$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft File: vHENBWM8XhGwdEtxrruIriskRuM.mft (raw, json) Hash identifier: V+YXtLTTjodR+1ZNM2++B9yd4q08NP70i3e7nG++Z48= Subject key identifier: 19:48:49:DC:AE:D3:FC:25:87:89:AA:99:C4:AC:A6:04:3A:E9:BA:7E Authority key identifier: BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 Certificate issuer: /CN=A91AF406/serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Certificate serial: 1370 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft Manifest number: 1368 Signing time: Fri 22 Aug 2025 17:07:29 +0000 Manifest this update: Fri 22 Aug 2025 17:07:29 +0000 Manifest next update: Fri 29 Aug 2025 17:07:29 +0000 Files and hashes: 1: vHENBWM8XhGwdEtxrruIriskRuM.crl (hash: 22LywpPmv8dp+wo1yPJN+OaOVqj7A1fk1FO73nOE1Yo=) 2: C2065F2CA5F311E8B54BF03DC4F9AE02.roa (hash: c/V3Stz0hBoC77cDsx2sOFkExhPVs+UBbA7TaA5YseQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4976 (0x1370) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF406, serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3 Validity Not Before: Aug 22 17:07:29 2025 GMT Not After : Aug 29 17:07:29 2025 GMT Subject: CN=68a8a3d1-5c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6f:23:78:1a:7a:80:cf:98:34:a2:a7:23:5b: 27:4f:a8:eb:22:a5:fa:9f:3c:5b:99:9d:c5:55:0a: ed:4a:6c:40:63:88:06:b0:bd:74:54:d4:7c:3d:f8: 4d:45:08:d7:a2:0e:e7:eb:df:42:f3:72:66:46:80: 27:bd:96:69:01:a8:1c:ef:5f:b4:69:26:4c:01:62: 89:95:73:4f:ff:14:30:21:ae:88:ef:b2:aa:ee:55: a2:05:8a:77:cc:57:85:ec:7f:6d:9a:7c:f3:2a:5c: 62:0b:cc:a7:5b:0d:48:7f:3a:d1:c1:ab:23:26:77: 6a:d2:7a:a5:fe:df:ba:5a:da:64:08:0d:01:91:a5: 6c:32:c1:f9:e6:f0:fd:ae:5f:89:95:df:bf:e4:20: 91:48:ad:b0:91:c4:1a:23:06:99:b4:7e:be:61:14: ef:37:b7:e6:1a:b1:c2:5f:2f:0d:f6:27:01:f4:55: 18:ef:c3:b1:bc:29:18:d5:8e:7d:3b:95:04:f6:4f: c5:70:ba:90:6a:06:6f:28:53:dc:76:27:4d:5e:2c: 20:d2:a6:f2:fa:60:3e:77:0e:b0:0c:5c:b1:b2:cd: de:73:50:72:9d:62:4e:89:6c:31:e8:c3:9f:4f:85: 94:59:48:86:82:25:43:90:b0:17:0e:83:f6:0b:c9: 2f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:48:49:DC:AE:D3:FC:25:87:89:AA:99:C4:AC:A6:04:3A:E9:BA:7E X509v3 Authority Key Identifier: keyid:BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:29:2b:74:98:32:2d:6e:26:ce:7b:d1:cf:7d:73:21:e9:aa: 75:12:43:43:43:0d:a1:fa:58:79:70:b7:d8:e1:71:d5:82:df: a9:ce:ec:30:2a:86:b8:1d:8f:c9:8b:c4:6a:9c:cf:43:32:56: 46:a3:cf:b2:61:7e:d2:36:bf:27:55:e2:a3:bf:b7:12:f2:6d: 95:a1:3f:8b:e6:cd:da:b4:7e:ef:23:c6:bc:13:23:2b:f8:40: 49:6c:a4:a5:01:bf:ae:19:8c:f5:e8:5f:1d:15:7c:d7:11:71: 12:ee:f8:1d:d5:ef:a7:65:b3:06:8e:80:ac:d9:e0:58:bf:12: 3e:fd:cd:3f:96:41:77:de:43:92:05:07:3b:29:40:4f:60:71: 3e:95:fd:a7:d6:84:12:8b:69:e2:b9:84:70:42:19:30:02:b0: 7d:e0:54:a3:ac:69:ef:f4:41:29:45:bb:a6:c2:dc:03:3f:32: b8:1a:21:b0:9c:eb:cc:7f:24:df:60:ef:9c:31:8a:dc:56:04: 31:e0:a8:24:51:2d:25:90:52:7b:79:5b:02:9d:e0:33:89:95: c0:15:8f:21:76:8c:e7:fb:c6:57:43:10:e8:98:4c:2f:c1:35: 8a:8f:90:be:d8:ce:6c:e3:a7:05:60:89:20:02:de:02:98:1e: c6:ae:66:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDYxMTAvBgNVBAUTKEJDNzEwRDA1NjMzQzVFMTFCMDc0NEI3MUFFQkI4OEFF MkIyNDQ2RTMwHhcNMjUwODIyMTcwNzI5WhcNMjUwODI5MTcwNzI5WjAYMRYwFAYD VQQDEw02OGE4YTNkMS01YzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz28jeBp6gM+YNKKnI1snT6jrIqX6nzxbmZ3FVQrtSmxAY4gGsL10VNR8PfhN RQjXog7n699C83JmRoAnvZZpAagc71+0aSZMAWKJlXNP/xQwIa6I77Kq7lWiBYp3 zFeF7H9tmnzzKlxiC8ynWw1IfzrRwasjJndq0nql/t+6WtpkCA0BkaVsMsH55vD9 rl+Jld+/5CCRSK2wkcQaIwaZtH6+YRTvN7fmGrHCXy8N9icB9FUY78OxvCkY1Y59 O5UE9k/FcLqQagZvKFPcdidNXiwg0qby+mA+dw6wDFyxss3ec1BynWJOiWwx6MOf T4WUWUiGgiVDkLAXDoP2C8kv5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlISdyu 0/wlh4mqmcSspgQ66bp+MB8GA1UdIwQYMBaAFLxxDQVjPF4RsHRLca67iK4rJEbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNi8zRjY3MEMwQ0E1 RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFhoR3dkRXR4cnJ1SXJpc2tS dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZIRU5CV004WGhHd2RFdHhycnVJcmlza1J1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjQwNi8zRjY3MEMwQ0E1RjIxMUU4OTdBNzUwM0FDNEY5QUUwMi92SEVOQldNOFho R3dkRXR4cnJ1SXJpc2tSdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTKSt0mDItbibOe9HPfXMh6ap1EkNDQw2h+lh5cLfY4XHVgt+pzuww Koa4HY/Ji8RqnM9DMlZGo8+yYX7SNr8nVeKjv7cS8m2VoT+L5s3atH7vI8a8EyMr +EBJbKSlAb+uGYz16F8dFXzXEXES7vgd1e+nZbMGjoCs2eBYvxI+/c0/lkF33kOS BQc7KUBPYHE+lf2n1oQSi2niuYRwQhkwArB94FSjrGnv9EEpRbumwtwDPzK4GiGw nOvMfyTfYO+cMYrcVgQx4KgkUS0lkFJ7eVsCneAziZXAFY8hdozn+8ZXQxDomEwv wTWKj5C+2M5s46cFYIkgAt4CmB7Grma5 -----END CERTIFICATE-----Generated at Sat Aug 23 18:24:43 2025 by rpki-client