$ rpki-client -vvf rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft File: VRT85Dhj9Rga80k4LThBTpYPCW8.mft (raw, json) Hash identifier: AR5JYHR42udC9sBb4LDaicO1aWMSMQLD583RT4NeVxE= Subject key identifier: B0:D9:1E:58:7D:A5:CC:40:76:84:42:6D:0F:36:FA:B7:A5:C4:CE:DF Authority key identifier: 55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F Certificate issuer: /CN=A9195262/serialNumber=5514FCE43863F5181AF349382D38414E960F096F Certificate serial: 08EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft Manifest number: 08E6 Signing time: Mon 30 Jun 2025 20:37:20 +0000 Manifest this update: Mon 30 Jun 2025 20:37:19 +0000 Manifest next update: Mon 07 Jul 2025 20:37:19 +0000 Files and hashes: 1: VRT85Dhj9Rga80k4LThBTpYPCW8.crl (hash: eB7XqKWX8OdzTzuDODU0sSqjquprENlPg7O7TAoXV80=) 2: DFC21CD8B1CF11EAA8732709C4F9AE02.roa (hash: fBbrGPpyBqHG5VjMBpwa+Y1+AP7kUm89FdDIYPNDwG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2287 (0x8ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195262, serialNumber=5514FCE43863F5181AF349382D38414E960F096F Validity Not Before: Jun 30 20:37:19 2025 GMT Not After : Jul 7 20:37:19 2025 GMT Subject: CN=6862f580-6b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:41:02:be:81:5d:37:7f:dd:69:c3:66:fb:f0: a1:82:8e:ae:a5:f0:c9:0a:70:d7:c8:bb:c1:f4:61: 98:c9:cc:8c:51:72:fb:8f:a9:bf:a0:a9:f6:0e:ff: 96:a9:a4:31:37:18:08:bf:0c:fd:60:53:df:77:d5: 96:b1:c5:60:7c:23:eb:ed:57:19:69:08:03:90:e9: 07:87:4a:e8:22:b6:7e:66:cc:ad:7a:9e:0b:1a:72: b6:c2:5a:0a:97:47:37:bf:55:8c:4b:ca:0f:85:f0: 72:f2:ca:ca:19:d8:5e:ae:93:f5:ef:7b:c5:74:14: d3:5d:16:19:2a:b3:84:fe:f6:57:60:c1:18:ac:70: 3b:8c:1b:bd:e4:92:de:ad:14:4a:0a:69:5f:92:8f: c7:74:56:46:60:fc:76:a4:0a:53:d1:89:2b:25:2e: 00:ed:4c:ec:25:29:92:03:db:74:8b:47:15:97:04: 77:ea:9d:9a:39:30:8d:91:74:8e:d2:60:08:16:dd: 40:b7:24:46:27:43:b4:f3:49:ff:a5:39:40:e6:b6: 76:8a:87:25:d9:01:3e:d9:e2:fc:f1:cb:cf:47:3e: 8b:14:be:80:85:0f:08:63:1f:a7:b8:6a:9e:d9:2a: 81:19:c2:5f:71:34:77:3a:5e:be:85:d8:03:c4:c1: 04:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D9:1E:58:7D:A5:CC:40:76:84:42:6D:0F:36:FA:B7:A5:C4:CE:DF X509v3 Authority Key Identifier: keyid:55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:4c:3a:b2:dc:8b:b8:1b:1b:a2:ef:0a:05:12:27:1c:0b:57: 8a:59:81:d4:5d:81:16:f9:a0:fa:91:66:72:98:53:03:fb:c0: 6e:a4:9d:eb:3a:d1:3a:25:63:de:99:6e:6f:7b:27:dd:7d:0c: c1:9d:25:a0:ad:aa:fc:f5:73:68:d4:bc:0e:79:67:88:d3:76: 88:75:e7:7d:dc:1f:0c:b1:58:e7:7e:fe:fd:d4:80:1b:ad:05: 1a:ca:c1:f7:45:20:37:68:81:33:fe:05:52:93:55:09:fb:c3: ff:f6:9f:bf:96:42:5d:75:7e:e6:cf:0c:10:52:0b:43:04:98: c5:de:49:05:21:08:74:3c:da:84:2c:d2:6a:38:66:02:c0:05: 33:dc:f4:23:1a:a6:fe:90:01:7c:f2:b2:67:45:b3:dd:fb:02: 8e:24:8f:0e:3b:2a:13:94:8d:8a:ad:81:a3:9f:fe:69:37:44: f8:05:36:a5:22:36:90:40:6f:05:ac:9e:b1:ad:43:cf:2a:12: 91:1c:6a:eb:f7:9f:90:5e:1c:f1:90:90:a1:d8:f8:13:2d:70: d1:01:cf:13:1a:27:b6:75:3a:5b:bb:35:1c:72:cf:38:05:7f: 08:ff:47:ba:36:2b:84:31:a1:1b:32:98:62:a1:33:4c:3f:93: be:d2:3e:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUyNjIxMTAvBgNVBAUTKDU1MTRGQ0U0Mzg2M0Y1MTgxQUYzNDkzODJEMzg0MTRF OTYwRjA5NkYwHhcNMjUwNjMwMjAzNzE5WhcNMjUwNzA3MjAzNzE5WjAYMRYwFAYD VQQDEw02ODYyZjU4MC02YjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30ECvoFdN3/dacNm+/Chgo6upfDJCnDXyLvB9GGYycyMUXL7j6m/oKn2Dv+W qaQxNxgIvwz9YFPfd9WWscVgfCPr7VcZaQgDkOkHh0roIrZ+Zsytep4LGnK2wloK l0c3v1WMS8oPhfBy8srKGdherpP173vFdBTTXRYZKrOE/vZXYMEYrHA7jBu95JLe rRRKCmlfko/HdFZGYPx2pApT0YkrJS4A7UzsJSmSA9t0i0cVlwR36p2aOTCNkXSO 0mAIFt1AtyRGJ0O080n/pTlA5rZ2iocl2QE+2eL88cvPRz6LFL6AhQ8IYx+nuGqe 2SqBGcJfcTR3Ol6+hdgDxMEE/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDZHlh9 pcxAdoRCbQ82+relxM7fMB8GA1UdIwQYMBaAFFUU/OQ4Y/UYGvNJOC04QU6WDwlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTI2Mi9GN0E2RDU5Q0Iw RkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlSZ2E4MGs0TFRoQlRwWVBD VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSVDg1RGhqOVJnYTgwazRMVGhCVHBZUENXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTI2Mi9GN0E2RDU5Q0IwRkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlS Z2E4MGs0TFRoQlRwWVBDVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJTDqy3Iu4Gxui7woFEiccC1eKWYHUXYEW+aD6kWZymFMD+8BupJ3r OtE6JWPemW5veyfdfQzBnSWgrar89XNo1LwOeWeI03aIded93B8MsVjnfv791IAb rQUaysH3RSA3aIEz/gVSk1UJ+8P/9p+/lkJddX7mzwwQUgtDBJjF3kkFIQh0PNqE LNJqOGYCwAUz3PQjGqb+kAF88rJnRbPd+wKOJI8OOyoTlI2KrYGjn/5pN0T4BTal IjaQQG8FrJ6xrUPPKhKRHGrr95+QXhzxkJCh2PgTLXDRAc8TGie2dTpbuzUccs84 BX8I/0e6NiuEMaEbMphioTNMP5O+0j4/ -----END CERTIFICATE-----Generated at Tue Jul 1 12:39:34 2025 by rpki-client