$ rpki-client -vvf rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft File: vhgzygFCXO9HWUXxmZieZUOzHmI.mft (raw, json) Hash identifier: VH6Ziys5ho+0dX4gj89kKUvQ4A7s7muReICcmadxqjc= Subject key identifier: 8E:8C:ED:16:8F:B0:7A:CB:6B:C7:EF:1B:83:A1:F8:F2:FB:62:B1:A0 Authority key identifier: BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62 Certificate issuer: /CN=A91382E4/serialNumber=BE1833CA01425CEF475945F199989E6543B31E62 Certificate serial: 0339 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft Manifest number: 0331 Signing time: Sat 19 Jul 2025 01:33:36 +0000 Manifest this update: Sat 19 Jul 2025 01:33:35 +0000 Manifest next update: Sat 26 Jul 2025 01:33:35 +0000 Files and hashes: 1: vhgzygFCXO9HWUXxmZieZUOzHmI.crl (hash: qq3xrYhy4hOz3Hoaqtqi8aSUPJPsL6O49dXquYQFI0Q=) 2: A05195B4633011ED9122442CC4F9AE02.roa (hash: j7aoei+ek1gcLQq8wVfrfWk2y1zauvGzuHEFdrbSbVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 825 (0x339) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91382E4, serialNumber=BE1833CA01425CEF475945F199989E6543B31E62 Validity Not Before: Jul 19 01:33:35 2025 GMT Not After : Jul 26 01:33:35 2025 GMT Subject: CN=687af5ef-9749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:51:31:a9:3d:9d:22:2e:33:1e:6d:85:ee:67: 49:f2:49:51:fe:64:b0:06:f1:7f:38:9c:a5:3d:d5: d8:34:57:96:df:da:67:f0:45:d9:63:b6:f8:07:75: d0:ad:2c:73:43:08:1e:26:ba:60:fb:18:37:ee:14: 0a:c9:ca:31:60:ee:e9:fa:73:4e:f9:df:15:86:28: 94:49:0f:4d:3b:90:5c:ce:ba:99:45:f9:7c:86:51: 14:c6:a9:ae:1b:e7:9e:32:f9:3e:05:3f:1e:37:ab: 1e:10:b1:59:bc:83:4e:7f:2a:c6:69:1a:a2:98:7e: 99:82:e7:6b:64:9d:40:d5:e1:ec:1d:ff:cd:28:61: c6:ce:2e:68:40:2b:95:c5:a7:2b:d1:00:ff:5f:78: 8f:8b:a0:5b:a6:ab:0a:0a:59:3d:6f:3c:eb:27:85: eb:42:51:24:2e:d3:fa:d2:67:6e:e5:56:49:b2:86: 4c:99:9b:a5:a9:d5:d6:72:b8:14:aa:25:cf:ea:ea: 06:19:64:7b:3e:ed:93:20:7b:9e:a5:57:69:f2:6b: 1b:46:5e:06:cb:25:f0:ae:1b:67:3b:d1:c2:ae:76: 26:e7:69:3b:15:65:7c:19:14:4a:bc:dd:4e:10:4c: 05:cf:c5:84:ce:e2:38:4e:f3:a8:ad:f5:fe:e7:54: a2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8C:ED:16:8F:B0:7A:CB:6B:C7:EF:1B:83:A1:F8:F2:FB:62:B1:A0 X509v3 Authority Key Identifier: keyid:BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:e9:10:ab:a8:ee:25:5f:d6:e6:8a:30:7d:56:fc:d9:ed:88: 