$ rpki-client -vvf rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft File: vpHyHHoLwGQ389tbIUIIyHdO680.mft (raw, json) Hash identifier: eUMFn0h3LhV24ah3q498IXnwsBzPJkOrCbohrGf+8nU= Subject key identifier: 97:95:C3:8E:99:9A:8B:FB:AF:BD:41:49:7A:FB:6C:70:C1:EC:A3:AB Authority key identifier: BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD Certificate issuer: /CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft Manifest number: 012F Signing time: Mon 21 Jul 2025 04:42:27 +0000 Manifest this update: Mon 21 Jul 2025 04:42:27 +0000 Manifest next update: Mon 28 Jul 2025 04:42:27 +0000 Files and hashes: 1: vpHyHHoLwGQ389tbIUIIyHdO680.crl (hash: ml5xMnR5/en2zZ8vVeScGWxSMNk4ltPrdqz6+CcW5Do=) 2: F2AB0C4A68C011EFB9196160C4F9AE02.roa (hash: DaPiCEmlAJvbaPsIVw3SLkMWbmEd02jwt+sb94Y5y+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CEBD, serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD Validity Not Before: Jul 21 04:42:27 2025 GMT Not After : Jul 28 04:42:27 2025 GMT Subject: CN=687dc533-41a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:28:be:7c:f9:23:e3:98:92:7e:04:74:fc:87: ce:93:44:89:c6:ff:f9:89:59:ca:39:5c:55:52:95: a8:22:3b:03:35:93:fd:27:72:38:6c:e4:c6:15:60: 2f:ba:fa:b1:9a:e4:71:ea:3d:86:16:97:72:b7:9e: ec:49:81:88:e2:ee:ff:82:68:88:2a:2b:3b:e9:53: ca:93:11:49:32:85:f7:05:26:98:a1:c9:d1:06:15: a5:16:e3:df:e9:f3:dc:48:c9:1b:f4:2a:fd:b8:a9: 31:ab:b2:42:e3:9d:47:72:ce:05:8c:f1:86:c3:a0: 5f:7a:89:2a:f1:4a:5d:85:5d:2b:44:c3:e8:51:6d: 58:b2:97:eb:24:1c:ff:b4:bf:55:04:f8:bb:d1:4d: ab:b6:fb:4b:61:b3:59:4c:e4:7b:3f:ba:97:d6:e6: 86:fa:98:9e:fb:fd:38:a1:05:a2:18:79:11:26:8e: 3d:d5:a5:48:99:e6:f1:56:e8:d7:19:18:71:66:64: 97:b4:59:ab:1a:b6:d5:47:aa:62:04:fe:83:09:29: 10:fb:12:d6:9b:d3:01:f2:1b:1c:6b:3f:38:57:70: 56:e3:c2:c3:3e:5c:1a:f5:d6:43:5b:d2:aa:50:94: 91:c3:0b:09:6f:4f:06:f2:4f:39:2b:cb:fb:dd:c0: b2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:95:C3:8E:99:9A:8B:FB:AF:BD:41:49:7A:FB:6C:70:C1:EC:A3:AB X509v3 Authority Key Identifier: keyid:BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:40:0d:66:84:06:ad:67:a1:61:7c:e5:a5:cb:65:c4:7a:ab: 34:cd:57:21:4d:fc:69:31:5b:6f:5c:68:4b:da:24:a0:7a:6c: c2:e9:f1:71:dc:a0:1c:41:af:fa:f4:f1:58:53:45:03:06:4e: 35:0d:96:bf:40:7e:42:aa:db:97:18:50:16:4e:49:45:20:3f: 5f:eb:6c:61:cd:1a:2d:4e:55:09:f2:47:ee:6c:a8:ad:9f:f0: 4c:50:e6:61:5a:b8:50:a9:fc:37:d7:68:12:f2:27:34:aa:41: 8e:a2:66:7d:32:a9:e4:6c:4b:65:4c:93:89:19:61:b8:e1:66: 44:6b:a4:04:94:85:de:bf:16:91:6b:17:48:12:55:e7:82:3c: 66:ba:b5:ec:a5:81:fe:45:7a:6b:1a:4c:ba:73:c8:46:06:9e: 11:a5:96:39:41:04:9d:21:0a:f3:5b:0a:a5:bc:f8:38:0a:0c: e5:e5:da:25:3b:7c:fb:11:fa:96:b7:58:f2:9d:c1:60:17:07: b4:da:dd:fb:81:88:a1:07:18:5d:51:41:9d:e0:2b:96:c0:2d: f4:9b:34:21:d3:05:a8:83:15:f7:f5:3e:8f:3d:6d:51:02:95: a0:54:81:81:c5:47:30:11:cb:7c:57:b0:d9:34:55:26:9d:e4: 91:a6:69:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFQkQxMTAvBgNVBAUTKEJFOTFGMjFDN0EwQkMwNjQzN0YzREI1QjIxNDIwOEM4 Nzc0RUVCQ0QwHhcNMjUwNzIxMDQ0MjI3WhcNMjUwNzI4MDQ0MjI3WjAYMRYwFAYD VQQDEw02ODdkYzUzMy00MWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Si+fPkj45iSfgR0/IfOk0SJxv/5iVnKOVxVUpWoIjsDNZP9J3I4bOTGFWAv uvqxmuRx6j2GFpdyt57sSYGI4u7/gmiIKis76VPKkxFJMoX3BSaYocnRBhWlFuPf 6fPcSMkb9Cr9uKkxq7JC451Hcs4FjPGGw6Bfeokq8UpdhV0rRMPoUW1YspfrJBz/ tL9VBPi70U2rtvtLYbNZTOR7P7qX1uaG+pie+/04oQWiGHkRJo491aVImebxVujX GRhxZmSXtFmrGrbVR6piBP6DCSkQ+xLWm9MB8hscaz84V3BW48LDPlwa9dZDW9Kq UJSRwwsJb08G8k85K8v73cCy2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeVw46Z mov7r71BSXr7bHDB7KOrMB8GA1UdIwQYMBaAFL6R8hx6C8BkN/PbWyFCCMh3TuvN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0VCRC9DQ0Q4MTQyODk5 QzExMUVFOUExRkRFMUZDNEY5QUUwMi92cEh5SEhvTHdHUTM4OXRiSVVJSXlIZE82 ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZwSHlISG9Md0dRMzg5dGJJVUlJeUhkTzY4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0VCRC9DQ0Q4MTQyODk5QzExMUVFOUExRkRFMUZDNEY5QUUwMi92cEh5SEhvTHdH UTM4OXRiSVVJSXlIZE82ODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCQA1mhAatZ6FhfOWly2XEeqs0zVchTfxpMVtvXGhL2iSgemzC6fFx 3KAcQa/69PFYU0UDBk41DZa/QH5CqtuXGFAWTklFID9f62xhzRotTlUJ8kfubKit n/BMUOZhWrhQqfw312gS8ic0qkGOomZ9MqnkbEtlTJOJGWG44WZEa6QElIXevxaR axdIElXngjxmurXspYH+RXprGky6c8hGBp4RpZY5QQSdIQrzWwqlvPg4Cgzl5dol O3z7EfqWt1jyncFgFwe02t37gYihBxhdUUGd4CuWwC30mzQh0wWogxX39T6PPW1R ApWgVIGBxUcwEct8V7DZNFUmneSRpmme -----END CERTIFICATE-----Generated at Mon Jul 21 12:47:55 2025 by rpki-client