$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft File: vpHAXiGMfmbqb5T50kV3cEGRveI.mft (raw, json) Hash identifier: Y71WdhCeHypeZUlDh8gqpJZhf8VhQJS9qn3PoW3KnGg= Subject key identifier: AC:D5:B4:AD:A5:A0:A6:2E:AF:C4:33:6A:2B:60:0F:4D:A6:26:9B:9A Authority key identifier: BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2 Certificate issuer: /CN=A912FCBB/serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft Manifest number: 9C Signing time: Sun 01 Jun 2025 05:58:24 +0000 Manifest this update: Sun 01 Jun 2025 05:58:23 +0000 Manifest next update: Sun 08 Jun 2025 05:58:23 +0000 Files and hashes: 1: vpHAXiGMfmbqb5T50kV3cEGRveI.crl (hash: UQ9Sp0ibyst7IjMkiksXPMCBtdF18i02wpHNWHec+6c=) 2: 8F80C48E531211EFAB0B8726C4F9AE02.roa (hash: kqqxAXnrRR7qW3plZHXyG8tkzcmd2G3d0enNBzRXcMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB, serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2 Validity Not Before: Jun 1 05:58:23 2025 GMT Not After : Jun 8 05:58:23 2025 GMT Subject: CN=683bec00-530a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6b:85:10:30:74:e6:53:eb:a3:7e:f4:25:29: 7d:9f:37:70:6e:f5:33:74:22:62:53:8c:3c:ee:f6: 7d:fd:3b:3b:19:95:db:4e:47:43:41:c8:53:3b:c7: a6:7a:08:84:12:24:59:23:f3:50:6c:6e:1a:47:e7: fc:37:56:3a:d5:31:5a:fc:73:0d:65:1e:c2:6f:96: b9:b8:44:9e:e0:0e:a6:bf:a2:34:2c:c4:7e:29:09: ab:e3:bd:46:9f:b6:aa:f4:aa:df:42:6e:a3:5a:25: 38:e2:a3:6d:5f:73:14:4a:a8:2d:ef:ec:66:5a:15: 5d:3b:a7:b2:4a:14:35:f6:77:cd:4a:8f:99:81:9e: 0c:58:cd:30:d5:d2:ba:fb:2e:25:ad:26:e6:ce:75: 1e:f5:ff:f3:a8:06:25:76:6d:42:3f:1c:42:fa:6e: 94:45:50:68:3c:05:12:4c:da:ad:a8:76:1f:a0:76: 77:a5:0b:3d:d5:b9:da:6a:f0:3e:f4:88:4c:73:cd: ff:af:f3:a2:e8:81:14:b3:73:92:e4:a4:36:58:95: 87:f5:0f:47:6d:8a:d1:72:eb:43:e1:a8:a5:d8:a9: c0:f6:45:f1:8f:7e:48:90:c6:70:24:c5:4f:e3:06: 8b:a0:f1:99:7e:a8:4e:0d:b4:9d:e4:fb:92:89:06: e8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D5:B4:AD:A5:A0:A6:2E:AF:C4:33:6A:2B:60:0F:4D:A6:26:9B:9A X509v3 Authority Key Identifier: keyid:BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:67:64:8b:40:a3:8b:99:b9:6d:aa:8c:29:25:47:4f:78:45: 7b:15:1b:5f:b6:48:15:3d:97:ab:06:94:fe:4d:cc:43:42:c3: 74:d3:70:62:9f:7f:3a:a4:47:4e:d4:0a:8c:3d:41:46:a8:77: 1a:93:45:65:93:bc:6f:66:53:e1:1b:1b:58:aa:75:ec:cb:93: 2c:b7:04:7c:5e:61:cd:49:9e:a7:b7:6d:43:13:f1:3c:0c:d1: e2:bf:71:58:2e:71:af:4f:8b:b1:0f:b2:98:7e:e5:dd:59:a7: 47:73:ea:44:4c:40:d8:d4:38:3e:6b:79:dd:ca:e8:c2:0c:1d: f8:25:97:ac:b3:ae:3b:b9:67:29:d3:69:6b:5b:b4:2c:c4:9b: 59:2c:e3:70:75:69:5a:4a:5e:fe:55:88:b1:e4:14:c0:3b:99: 7d:63:a8:c7:f2:47:5a:cb:12:a4:1e:ee:46:a9:38:a8:65:5c: 00:49:fc:2c:3a:64:42:e3:65:4d:78:87:5d:2f:d8:61:4e:07: b6:26:63:0b:0e:de:2d:37:bc:ab:b2:a9:69:7c:86:d6:d8:06: fe:46:cc:e5:8d:d8:33:d4:f6:35:38:c2:8e:13:f2:4e:35:df: 1a:ce:1b:a7:d9:bd:17:ce:f4:c7:2e:ca:73:3c:57:4f:b3:b6: d2:4f:28:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDQkIxMTAvBgNVBAUTKEJFOTFDMDVFMjE4QzdFNjZFQTZGOTRGOUQyNDU3Nzcw NDE5MUJERTIwHhcNMjUwNjAxMDU1ODIzWhcNMjUwNjA4MDU1ODIzWjAYMRYwFAYD VQQDEw02ODNiZWMwMC01MzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5WuFEDB05lPro370JSl9nzdwbvUzdCJiU4w87vZ9/Ts7GZXbTkdDQchTO8em egiEEiRZI/NQbG4aR+f8N1Y61TFa/HMNZR7Cb5a5uESe4A6mv6I0LMR+KQmr471G n7aq9KrfQm6jWiU44qNtX3MUSqgt7+xmWhVdO6eyShQ19nfNSo+ZgZ4MWM0w1dK6 +y4lrSbmznUe9f/zqAYldm1CPxxC+m6URVBoPAUSTNqtqHYfoHZ3pQs91bnaavA+ 9IhMc83/r/Oi6IEUs3OS5KQ2WJWH9Q9HbYrRcutD4ail2KnA9kXxj35IkMZwJMVP 4waLoPGZfqhODbSd5PuSiQboxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzVtK2l oKYur8QzaitgD02mJpuaMB8GA1UdIwQYMBaAFL6RwF4hjH5m6m+U+dJFd3BBkb3i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81NEQyM0Y0NjUz MEYxMUVGOTlDODhEMEZDNEY5QUUwMi92cEhBWGlHTWZtYnFiNVQ1MGtWM2NFR1J2 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZwSEFYaUdNZm1icWI1VDUwa1YzY0VHUnZlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNCQi81NEQyM0Y0NjUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi92cEhBWGlHTWZt YnFiNVQ1MGtWM2NFR1J2ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMZ2SLQKOLmbltqowpJUdPeEV7FRtftkgVPZerBpT+TcxDQsN003Bi n386pEdO1AqMPUFGqHcak0Vlk7xvZlPhGxtYqnXsy5MstwR8XmHNSZ6nt21DE/E8 DNHiv3FYLnGvT4uxD7KYfuXdWadHc+pETEDY1Dg+a3ndyujCDB34JZess647uWcp 02lrW7QsxJtZLONwdWlaSl7+VYix5BTAO5l9Y6jH8kdayxKkHu5GqTioZVwASfws OmRC42VNeIddL9hhTge2JmMLDt4tN7yrsqlpfIbW2Ab+Rszljdgz1PY1OMKOE/JO Nd8azhun2b0XzvTHLspzPFdPs7bSTygz -----END CERTIFICATE-----Generated at Mon Jun 2 21:47:40 2025 by rpki-client