58:d2:01:8a:18:0e:4a:77:e4:a6:5e:cc:8e:23:cd:f2:23:7f: e0:d4:23:23:13:df:09:b3:65:da:d7:c3:91:73:78:d5:9e:bf: f0:1e:6a:65:63:1c:ea:bf:08:6e:e9:2b:a3:06:ef:ad:b3:98: e8:af:de:b3:2d:f9:a3:67:8d:68:66:da:fe:d1:0c:05:26:b7: 6f:53:41:dc:bf:e6:94:d8:56:31:1c:c5:ab:d5:62:c3:d3:e4: 79:b8:4d:f8:3f:c2:9e:00:55:ea:df:a8:cd:dd:20:6d:63:40: 87:cc:df:da:67:9e:2f:c4:46:1d:77:e0:95:86:e3:17:d1:51: a7:b4:34:70:27:13:2f:3f:7f:97:ca:2d:c7:b3:76:58:d8:34: f1:44:7d:bc:90:2a:81:17:f4:6d:ee:7b:c1:6b:e3:c0:e3:09: 94:84:8e:c8:d0:8f:24:20:19:ee:20:69:ad:e5:03:be:d8:57: 55:80:bd:89:65:21:4b:08:47:87:4a:78:e9:a2:c7:4c:70:a2: 56:bf:f5:1d:ed:ac:75:59:9c:5e:cc:08:98:da:17:6e:87:a3: 3b:2d:13:5d:b8:3b:0b:c3:60:0f:ab:a5:ba:be:cc:07:69:8e: 76:bf:f9:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgyRTQxMTAvBgNVBAUTKEJFMTgzM0NBMDE0MjVDRUY0NzU5NDVGMTk5OTg5RTY1 NDNCMzFFNjIwHhcNMjUwNzE5MDEzMzM1WhcNMjUwNzI2MDEzMzM1WjAYMRYwFAYD VQQDEw02ODdhZjVlZi05NzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnVExqT2dIi4zHm2F7mdJ8klR/mSwBvF/OJylPdXYNFeW39pn8EXZY7b4B3XQ rSxzQwgeJrpg+xg37hQKycoxYO7p+nNO+d8VhiiUSQ9NO5BczrqZRfl8hlEUxqmu G+eeMvk+BT8eN6seELFZvINOfyrGaRqimH6ZgudrZJ1A1eHsHf/NKGHGzi5oQCuV xacr0QD/X3iPi6BbpqsKClk9bzzrJ4XrQlEkLtP60mdu5VZJsoZMmZulqdXWcrgU qiXP6uoGGWR7Pu2TIHuepVdp8msbRl4GyyXwrhtnO9HCrnYm52k7FWV8GRRKvN1O EEwFz8WEzuI4TvOorfX+51SiXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6M7RaP sHrLa8fvG4Oh+PL7YrGgMB8GA1UdIwQYMBaAFL4YM8oBQlzvR1lF8ZmYnmVDsx5i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODJFNC8yMzZGNDA1NEQx MTkxMUVDOTAwQTJGNkZDNEY5QUUwMi92aGd6eWdGQ1hPOUhXVVh4bVppZVpVT3pI bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoZ3p5Z0ZDWE85SFdVWHhtWmllWlVPekhtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODJFNC8yMzZGNDA1NEQxMTkxMUVDOTAwQTJGNkZDNEY5QUUwMi92aGd6eWdGQ1hP OUhXVVh4bVppZVpVT3pIbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo6RCrqO4lX9bmijB9VvzZ7YhY0gGKGA5Kd+SmXsyOI83yI3/g1CMj E98Js2Xa18ORc3jVnr/wHmplYxzqvwhu6SujBu+ts5jor96zLfmjZ41oZtr+0QwF JrdvU0Hcv+aU2FYxHMWr1WLD0+R5uE34P8KeAFXq36jN3SBtY0CHzN/aZ54vxEYd d+CVhuMX0VGntDRwJxMvP3+Xyi3Hs3ZY2DTxRH28kCqBF/Rt7nvBa+PA4wmUhI7I 0I8kIBnuIGmt5QO+2FdVgL2JZSFLCEeHSnjposdMcKJWv/Ud7ax1WZxezAiY2hdu h6M7LRNduDsLw2APq6W6vswHaY52v/mD -----END CERTIFICATE-----Generated at Sun Jul 20 11:21:33 2025 by rpki-client