$ rpki-client -vvf rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft File: vhgzygFCXO9HWUXxmZieZUOzHmI.mft (raw, json) Hash identifier: Zy2/GTMSaNXxxwBIcPrvcr6UgC8fY/nUPZLXFO24P+A= Subject key identifier: F6:4D:04:07:8D:05:F5:21:7F:F9:A1:28:31:12:BE:CD:51:7A:8D:CC Authority key identifier: BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62 Certificate issuer: /CN=A91382E4/serialNumber=BE1833CA01425CEF475945F199989E6543B31E62 Certificate serial: 032D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft Manifest number: 0326 Signing time: Tue 01 Jul 2025 02:07:39 +0000 Manifest this update: Tue 01 Jul 2025 02:07:38 +0000 Manifest next update: Tue 08 Jul 2025 02:07:38 +0000 Files and hashes: 1: vhgzygFCXO9HWUXxmZieZUOzHmI.crl (hash: jut/ZP4S4eQ02tlWZVAdBCVunWx3CLwFKGxnVPSVhy0=) 2: A05195B4633011ED9122442CC4F9AE02.roa (hash: AKU20NWnh/79/Cz6v2vomPpQO2CqirXMW3lldwtjfuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 813 (0x32d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91382E4, serialNumber=BE1833CA01425CEF475945F199989E6543B31E62 Validity Not Before: Jul 1 02:07:38 2025 GMT Not After : Jul 8 02:07:38 2025 GMT Subject: CN=686342eb-6304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ca:80:bb:34:b3:a2:b4:6b:5e:2c:43:b3:e0: cc:9b:75:46:de:65:84:e0:6a:4c:2e:58:05:0a:3b: 6c:50:cc:7e:f2:58:05:db:e3:0e:95:1c:1a:76:52: 26:fc:92:0d:15:91:ca:3d:b3:c2:f5:f3:d3:5b:ca: 56:07:4a:8a:13:d5:90:af:c8:71:de:9c:3f:3d:36: 94:73:08:b3:74:bf:31:0c:66:84:91:f2:c1:a6:1b: 61:8a:33:20:13:cb:67:a4:11:48:d3:ad:be:1e:68: f5:4b:d9:1c:44:80:22:eb:39:5e:5c:43:05:5a:ca: 17:82:62:52:df:02:64:a8:3c:cf:cc:46:fd:f0:03: 58:a7:68:5e:97:63:20:68:bc:d9:4d:88:2e:3b:7c: fd:32:9a:99:07:00:d6:5e:71:c8:a4:13:80:2c:7d: f4:95:c2:a0:0c:e3:6b:d4:51:6f:7c:37:aa:0d:9e: 54:24:60:b8:08:cb:f0:41:42:5c:9a:c9:a5:51:56: 97:86:69:50:80:f3:95:4e:ec:7e:26:ce:73:f7:09: af:43:f5:ca:1d:c6:29:ee:b5:a0:47:6e:97:76:0d: 46:23:1a:57:72:f6:57:3e:e5:31:83:74:72:de:26: c0:3f:73:fa:6f:7f:0b:d4:59:16:21:93:9b:80:67: 7b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4D:04:07:8D:05:F5:21:7F:F9:A1:28:31:12:BE:CD:51:7A:8D:CC X509v3 Authority Key Identifier: keyid:BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:fc:92:23:7a:5a:49:2d:35:ae:6c:07:b5:8c:e4:72:fe:30: 