$ rpki-client -vvf rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft File: vBeIK_xKhjChu_avBlGLkLpNFoo.mft (raw, json) Hash identifier: lHCjWmwaeHE3bEHFBrIwRxTx/xvJx9jscS7HWq5OTXU= Subject key identifier: 4F:7C:CE:37:3B:F6:26:F0:6A:94:62:FF:4D:1D:40:64:62:01:2F:71 Authority key identifier: BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A Certificate issuer: /CN=A912FDDD/serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft Manifest number: 0119 Signing time: Sat 19 Jul 2025 05:01:21 +0000 Manifest this update: Sat 19 Jul 2025 05:01:21 +0000 Manifest next update: Sat 26 Jul 2025 05:01:21 +0000 Files and hashes: 1: vBeIK_xKhjChu_avBlGLkLpNFoo.crl (hash: ntAeszURIap8Mc+Y2eM2HN/D0Rs93AEB6qeKGU3R6Hg=) 2: 744F6602B5B511EEACE32B4DC4F9AE02.roa (hash: MNtM9pXu4p6v7Z7f6/Wop8L0VMv9VFX8mmGYuSjaQTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FDDD, serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A Validity Not Before: Jul 19 05:01:21 2025 GMT Not After : Jul 26 05:01:21 2025 GMT Subject: CN=687b26a1-465b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cf:01:56:ba:bf:60:3c:a4:54:47:b8:3a:02: 9f:b9:8b:fb:ee:a3:07:bc:59:84:99:88:9f:76:7d: dd:63:cc:25:56:8e:b4:7f:bc:38:0c:95:b6:02:c7: 0d:e7:57:14:c8:6a:7c:b7:0f:7a:98:ad:b9:85:c4: 84:f7:36:73:4e:99:c4:f8:40:02:e6:88:04:6b:21: e3:9d:f0:0a:a5:6b:82:3b:dd:a2:52:a1:55:dd:70: e2:82:fd:2a:e3:3f:40:2d:8f:db:7b:1c:34:24:5c: 75:bb:8b:0e:f1:4e:55:94:23:5d:61:c7:62:b7:35: 97:56:5a:94:db:e8:29:5e:ab:c4:c7:51:ea:ca:41: 83:6d:6b:13:73:a7:f9:6a:f6:3c:46:ea:da:62:64: c3:33:7c:f5:01:87:13:8c:f2:5c:9b:ad:ce:eb:24: 13:95:e8:02:ce:ad:0a:63:a2:3f:1b:d1:2d:22:26: 21:9b:2c:d0:be:5a:03:1a:81:83:a7:52:15:4f:0a: ba:5d:76:d2:61:00:17:51:47:7a:46:69:75:7e:83: cd:74:73:47:45:fe:ed:07:d1:96:64:ad:11:cb:b3: 7a:0f:62:56:35:c6:26:ce:23:b9:1f:4f:0d:54:15: e3:5e:b2:ab:3d:2a:c5:3f:19:44:42:eb:41:d8:dd: 97:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7C:CE:37:3B:F6:26:F0:6A:94:62:FF:4D:1D:40:64:62:01:2F:71 X509v3 Authority Key Identifier: keyid:BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:c1:b1:3f:37:fc:22:dc:20:3b:91:1a:f5:d4:a6:2c:25:ce: 32:92:a7:44:c8:b7:a4:29:b0:40:2d:ce:69:c9:21:c6:91:54: da:1e:82:c6:ce:23:75:56:ed:56:a4:c9:ac:d6:dc:ed:9f:27: f8:eb:69:d3:31:79:62:77:36:12:a4:94:ed:23:6f:7d:da:ae: b1:8d:25:91:5a:38:e1:1b:f3:31:4c:6d:9c:d8:04:d3:45:fb: 40:13:17:9d:76:ab:b0:e2:51:6a:cd:ae:f6:5f:e6:67:a0:15: 90:ff:a5:e8:f0:7f:14:8a:8b:d1:a1:47:f0:52:a3:ec:f8:b9: 02:df:e4:fc:2f:58:94:c5:5b:ce:4a:24:42:60:ea:36:f2:ca: 7e:93:d2:34:ec:b1:4f:d3:f8:15:4a:2b:26:6e:e5:a9:a3:3a: de:dd:b8:55:10:84:f7:f5:2d:bf:a8:bc:12:8e:47:6f:5e:6f: 1d:56:4b:f4:32:a1:e3:2d:ff:02:de:60:21:bb:b5:cd:97:13: d9:da:0e:28:74:0c:be:03:f6:59:d2:b3:5a:bb:2f:cd:66:8f: 6a:d9:75:81:d7:29:8c:08:b5:b0:c9:da:71:7f:3c:21:b9:18: 11:a7:4d:69:38:ee:b2:1a:52:f9:6e:0e:34:29:df:ea:21:bb: 79:88:e0:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZEREQxMTAvBgNVBAUTKEJDMTc4ODJCRkM0QTg2MzBBMUJCRjZBRjA2NTE4Qjkw QkE0RDE2OEEwHhcNMjUwNzE5MDUwMTIxWhcNMjUwNzI2MDUwMTIxWjAYMRYwFAYD VQQDEw02ODdiMjZhMS00NjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy88BVrq/YDykVEe4OgKfuYv77qMHvFmEmYifdn3dY8wlVo60f7w4DJW2AscN 51cUyGp8tw96mK25hcSE9zZzTpnE+EAC5ogEayHjnfAKpWuCO92iUqFV3XDigv0q 4z9ALY/bexw0JFx1u4sO8U5VlCNdYcditzWXVlqU2+gpXqvEx1HqykGDbWsTc6f5 avY8RuraYmTDM3z1AYcTjPJcm63O6yQTlegCzq0KY6I/G9EtIiYhmyzQvloDGoGD p1IVTwq6XXbSYQAXUUd6Rml1foPNdHNHRf7tB9GWZK0Ry7N6D2JWNcYmziO5H08N VBXjXrKrPSrFPxlEQutB2N2XTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE98zjc7 9ibwapRi/00dQGRiAS9xMB8GA1UdIwQYMBaAFLwXiCv8SoYwobv2rwZRi5C6TRaK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkRERC9FQ0RFQTFGNkI1 QjQxMUVFQjdFNzBDNENDNEY5QUUwMi92QmVJS194S2hqQ2h1X2F2QmxHTGtMcE5G b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZCZUlLX3hLaGpDaHVfYXZCbEdMa0xwTkZvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkRERC9FQ0RFQTFGNkI1QjQxMUVFQjdFNzBDNENDNEY5QUUwMi92QmVJS194S2hq Q2h1X2F2QmxHTGtMcE5Gb28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDwbE/N/wi3CA7kRr11KYsJc4ykqdEyLekKbBALc5pySHGkVTaHoLG ziN1Vu1WpMms1tztnyf462nTMXlidzYSpJTtI2992q6xjSWRWjjhG/MxTG2c2ATT RftAExeddquw4lFqza72X+ZnoBWQ/6Xo8H8UiovRoUfwUqPs+LkC3+T8L1iUxVvO SiRCYOo28sp+k9I07LFP0/gVSismbuWpozre3bhVEIT39S2/qLwSjkdvXm8dVkv0 MqHjLf8C3mAhu7XNlxPZ2g4odAy+A/ZZ0rNauy/NZo9q2XWB1ymMCLWwydpxfzwh uRgRp01pOO6yGlL5bg40Kd/qIbt5iOB4 -----END CERTIFICATE-----Generated at Sun Jul 20 22:07:28 2025 by rpki-client