$ rpki-client -vvf rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft File: vBeIK_xKhjChu_avBlGLkLpNFoo.mft (raw, json) Hash identifier: i3WLMQw1IUY6VuyypcMmeOxkH5FoJ2O0/snUUz2WxxI= Subject key identifier: 9E:49:10:2F:22:E8:A6:BA:D3:1D:3E:25:78:C1:F3:A0:A6:59:B3:65 Authority key identifier: BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A Certificate issuer: /CN=A912FDDD/serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft Manifest number: 012B Signing time: Sat 23 Aug 2025 04:45:15 +0000 Manifest this update: Sat 23 Aug 2025 04:45:15 +0000 Manifest next update: Sat 30 Aug 2025 04:45:15 +0000 Files and hashes: 1: vBeIK_xKhjChu_avBlGLkLpNFoo.crl (hash: iFRj2uzEkqTn1mWM6kLAweV/5wn4pUmGFvpahVvd4dY=) 2: 744F6602B5B511EEACE32B4DC4F9AE02.roa (hash: MNtM9pXu4p6v7Z7f6/Wop8L0VMv9VFX8mmGYuSjaQTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FDDD, serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A Validity Not Before: Aug 23 04:45:15 2025 GMT Not After : Aug 30 04:45:15 2025 GMT Subject: CN=68a9475b-9888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4b:8e:43:1e:46:25:18:15:02:c2:50:3f:37: a4:c7:69:7c:b8:ef:10:fd:a5:6e:02:08:cd:1f:1d: 0f:9e:19:9d:5b:fb:9f:a3:24:9e:22:f9:30:ea:91: 5e:c6:4a:0d:1e:ba:84:98:e7:cb:14:1d:23:8a:e8: 14:49:9c:3f:51:7f:24:89:92:ff:47:22:6c:d6:c6: 9a:82:8e:a0:63:7e:c2:a6:3f:26:59:73:5a:a7:83: 66:25:87:60:f3:49:b7:c7:ab:f7:af:db:a1:12:3d: f8:6b:ab:55:9a:78:30:2d:f2:7b:cb:aa:3f:2e:07: 78:bd:58:2f:d7:e3:21:f5:4c:a9:e0:1d:be:f5:3e: c6:4b:be:71:90:84:10:a5:00:dc:3d:aa:2d:12:d9: b3:45:1e:73:14:ec:4c:c3:6a:86:63:c3:22:e7:83: c1:80:23:0e:7f:b7:48:83:e3:16:54:5b:8d:2e:72: 47:d8:c2:97:d5:28:42:ac:6f:0e:f5:c6:d9:83:9e: 13:7c:e5:69:23:d7:d9:c5:c9:7a:20:fc:a4:f6:6a: bb:15:d5:94:66:79:b3:7a:9e:84:14:c5:f9:a6:2a: 85:26:ff:79:2e:15:3f:d7:93:46:b3:f9:ac:57:e4: e9:41:9f:b6:bc:6b:0f:f5:5d:b8:00:b9:32:be:0f: f2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:49:10:2F:22:E8:A6:BA:D3:1D:3E:25:78:C1:F3:A0:A6:59:B3:65 X509v3 Authority Key Identifier: keyid:BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:1c:5c:21:c1:cb:f0:d6:3c:52:cc:8d:26:cd:0a:45:46:5a: 60:dd:2c:7f:e6:c8:b2:f3:82:0a:28:6c:7c:66:42:ae:4b:0e: 67:1f:51:21:c0:26:11:ae:ec:a4:12:ff:c5:db:b4:1d:18:cf: 43:fa:7d:9c:3d:01:f5:43:45:67:e4:bf:c3:ac:39:ab:8c:a9: 96:1a:ca:81:9c:4c:01:7a:52:f3:f6:b0:19:70:5f:40:36:7e: b5:86:11:de:9c:c6:b3:34:30:1d:2c:05:fc:5b:9e:6a:ee:5b: 82:55:38:6b:2a:9c:08:60:3c:e0:5a:07:f2:6d:fb:53:e2:8b: e2:1a:e5:1c:62:eb:f9:23:0c:d6:48:25:61:36:ed:ef:26:34: 46:c0:aa:a0:57:28:b2:3c:78:56:b7:a0:37:b6:24:c5:79:1a: e7:f7:95:e4:6d:ae:32:0b:a1:eb:4a:89:f2:13:54:19:4f:55: 2b:6e:7b:34:e9:f0:5c:80:e5:75:27:0a:1c:87:23:3d:d4:2d: 7a:c7:40:2c:27:17:e5:70:88:ab:4a:1a:f7:03:37:3d:b4:70: 58:51:6f:d9:b7:93:1e:2c:3b:e1:62:df:ce:0d:2e:d6:90:5a: d6:86:72:d2:38:6a:b8:83:8d:76:0c:3a:8e:ae:cc:1b:2f:c7: 50:31:be:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZEREQxMTAvBgNVBAUTKEJDMTc4ODJCRkM0QTg2MzBBMUJCRjZBRjA2NTE4Qjkw QkE0RDE2OEEwHhcNMjUwODIzMDQ0NTE1WhcNMjUwODMwMDQ0NTE1WjAYMRYwFAYD VQQDEw02OGE5NDc1Yi05ODg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0uOQx5GJRgVAsJQPzekx2l8uO8Q/aVuAgjNHx0PnhmdW/ufoySeIvkw6pFe xkoNHrqEmOfLFB0jiugUSZw/UX8kiZL/RyJs1saago6gY37Cpj8mWXNap4NmJYdg 80m3x6v3r9uhEj34a6tVmngwLfJ7y6o/Lgd4vVgv1+Mh9Uyp4B2+9T7GS75xkIQQ pQDcPaotEtmzRR5zFOxMw2qGY8Mi54PBgCMOf7dIg+MWVFuNLnJH2MKX1ShCrG8O 9cbZg54TfOVpI9fZxcl6IPyk9mq7FdWUZnmzep6EFMX5piqFJv95LhU/15NGs/ms V+TpQZ+2vGsP9V24ALkyvg/yCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5JEC8i 6Ka60x0+JXjB86CmWbNlMB8GA1UdIwQYMBaAFLwXiCv8SoYwobv2rwZRi5C6TRaK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkRERC9FQ0RFQTFGNkI1 QjQxMUVFQjdFNzBDNENDNEY5QUUwMi92QmVJS194S2hqQ2h1X2F2QmxHTGtMcE5G b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZCZUlLX3hLaGpDaHVfYXZCbEdMa0xwTkZvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkRERC9FQ0RFQTFGNkI1QjQxMUVFQjdFNzBDNENDNEY5QUUwMi92QmVJS194S2hq Q2h1X2F2QmxHTGtMcE5Gb28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFHFwhwcvw1jxSzI0mzQpFRlpg3Sx/5siy84IKKGx8ZkKuSw5nH1Eh wCYRruykEv/F27QdGM9D+n2cPQH1Q0Vn5L/DrDmrjKmWGsqBnEwBelLz9rAZcF9A Nn61hhHenMazNDAdLAX8W55q7luCVThrKpwIYDzgWgfybftT4oviGuUcYuv5IwzW SCVhNu3vJjRGwKqgVyiyPHhWt6A3tiTFeRrn95Xkba4yC6HrSonyE1QZT1Urbns0 6fBcgOV1JwochyM91C16x0AsJxflcIirShr3Azc9tHBYUW/Zt5MeLDvhYt/ODS7W kFrWhnLSOGq4g412DDqOrswbL8dQMb6T -----END CERTIFICATE-----Generated at Sat Aug 23 13:12:35 2025 by rpki-client