$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft File: vhLS7vQqHJ3CpXIERscDFsfCBlA.mft (raw, json) Hash identifier: wGlFL7683qqsdfa3TrfOFREUoptu7Q+EvJOIAJ/LBRQ= Subject key identifier: C6:7D:DE:6B:F1:8B:75:E4:65:C7:E5:59:92:98:5F:5E:58:68:37:C1 Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Certificate serial: 27FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft Manifest number: 27E3 Signing time: Mon 30 Jun 2025 15:40:40 +0000 Manifest this update: Mon 30 Jun 2025 15:40:40 +0000 Manifest next update: Mon 07 Jul 2025 15:40:40 +0000 Files and hashes: 1: vhLS7vQqHJ3CpXIERscDFsfCBlA.crl (hash: 6FexDjbfrJ0EoAwDTt/GVFokD+ickl+UY49AN+3Pc/w=) 2: B70AE7D20C6B11EC82638A40C4F9AE02.roa (hash: qyTxkkSSZz/mEPJmCPmO4drOsBAzqss/jEsEWzyS7n4=) 3: 5B7F22440AF811ECB423A671C4F9AE02.roa (hash: IqEsazWsEikd3PbwO1Zi4SKIR5/W/ukREa4rnvdDPhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:40:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10238 (0x27fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Validity Not Before: Jun 30 15:40:40 2025 GMT Not After : Jul 7 15:40:40 2025 GMT Subject: CN=6862aff8-e6ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c5:4e:2b:64:ea:87:1a:41:c6:42:fe:51:20: 77:bb:5e:71:00:68:ba:d4:eb:1c:35:79:f1:b8:3c: 41:72:63:5a:e8:46:f7:eb:c1:02:b5:57:e2:c5:69: 97:85:a2:17:e2:0f:9d:60:9e:89:4b:b3:35:e7:4e: cc:cb:b4:3f:4d:b7:2d:13:5e:c2:51:17:83:07:d8: cc:f2:49:66:27:d0:96:00:fc:d3:32:d4:a7:2e:f0: e2:0e:38:a9:bc:10:06:e2:a1:55:c8:12:c4:4a:6b: 4b:e2:eb:dd:88:a6:82:d1:59:ec:af:53:79:d3:0d: 44:38:bc:7c:38:a8:33:f9:5d:ee:e4:64:52:ec:b2: aa:e0:63:ee:cb:7f:9b:a0:b4:08:84:a3:3f:e5:8a: 3f:4b:c4:52:05:cd:54:be:d1:ed:19:09:eb:a0:ae: a1:f6:1e:40:b8:f9:af:2e:18:2f:1c:22:c6:cb:93: 4f:01:ef:e3:bb:e7:52:26:4d:eb:f0:ab:7c:18:89: b0:6b:61:8a:56:47:75:59:ed:c7:e6:6a:30:0f:19: b8:a8:c0:74:47:a8:c6:4d:2a:76:00:1f:11:28:03: ff:d1:4f:61:56:a3:95:ba:54:48:7d:b7:b5:29:54: 91:4b:39:3d:1f:e6:b7:76:cd:b9:9d:77:5b:47:6e: cd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7D:DE:6B:F1:8B:75:E4:65:C7:E5:59:92:98:5F:5E:58:68:37:C1 X509v3 Authority Key Identifier: keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:02:5e:5d:d4:9f:77:1b:7a:1c:af:15:94:28:83:b8:fd:fb: 24:02:d9:1b:99:07:48:b8:aa:ac:7f:c0:2e:1e:89:08:15:b9: f0:e1:28:fd:63:14:58:bf:d9:b0:9c:8a:6c:7b:e8:69:47:99: 26:3d:47:96:45:c9:e6:63:4b:a0:3d:d8:a4:47:0f:8c:cc:d3: e7:56:b2:c1:58:8f:3e:db:e3:d2:fb:a6:43:cc:a7:3c:6d:e7: 91:fd:8d:09:b7:4c:da:be:7f:1d:4c:8c:a3:c5:d3:04:29:71: 42:b6:ec:b8:bc:9e:92:e2:be:9b:d4:ce:74:d5:ff:f2:7c:f6: 67:49:1a:b4:23:ac:18:93:7e:72:80:2e:c9:b7:0b:22:37:4e: 4d:77:11:ed:0f:9a:fc:cd:54:12:40:0f:02:dc:bd:a8:52:f0: c0:ad:10:e3:24:14:1a:ca:f4:9a:cf:4c:df:f6:04:df:59:a3: 5c:1a:ca:36:c2:b1:3c:7b:00:d1:1b:60:65:ed:5a:cf:af:05: e0:5e:d2:7c:d6:b5:ae:9d:6c:02:74:e4:fd:57:17:3b:4c:86: 65:58:2d:25:fc:4a:ac:33:bf:be:73:f6:21:f5:b6:f3:24:ef: 06:77:52:34:30:ca:f0:ab:14:f2:66:1e:cc:be:c6:37:5c:a3: b6:8b:ff:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNkIxMTAvBgNVBAUTKEJFMTJEMkVFRjQyQTFDOURDMkE1NzIwNDQ2QzcwMzE2 QzdDMjA2NTAwHhcNMjUwNjMwMTU0MDQwWhcNMjUwNzA3MTU0MDQwWjAYMRYwFAYD VQQDEw02ODYyYWZmOC1lNmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosVOK2TqhxpBxkL+USB3u15xAGi61OscNXnxuDxBcmNa6Eb368ECtVfixWmX haIX4g+dYJ6JS7M1507My7Q/TbctE17CUReDB9jM8klmJ9CWAPzTMtSnLvDiDjip vBAG4qFVyBLESmtL4uvdiKaC0Vnsr1N50w1EOLx8OKgz+V3u5GRS7LKq4GPuy3+b oLQIhKM/5Yo/S8RSBc1UvtHtGQnroK6h9h5AuPmvLhgvHCLGy5NPAe/ju+dSJk3r 8Kt8GImwa2GKVkd1We3H5mowDxm4qMB0R6jGTSp2AB8RKAP/0U9hVqOVulRIfbe1 KVSRSzk9H+a3ds25nXdbR27NDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZ93mvx i3XkZcflWZKYX15YaDfBMB8GA1UdIwQYMBaAFL4S0u70KhydwqVyBEbHAxbHwgZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE2Qi83NTI0NEI2MkEx NjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhKM0NwWElFUnNjREZzZkNC bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoTFM3dlFxSEozQ3BYSUVSc2NERnNmQ0JsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEE2Qi83NTI0NEI2MkExNjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhK M0NwWElFUnNjREZzZkNCbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUAl5d1J93G3ocrxWUKIO4/fskAtkbmQdIuKqsf8AuHokIFbnw4Sj9 YxRYv9mwnIpse+hpR5kmPUeWRcnmY0ugPdikRw+MzNPnVrLBWI8+2+PS+6ZDzKc8 beeR/Y0Jt0zavn8dTIyjxdMEKXFCtuy4vJ6S4r6b1M501f/yfPZnSRq0I6wYk35y gC7JtwsiN05NdxHtD5r8zVQSQA8C3L2oUvDArRDjJBQayvSaz0zf9gTfWaNcGso2 wrE8ewDRG2Bl7VrPrwXgXtJ81rWunWwCdOT9Vxc7TIZlWC0l/EqsM7++c/Yh9bbz JO8Gd1I0MMrwqxTyZh7MvsY3XKO2i/9H -----END CERTIFICATE-----Generated at Wed Jul 2 15:55:32 2025 by rpki-client