$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft File: vhLS7vQqHJ3CpXIERscDFsfCBlA.mft (raw, json) Hash identifier: dcUI9XGsdiXsLUDJ8oR1XuZnPjm7Uy7pEJJeB2HYyOI= Subject key identifier: 77:76:46:D7:DF:C7:E3:E8:C5:A6:BD:DD:01:FB:C9:15:4E:25:39:4A Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Certificate serial: 2807 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft Manifest number: 27EC Signing time: Fri 18 Jul 2025 15:43:12 +0000 Manifest this update: Fri 18 Jul 2025 15:43:12 +0000 Manifest next update: Fri 25 Jul 2025 15:43:12 +0000 Files and hashes: 1: vhLS7vQqHJ3CpXIERscDFsfCBlA.crl (hash: YJsK/OzTKCsWafmU4OEkF26YPGtpled5NeiDh8VrjM4=) 2: B70AE7D20C6B11EC82638A40C4F9AE02.roa (hash: qyTxkkSSZz/mEPJmCPmO4drOsBAzqss/jEsEWzyS7n4=) 3: 5B7F22440AF811ECB423A671C4F9AE02.roa (hash: IqEsazWsEikd3PbwO1Zi4SKIR5/W/ukREa4rnvdDPhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10247 (0x2807) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Validity Not Before: Jul 18 15:43:12 2025 GMT Not After : Jul 25 15:43:12 2025 GMT Subject: CN=687a6b90-9a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6a:fe:c3:64:e4:e1:ef:bf:2e:ce:62:44:7c: 27:0a:e7:75:49:af:f7:69:2b:19:b2:46:a0:37:1a: ed:d5:fd:8c:2d:ec:f8:35:19:f2:84:81:cf:77:83: af:50:1a:0e:3e:df:8c:36:76:9d:1a:5f:00:0e:74: fb:00:74:ca:91:4b:42:b2:7d:9f:60:ba:46:10:bb: 8d:d5:e0:9e:be:2a:de:01:27:87:32:20:c3:1e:99: 47:f0:e5:c8:45:53:ec:c0:f8:2c:cf:30:34:05:ac: 86:10:30:02:cc:2e:fe:8c:95:c3:ac:a4:c2:db:94: a1:3e:33:9a:ab:a2:17:7b:c0:57:11:b2:92:e3:c4: 3c:c2:77:4a:16:e5:18:1a:d9:aa:c9:97:11:fe:2c: d9:e5:ad:a7:68:62:08:0b:14:91:16:df:87:fb:a3: 52:b2:34:3e:8b:d1:60:20:1a:db:b9:da:54:48:c5: 3d:71:30:fc:e7:17:8c:1b:31:10:fa:23:3c:cc:f2: 24:b1:b3:7b:49:66:4b:10:bd:ab:04:f8:6b:11:e4: 8c:be:aa:dd:30:86:bf:7f:d9:84:dd:ed:60:61:4a: 21:a6:d4:0b:87:27:e6:ab:1f:60:5c:4a:cc:4b:f1: f9:b3:a0:1f:29:ec:2f:3c:27:e4:b8:4f:4e:d6:41: c9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:76:46:D7:DF:C7:E3:E8:C5:A6:BD:DD:01:FB:C9:15:4E:25:39:4A X509v3 Authority Key Identifier: keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:e0:45:1b:5d:6a:82:9c:c9:a9:a0:1c:3c:16:6b:57:78:18: 28:32:8a:b7:4c:76:18:db:2a:12:e4:e1:b9:72:86:0c:76:5e: ad:6d:d9:8a:73:e5:fd:dd:42:90:90:d9:1c:cd:b8:34:72:64: f5:bf:fd:94:7f:f2:9d:60:63:49:94:c9:ee:6b:94:02:6d:dd: ac:c3:ad:9d:5f:8b:09:86:8f:3f:d2:89:31:bd:f3:56:9d:41: 48:aa:94:2d:bd:61:61:38:c9:08:25:db:c6:df:19:49:d9:ce: 2b:3b:1a:70:71:a5:ba:15:85:40:66:3e:06:25:ac:58:40:52: 85:66:e1:28:7d:6f:87:24:74:08:62:23:43:c6:32:13:19:8f: 94:62:58:77:9e:21:8a:3e:9f:6a:e5:b7:71:43:cf:e4:1e:81: 68:99:90:d9:ea:e7:bc:85:ec:67:d8:23:44:4f:c9:bf:74:99: 6f:48:be:10:5b:26:33:f0:bd:bb:5f:7d:bd:a5:b0:bf:1a:d8: 10:b9:71:99:af:21:b2:fa:fd:cc:ab:35:37:0a:0b:1f:e5:bb: 5c:a2:2e:77:d6:1c:55:f9:8c:2a:0c:77:e6:a1:f4:13:18:4b: af:7b:9c:2a:62:f6:75:8b:2b:f7:31:70:db:33:4c:70:a3:da: 6b:c8:76:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNkIxMTAvBgNVBAUTKEJFMTJEMkVFRjQyQTFDOURDMkE1NzIwNDQ2QzcwMzE2 QzdDMjA2NTAwHhcNMjUwNzE4MTU0MzEyWhcNMjUwNzI1MTU0MzEyWjAYMRYwFAYD VQQDEw02ODdhNmI5MC05YTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnmr+w2Tk4e+/Ls5iRHwnCud1Sa/3aSsZskagNxrt1f2MLez4NRnyhIHPd4Ov UBoOPt+MNnadGl8ADnT7AHTKkUtCsn2fYLpGELuN1eCevireASeHMiDDHplH8OXI RVPswPgszzA0BayGEDACzC7+jJXDrKTC25ShPjOaq6IXe8BXEbKS48Q8wndKFuUY GtmqyZcR/izZ5a2naGIICxSRFt+H+6NSsjQ+i9FgIBrbudpUSMU9cTD85xeMGzEQ +iM8zPIksbN7SWZLEL2rBPhrEeSMvqrdMIa/f9mE3e1gYUohptQLhyfmqx9gXErM S/H5s6AfKewvPCfkuE9O1kHJ4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHd2Rtff x+Poxaa93QH7yRVOJTlKMB8GA1UdIwQYMBaAFL4S0u70KhydwqVyBEbHAxbHwgZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE2Qi83NTI0NEI2MkEx NjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhKM0NwWElFUnNjREZzZkNC bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoTFM3dlFxSEozQ3BYSUVSc2NERnNmQ0JsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEE2Qi83NTI0NEI2MkExNjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhK M0NwWElFUnNjREZzZkNCbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk4EUbXWqCnMmpoBw8FmtXeBgoMoq3THYY2yoS5OG5coYMdl6tbdmK c+X93UKQkNkczbg0cmT1v/2Uf/KdYGNJlMnua5QCbd2sw62dX4sJho8/0okxvfNW nUFIqpQtvWFhOMkIJdvG3xlJ2c4rOxpwcaW6FYVAZj4GJaxYQFKFZuEofW+HJHQI YiNDxjITGY+UYlh3niGKPp9q5bdxQ8/kHoFomZDZ6ue8hexn2CNET8m/dJlvSL4Q WyYz8L27X329pbC/GtgQuXGZryGy+v3MqzU3Cgsf5btcoi531hxV+YwqDHfmofQT GEuve5wqYvZ1iyv3MXDbM0xwo9pryHa8 -----END CERTIFICATE-----Generated at Sun Jul 20 11:45:30 2025 by rpki-client