88:74:89:31:2a:fa:af:d9:4f:8e:ee:0a:c7:f2:44:03:a5:14: 13:70:b9:4e:13:8e:72:ab:31:9d:89:fe:07:c3:c2:c9:14:98: 03:ee:29:25:a6:df:9f:1f:be:e7:c7:b5:af:53:40:70:3e:27: 4c:4f:f5:66:d6:16:db:de:c3:35:24:c0:6e:a1:14:89:cb:79: d8:9f:f2:08:60:72:f4:94:50:6e:e4:78:80:ab:a1:f3:86:e0: 9a:98:d1:28:85:cd:dc:1a:de:0a:40:63:57:82:41:0a:7b:63: 8e:66:c1:22:c2:3b:01:c6:ed:31:fe:34:7d:d0:49:e4:38:89: 06:40:91:42:04:d9:b3:36:70:ac:c0:99:4e:c4:44:d1:49:52: 32:1d:a8:f8:b8:12:b0:aa:b1:08:af:e1:ea:a0:04:4a:de:7b: dd:81:af:01:82:24:85:76:80:b0:a4:fe:35:2e:f3:89:33:1c: f2:b7:dc:e2:33:82:74:ca:72:1c:12:3d:d7:39:cb:59:ee:30: ae:97:b9:63:7f:c9:22:97:ca:08:11:71:e1:dd:90:b0:c1:f0: f8:d2:d4:10:3f:c2:2f:dd:0f:33:96:9d:6b:63:7b:ce:d7:6d: ed:24:89:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgyRTQxMTAvBgNVBAUTKEJFMTgzM0NBMDE0MjVDRUY0NzU5NDVGMTk5OTg5RTY1 NDNCMzFFNjIwHhcNMjUwNzAxMDIwNzM4WhcNMjUwNzA4MDIwNzM4WjAYMRYwFAYD VQQDEw02ODYzNDJlYi02MzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18qAuzSzorRrXixDs+DMm3VG3mWE4GpMLlgFCjtsUMx+8lgF2+MOlRwadlIm /JINFZHKPbPC9fPTW8pWB0qKE9WQr8hx3pw/PTaUcwizdL8xDGaEkfLBphthijMg E8tnpBFI062+Hmj1S9kcRIAi6zleXEMFWsoXgmJS3wJkqDzPzEb98ANYp2hel2Mg aLzZTYguO3z9MpqZBwDWXnHIpBOALH30lcKgDONr1FFvfDeqDZ5UJGC4CMvwQUJc msmlUVaXhmlQgPOVTux+Js5z9wmvQ/XKHcYp7rWgR26Xdg1GIxpXcvZXPuUxg3Ry 3ibAP3P6b38L1FkWIZObgGd7hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZNBAeN BfUhf/mhKDESvs1Reo3MMB8GA1UdIwQYMBaAFL4YM8oBQlzvR1lF8ZmYnmVDsx5i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODJFNC8yMzZGNDA1NEQx MTkxMUVDOTAwQTJGNkZDNEY5QUUwMi92aGd6eWdGQ1hPOUhXVVh4bVppZVpVT3pI bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoZ3p5Z0ZDWE85SFdVWHhtWmllWlVPekhtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODJFNC8yMzZGNDA1NEQxMTkxMUVDOTAwQTJGNkZDNEY5QUUwMi92aGd6eWdGQ1hP OUhXVVh4bVppZVpVT3pIbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7/JIjelpJLTWubAe1jORy/jCIdIkxKvqv2U+O7grH8kQDpRQTcLlO E45yqzGdif4Hw8LJFJgD7iklpt+fH77nx7WvU0BwPidMT/Vm1hbb3sM1JMBuoRSJ y3nYn/IIYHL0lFBu5HiAq6HzhuCamNEohc3cGt4KQGNXgkEKe2OOZsEiwjsBxu0x /jR90EnkOIkGQJFCBNmzNnCswJlOxETRSVIyHaj4uBKwqrEIr+HqoARK3nvdga8B giSFdoCwpP41LvOJMxzyt9ziM4J0ynIcEj3XOctZ7jCul7ljf8kil8oIEXHh3ZCw wfD40tQQP8Iv3Q8zlp1rY3vO123tJInJ -----END CERTIFICATE-----Generated at Tue Jul 1 18:12:31 2025 by rpki-client