$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft File: vhLS7vQqHJ3CpXIERscDFsfCBlA.mft (raw, json) Hash identifier: /5hVSWqZRc840HOopHSbYXoNGuaAK8CBzLh9TD+Hmt4= Subject key identifier: 07:87:C7:3B:56:52:4B:66:A6:8B:20:59:A6:C3:03:F2:5B:1D:49:2D Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Certificate serial: 2819 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft Manifest number: 27FE Signing time: Fri 22 Aug 2025 15:39:56 +0000 Manifest this update: Fri 22 Aug 2025 15:39:56 +0000 Manifest next update: Fri 29 Aug 2025 15:39:56 +0000 Files and hashes: 1: vhLS7vQqHJ3CpXIERscDFsfCBlA.crl (hash: S/E4xzx4ozLJup2AubuaRx9Xw/h5ViKygmIaeiSpNog=) 2: B70AE7D20C6B11EC82638A40C4F9AE02.roa (hash: qyTxkkSSZz/mEPJmCPmO4drOsBAzqss/jEsEWzyS7n4=) 3: 5B7F22440AF811ECB423A671C4F9AE02.roa (hash: IqEsazWsEikd3PbwO1Zi4SKIR5/W/ukREa4rnvdDPhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10265 (0x2819) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Validity Not Before: Aug 22 15:39:56 2025 GMT Not After : Aug 29 15:39:56 2025 GMT Subject: CN=68a88f4c-ff7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e6:8d:6e:3b:eb:8b:51:30:34:1b:3d:8b:56: 40:4c:48:be:27:45:6a:37:20:18:40:58:e5:72:24: d3:9b:c1:27:c9:90:4e:eb:56:f5:ec:96:74:a2:0f: d7:e5:75:d9:35:83:58:d6:a2:e8:a5:97:51:c8:5e: cc:36:4d:12:ff:01:40:b6:17:2e:6b:ce:09:9d:90: f2:3e:f3:3d:18:d0:3d:50:61:44:5f:29:26:1a:ab: ff:8e:e6:ad:66:99:ec:25:5c:91:de:30:53:6b:21: 68:15:3f:7f:45:4e:67:c1:55:aa:fd:9c:69:f8:1b: c0:7a:58:20:43:0f:70:0a:a6:5b:27:2b:13:6f:55: ce:a3:e1:c3:6c:c6:8f:50:de:e7:1d:ab:f4:47:fc: 36:bb:fa:02:8f:33:3d:e5:8d:f3:ef:a5:48:b2:c4: b0:06:6e:d4:c6:ef:48:a8:d1:22:2a:c9:08:a0:e0: 9b:94:5c:89:cc:3c:65:d3:68:84:41:71:ec:76:80: 6a:08:35:f4:8c:23:0a:80:ea:5c:71:33:82:38:04: a8:e0:5d:19:8e:4e:aa:70:71:4a:88:34:b8:ac:33: ba:8c:a7:3a:20:e7:78:06:77:a1:31:3f:cc:bb:86: 6d:a3:34:3c:4c:82:ff:95:6b:c7:25:bd:19:6b:a1: ba:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:87:C7:3B:56:52:4B:66:A6:8B:20:59:A6:C3:03:F2:5B:1D:49:2D X509v3 Authority Key Identifier: keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:05:26:cd:5f:23:b1:5c:57:d2:3b:c6:d7:26:c6:6a:e5:61: 87:29:e4:30:4f:a5:99:fb:a6:31:23:cf:b9:1a:30:d4:a3:cc: e5:05:be:ff:7c:13:10:75:22:fd:46:15:41:bd:0f:72:75:e7: b3:2e:b8:d0:8f:f1:63:12:3f:66:7b:42:b4:33:e8:e7:48:47: 03:10:fa:8e:0f:b1:c2:a4:3a:89:58:1e:e8:55:68:94:fa:87: 6b:68:c6:be:91:90:1c:2e:df:34:a7:96:40:90:ea:6c:3a:9c: de:85:cd:2f:59:c9:e8:27:33:25:d1:c5:f8:77:5f:c8:2c:a1: b9:9a:ae:50:4b:7a:09:cb:ad:37:85:68:81:95:3d:f3:33:a9: b8:7a:55:0a:9d:dc:1a:71:e7:3f:1e:ed:a5:77:4d:65:2c:e9: 8f:c9:74:a8:29:47:be:4c:a3:1f:16:67:2e:64:89:9f:44:66: 66:fb:bc:1f:f4:fc:65:72:6f:c0:2d:aa:67:e4:55:45:37:87: 15:07:ca:12:bb:58:21:81:8c:e1:c0:0f:f0:e6:c2:2a:2d:2d: 90:6c:53:d9:64:3e:8b:18:5d:11:6f:be:61:3a:39:a6:1b:21: 6c:9b:5f:69:3e:1e:41:c3:51:90:a4:fa:dc:3f:8c:57:fc:bb: 7b:ab:5e:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNkIxMTAvBgNVBAUTKEJFMTJEMkVFRjQyQTFDOURDMkE1NzIwNDQ2QzcwMzE2 QzdDMjA2NTAwHhcNMjUwODIyMTUzOTU2WhcNMjUwODI5MTUzOTU2WjAYMRYwFAYD VQQDEw02OGE4OGY0Yy1mZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuaNbjvri1EwNBs9i1ZATEi+J0VqNyAYQFjlciTTm8EnyZBO61b17JZ0og/X 5XXZNYNY1qLopZdRyF7MNk0S/wFAthcua84JnZDyPvM9GNA9UGFEXykmGqv/juat ZpnsJVyR3jBTayFoFT9/RU5nwVWq/Zxp+BvAelggQw9wCqZbJysTb1XOo+HDbMaP UN7nHav0R/w2u/oCjzM95Y3z76VIssSwBm7Uxu9IqNEiKskIoOCblFyJzDxl02iE QXHsdoBqCDX0jCMKgOpccTOCOASo4F0Zjk6qcHFKiDS4rDO6jKc6IOd4BnehMT/M u4ZtozQ8TIL/lWvHJb0Za6G6GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeHxztW UktmposgWabDA/JbHUktMB8GA1UdIwQYMBaAFL4S0u70KhydwqVyBEbHAxbHwgZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE2Qi83NTI0NEI2MkEx NjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhKM0NwWElFUnNjREZzZkNC bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoTFM3dlFxSEozQ3BYSUVSc2NERnNmQ0JsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEE2Qi83NTI0NEI2MkExNjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhK M0NwWElFUnNjREZzZkNCbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsBSbNXyOxXFfSO8bXJsZq5WGHKeQwT6WZ+6YxI8+5GjDUo8zlBb7/ fBMQdSL9RhVBvQ9ydeezLrjQj/FjEj9me0K0M+jnSEcDEPqOD7HCpDqJWB7oVWiU +odraMa+kZAcLt80p5ZAkOpsOpzehc0vWcnoJzMl0cX4d1/ILKG5mq5QS3oJy603 hWiBlT3zM6m4elUKndwacec/Hu2ld01lLOmPyXSoKUe+TKMfFmcuZImfRGZm+7wf 9Pxlcm/ALapn5FVFN4cVB8oSu1ghgYzhwA/w5sIqLS2QbFPZZD6LGF0Rb75hOjmm GyFsm19pPh5Bw1GQpPrcP4xX/Lt7q16E -----END CERTIFICATE-----Generated at Sat Aug 23 17:04:52 2025 by rpki-client