$ rpki-client -vvf rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft File: VRHewp3K7aF782u_M5UycVnxSoE.mft (raw, json) Hash identifier: AOQQgd4XuUZhEzda5HQT3+4MORwMJtxh2G+KFMJspr4= Subject key identifier: 30:CF:66:AA:F1:F2:1F:A7:E4:94:33:8B:BC:CA:BE:5D:D3:75:E8:4C Authority key identifier: 55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 Certificate issuer: /CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Certificate serial: 0C79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft Manifest number: 0C65 Signing time: Wed 14 May 2025 18:24:08 +0000 Manifest this update: Wed 14 May 2025 18:24:08 +0000 Manifest next update: Wed 21 May 2025 18:24:08 +0000 Files and hashes: 1: VRHewp3K7aF782u_M5UycVnxSoE.crl (hash: Q5eNrmIVBMKNK9EoEln70fx43eF224UlORy4TOMk2C0=) 2: F3E543B4CBB611EB94FE6E68C4F9AE02.roa (hash: ZXJMtYkkqA7hHeKOhLlOV4cY6XESDyR/pKiToP5eSgg=) 3: F2B52DF6CBB611EB94FE6E68C4F9AE02.roa (hash: pSxfk0FHnFoiI4DMtbpzZ2ySSBds/zGBYa4EKLwgCes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3193 (0xc79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192248, serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Validity Not Before: May 14 18:24:08 2025 GMT Not After : May 21 18:24:08 2025 GMT Subject: CN=6824dfc8-2c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b0:f8:ec:f9:f3:f7:37:fc:b3:aa:c0:28:59: 4a:da:bc:80:f1:6d:f8:3b:df:5d:65:29:12:39:a6: cd:7b:3a:c9:a1:4c:66:2e:3c:24:d5:99:8d:67:84: 4d:88:e6:94:52:66:f5:0e:f7:2e:8c:c8:ba:72:9f: 01:2f:bc:2b:cd:f7:af:e4:5f:e3:91:da:ce:32:e9: bc:5e:4d:75:1e:f7:cc:84:53:52:81:84:66:0a:b8: c6:18:2f:0d:88:7a:7f:69:bd:02:16:5d:e5:94:6c: a7:2e:39:09:4d:11:7c:d7:06:5a:65:b7:a5:f3:f5: 69:27:c2:20:a3:75:5a:c6:16:fc:f0:1e:25:c0:93: 75:04:36:38:3f:27:51:ad:f4:73:46:8f:d6:2b:87: 2e:c5:90:e9:df:db:5f:fc:12:aa:9f:a7:8b:49:58: a1:bb:6f:84:1c:c0:7a:82:62:9a:5c:19:19:24:b4: 0b:ce:2d:34:c2:72:d9:4d:2f:ee:a4:76:d6:69:c7: 92:4f:29:d3:f7:41:11:c0:4e:c4:47:ed:a9:b4:83: 09:6d:09:2b:6b:47:24:46:7d:dc:3f:0f:bb:cd:30: 1b:f3:48:c1:69:91:79:ec:22:0e:c7:9c:84:9e:1e: 6c:4c:3d:00:d6:45:6d:ac:0e:02:0b:27:32:ae:83: 3b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CF:66:AA:F1:F2:1F:A7:E4:94:33:8B:BC:CA:BE:5D:D3:75:E8:4C X509v3 Authority Key Identifier: keyid:55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:43:32:16:29:8f:48:10:96:37:d9:b2:99:f8:74:79:c4:b2: dd:21:49:ff:54:da:2d:cd:6f:f3:b2:28:ae:2f:83:c3:4a:3c: 15:de:bc:c2:10:ac:79:cc:d7:ad:1e:1e:32:22:2c:f9:78:05: 32:b4:6d:e4:78:05:72:fa:fd:be:8c:34:1b:73:7d:0d:69:6b: c6:45:a0:f8:81:70:0c:a6:d8:9f:a8:07:df:92:bd:b9:bf:38: 8a:cd:b5:24:60:bf:b0:45:bd:a0:2b:c3:57:ac:25:de:55:e7: 79:60:03:e5:79:9f:21:a4:cb:cd:3c:dd:ba:1d:fa:ff:e0:03: b8:29:27:9b:ff:f2:f1:6c:3a:4f:ec:e3:e9:c6:52:40:7e:4d: 55:50:15:ce:d9:22:51:41:8e:9c:18:c3:f0:4f:90:ac:be:72: 95:ff:b1:c4:ca:10:f9:9a:eb:a4:68:f9:8f:96:9f:10:90:e1: 27:f9:98:5b:6a:8b:5e:af:c2:04:b0:af:73:60:cf:72:b8:da: 06:d2:60:30:79:59:53:84:29:76:db:d7:d0:10:4b:a2:67:64: 31:ae:3c:69:0a:47:7e:a7:38:3c:a9:35:04:42:80:79:16:5f: 85:8e:96:fb:5d:9b:b2:e0:bb:cd:36:91:f8:97:e1:ea:9e:62: 30:e6:93:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIyNDgxMTAvBgNVBAUTKDU1MTFERUMyOURDQUVEQTE3QkYzNkJCRjMzOTUzMjcx NTlGMTRBODEwHhcNMjUwNTE0MTgyNDA4WhcNMjUwNTIxMTgyNDA4WjAYMRYwFAYD VQQDEw02ODI0ZGZjOC0yYzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubD47Pnz9zf8s6rAKFlK2ryA8W34O99dZSkSOabNezrJoUxmLjwk1ZmNZ4RN iOaUUmb1DvcujMi6cp8BL7wrzfev5F/jkdrOMum8Xk11HvfMhFNSgYRmCrjGGC8N iHp/ab0CFl3llGynLjkJTRF81wZaZbel8/VpJ8Igo3Vaxhb88B4lwJN1BDY4PydR rfRzRo/WK4cuxZDp39tf/BKqn6eLSVihu2+EHMB6gmKaXBkZJLQLzi00wnLZTS/u pHbWaceSTynT90ERwE7ER+2ptIMJbQkra0ckRn3cPw+7zTAb80jBaZF57CIOx5yE nh5sTD0A1kVtrA4CCycyroM7/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDPZqrx 8h+n5JQzi7zKvl3TdehMMB8GA1UdIwQYMBaAFFUR3sKdyu2he/NrvzOVMnFZ8UqB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjI0OC9DNzk4QTBGQUZG MDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdhRjc4MnVfTTVVeWNWbnhT b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSSGV3cDNLN2FGNzgydV9NNVV5Y1ZueFNvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjI0OC9DNzk4QTBGQUZGMDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdh Rjc4MnVfTTVVeWNWbnhTb0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnQzIWKY9IEJY32bKZ+HR5xLLdIUn/VNotzW/zsiiuL4PDSjwV3rzC EKx5zNetHh4yIiz5eAUytG3keAVy+v2+jDQbc30NaWvGRaD4gXAMptifqAffkr25 vziKzbUkYL+wRb2gK8NXrCXeVed5YAPleZ8hpMvNPN26Hfr/4AO4KSeb//LxbDpP 7OPpxlJAfk1VUBXO2SJRQY6cGMPwT5CsvnKV/7HEyhD5muukaPmPlp8QkOEn+Zhb aoter8IEsK9zYM9yuNoG0mAweVlThCl229fQEEuiZ2QxrjxpCkd+pzg8qTUEQoB5 Fl+Fjpb7XZuy4LvNNpH4l+HqnmIw5pNL -----END CERTIFICATE-----Generated at Wed May 14 20:49:52 2025 by rpki-client