$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft File: vpHAXiGMfmbqb5T50kV3cEGRveI.mft (raw, json) Hash identifier: ild2CcwC6UAMJ5gcoYYdTwJQ/tuQ7Wq/VP4acC0Qy/k= Subject key identifier: 03:5A:0C:E7:E2:0D:5A:B3:07:85:90:F0:68:0C:EF:DA:60:22:C3:FA Authority key identifier: BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2 Certificate issuer: /CN=A912FCBB/serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft Manifest number: A5 Signing time: Thu 19 Jun 2025 05:30:23 +0000 Manifest this update: Thu 19 Jun 2025 05:30:23 +0000 Manifest next update: Thu 26 Jun 2025 05:30:23 +0000 Files and hashes: 1: vpHAXiGMfmbqb5T50kV3cEGRveI.crl (hash: V/xqyyJaEgOR2L3y/wBe87d7BrL5S+Bbusnc/N6NMmU=) 2: 8F80C48E531211EFAB0B8726C4F9AE02.roa (hash: kqqxAXnrRR7qW3plZHXyG8tkzcmd2G3d0enNBzRXcMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB, serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2 Validity Not Before: Jun 19 05:30:23 2025 GMT Not After : Jun 26 05:30:23 2025 GMT Subject: CN=6853a06f-3ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e4:d1:a0:72:5d:2c:2c:2b:48:a3:91:ca:72: 7e:52:ca:ec:23:56:d2:b0:13:b9:5b:5f:9f:8f:b4: e9:4e:38:71:18:96:0d:5f:e4:2b:14:3a:ee:7d:71: 81:1d:0c:85:70:fd:96:8e:24:b4:36:96:6a:a5:4f: 15:51:93:f2:07:4b:ec:0d:04:0b:aa:85:0f:bc:8a: 86:66:7d:16:f6:56:05:3a:52:2d:e9:34:cc:ae:75: 3d:76:69:29:cd:12:ba:75:ee:57:0a:df:0c:ab:3c: b7:cb:4d:c0:1f:aa:9d:11:e4:26:c8:fd:5e:e5:2d: 08:58:f7:14:52:f2:37:c6:3b:10:1a:75:4b:60:40: 3b:97:91:e5:b7:a2:e3:57:23:91:b0:4e:de:c3:58: ca:00:89:c3:ba:f4:ca:f4:5e:35:ed:58:96:17:3c: 0a:38:6d:46:0c:f2:af:fb:da:90:3a:cb:16:08:15: a1:f5:a7:4d:aa:14:03:48:98:16:ff:b6:48:c3:3a: a3:0b:85:40:c7:66:bc:a7:99:2e:bb:46:2e:39:74: da:75:d9:8f:d1:ed:7c:63:52:c3:5c:f9:fb:c9:58: 2d:42:b3:92:52:a3:a2:c7:eb:31:a0:cd:6a:b0:b2: c2:e1:bd:8e:ce:42:26:a8:9c:38:09:66:82:a9:d3: 78:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5A:0C:E7:E2:0D:5A:B3:07:85:90:F0:68:0C:EF:DA:60:22:C3:FA X509v3 Authority Key Identifier: keyid:BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:93:ac:20:63:6a:16:f3:1b:53:de:07:9a:6b:ba:50:f9:03: 00:ae:2f:f6:d5:e3:c2:28:d7:34:5b:b9:e0:ab:1c:8e:3b:93: 45:e0:12:f2:e2:e8:31:75:af:75:ee:7e:80:5f:47:52:4b:a8: 64:14:30:19:ca:a7:a0:63:6e:f5:26:3e:79:4c:4f:9e:4b:e1: 5f:de:67:e1:32:11:44:3a:8d:7d:ec:c3:23:2c:cf:53:6f:7c: af:d3:ca:99:43:df:b4:86:0a:1f:bf:ce:ed:28:2a:c2:a0:b1: 4d:2c:65:03:26:ce:eb:18:63:87:f5:e8:8e:43:b0:20:3c:01: f3:5e:b3:ff:a4:c4:3e:4a:2b:bd:26:5f:a0:c5:88:f1:13:96: 11:d6:2f:71:d0:c6:22:0f:c0:40:6f:58:40:77:79:e2:5d:16: 37:12:cb:f7:47:56:52:c9:96:83:3d:d3:9a:35:f0:df:39:a5: 6a:9d:f1:1c:a7:6c:f2:cf:d5:9b:38:b4:63:f1:a9:67:3d:d3: 73:0b:c0:fd:d9:d2:60:13:f1:e3:85:58:51:1d:fb:11:c9:21: 3d:8c:c1:fd:52:3a:8c:ee:ec:d8:a0:2c:5e:c2:6d:71:c4:b6: 5d:25:a2:02:b0:d6:5c:20:4e:9f:d8:96:3c:2a:86:62:d4:42: d1:e0:0e:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDQkIxMTAvBgNVBAUTKEJFOTFDMDVFMjE4QzdFNjZFQTZGOTRGOUQyNDU3Nzcw NDE5MUJERTIwHhcNMjUwNjE5MDUzMDIzWhcNMjUwNjI2MDUzMDIzWjAYMRYwFAYD VQQDEw02ODUzYTA2Zi0zYmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+TRoHJdLCwrSKORynJ+UsrsI1bSsBO5W1+fj7TpTjhxGJYNX+QrFDrufXGB HQyFcP2WjiS0NpZqpU8VUZPyB0vsDQQLqoUPvIqGZn0W9lYFOlIt6TTMrnU9dmkp zRK6de5XCt8Mqzy3y03AH6qdEeQmyP1e5S0IWPcUUvI3xjsQGnVLYEA7l5Hlt6Lj VyORsE7ew1jKAInDuvTK9F417ViWFzwKOG1GDPKv+9qQOssWCBWh9adNqhQDSJgW /7ZIwzqjC4VAx2a8p5kuu0YuOXTaddmP0e18Y1LDXPn7yVgtQrOSUqOix+sxoM1q sLLC4b2OzkImqJw4CWaCqdN4WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANaDOfi DVqzB4WQ8GgM79pgIsP6MB8GA1UdIwQYMBaAFL6RwF4hjH5m6m+U+dJFd3BBkb3i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81NEQyM0Y0NjUz MEYxMUVGOTlDODhEMEZDNEY5QUUwMi92cEhBWGlHTWZtYnFiNVQ1MGtWM2NFR1J2 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZwSEFYaUdNZm1icWI1VDUwa1YzY0VHUnZlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNCQi81NEQyM0Y0NjUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi92cEhBWGlHTWZt YnFiNVQ1MGtWM2NFR1J2ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFk6wgY2oW8xtT3geaa7pQ+QMAri/21ePCKNc0W7ngqxyOO5NF4BLy 4ugxda917n6AX0dSS6hkFDAZyqegY271Jj55TE+eS+Ff3mfhMhFEOo197MMjLM9T b3yv08qZQ9+0hgofv87tKCrCoLFNLGUDJs7rGGOH9eiOQ7AgPAHzXrP/pMQ+Siu9 Jl+gxYjxE5YR1i9x0MYiD8BAb1hAd3niXRY3Esv3R1ZSyZaDPdOaNfDfOaVqnfEc p2zyz9WbOLRj8alnPdNzC8D92dJgE/HjhVhRHfsRySE9jMH9UjqM7uzYoCxewm1x xLZdJaICsNZcIE6f2JY8KoZi1ELR4A6r -----END CERTIFICATE-----Generated at Thu Jun 19 12:12:13 2025 by rpki-client