$ rpki-client -vvf rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft File: vhgzygFCXO9HWUXxmZieZUOzHmI.mft (raw, json) Hash identifier: ZVftIyChe2zyCoi5/zwqFtK+eQZ+hmWHGRSBzeWZ+NQ= Subject key identifier: F6:96:2E:4D:2B:68:91:BA:AC:1B:F1:69:D7:AA:06:AC:57:8C:B2:9D Authority key identifier: BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62 Certificate issuer: /CN=A91382E4/serialNumber=BE1833CA01425CEF475945F199989E6543B31E62 Certificate serial: 034B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft Manifest number: 0343 Signing time: Sat 23 Aug 2025 01:19:39 +0000 Manifest this update: Sat 23 Aug 2025 01:19:38 +0000 Manifest next update: Sat 30 Aug 2025 01:19:38 +0000 Files and hashes: 1: vhgzygFCXO9HWUXxmZieZUOzHmI.crl (hash: eJETqe96UPmwbuAuhCf3WAScvaPu1el8OBUJaOmrZVc=) 2: A05195B4633011ED9122442CC4F9AE02.roa (hash: j7aoei+ek1gcLQq8wVfrfWk2y1zauvGzuHEFdrbSbVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 843 (0x34b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91382E4, serialNumber=BE1833CA01425CEF475945F199989E6543B31E62 Validity Not Before: Aug 23 01:19:38 2025 GMT Not After : Aug 30 01:19:38 2025 GMT Subject: CN=68a9172b-56bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:be:79:5b:99:dd:0d:01:4f:71:5b:2a:a6:ea: 56:10:ce:b2:99:97:9a:39:34:d8:ea:6a:24:01:ae: 20:fb:11:d4:b3:35:58:a1:99:b1:e3:19:f6:be:9f: 47:01:0b:0a:fc:7c:b1:7a:46:46:58:2f:a4:30:d9: 03:72:70:0b:0a:ce:f9:b4:5b:95:7f:d4:1d:26:a1: df:db:74:eb:f0:b5:eb:4d:27:4d:aa:27:27:4d:07: 05:f4:31:a0:d4:31:dd:f6:bc:bf:9d:2b:2e:5c:4d: 93:c7:af:4e:37:62:1b:d5:00:6f:2d:5f:b4:1e:26: 89:87:a9:e5:db:07:1d:b3:4c:05:17:93:8a:4d:99: ef:27:2b:9b:c0:ad:d1:6e:b7:2b:d9:1e:1f:52:fd: 3c:2e:c9:6a:70:e1:96:8b:2e:4e:79:54:2a:90:a9: f4:a2:3f:1e:a0:ed:81:37:e1:d1:14:6d:a0:b8:7a: f9:5d:d7:57:40:fd:8c:a3:38:0f:28:2e:e3:3d:6c: b0:a5:6f:86:8e:e9:28:bc:c6:34:3b:ee:f9:69:43: a1:a5:29:33:43:63:3a:d3:ed:d3:18:97:a3:c7:e8: c7:c9:18:6d:10:4d:a4:d1:3d:b2:ff:24:c9:de:bc: 60:2e:e3:e2:f6:03:07:8d:3c:c8:ef:9c:10:38:8e: 16:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:96:2E:4D:2B:68:91:BA:AC:1B:F1:69:D7:AA:06:AC:57:8C:B2:9D X509v3 Authority Key Identifier: keyid:BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:0f:a3:97:46:c5:a8:a5:97:c5:b1:7a:5c:ff:b6:f3:0a:79: