$ rpki-client -vvf rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft File: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft (raw, json) Hash identifier: mM/SXSreCbqLOmKFS0MoqZnzOBfLwOulMiw9e+cLB3s= Subject key identifier: 10:E3:76:97:54:DC:3C:35:0A:F5:E6:0D:94:26:40:5F:AE:B9:F4:08 Authority key identifier: 54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 Certificate issuer: /CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Certificate serial: 0C1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft Manifest number: 0C12 Signing time: Fri 22 Aug 2025 18:50:50 +0000 Manifest this update: Fri 22 Aug 2025 18:50:50 +0000 Manifest next update: Fri 29 Aug 2025 18:50:50 +0000 Files and hashes: 1: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl (hash: hm4ldI18BbN69WSyVCQ2i4thqLjK+P/QCk9/cK7S+58=) 2: 5EA04634181911EA9CA3C619C4F9AE02.roa (hash: 29yqRgflWjw/V78Nb1MTmLxw9ept1pEu77NRsVFXw6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3100 (0xc1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936EB, serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Validity Not Before: Aug 22 18:50:50 2025 GMT Not After : Aug 29 18:50:50 2025 GMT Subject: CN=68a8bc0a-d16b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:15:91:78:a4:34:39:27:df:e5:ca:6d:19:3b: 8e:26:22:de:9d:c3:bc:cf:b5:3a:ec:18:f1:8f:38: f5:f2:2d:0b:59:a0:81:34:c9:45:2f:93:58:52:9d: 0b:5d:e4:8b:a7:02:66:14:6b:ea:33:92:35:15:e7: d7:ec:e9:fa:79:3b:a4:a7:d5:06:7d:b1:ee:2c:60: 69:2d:34:90:17:19:30:a9:54:0e:b4:90:2e:ce:04: ba:80:15:21:f8:48:33:8c:3d:5a:9a:a4:f7:1c:05: b4:2d:c3:8c:02:80:0a:fa:01:77:68:38:ca:b9:62: b0:2d:38:5d:f9:ea:57:fc:db:94:4e:6d:38:6b:33: b7:6c:97:c3:ce:4b:cf:8c:2c:6c:38:59:e0:a8:85: 99:32:74:89:06:49:34:08:49:e0:a7:30:e3:b2:db: f6:dc:94:48:45:f5:d2:73:d9:3a:ca:16:c9:cf:38: 96:a8:e2:47:87:be:79:53:39:3c:e4:93:b3:3a:54: 01:a4:2a:54:ba:e1:b4:a8:4d:1a:3a:90:f7:9d:66: 58:e2:ae:34:da:00:b7:e2:e3:e6:6f:f1:ec:35:b8: 2e:e0:43:5e:b8:65:04:bb:2e:c9:d0:ae:f4:d6:d4: ff:92:0d:eb:52:af:ed:e5:65:87:55:3f:ce:d5:ea: 00:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E3:76:97:54:DC:3C:35:0A:F5:E6:0D:94:26:40:5F:AE:B9:F4:08 X509v3 Authority Key Identifier: keyid:54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:d4:0f:73:53:46:15:2f:51:03:74:72:b2:b4:7f:f6:58:ad: 9a:dc:f5:9e:34:74:3b:00:39:32:d4:aa:a2:0f:dc:36:8d:42: d7:39:37:17:a4:d7:4f:16:27:4c:03:90:cc:4b:ec:6c:87:55: 3e:83:51:67:9e:bb:a5:08:56:be:ac:b4:bf:ba:bc:9c:30:70: 9c:45:d6:2b:e5:70:c8:fd:1a:a4:67:c5:1d:74:8a:4a:50:f8: 25:65:19:e8:28:e5:83:c4:3e:21:b2:cd:6d:e1:4b:4c:f0:57: 8d:b8:79:cf:c7:66:51:c3:95:74:89:f6:d5:ef:45:4f:29:0f: 8e:e6:4a:1e:0b:1d:93:96:19:f3:85:a3:37:87:af:7f:90:c2: ab:28:fe:d8:19:d1:f8:4d:00:4f:6a:a5:95:82:36:8e:65:2f: 9e:9e:1a:87:58:8f:d7:a8:46:7d:41:29:39:71:48:28:e7:f4: 62:64:24:88:25:ea:2a:de:f1:18:78:71:9c:9e:3d:af:f3:d2: 0e:7c:f4:e3:4a:01:b4:57:db:2f:e1:24:f9:16:12:12:4d:c2: 8a:c6:b9:53:97:af:03:1a:05:b6:90:08:b6:1b:b3:aa:be:0d: fd:2a:f0:87:a0:38:b0:fe:2e:43:9f:62:f6:2f:52:6e:ff:d8: 79:bb:a5:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2RUIxMTAvBgNVBAUTKDU0NzIxRTA4NjEwOTY5MEEzOTY1MkNCQUE4QTBFNjFB QjBBOUYwNzIwHhcNMjUwODIyMTg1MDUwWhcNMjUwODI5MTg1MDUwWjAYMRYwFAYD VQQDEw02OGE4YmMwYS1kMTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhWReKQ0OSff5cptGTuOJiLencO8z7U67Bjxjzj18i0LWaCBNMlFL5NYUp0L XeSLpwJmFGvqM5I1FefX7On6eTukp9UGfbHuLGBpLTSQFxkwqVQOtJAuzgS6gBUh +EgzjD1amqT3HAW0LcOMAoAK+gF3aDjKuWKwLThd+epX/NuUTm04azO3bJfDzkvP jCxsOFngqIWZMnSJBkk0CEngpzDjstv23JRIRfXSc9k6yhbJzziWqOJHh755Uzk8 5JOzOlQBpCpUuuG0qE0aOpD3nWZY4q402gC34uPmb/HsNbgu4ENeuGUEuy7J0K70 1tT/kg3rUq/t5WWHVT/O1eoA0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDjdpdU 3Dw1CvXmDZQmQF+uufQIMB8GA1UdIwQYMBaAFFRyHghhCWkKOWUsuqig5hqwqfBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZFQi8zRUMwMkVDQTE3 NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFRbzVaU3k2cUtEbUdyQ3A4 SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZISWVDR0VKYVFvNVpTeTZxS0RtR3JDcDhISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZFQi8zRUMwMkVDQTE3NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFR bzVaU3k2cUtEbUdyQ3A4SEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE1A9zU0YVL1EDdHKytH/2WK2a3PWeNHQ7ADky1KqiD9w2jULXOTcX pNdPFidMA5DMS+xsh1U+g1FnnrulCFa+rLS/urycMHCcRdYr5XDI/RqkZ8UddIpK UPglZRnoKOWDxD4hss1t4UtM8FeNuHnPx2ZRw5V0ifbV70VPKQ+O5koeCx2Tlhnz haM3h69/kMKrKP7YGdH4TQBPaqWVgjaOZS+enhqHWI/XqEZ9QSk5cUgo5/RiZCSI Jeoq3vEYeHGcnj2v89IOfPTjSgG0V9sv4ST5FhISTcKKxrlTl68DGgW2kAi2G7Oq vg39KvCHoDiw/i5Dn2L2L1Ju/9h5u6Xo -----END CERTIFICATE-----Generated at Sun Aug 24 06:35:11 2025 by rpki-client