$ rpki-client -vvf rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft File: VRHewp3K7aF782u_M5UycVnxSoE.mft (raw, json) Hash identifier: Gbssq4fOtyFaEmbqGXagAIExmf656QDWMApTkiQj8Gc= Subject key identifier: A2:D7:AD:AD:7A:FC:91:B5:0D:4F:CE:33:03:5F:81:18:36:3F:99:8A Authority key identifier: 55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 Certificate issuer: /CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Certificate serial: 0C89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft Manifest number: 0C75 Signing time: Sat 14 Jun 2025 18:09:08 +0000 Manifest this update: Sat 14 Jun 2025 18:09:07 +0000 Manifest next update: Sat 21 Jun 2025 18:09:07 +0000 Files and hashes: 1: VRHewp3K7aF782u_M5UycVnxSoE.crl (hash: Ax8b8O7hMy+kHGgFpuJoHmsKfAU49NDR9ArQ662Yj0M=) 2: F3E543B4CBB611EB94FE6E68C4F9AE02.roa (hash: ZXJMtYkkqA7hHeKOhLlOV4cY6XESDyR/pKiToP5eSgg=) 3: F2B52DF6CBB611EB94FE6E68C4F9AE02.roa (hash: pSxfk0FHnFoiI4DMtbpzZ2ySSBds/zGBYa4EKLwgCes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3209 (0xc89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192248, serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Validity Not Before: Jun 14 18:09:07 2025 GMT Not After : Jun 21 18:09:07 2025 GMT Subject: CN=684dbac3-5297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9c:ee:94:5b:74:47:1e:15:56:21:2e:2f:c7: 29:a4:c1:ae:43:55:34:72:64:49:18:1b:10:3a:5c: 21:db:4c:a3:19:50:26:c8:b8:c9:54:fb:34:e5:1e: eb:c5:dc:af:21:6c:57:72:bb:2c:1a:fe:ad:46:5d: b6:b2:bd:f6:25:41:ba:08:c8:91:8a:b0:eb:91:dc: 4f:f8:a8:e0:72:42:cd:1d:8b:3d:e7:eb:82:51:4e: 94:4e:5e:7a:47:cf:ec:05:9e:c5:10:92:3f:08:04: 35:fe:83:15:41:d1:40:9c:6e:d1:48:f5:ef:af:49: ea:4a:78:c5:2f:5e:05:9a:a3:5d:d5:55:d5:71:89: 9a:9a:c8:fe:17:01:ae:fb:6d:f1:b7:03:17:7b:7d: b7:80:f0:07:59:ca:a4:d1:77:ce:40:5a:f0:34:e9: 53:45:48:a8:69:0d:89:37:87:00:95:cd:8d:1f:04: 8c:8b:4d:3b:5f:77:52:ea:8f:46:19:0e:66:0a:d8: f0:65:db:ab:23:ed:05:5e:8e:14:0d:b0:24:57:03: 9e:59:61:5f:52:b1:35:44:74:81:60:ef:25:61:0b: f6:a7:0e:68:d6:2d:37:90:11:21:68:75:c1:74:8a: b8:29:49:9d:87:4c:86:3b:d6:8f:58:ef:a2:45:5c: c4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D7:AD:AD:7A:FC:91:B5:0D:4F:CE:33:03:5F:81:18:36:3F:99:8A X509v3 Authority Key Identifier: keyid:55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:ab:fe:84:0e:c6:6a:81:08:1c:ea:fc:cf:4e:15:f8:93:ee: 1d:49:c5:b4:38:c8:ff:88:f6:82:98:fa:60:46:35:b6:75:4a: 8e:03:9c:d3:e8:f7:0f:4f:9e:6a:b9:90:2c:3c:f6:fd:6e:f5: d2:49:31:a7:79:dc:91:e1:2b:03:bc:03:17:93:7d:6c:28:eb: a8:90:21:4b:30:26:dd:a8:76:45:02:f6:db:e7:6a:e0:a5:a6: c6:1c:99:99:9b:88:fa:68:43:58:5c:5f:41:6a:99:01:61:93: c5:bf:11:17:c2:73:6d:e1:3b:a7:cb:c5:8c:2e:5d:36:47:af: 32:da:67:db:bd:ac:fe:fc:c7:f0:61:dc:90:2b:b9:d0:c0:ea: 45:f5:ea:79:c1:92:c1:04:2d:01:c9:cf:3e:f0:8f:45:47:63: 05:f3:d4:97:01:82:e7:3d:02:77:c4:39:da:ab:85:02:66:b0: ec:90:2d:14:73:fb:da:5a:45:41:b3:2f:ee:e1:10:76:ed:e3: e1:05:a0:d2:75:07:dd:b3:15:06:1d:1e:32:b3:e4:ff:39:90: f4:41:63:96:6f:11:bf:0c:64:8c:ff:b2:ee:4a:93:da:7b:6c: 2a:01:96:8a:b9:00:0e:01:a2:19:68:ef:a2:b3:24:43:28:d1: 0e:59:05:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIyNDgxMTAvBgNVBAUTKDU1MTFERUMyOURDQUVEQTE3QkYzNkJCRjMzOTUzMjcx NTlGMTRBODEwHhcNMjUwNjE0MTgwOTA3WhcNMjUwNjIxMTgwOTA3WjAYMRYwFAYD VQQDEw02ODRkYmFjMy01Mjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpzulFt0Rx4VViEuL8cppMGuQ1U0cmRJGBsQOlwh20yjGVAmyLjJVPs05R7r xdyvIWxXcrssGv6tRl22sr32JUG6CMiRirDrkdxP+KjgckLNHYs95+uCUU6UTl56 R8/sBZ7FEJI/CAQ1/oMVQdFAnG7RSPXvr0nqSnjFL14FmqNd1VXVcYmamsj+FwGu +23xtwMXe323gPAHWcqk0XfOQFrwNOlTRUioaQ2JN4cAlc2NHwSMi007X3dS6o9G GQ5mCtjwZdurI+0FXo4UDbAkVwOeWWFfUrE1RHSBYO8lYQv2pw5o1i03kBEhaHXB dIq4KUmdh0yGO9aPWO+iRVzEWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLXra16 /JG1DU/OMwNfgRg2P5mKMB8GA1UdIwQYMBaAFFUR3sKdyu2he/NrvzOVMnFZ8UqB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjI0OC9DNzk4QTBGQUZG MDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdhRjc4MnVfTTVVeWNWbnhT b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSSGV3cDNLN2FGNzgydV9NNVV5Y1ZueFNvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjI0OC9DNzk4QTBGQUZGMDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdh Rjc4MnVfTTVVeWNWbnhTb0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWq/6EDsZqgQgc6vzPThX4k+4dScW0OMj/iPaCmPpgRjW2dUqOA5zT 6PcPT55quZAsPPb9bvXSSTGnedyR4SsDvAMXk31sKOuokCFLMCbdqHZFAvbb52rg pabGHJmZm4j6aENYXF9BapkBYZPFvxEXwnNt4Tuny8WMLl02R68y2mfbvaz+/Mfw YdyQK7nQwOpF9ep5wZLBBC0Byc8+8I9FR2MF89SXAYLnPQJ3xDnaq4UCZrDskC0U c/vaWkVBsy/u4RB27ePhBaDSdQfdsxUGHR4ys+T/OZD0QWOWbxG/DGSM/7LuSpPa e2wqAZaKuQAOAaIZaO+isyRDKNEOWQXR -----END CERTIFICATE-----Generated at Sun Jun 15 09:47:05 2025 by rpki-client