$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft File: vhLS7vQqHJ3CpXIERscDFsfCBlA.mft (raw, json) Hash identifier: 18XcvRqY6FOF3PgjYuDYlgyMipgdsf8/4xy7hJ8BMok= Subject key identifier: 0D:7D:46:21:EF:47:4B:A2:8A:BA:BB:81:6C:53:C0:58:5D:4E:AF:6B Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Certificate serial: 27F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft Manifest number: 27DD Signing time: Wed 18 Jun 2025 15:37:50 +0000 Manifest this update: Wed 18 Jun 2025 15:37:50 +0000 Manifest next update: Wed 25 Jun 2025 15:37:50 +0000 Files and hashes: 1: vhLS7vQqHJ3CpXIERscDFsfCBlA.crl (hash: 05NxXBYZ9DajOVpMeFEPj1Yoq527c4k9xPOOefr9meY=) 2: B70AE7D20C6B11EC82638A40C4F9AE02.roa (hash: qyTxkkSSZz/mEPJmCPmO4drOsBAzqss/jEsEWzyS7n4=) 3: 5B7F22440AF811ECB423A671C4F9AE02.roa (hash: IqEsazWsEikd3PbwO1Zi4SKIR5/W/ukREa4rnvdDPhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 15:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10232 (0x27f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Validity Not Before: Jun 18 15:37:50 2025 GMT Not After : Jun 25 15:37:50 2025 GMT Subject: CN=6852dd4e-84f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:da:c4:52:3a:22:71:a3:af:b0:c9:6a:56:52: fd:af:9c:1a:37:fd:03:7e:a2:9e:5f:3a:3a:02:1d: ec:6c:77:15:94:06:80:9c:fc:b5:3f:45:34:3f:d4: 0b:fd:b5:ba:d7:fb:92:65:38:f3:ec:af:7c:02:5e: 4d:5b:3d:1e:34:5f:20:0e:67:13:56:eb:7c:58:93: bc:7a:8b:13:6d:e3:bd:26:43:ad:1b:c2:d5:ae:1e: d6:45:b3:04:ce:2e:cc:d3:be:b1:dc:84:3e:55:e3: 0f:e4:86:80:53:5a:8a:a0:37:d6:67:a3:fc:1d:f5: d7:7d:68:d6:06:6f:76:d3:73:74:a5:cb:62:e1:85: ac:09:e2:13:20:f9:e4:c6:c5:33:73:e5:d3:5d:ec: 07:a1:5e:b3:8c:b2:52:e8:0e:4a:8c:50:a3:c5:be: d4:f9:e8:86:94:a3:7b:95:d3:28:ee:b2:bf:b7:92: 02:83:ee:9d:4c:14:e5:18:e3:ff:24:49:66:ad:97: ca:3b:be:db:d6:64:7f:06:d8:c6:d2:88:55:27:81: ff:d1:76:0e:8b:b2:a6:10:85:de:fc:aa:25:42:d7: 5e:6e:43:ad:19:6d:e3:fb:14:3a:cb:53:ed:0d:1a: e2:05:7d:9a:1e:6f:79:9c:97:61:7b:a7:78:54:ba: 3c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7D:46:21:EF:47:4B:A2:8A:BA:BB:81:6C:53:C0:58:5D:4E:AF:6B X509v3 Authority Key Identifier: keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:47:bc:70:b2:1a:fc:21:0d:5b:34:8b:77:de:94:45:6e:5e: 91:76:a8:02:65:2b:8e:21:f7:cf:34:8d:20:c2:63:9b:f3:63: 56:6d:9b:8f:23:cf:1d:e3:d3:fa:48:0c:a7:79:9c:27:af:72: 4c:1a:44:0c:4e:23:78:94:31:87:3e:76:3c:bc:a8:8e:ed:ff: 7f:ec:53:da:ba:8a:4d:f6:82:77:72:5b:6b:53:d2:f1:c1:e0: 90:fc:db:ca:38:51:8b:65:53:d3:3b:84:2a:94:d9:39:d9:c8: 23:02:27:06:0d:bc:a7:87:1e:77:8f:be:81:df:e2:ad:ff:ad: e2:f7:35:d3:5a:9f:6f:12:ae:6a:d7:19:4b:56:50:3f:1b:b3: 39:9c:1e:47:7c:1c:f9:fa:7b:c1:84:e6:1b:c7:76:53:88:31: fb:40:c7:0e:99:1a:07:49:f5:1f:9d:09:b5:02:65:4c:76:33: 1c:b4:e9:f7:ed:18:c1:42:13:b1:48:ef:96:33:22:6f:38:27: 76:7e:e4:54:26:45:cb:e4:19:77:02:0c:22:77:1b:e3:4c:17: a8:36:f3:da:ac:20:c8:8b:ab:94:4c:d9:15:22:be:3f:e9:6c: 0a:2d:37:40:0b:cc:35:62:4a:bd:be:45:5a:cd:98:67:e1:d4: f7:62:9a:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNkIxMTAvBgNVBAUTKEJFMTJEMkVFRjQyQTFDOURDMkE1NzIwNDQ2QzcwMzE2 QzdDMjA2NTAwHhcNMjUwNjE4MTUzNzUwWhcNMjUwNjI1MTUzNzUwWjAYMRYwFAYD VQQDEw02ODUyZGQ0ZS04NGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdrEUjoicaOvsMlqVlL9r5waN/0DfqKeXzo6Ah3sbHcVlAaAnPy1P0U0P9QL /bW61/uSZTjz7K98Al5NWz0eNF8gDmcTVut8WJO8eosTbeO9JkOtG8LVrh7WRbME zi7M076x3IQ+VeMP5IaAU1qKoDfWZ6P8HfXXfWjWBm9203N0pcti4YWsCeITIPnk xsUzc+XTXewHoV6zjLJS6A5KjFCjxb7U+eiGlKN7ldMo7rK/t5ICg+6dTBTlGOP/ JElmrZfKO77b1mR/BtjG0ohVJ4H/0XYOi7KmEIXe/KolQtdebkOtGW3j+xQ6y1Pt DRriBX2aHm95nJdhe6d4VLo8pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA19RiHv R0uiirq7gWxTwFhdTq9rMB8GA1UdIwQYMBaAFL4S0u70KhydwqVyBEbHAxbHwgZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE2Qi83NTI0NEI2MkEx NjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhKM0NwWElFUnNjREZzZkNC bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoTFM3dlFxSEozQ3BYSUVSc2NERnNmQ0JsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEE2Qi83NTI0NEI2MkExNjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhK M0NwWElFUnNjREZzZkNCbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZR7xwshr8IQ1bNIt33pRFbl6RdqgCZSuOIffPNI0gwmOb82NWbZuP I88d49P6SAyneZwnr3JMGkQMTiN4lDGHPnY8vKiO7f9/7FPauopN9oJ3cltrU9Lx weCQ/NvKOFGLZVPTO4QqlNk52cgjAicGDbynhx53j76B3+Kt/63i9zXTWp9vEq5q 1xlLVlA/G7M5nB5HfBz5+nvBhOYbx3ZTiDH7QMcOmRoHSfUfnQm1AmVMdjMctOn3 7RjBQhOxSO+WMyJvOCd2fuRUJkXL5Bl3AgwidxvjTBeoNvParCDIi6uUTNkVIr4/ 6WwKLTdAC8w1Ykq9vkVazZhn4dT3Ypph -----END CERTIFICATE-----Generated at Thu Jun 19 11:06:37 2025 by rpki-client