNzAzMDMzNjI4WhcNMjUwNzEwMDMzNjI3WjAYMRYwFAYD VQQDEw02ODY1ZmFiYy02MmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEn/hz8JRvtWsr1W94oWDMxwWevvSiI5KEoSlHBngtjOZLyI+4wV86tZ1waS ymabbe5XaNptcgp2puqtMwa07q6CmiEf3VAJthgQ+kpp+swwMEDU+EfACPDApIgu kKa5nVioTcLl0a/gCYTaV37H6krfcpcYk1ZmyJTBKeZFqdXe5t1gYQHqiNqtCGXf OQFA9uhCVwCUXgC45Z9a14GnMD3sGnLnzftES77+r0cqZIsEg6WLPIwTgpSZybLA zbj+h6re9FsQoojxMUEAqpcsEnILDRrEn/U5bMFn3R1WUa472wpFRINjNOLU9+nJ pC3PkbJc0USR/Bzz6xM5p7MvhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNEKdCgv vxF0BXCbupFi0b9Ermj9MB8GA1UdIwQYMBaAFFYNxA/zpQn579tSYO4bs4Ytttjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyNi84NjY3NkRBMEZB MDExMUVEQkFENzVEMjhDNEY5QUUwMi9WZzNFRF9PbENmbnYyMUpnN2h1emhpMjIy TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZnM0VEX09sQ2ZudjIxSmc3aHV6aGkyMjJOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyNi84NjY3NkRBMEZBMDExMUVEQkFENzVEMjhDNEY5QUUwMi9WZzNFRF9PbENm bnYyMUpnN2h1emhpMjIyTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL7vOCXHrBie2xBHkqjbo092olGi62FzCy1WlOrUi/WaDYlMiYSsvy O7+Au7Xi4pUEw5kIhaA7YRLRnzCD9dWijSJqhO8L0rH1END0+ZuEM5oQx+xTrdmb /3ycfXsQgxWq6K4cQSDpj33awxWoRNja2/Pk/wQoX/lFaJLsBpBzhJdEVVA8DjLg EAdItOGsQ5AqkKGRWof0rGsZK/6eBJDnU8+4ssYpsyYP/X2R0EbKZVbwfVq6moRe lRvIt19yRZ6lTrG4wUGN1vRjE2MwaUZxX8Fl9GNgyj70F/SqVRtE4TOhr+UIKFpF hXiA5XA2OxLyFBRQcnbVVnHh3HlwDmlP -----END CERTIFICATE-----Generated at Fri Jul 4 01:03:47 2025 by rpki-client