$ rpki-client -vvf rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft File: vhgzygFCXO9HWUXxmZieZUOzHmI.mft (raw, json) Hash identifier: 1bEXRLSZNbJQa9vhfWLylhdepKFV6nOelh7MDKhjmXM= Subject key identifier: 0A:D2:AC:50:9C:92:30:30:7E:B7:2A:37:DE:64:22:A8:67:ED:BD:82 Authority key identifier: BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62 Certificate issuer: /CN=A91382E4/serialNumber=BE1833CA01425CEF475945F199989E6543B31E62 Certificate serial: 0322 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft Manifest number: 031C Signing time: Sun 15 Jun 2025 00:53:39 +0000 Manifest this update: Sun 15 Jun 2025 00:53:39 +0000 Manifest next update: Sun 22 Jun 2025 00:53:39 +0000 Files and hashes: 1: vhgzygFCXO9HWUXxmZieZUOzHmI.crl (hash: CgvF2THLcLT07R1O5ZZcVaRwc0SE//4W9byJba5pcvE=) 2: A05195B4633011ED9122442CC4F9AE02.roa (hash: DzVCTjhUidYA2Rg2xDcdlUFOgDtQxj0BrAXsbysJQW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 802 (0x322) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91382E4, serialNumber=BE1833CA01425CEF475945F199989E6543B31E62 Validity Not Before: Jun 15 00:53:39 2025 GMT Not After : Jun 22 00:53:39 2025 GMT Subject: CN=684e1993-a54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c7:da:c7:40:8d:93:b7:38:38:2f:aa:c8:d4: 50:2a:65:63:e9:12:29:51:66:3f:d0:8f:c8:6a:7b: 8b:1e:42:6d:cc:9c:85:83:d9:18:21:70:31:1c:c8: 0c:7e:e8:c9:15:a0:09:a2:d7:a9:14:0e:5b:f2:69: 55:b6:6d:45:20:ff:ff:8f:6c:e4:44:e2:f8:ca:c5: 29:0c:8f:45:7a:b6:d2:10:4a:21:dc:52:94:87:2c: 13:e0:31:d0:f1:18:7a:be:c3:5e:c0:ad:2a:97:e5: 2b:ae:30:bd:fc:a5:a9:44:07:32:a7:cd:72:5b:8d: 46:ee:bb:6e:78:9e:94:01:f0:e1:24:4a:e7:34:5f: ab:b8:50:db:63:ec:be:b3:33:53:2e:d3:fe:fd:28: e4:c4:81:c9:5a:d0:9b:59:b4:16:b0:48:94:f8:93: 09:4b:f6:2b:b5:3a:56:1d:86:73:71:09:b3:f3:72: d4:0b:1e:2b:73:e0:20:23:27:af:15:15:f8:8b:0c: 4d:db:e1:e8:74:07:0a:21:b9:8c:99:c2:80:47:b6: f5:6b:27:63:a6:f1:68:5b:d7:d2:c6:28:c3:3d:20: 72:63:a9:28:67:63:00:ad:5d:8f:4a:ec:97:84:8c: f4:37:72:7a:8b:6c:cb:0b:19:86:6e:2a:d2:f7:d5: 98:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D2:AC:50:9C:92:30:30:7E:B7:2A:37:DE:64:22:A8:67:ED:BD:82 X509v3 Authority Key Identifier: keyid:BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:5e:6e:b0:ba:01:80:a8:12:23:ff:31:61:80:39:c5:e6:bc: 