$ rpki-client -vvf rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft File: VRHewp3K7aF782u_M5UycVnxSoE.mft (raw, json) Hash identifier: EP2f9OC1T2FU6HM1YO9FkyC9+HqeXJJ9UMawhDXBVv8= Subject key identifier: F6:C7:66:37:79:F8:B8:6E:AC:4A:35:A7:A1:35:F6:14:32:CF:CE:75 Authority key identifier: 55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 Certificate issuer: /CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Certificate serial: 0C92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft Manifest number: 0C7E Signing time: Wed 02 Jul 2025 18:28:20 +0000 Manifest this update: Wed 02 Jul 2025 18:28:19 +0000 Manifest next update: Wed 09 Jul 2025 18:28:19 +0000 Files and hashes: 1: VRHewp3K7aF782u_M5UycVnxSoE.crl (hash: Mj/uD3+0EwnN5TfVe/D7L3+6pdwT8PeOB71qJMAWdvQ=) 2: F3E543B4CBB611EB94FE6E68C4F9AE02.roa (hash: ZXJMtYkkqA7hHeKOhLlOV4cY6XESDyR/pKiToP5eSgg=) 3: F2B52DF6CBB611EB94FE6E68C4F9AE02.roa (hash: pSxfk0FHnFoiI4DMtbpzZ2ySSBds/zGBYa4EKLwgCes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3218 (0xc92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192248, serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Validity Not Before: Jul 2 18:28:19 2025 GMT Not After : Jul 9 18:28:19 2025 GMT Subject: CN=68657a43-8be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5c:ed:50:db:ad:8a:57:18:e2:ee:7d:45:df: 39:ab:a3:1a:12:2a:1e:70:b8:43:8f:46:c4:29:f2: 97:67:ee:0c:85:c5:a1:29:c8:f9:b8:99:c7:69:73: 0e:d3:e5:c4:d1:bf:51:31:3e:ef:4b:0a:fd:5e:fe: ca:21:bf:a5:57:87:fb:56:75:3a:f8:11:0a:d6:b0: 53:35:8d:f9:b7:ff:ab:0d:ad:5f:52:f4:c8:d0:41: f0:3e:28:36:c5:62:3e:fa:03:9c:90:c3:92:a0:e9: f5:c0:c9:83:8f:8d:b7:60:d2:1d:c5:49:8c:63:32: fd:e3:d1:3b:b6:7f:a5:6a:4f:88:c2:b0:b6:df:c4: d8:4b:56:32:dc:52:84:16:4e:ba:a1:6b:da:2b:1c: 64:e9:87:1f:71:50:e2:62:c6:73:24:13:a8:0e:53: 37:72:d7:c2:ec:02:29:e8:af:72:51:f5:8a:33:6a: b9:ec:f2:f2:e6:67:6e:05:e1:6f:c4:ca:22:62:cb: 29:63:7f:e8:34:66:b8:28:d3:ba:ef:f6:43:bf:58: 3c:46:06:0d:8a:b6:0a:c6:37:40:01:84:bd:b5:39: 44:b7:63:aa:6a:10:c9:00:c2:d6:97:5b:d4:11:df: 43:89:35:5a:09:3e:61:15:5d:8e:84:1d:64:d4:02: 1d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C7:66:37:79:F8:B8:6E:AC:4A:35:A7:A1:35:F6:14:32:CF:CE:75 X509v3 Authority Key Identifier: keyid:55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:88:87:9f:a2:c1:f8:08:1d:ca:1a:9f:74:4b:2b:b8:0c:64: fc:37:37:97:5c:13:78:f0:b8:38:92:0e:3c:e1:5b:f3:c1:d1: 5a:5a:18:df:b9:ab:52:c9:5b:df:cf:c9:6c:36:5b:01:25:d5: 6d:66:b9:fd:f3:d4:e6:77:9a:24:03:47:52:e5:b5:90:53:5f: 22:79:c4:0d:d4:63:38:e9:cd:e6:36:16:b8:54:03:2c:24:2e: 61:98:07:1c:8f:51:0c:d5:23:34:04:1c:98:47:b7:77:33:6f: 3b:5f:f6:83:cb:de:1d:e8:05:fd:5e:49:0f:8f:c6:c4:65:5f: 96:37:a9:c7:1d:3c:9a:2a:b0:ed:95:cb:4b:5e:8f:51:a9:93: 9c:3e:1a:cf:98:eb:e2:80:ea:58:21:99:64:d0:5a:12:6b:35: c6:f6:9c:38:2b:15:89:18:69:1b:76:e2:71:bb:a2:a6:d1:70: 70:d0:8c:48:61:24:0d:3e:60:39:2e:c0:6c:e9:63:23:b3:8e: 4a:6e:76:bf:79:e5:06:1d:91:69:ed:d4:77:db:70:dd:01:b2: 4d:fe:02:b1:64:32:8e:c7:84:44:a4:13:d9:97:7b:62:9e:97: 8d:d0:c4:20:82:06:78:3f:d4:c2:55:6c:b6:20:a4:73:fd:3b: 84:e9:4f:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIyNDgxMTAvBgNVBAUTKDU1MTFERUMyOURDQUVEQTE3QkYzNkJCRjMzOTUzMjcx NTlGMTRBODEwHhcNMjUwNzAyMTgyODE5WhcNMjUwNzA5MTgyODE5WjAYMRYwFAYD VQQDEw02ODY1N2E0My04YmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4FztUNutilcY4u59Rd85q6MaEioecLhDj0bEKfKXZ+4MhcWhKcj5uJnHaXMO 0+XE0b9RMT7vSwr9Xv7KIb+lV4f7VnU6+BEK1rBTNY35t/+rDa1fUvTI0EHwPig2 xWI++gOckMOSoOn1wMmDj423YNIdxUmMYzL949E7tn+lak+IwrC238TYS1Yy3FKE Fk66oWvaKxxk6YcfcVDiYsZzJBOoDlM3ctfC7AIp6K9yUfWKM2q57PLy5mduBeFv xMoiYsspY3/oNGa4KNO67/ZDv1g8RgYNirYKxjdAAYS9tTlEt2OqahDJAMLWl1vU Ed9DiTVaCT5hFV2OhB1k1AIdtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbHZjd5 +LhurEo1p6E19hQyz851MB8GA1UdIwQYMBaAFFUR3sKdyu2he/NrvzOVMnFZ8UqB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjI0OC9DNzk4QTBGQUZG MDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdhRjc4MnVfTTVVeWNWbnhT b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSSGV3cDNLN2FGNzgydV9NNVV5Y1ZueFNvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjI0OC9DNzk4QTBGQUZGMDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdh Rjc4MnVfTTVVeWNWbnhTb0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOiIefosH4CB3KGp90Syu4DGT8NzeXXBN48Lg4kg484VvzwdFaWhjf uatSyVvfz8lsNlsBJdVtZrn989Tmd5okA0dS5bWQU18iecQN1GM46c3mNha4VAMs JC5hmAccj1EM1SM0BByYR7d3M287X/aDy94d6AX9XkkPj8bEZV+WN6nHHTyaKrDt lctLXo9RqZOcPhrPmOvigOpYIZlk0FoSazXG9pw4KxWJGGkbduJxu6Km0XBw0IxI YSQNPmA5LsBs6WMjs45Kbna/eeUGHZFp7dR323DdAbJN/gKxZDKOx4REpBPZl3ti npeN0MQgggZ4P9TCVWy2IKRz/TuE6U+X -----END CERTIFICATE-----Generated at Thu Jul 3 01:25:37 2025 by rpki-client