$ rpki-client -vvf rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft File: VRT85Dhj9Rga80k4LThBTpYPCW8.mft (raw, json) Hash identifier: myN30uCYwNnqZZCdBEUtLWQWEoUTAXbSJxArZkVOs5E= Subject key identifier: 8F:AD:CF:BE:25:99:57:17:06:AD:17:A5:81:2D:C4:BD:1C:0D:71:2C Authority key identifier: 55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F Certificate issuer: /CN=A9195262/serialNumber=5514FCE43863F5181AF349382D38414E960F096F Certificate serial: 08E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft Manifest number: 08DE Signing time: Sat 14 Jun 2025 20:14:23 +0000 Manifest this update: Sat 14 Jun 2025 20:14:23 +0000 Manifest next update: Sat 21 Jun 2025 20:14:23 +0000 Files and hashes: 1: VRT85Dhj9Rga80k4LThBTpYPCW8.crl (hash: lGIieEViIrMZXzeQ0BRLWOps2ge3zGBdexS5wkaMMsU=) 2: DFC21CD8B1CF11EAA8732709C4F9AE02.roa (hash: fBbrGPpyBqHG5VjMBpwa+Y1+AP7kUm89FdDIYPNDwG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2279 (0x8e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195262, serialNumber=5514FCE43863F5181AF349382D38414E960F096F Validity Not Before: Jun 14 20:14:23 2025 GMT Not After : Jun 21 20:14:23 2025 GMT Subject: CN=684dd81f-3a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:24:76:ec:07:cf:41:e9:5c:b2:fa:9a:ef:98: a2:c4:2c:67:e8:12:fb:05:c0:d7:77:d1:83:f2:cf: 92:77:10:0d:cb:92:6f:95:16:b7:f7:70:52:c4:f3: f1:4b:00:d9:a3:d6:74:0c:c4:8a:dc:2a:e2:3b:45: 8d:49:8e:52:97:5b:bb:3a:d0:96:a5:d5:b0:2c:fe: ed:91:56:d9:96:68:e9:9e:97:d3:3d:6e:f6:54:94: 8b:be:b1:d8:b0:5a:98:2b:32:1f:f5:f1:2f:28:ab: 25:b0:98:a4:77:af:78:6b:75:55:06:b6:e7:66:ce: d1:7a:39:09:cd:da:73:bb:08:a5:0c:00:bc:c2:2a: 43:a3:68:27:69:63:2f:eb:5a:4d:9d:78:96:37:ad: 4d:55:21:c1:11:ce:c0:76:7e:5c:0b:17:2d:e1:2e: df:d1:89:02:bb:e7:5d:40:01:3c:75:d9:c7:8e:49: ee:03:cc:de:8e:a5:50:a9:8e:0a:33:69:0b:ba:95: e2:39:2f:71:99:f5:87:25:09:21:73:c2:12:f5:b8: cb:e1:f4:7a:bd:61:f9:5f:71:29:bf:76:d8:bf:2d: 30:2c:a2:98:a8:2e:69:f6:9f:dd:df:f5:08:62:b3: c9:ee:fe:0f:b9:8b:35:5f:bd:54:00:1d:ff:fc:96: 82:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AD:CF:BE:25:99:57:17:06:AD:17:A5:81:2D:C4:BD:1C:0D:71:2C X509v3 Authority Key Identifier: keyid:55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:bd:39:c4:7b:cb:e3:a9:71:03:90:54:8b:18:39:d7:9b:6d: 37:2c:bb:3d:2d:6f:8e:e9:68:5e:8c:a9:c1:50:1e:32:43:24: cb:93:21:07:a5:ff:05:69:c8:33:32:31:c6:bf:96:ef:f9:84: 85:4e:9f:ff:8c:16:7e:ac:fc:2e:97:7e:37:f1:e9:7e:dd:8b: 71:23:9f:e4:8d:09:63:fa:d5:78:47:21:c6:c2:97:5b:42:fb: c8:7c:4b:a9:34:f3:63:f9:35:21:14:a7:ad:9a:7a:5a:10:5f: 5c:25:38:33:0c:c2:0a:6f:88:68:80:7f:8d:26:55:bf:cf:19: 55:82:21:a3:75:c8:10:87:13:d4:32:d3:32:2a:4f:5b:ec:2f: 12:f2:28:85:ab:06:bd:40:99:d9:04:71:9c:f6:34:17:20:9d: 0b:de:9b:c4:1f:f0:f1:3f:52:b3:de:5c:6e:b3:c7:17:cf:81: f7:83:35:bf:dd:d5:16:7f:00:ff:74:c1:b3:4c:ae:d6:4b:c8: 70:12:45:fc:2d:b9:38:7d:7a:ba:5d:d5:e5:11:cc:7e:27:b0: 42:04:24:e1:37:80:cb:76:1d:d8:63:a1:7f:dd:37:b3:ac:b9: 96:b8:74:36:2b:4d:d6:a6:4b:7a:55:fe:72:66:99:b1:85:e5: 49:ab:4d:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUyNjIxMTAvBgNVBAUTKDU1MTRGQ0U0Mzg2M0Y1MTgxQUYzNDkzODJEMzg0MTRF OTYwRjA5NkYwHhcNMjUwNjE0MjAxNDIzWhcNMjUwNjIxMjAxNDIzWjAYMRYwFAYD VQQDEw02ODRkZDgxZi0zYTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSR27AfPQelcsvqa75iixCxn6BL7BcDXd9GD8s+SdxANy5JvlRa393BSxPPx SwDZo9Z0DMSK3CriO0WNSY5Sl1u7OtCWpdWwLP7tkVbZlmjpnpfTPW72VJSLvrHY sFqYKzIf9fEvKKslsJikd694a3VVBrbnZs7RejkJzdpzuwilDAC8wipDo2gnaWMv 61pNnXiWN61NVSHBEc7Adn5cCxct4S7f0YkCu+ddQAE8ddnHjknuA8zejqVQqY4K M2kLupXiOS9xmfWHJQkhc8IS9bjL4fR6vWH5X3Epv3bYvy0wLKKYqC5p9p/d3/UI YrPJ7v4PuYs1X71UAB3//JaCIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+tz74l mVcXBq0XpYEtxL0cDXEsMB8GA1UdIwQYMBaAFFUU/OQ4Y/UYGvNJOC04QU6WDwlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTI2Mi9GN0E2RDU5Q0Iw RkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlSZ2E4MGs0TFRoQlRwWVBD VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSVDg1RGhqOVJnYTgwazRMVGhCVHBZUENXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTI2Mi9GN0E2RDU5Q0IwRkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlS Z2E4MGs0TFRoQlRwWVBDVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1vTnEe8vjqXEDkFSLGDnXm203LLs9LW+O6WhejKnBUB4yQyTLkyEH pf8FacgzMjHGv5bv+YSFTp//jBZ+rPwul3438el+3YtxI5/kjQlj+tV4RyHGwpdb QvvIfEupNPNj+TUhFKetmnpaEF9cJTgzDMIKb4hogH+NJlW/zxlVgiGjdcgQhxPU MtMyKk9b7C8S8iiFqwa9QJnZBHGc9jQXIJ0L3pvEH/DxP1Kz3lxus8cXz4H3gzW/ 3dUWfwD/dMGzTK7WS8hwEkX8Lbk4fXq6XdXlEcx+J7BCBCThN4DLdh3YY6F/3Tez rLmWuHQ2K03Wpkt6Vf5yZpmxheVJq00c -----END CERTIFICATE-----Generated at Mon Jun 16 08:14:48 2025 by rpki-client