$ rpki-client -vvf rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft File: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft (raw, json) Hash identifier: zJjQGNSrEdmjc67MWNLX+HHkEbcOEmt1hEx9UBjo1k8= Subject key identifier: EB:99:7B:57:C2:13:43:95:DF:CF:88:01:73:B0:C1:20:94:1B:84:72 Authority key identifier: 54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 Certificate issuer: /CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Certificate serial: 0C02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft Manifest number: 0BF8 Signing time: Wed 02 Jul 2025 18:59:39 +0000 Manifest this update: Wed 02 Jul 2025 18:59:39 +0000 Manifest next update: Wed 09 Jul 2025 18:59:39 +0000 Files and hashes: 1: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl (hash: TCKCsFnwrxw3vbhp8VA8eMegEi1ta1ldQTpYHqqo+ho=) 2: 5EA04634181911EA9CA3C619C4F9AE02.roa (hash: 29yqRgflWjw/V78Nb1MTmLxw9ept1pEu77NRsVFXw6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3074 (0xc02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936EB, serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Validity Not Before: Jul 2 18:59:39 2025 GMT Not After : Jul 9 18:59:39 2025 GMT Subject: CN=6865819b-b3e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a3:9d:9c:b4:95:37:da:32:af:62:7d:9e:60: f8:0f:ae:ea:a9:53:85:e5:d9:e5:cc:2d:fd:c8:6c: 36:7c:d0:a8:84:e3:ca:a0:93:10:2c:d4:7e:80:fa: aa:73:09:cd:89:b3:b2:40:cd:76:e3:27:21:11:25: 06:18:19:43:f4:5a:d4:ca:98:c7:06:2c:e3:fb:f2: ab:d6:26:b4:ed:81:bf:a8:37:cd:78:a5:aa:3c:19: 12:23:92:e9:de:88:16:ee:b2:79:db:31:b8:0f:3c: 76:74:fb:4f:6b:e7:9a:d5:95:9f:d2:0e:23:6d:89: c4:2d:66:00:79:34:b2:21:9e:dd:97:c7:ff:c7:a2: e8:55:d0:e9:85:c7:d5:f6:75:95:e6:08:4c:56:77: d9:90:3f:7c:e3:ff:6d:fc:b7:e2:16:67:7b:f9:7b: cb:92:b3:80:08:98:c3:92:eb:a1:da:91:ac:b6:74: 49:5c:de:ee:c0:22:19:c3:d8:48:d6:25:12:34:75: 2f:4c:43:84:af:14:f2:76:6d:67:67:bb:54:6a:9b: 2d:6a:de:a4:b7:da:ec:c8:e8:1e:78:d7:8f:78:ad: b5:a3:fa:12:d9:92:9c:61:d1:ba:d6:01:b2:bb:6e: 0c:18:1c:cf:61:9a:67:55:26:57:58:3f:61:b5:75: 1e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:99:7B:57:C2:13:43:95:DF:CF:88:01:73:B0:C1:20:94:1B:84:72 X509v3 Authority Key Identifier: keyid:54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:3b:1c:cc:78:e1:2c:74:59:be:8c:0c:f0:a8:32:ca:fe:27: 0a:35:f6:cc:1c:6a:f4:25:6c:75:74:87:07:ec:fd:6b:e7:b7: a3:3e:a3:80:3a:0f:1a:c3:ab:cd:02:07:ab:3f:a9:db:40:1b: c7:b1:49:6f:91:d0:02:6d:af:95:43:ae:85:7e:b9:66:11:1f: 9f:02:83:70:f6:f2:04:39:0f:33:22:93:24:74:a8:d2:fc:32: ae:22:66:02:8e:5c:14:23:d7:1f:97:7a:18:be:60:ee:2c:53: 65:21:e5:1a:59:86:8a:99:1f:2c:d5:6b:0a:03:37:ff:bb:c6: ad:e4:bc:24:87:bf:19:37:61:44:8d:d8:6d:7c:e2:f9:8e:f2: 17:23:6e:64:aa:4d:f9:db:0a:f4:8b:95:1e:66:7c:02:5f:37: e5:98:ec:30:26:6f:ce:fd:90:0c:70:33:9f:82:ba:4e:da:e8: b6:d5:81:ce:cd:fb:6d:00:0d:e5:14:9c:9f:62:e8:79:0b:f1: ae:c1:e0:7f:4c:cf:23:a6:dd:b4:11:02:67:df:8a:3b:1c:ac: 2f:90:59:0c:6b:c8:f3:73:28:77:0f:14:45:61:bd:ac:56:92: e1:ef:29:20:77:13:f3:93:f4:b2:2e:ef:5e:cc:46:46:a4:6b: 06:90:7d:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2RUIxMTAvBgNVBAUTKDU0NzIxRTA4NjEwOTY5MEEzOTY1MkNCQUE4QTBFNjFB QjBBOUYwNzIwHhcNMjUwNzAyMTg1OTM5WhcNMjUwNzA5MTg1OTM5WjAYMRYwFAYD VQQDEw02ODY1ODE5Yi1iM2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06OdnLSVN9oyr2J9nmD4D67qqVOF5dnlzC39yGw2fNCohOPKoJMQLNR+gPqq cwnNibOyQM124ychESUGGBlD9FrUypjHBizj+/Kr1ia07YG/qDfNeKWqPBkSI5Lp 3ogW7rJ52zG4Dzx2dPtPa+ea1ZWf0g4jbYnELWYAeTSyIZ7dl8f/x6LoVdDphcfV 9nWV5ghMVnfZkD984/9t/LfiFmd7+XvLkrOACJjDkuuh2pGstnRJXN7uwCIZw9hI 1iUSNHUvTEOErxTydm1nZ7tUapstat6kt9rsyOgeeNePeK21o/oS2ZKcYdG61gGy u24MGBzPYZpnVSZXWD9htXUe1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuZe1fC E0OV38+IAXOwwSCUG4RyMB8GA1UdIwQYMBaAFFRyHghhCWkKOWUsuqig5hqwqfBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZFQi8zRUMwMkVDQTE3 NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFRbzVaU3k2cUtEbUdyQ3A4 SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZISWVDR0VKYVFvNVpTeTZxS0RtR3JDcDhISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZFQi8zRUMwMkVDQTE3NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFR bzVaU3k2cUtEbUdyQ3A4SEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjOxzMeOEsdFm+jAzwqDLK/icKNfbMHGr0JWx1dIcH7P1r57ejPqOA Og8aw6vNAgerP6nbQBvHsUlvkdACba+VQ66FfrlmER+fAoNw9vIEOQ8zIpMkdKjS /DKuImYCjlwUI9cfl3oYvmDuLFNlIeUaWYaKmR8s1WsKAzf/u8at5Lwkh78ZN2FE jdhtfOL5jvIXI25kqk352wr0i5UeZnwCXzflmOwwJm/O/ZAMcDOfgrpO2ui21YHO zfttAA3lFJyfYuh5C/GuweB/TM8jpt20EQJn34o7HKwvkFkMa8jzcyh3DxRFYb2s VpLh7ykgdxPzk/SyLu9ezEZGpGsGkH0x -----END CERTIFICATE-----Generated at Thu Jul 3 05:07:31 2025 by rpki-client