$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft File: vpHAXiGMfmbqb5T50kV3cEGRveI.mft (raw, json) Hash identifier: QX4blP7sdVltb9dVRLdmA5Yfg1AnyOrVLD2eWWkldvI= Subject key identifier: 63:65:F3:4E:06:4F:D6:28:A5:62:11:1F:44:72:F9:62:F5:BB:1E:E9 Authority key identifier: BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2 Certificate issuer: /CN=A912FCBB/serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft Manifest number: AC Signing time: Thu 03 Jul 2025 06:15:30 +0000 Manifest this update: Thu 03 Jul 2025 06:15:29 +0000 Manifest next update: Thu 10 Jul 2025 06:15:29 +0000 Files and hashes: 1: vpHAXiGMfmbqb5T50kV3cEGRveI.crl (hash: cPzucA7sDGWXJoGo8PXRm6xfY9W+gTwLZGCw3eeIwGQ=) 2: 8F80C48E531211EFAB0B8726C4F9AE02.roa (hash: kqqxAXnrRR7qW3plZHXyG8tkzcmd2G3d0enNBzRXcMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB, serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2 Validity Not Before: Jul 3 06:15:29 2025 GMT Not After : Jul 10 06:15:29 2025 GMT Subject: CN=68662002-6709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8f:9c:c7:b3:2b:76:b2:0f:06:f9:53:0b:a3: db:ed:b6:9a:f3:e2:f3:b6:a8:ac:2a:45:cb:f8:a4: 25:22:6e:5d:f5:2b:68:a3:45:a2:4c:c4:a6:74:54: 3f:5a:de:52:a4:f3:56:cb:c5:2e:1e:25:6b:7f:79: 2c:80:40:3f:0b:c9:ea:bb:a3:ca:f4:be:80:87:62: af:ed:bd:a5:19:20:ff:cc:bf:93:77:e3:4f:11:3d: 7c:c5:68:a2:33:b8:d0:8a:29:01:04:41:45:63:e9: d0:0c:dc:42:29:f1:95:ab:6e:81:51:23:d3:b6:82: ae:7e:6c:7a:01:17:9a:58:0e:0a:b9:ab:39:2a:41: da:60:d4:34:9a:23:9b:11:7a:83:02:64:5b:ca:71: d2:71:64:b0:f3:7f:03:82:e5:96:d9:aa:18:b7:5b: 10:c3:9d:48:55:fa:b3:3d:c6:81:5a:a1:0b:d7:f9: 6e:dc:a6:60:16:9a:65:2c:17:58:05:53:d3:34:0b: 55:1f:af:01:c4:e0:84:24:9a:df:60:5e:7f:7c:93: c5:31:37:5c:3b:f0:31:30:33:d2:79:be:c2:6a:be: 55:eb:26:0c:50:d3:8d:ae:b4:4a:ef:00:bb:79:91: c5:d6:0b:e6:c1:c8:1a:82:13:4b:20:64:7c:48:3c: f5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:65:F3:4E:06:4F:D6:28:A5:62:11:1F:44:72:F9:62:F5:BB:1E:E9 X509v3 Authority Key Identifier: keyid:BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:6c:9b:69:1d:34:68:6d:5f:81:0e:a0:e9:8a:54:06:08:19: 56:8d:f5:e2:a5:df:13:05:c6:2c:47:3d:01:88:35:12:be:b4: 32:65:d6:67:54:2e:2b:9c:ef:77:a7:c3:c0:31:c2:50:da:b4: ad:92:c1:0f:23:71:fc:0f:0b:df:8c:f6:fc:13:14:ff:8f:63: e7:f6:17:fa:82:06:b1:83:93:aa:84:50:b8:1d:1d:46:18:2a: 65:af:0e:34:4e:a2:78:4f:fc:9d:8d:ea:34:bc:d8:25:fb:65: 61:a2:6f:ee:9f:03:b5:89:b8:9d:6b:bc:8f:f6:59:53:86:41: 37:98:5b:03:cc:b6:b1:18:54:bc:f4:4c:c3:9a:94:d1:f0:c4: 58:c1:11:3f:2e:04:87:b6:56:28:69:81:82:94:82:e3:81:ac: 13:ab:7e:36:bd:50:c4:67:bc:5e:db:2f:31:18:ab:b4:98:53: fe:1e:a3:c4:51:c2:62:75:bb:81:75:2b:77:79:f6:72:44:40: a8:01:fd:ef:8e:07:84:0e:c6:e4:f1:ca:3b:d9:57:bc:80:f5: 3a:17:ef:d3:1c:01:ab:28:01:94:eb:e3:8d:6a:37:0b:ad:57: 4d:f0:84:11:2e:3d:04:66:a2:b7:b1:d6:3b:1a:c8:6e:22:f4: 68:1e:83:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDQkIxMTAvBgNVBAUTKEJFOTFDMDVFMjE4QzdFNjZFQTZGOTRGOUQyNDU3Nzcw NDE5MUJERTIwHhcNMjUwNzAzMDYxNTI5WhcNMjUwNzEwMDYxNTI5WjAYMRYwFAYD VQQDEw02ODY2MjAwMi02NzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0I+cx7MrdrIPBvlTC6Pb7baa8+LztqisKkXL+KQlIm5d9Stoo0WiTMSmdFQ/ Wt5SpPNWy8UuHiVrf3ksgEA/C8nqu6PK9L6Ah2Kv7b2lGSD/zL+Td+NPET18xWii M7jQiikBBEFFY+nQDNxCKfGVq26BUSPTtoKufmx6AReaWA4Kuas5KkHaYNQ0miOb EXqDAmRbynHScWSw838DguWW2aoYt1sQw51IVfqzPcaBWqEL1/lu3KZgFpplLBdY BVPTNAtVH68BxOCEJJrfYF5/fJPFMTdcO/AxMDPSeb7Car5V6yYMUNONrrRK7wC7 eZHF1gvmwcgaghNLIGR8SDz1WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNl804G T9YopWIRH0Ry+WL1ux7pMB8GA1UdIwQYMBaAFL6RwF4hjH5m6m+U+dJFd3BBkb3i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81NEQyM0Y0NjUz MEYxMUVGOTlDODhEMEZDNEY5QUUwMi92cEhBWGlHTWZtYnFiNVQ1MGtWM2NFR1J2 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZwSEFYaUdNZm1icWI1VDUwa1YzY0VHUnZlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNCQi81NEQyM0Y0NjUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi92cEhBWGlHTWZt YnFiNVQ1MGtWM2NFR1J2ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcbJtpHTRobV+BDqDpilQGCBlWjfXipd8TBcYsRz0BiDUSvrQyZdZn VC4rnO93p8PAMcJQ2rStksEPI3H8DwvfjPb8ExT/j2Pn9hf6ggaxg5OqhFC4HR1G GCplrw40TqJ4T/ydjeo0vNgl+2Vhom/unwO1ibida7yP9llThkE3mFsDzLaxGFS8 9EzDmpTR8MRYwRE/LgSHtlYoaYGClILjgawTq342vVDEZ7xe2y8xGKu0mFP+HqPE UcJidbuBdSt3efZyRECoAf3vjgeEDsbk8co72Ve8gPU6F+/THAGrKAGU6+ONajcL rVdN8IQRLj0EZqK3sdY7GshuIvRoHoOm -----END CERTIFICATE-----Generated at Thu Jul 3 23:42:31 2025 by rpki-client