03:d7:f0:81:b1:1b:f5:a1:aa:64:5f:ec:17:84:66:79:63:ac: c8:7a:1b:a0:bc:20:72:74:4b:19:98:87:48:c8:42:1d:db:89: eb:09:e0:fc:b5:89:ed:ba:ea:80:2b:f7:a2:fc:db:9a:08:47: f0:8b:87:56:b7:db:34:58:4c:6c:6c:76:67:01:bf:17:5f:ab: 66:11:a5:71:a7:92:c8:bd:e1:4f:fe:ea:8c:b5:36:b5:94:93: be:a7:03:62:48:07:de:6d:3f:26:c5:12:1d:46:82:51:22:5e: 65:02:e6:3d:07:ae:a5:2a:61:69:cc:43:86:85:cc:eb:67:08: 7f:f6:03:ea:2a:22:99:00:2a:d7:45:72:92:79:e7:56:8f:1e: 37:06:f1:60:6b:9a:5e:c3:f4:50:de:a1:f5:a1:a6:71:14:a7: 65:25:54:fc:9e:1a:5c:89:d5:2f:94:23:d9:cc:44:f5:83:a6: 28:9e:ae:2e:a1:75:6a:e6:77:c8:99:91:e1:5f:c4:9c:6b:c3: 32:ac:25:41:51:94:0d:c6:54:e1:be:c9:29:f7:5c:24:b4:f4: 42:65:e4:f5:5c:5d:19:0c:39:69:29:2f:23:4d:e3:d8:6f:9b: 72:8f:c7:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgyRTQxMTAvBgNVBAUTKEJFMTgzM0NBMDE0MjVDRUY0NzU5NDVGMTk5OTg5RTY1 NDNCMzFFNjIwHhcNMjUwNjE1MDA1MzM5WhcNMjUwNjIyMDA1MzM5WjAYMRYwFAYD VQQDEw02ODRlMTk5My1hNTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsfax0CNk7c4OC+qyNRQKmVj6RIpUWY/0I/IanuLHkJtzJyFg9kYIXAxHMgM fujJFaAJotepFA5b8mlVtm1FIP//j2zkROL4ysUpDI9FerbSEEoh3FKUhywT4DHQ 8Rh6vsNewK0ql+UrrjC9/KWpRAcyp81yW41G7rtueJ6UAfDhJErnNF+ruFDbY+y+ szNTLtP+/SjkxIHJWtCbWbQWsEiU+JMJS/YrtTpWHYZzcQmz83LUCx4rc+AgIyev FRX4iwxN2+HodAcKIbmMmcKAR7b1aydjpvFoW9fSxijDPSByY6koZ2MArV2PSuyX hIz0N3J6i2zLCxmGbirS99WYPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArSrFCc kjAwfrcqN95kIqhn7b2CMB8GA1UdIwQYMBaAFL4YM8oBQlzvR1lF8ZmYnmVDsx5i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODJFNC8yMzZGNDA1NEQx MTkxMUVDOTAwQTJGNkZDNEY5QUUwMi92aGd6eWdGQ1hPOUhXVVh4bVppZVpVT3pI bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoZ3p5Z0ZDWE85SFdVWHhtWmllWlVPekhtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODJFNC8yMzZGNDA1NEQxMTkxMUVDOTAwQTJGNkZDNEY5QUUwMi92aGd6eWdGQ1hP OUhXVVh4bVppZVpVT3pIbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOXm6wugGAqBIj/zFhgDnF5rwD1/CBsRv1oapkX+wXhGZ5Y6zIehug vCBydEsZmIdIyEId24nrCeD8tYntuuqAK/ei/NuaCEfwi4dWt9s0WExsbHZnAb8X X6tmEaVxp5LIveFP/uqMtTa1lJO+pwNiSAfebT8mxRIdRoJRIl5lAuY9B66lKmFp zEOGhczrZwh/9gPqKiKZACrXRXKSeedWjx43BvFga5pew/RQ3qH1oaZxFKdlJVT8 nhpcidUvlCPZzET1g6Yonq4uoXVq5nfImZHhX8Sca8MyrCVBUZQNxlThvskp91wk tPRCZeT1XF0ZDDlpKS8jTePYb5tyj8eC -----END CERTIFICATE-----Generated at Mon Jun 16 10:37:52 2025 by rpki-client