$ rpki-client -vvf rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft File: Vg3ED_OlCfnv21Jg7huzhi222N8.mft (raw, json) Hash identifier: GWjhRfgUR3sRUBdekNMquRxouJrkZ0kNQriAU5T6qVc= Subject key identifier: FE:D8:49:94:32:E1:B9:1A:08:54:BA:6A:94:E6:F4:1B:1B:F8:92:58 Authority key identifier: 56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF Certificate issuer: /CN=A912E926/serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft Manifest number: 0181 Signing time: Fri 13 Jun 2025 02:38:25 +0000 Manifest this update: Fri 13 Jun 2025 02:38:25 +0000 Manifest next update: Fri 20 Jun 2025 02:38:25 +0000 Files and hashes: 1: Vg3ED_OlCfnv21Jg7huzhi222N8.crl (hash: x253m8//rzh8/stNKrYvKJ5SmmJufmvlak8dZTLLCYI=) 2: 46BF7E7CFA0611ED802A1C29C4F9AE02.roa (hash: jnuMHWmzh0Mkxo/UqfQiHQK9zwVM6oBly72+HKRXMlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E926, serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF Validity Not Before: Jun 13 02:38:25 2025 GMT Not After : Jun 20 02:38:25 2025 GMT Subject: CN=684b8f21-8a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:79:35:c5:6c:8c:ea:bd:12:d0:1f:1e:6f:d0: 7e:2c:e4:92:a8:44:23:a2:2c:1e:97:ac:f2:41:5a: 0a:e3:73:21:40:a5:f0:5d:7a:1b:18:e0:9f:fc:b1: a8:e1:a9:13:3d:dc:26:a3:4c:94:93:8e:00:9d:10: 38:0e:72:48:33:21:f1:94:3d:fb:36:0c:d6:08:b6: 75:07:3d:02:d0:e9:10:4c:ec:bd:11:0f:8b:a5:b3: 34:55:37:6b:7d:ff:8b:6c:42:ff:44:93:bc:c8:66: 7b:89:87:31:b1:2b:d7:07:00:bb:81:ba:e5:f6:b3: 68:a9:16:62:b5:1e:fc:38:1e:96:97:e0:16:25:6f: 0c:82:1d:ed:f3:d5:fa:c6:f2:92:8e:16:9a:50:0c: 41:5c:d6:ce:9c:2c:8f:58:7e:77:70:80:28:f7:07: 83:43:60:69:65:3b:19:24:00:c9:06:f8:da:64:38: 60:3c:4f:ec:62:58:d9:c5:3c:ec:0f:35:b5:57:8a: ab:ab:01:68:10:4f:bf:24:73:04:23:69:e3:78:f6: a0:1a:f0:d2:af:11:74:47:63:db:7b:13:38:e0:f4: fb:f5:44:fd:ab:ae:6a:d2:09:d5:93:a5:f3:39:ac: c8:c5:9e:4b:58:2a:06:42:6f:aa:e9:f5:03:d8:ae: 88:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D8:49:94:32:E1:B9:1A:08:54:BA:6A:94:E6:F4:1B:1B:F8:92:58 X509v3 Authority Key Identifier: keyid:56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:d6:fe:73:a7:2c:c7:83:83:17:e9:a5:27:1b:0b:b8:3b:18: 01:00:68:6a:d9:16:58:69:4a:65:cb:f7:81:ac:5c:5c:f0:b8: d1:9e:ba:bf:9f:2b:99:88:2d:1a:67:f7:04:72:0b:5a:85:39: d7:5b:b9:28:6f:a2:30:18:ac:07:da:47:57:19:13:71:88:02: b6:de:79:4d:5e:ad:5e:8d:b3:2e:83:ca:a7:e5:97:10:90:3f: 98:c5:99:39:62:0c:2d:f9:ef:bf:2c:65:3c:6a:72:6f:9f:42: 46:0d:c1:bb:c2:e1:1f:fa:61:08:d1:18:9f:35:f7:0f:0d:65: 8a:5c:3e:bc:51:af:4e:a1:48:a1:d3:25:3e:1b:7e:d0:5d:07: 76:2a:7f:a1:50:ec:7a:08:32:71:7a:32:03:e3:8d:09:27:d4: 55:1a:ef:5c:41:8f:9a:94:54:e5:c4:68:0f:d0:ab:f4:a4:e2: fb:4c:95:f4:76:4c:8e:6f:7a:84:62:4c:6f:9f:25:76:29:91: 1c:6d:7f:ea:a9:6c:f1:99:2b:4e:c0:58:13:dd:03:43:18:0d: ff:9a:20:e9:9e:76:00:9f:f5:7e:13:bd:6b:98:61:db:e0:5d: b9:2a:3f:d0:b8:ff:99:68:e2:d0:8e:8f:34:5c:10:9a:d5:e5: 4e:24:08:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MjYxMTAvBgNVBAUTKDU2MERDNDBGRjNBNTA5RjlFRkRCNTI2MEVFMUJCMzg2 MkRCNkQ4REYwHhcNMjUwNjEzMDIzODI1WhcNMjUwNjIwMDIzODI1WjAYMRYwFAYD VQQDEw02ODRiOGYyMS04YTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5nk1xWyM6r0S0B8eb9B+LOSSqEQjoiwel6zyQVoK43MhQKXwXXobGOCf/LGo 4akTPdwmo0yUk44AnRA4DnJIMyHxlD37NgzWCLZ1Bz0C0OkQTOy9EQ+LpbM0VTdr ff+LbEL/RJO8yGZ7iYcxsSvXBwC7gbrl9rNoqRZitR78OB6Wl+AWJW8Mgh3t89X6 xvKSjhaaUAxBXNbOnCyPWH53cIAo9weDQ2BpZTsZJADJBvjaZDhgPE/sYljZxTzs DzW1V4qrqwFoEE+/JHMEI2njePagGvDSrxF0R2PbexM44PT79UT9q65q0gnVk6Xz OazIxZ5LWCoGQm+q6fUD2K6I/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7YSZQy 4bkaCFS6apTm9Bsb+JJYMB8GA1UdIwQYMBaAFFYNxA/zpQn579tSYO4bs4Ytttjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyNi84NjY3NkRBMEZB MDExMUVEQkFENzVEMjhDNEY5QUUwMi9WZzNFRF9PbENmbnYyMUpnN2h1emhpMjIy TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZnM0VEX09sQ2ZudjIxSmc3aHV6aGkyMjJOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyNi84NjY3NkRBMEZBMDExMUVEQkFENzVEMjhDNEY5QUUwMi9WZzNFRF9PbENm bnYyMUpnN2h1emhpMjIyTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG1v5zpyzHg4MX6aUnGwu4OxgBAGhq2RZYaUply/eBrFxc8LjRnrq/ nyuZiC0aZ/cEcgtahTnXW7kob6IwGKwH2kdXGRNxiAK23nlNXq1ejbMug8qn5ZcQ kD+YxZk5Ygwt+e+/LGU8anJvn0JGDcG7wuEf+mEI0RifNfcPDWWKXD68Ua9OoUih 0yU+G37QXQd2Kn+hUOx6CDJxejID440JJ9RVGu9cQY+alFTlxGgP0Kv0pOL7TJX0 dkyOb3qEYkxvnyV2KZEcbX/qqWzxmStOwFgT3QNDGA3/miDpnnYAn/V+E71rmGHb 4F25Kj/QuP+ZaOLQjo80XBCa1eVOJAh/ -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:00 2025 by rpki-client