$ rpki-client -vvf rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft File: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft (raw, json) Hash identifier: 29VBbRHugHdteBqCG5Bqmo0sXwq5xT5RWWz0Ice7N3o= Subject key identifier: 54:2C:B1:2C:FD:FD:B1:3B:36:43:2C:08:A8:80:14:2A:98:48:22:8C Authority key identifier: 54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 Certificate issuer: /CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Certificate serial: 0BF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft Manifest number: 0BEE Signing time: Thu 12 Jun 2025 18:36:17 +0000 Manifest this update: Thu 12 Jun 2025 18:36:17 +0000 Manifest next update: Thu 19 Jun 2025 18:36:17 +0000 Files and hashes: 1: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl (hash: pST428LQuCEF7LzmJMrhemzZ9YYVD/X2SnLFjpKNMQA=) 2: 5EA04634181911EA9CA3C619C4F9AE02.roa (hash: 29yqRgflWjw/V78Nb1MTmLxw9ept1pEu77NRsVFXw6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3064 (0xbf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936EB, serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Validity Not Before: Jun 12 18:36:17 2025 GMT Not After : Jun 19 18:36:17 2025 GMT Subject: CN=684b1e21-77f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0e:98:c9:3f:8c:86:c5:17:eb:8e:36:53:7f: 23:9e:17:72:89:9a:58:d8:14:a5:ec:48:89:db:94: d9:f3:cc:64:25:45:96:ba:39:d3:cd:94:d4:b1:ae: 93:86:d7:5a:46:89:b7:ea:76:6d:9b:e9:e8:2e:59: 40:b3:32:13:34:e2:aa:f5:0f:0b:9d:dc:9d:ce:d7: 76:c4:68:2a:c2:51:4d:bc:be:15:11:55:4c:73:84: 93:31:2b:d4:23:69:74:c5:06:62:bf:39:e4:85:87: f7:1f:d2:30:7d:07:b6:e2:15:bb:ec:d7:47:b9:f1: ad:f7:9c:07:42:3d:ec:0b:47:4e:fe:86:bf:be:50: 21:43:c6:2a:f7:e3:a6:b1:67:5e:3e:9e:7c:42:e3: 32:5b:4a:cb:95:1b:d3:95:2f:ab:ad:48:ff:0e:8e: 42:3a:95:a4:c3:ad:6c:c5:30:49:34:b1:eb:3c:67: 7d:a5:a6:05:cf:cc:ac:08:1f:9a:e5:6c:c0:72:43: ce:b5:ab:ca:38:16:cf:21:de:48:87:7f:27:3b:b8: a4:ac:f0:01:c0:02:ca:28:df:af:21:57:c1:ef:2c: dd:e5:15:26:8d:5a:c8:50:af:04:48:68:5e:22:87: 49:b6:13:da:cc:40:92:07:4a:e6:8f:5d:c3:12:70: f3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2C:B1:2C:FD:FD:B1:3B:36:43:2C:08:A8:80:14:2A:98:48:22:8C X509v3 Authority Key Identifier: keyid:54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:08:11:b9:ce:d0:5f:a7:ab:db:a3:98:f7:52:19:17:fd:35: dc:bc:54:66:2b:65:71:69:2d:1c:25:1f:7a:29:c2:d5:d7:0b: a6:b6:ed:8b:0f:99:40:30:b6:85:b8:49:e5:5a:36:24:a1:83: 12:1a:3d:32:04:c0:8c:b1:d4:d0:00:ba:b8:5d:8e:83:37:4f: 4b:51:1b:d6:20:96:9d:60:49:0c:d8:5b:7c:2d:83:6d:37:28: 6f:f8:5f:6f:a2:4e:a8:98:47:28:94:ed:64:8d:23:57:e2:e6: 8d:26:63:f0:85:f7:8f:f6:95:8c:fa:e1:1d:f6:56:d0:b3:84: b0:d5:25:1f:67:41:55:75:91:63:57:79:10:ea:7b:3e:d1:62: 86:73:bc:a5:3c:0d:ee:db:06:f1:69:6c:e8:32:17:d9:93:de: f7:57:2d:ba:5d:81:6e:ec:d5:60:0f:58:c9:59:8b:12:67:ac: ba:5d:19:7e:56:c9:ba:55:fb:6f:32:37:84:4e:2c:c2:7a:1a: 4a:31:bb:dd:d8:8c:b6:ea:50:f5:11:16:39:f0:d8:cd:16:ff: 68:a2:fe:04:46:0c:71:9b:8a:75:93:89:91:d9:93:a5:ab:41: fe:a2:21:e5:01:0e:fe:dc:4b:b6:f9:6a:97:23:bd:40:30:d3: 45:1a:ac:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2RUIxMTAvBgNVBAUTKDU0NzIxRTA4NjEwOTY5MEEzOTY1MkNCQUE4QTBFNjFB QjBBOUYwNzIwHhcNMjUwNjEyMTgzNjE3WhcNMjUwNjE5MTgzNjE3WjAYMRYwFAYD VQQDEw02ODRiMWUyMS03N2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwg6YyT+MhsUX6442U38jnhdyiZpY2BSl7EiJ25TZ88xkJUWWujnTzZTUsa6T htdaRom36nZtm+noLllAszITNOKq9Q8Lndydztd2xGgqwlFNvL4VEVVMc4STMSvU I2l0xQZivznkhYf3H9IwfQe24hW77NdHufGt95wHQj3sC0dO/oa/vlAhQ8Yq9+Om sWdePp58QuMyW0rLlRvTlS+rrUj/Do5COpWkw61sxTBJNLHrPGd9paYFz8ysCB+a 5WzAckPOtavKOBbPId5Ih38nO7ikrPABwALKKN+vIVfB7yzd5RUmjVrIUK8ESGhe IodJthPazECSB0rmj13DEnDzQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQssSz9 /bE7NkMsCKiAFCqYSCKMMB8GA1UdIwQYMBaAFFRyHghhCWkKOWUsuqig5hqwqfBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZFQi8zRUMwMkVDQTE3 NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFRbzVaU3k2cUtEbUdyQ3A4 SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZISWVDR0VKYVFvNVpTeTZxS0RtR3JDcDhISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZFQi8zRUMwMkVDQTE3NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFR bzVaU3k2cUtEbUdyQ3A4SEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmCBG5ztBfp6vbo5j3UhkX/TXcvFRmK2VxaS0cJR96KcLV1wumtu2L D5lAMLaFuEnlWjYkoYMSGj0yBMCMsdTQALq4XY6DN09LURvWIJadYEkM2Ft8LYNt Nyhv+F9vok6omEcolO1kjSNX4uaNJmPwhfeP9pWM+uEd9lbQs4Sw1SUfZ0FVdZFj V3kQ6ns+0WKGc7ylPA3u2wbxaWzoMhfZk973Vy26XYFu7NVgD1jJWYsSZ6y6XRl+ Vsm6VftvMjeETizCehpKMbvd2Iy26lD1ERY58NjNFv9oov4ERgxxm4p1k4mR2ZOl q0H+oiHlAQ7+3Eu2+WqXI71AMNNFGqxZ -----END CERTIFICATE-----Generated at Sat Jun 14 19:17:34 2025 by rpki-client