b8:19:1e:19:3d:37:b7:ec:2d:09:7b:41:90:df:33:62:aa:33: ca:14:64:e0:5a:16:1b:c7:9a:e1:39:ab:85:bf:94:3d:df:a7: 16:5f:77:48:18:89:ae:92:45:90:8a:2f:e1:0d:5d:a3:7f:ea: 19:9a:75:e1:a2:03:e6:e6:9e:7f:5a:6d:5e:9c:fb:b0:bf:97: 15:0f:c6:06:ad:06:ea:c4:b9:05:16:98:74:dd:48:fc:c0:64: a4:d3:ef:bb:0f:ed:7c:3f:20:2f:bd:d6:40:5f:52:42:c3:86: 52:d5:2a:53:37:35:f9:92:15:15:45:41:4e:3d:5a:1b:45:ff: d4:3e:dc:15:79:34:40:6a:b9:2c:0d:5f:b8:7d:c9:a7:08:bf: 2d:95:19:b3:cc:df:f9:26:38:f6:17:7b:44:bd:61:f0:6c:35: 28:2a:ad:c7:f5:d7:f5:50:7b:1f:6a:09:fa:8a:52:e6:54:df: 5c:36:2a:85:24:24:50:4e:64:45:2f:e8:f3:1a:c7:1d:83:19: 52:f8:36:1c:2a:0f:f1:84:ee:4f:7b:d7:22:e4:75:6a:9f:e2: 04:16:02:0b:99:64:d0:21:d3:bc:e6:60:bd:33:9c:55:c7:73: 34:70:05:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgyRTQxMTAvBgNVBAUTKEJFMTgzM0NBMDE0MjVDRUY0NzU5NDVGMTk5OTg5RTY1 NDNCMzFFNjIwHhcNMjUwODIzMDExOTM4WhcNMjUwODMwMDExOTM4WjAYMRYwFAYD VQQDEw02OGE5MTcyYi01NmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtr55W5ndDQFPcVsqpupWEM6ymZeaOTTY6mokAa4g+xHUszVYoZmx4xn2vp9H AQsK/HyxekZGWC+kMNkDcnALCs75tFuVf9QdJqHf23Tr8LXrTSdNqicnTQcF9DGg 1DHd9ry/nSsuXE2Tx69ON2Ib1QBvLV+0HiaJh6nl2wcds0wFF5OKTZnvJyubwK3R brcr2R4fUv08LslqcOGWiy5OeVQqkKn0oj8eoO2BN+HRFG2guHr5XddXQP2MozgP KC7jPWywpW+GjukovMY0O+75aUOhpSkzQ2M60+3TGJejx+jHyRhtEE2k0T2y/yTJ 3rxgLuPi9gMHjTzI75wQOI4WEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPaWLk0r aJG6rBvxadeqBqxXjLKdMB8GA1UdIwQYMBaAFL4YM8oBQlzvR1lF8ZmYnmVDsx5i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODJFNC8yMzZGNDA1NEQx MTkxMUVDOTAwQTJGNkZDNEY5QUUwMi92aGd6eWdGQ1hPOUhXVVh4bVppZVpVT3pI bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoZ3p5Z0ZDWE85SFdVWHhtWmllWlVPekhtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODJFNC8yMzZGNDA1NEQxMTkxMUVDOTAwQTJGNkZDNEY5QUUwMi92aGd6eWdGQ1hP OUhXVVh4bVppZVpVT3pIbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3D6OXRsWopZfFsXpc/7bzCnm4GR4ZPTe37C0Je0GQ3zNiqjPKFGTg WhYbx5rhOauFv5Q936cWX3dIGImukkWQii/hDV2jf+oZmnXhogPm5p5/Wm1enPuw v5cVD8YGrQbqxLkFFph03Uj8wGSk0++7D+18PyAvvdZAX1JCw4ZS1SpTNzX5khUV RUFOPVobRf/UPtwVeTRAarksDV+4fcmnCL8tlRmzzN/5Jjj2F3tEvWHwbDUoKq3H 9df1UHsfagn6ilLmVN9cNiqFJCRQTmRFL+jzGscdgxlS+DYcKg/xhO5Pe9ci5HVq n+IEFgILmWTQIdO85mC9M5xVx3M0cAXP -----END CERTIFICATE-----Generated at Sat Aug 23 21:05:47 2025 by rpki-client