$ rpki-client -vvf rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft File: vhgzygFCXO9HWUXxmZieZUOzHmI.mft (raw, json) Hash identifier: b/8idRxaZ761FPaxpxelDBaGTf5AWjQCXjJq6fYznKY= Subject key identifier: 43:47:5C:4E:F8:94:88:5C:E6:46:74:94:A0:B2:40:6F:82:AF:9B:F5 Authority key identifier: BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62 Certificate issuer: /CN=A91382E4/serialNumber=BE1833CA01425CEF475945F199989E6543B31E62 Certificate serial: 031A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft Manifest number: 0314 Signing time: Sat 31 May 2025 01:24:19 +0000 Manifest this update: Sat 31 May 2025 01:24:18 +0000 Manifest next update: Sat 07 Jun 2025 01:24:18 +0000 Files and hashes: 1: vhgzygFCXO9HWUXxmZieZUOzHmI.crl (hash: x3LpRjBgJHr4FuXUzWiWO+0JZfz/su431j1hrOCXr+c=) 2: A05195B4633011ED9122442CC4F9AE02.roa (hash: DzVCTjhUidYA2Rg2xDcdlUFOgDtQxj0BrAXsbysJQW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 794 (0x31a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91382E4, serialNumber=BE1833CA01425CEF475945F199989E6543B31E62 Validity Not Before: May 31 01:24:18 2025 GMT Not After : Jun 7 01:24:18 2025 GMT Subject: CN=683a5a42-42ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f9:1a:b5:fc:d4:16:fc:ee:6e:92:1a:32:08: e3:dc:1c:04:a3:b4:1c:32:7c:02:2a:0f:b9:68:05: 9c:c4:f2:2a:98:6b:be:13:e3:b3:6f:eb:f9:d1:f3: 65:3e:6d:62:dc:f2:76:3a:2a:e4:d1:69:7d:b1:5c: 2c:bb:21:76:5e:a6:0b:b3:2e:fc:07:88:62:1f:8b: 54:41:0f:a1:00:5e:84:b8:12:fe:4a:d5:28:65:94: d4:27:ce:ef:cd:0d:f5:fb:9a:28:a1:a0:84:30:87: 28:45:29:85:64:ff:43:97:2b:bd:bf:35:4f:a6:9a: 95:34:72:f2:39:fe:4c:09:b5:1e:f4:68:58:ff:20: 9d:52:aa:14:16:7a:a6:1a:75:9a:e2:10:4d:9d:ea: de:ef:ef:78:42:5e:2d:de:08:d2:fd:36:90:fa:e6: 87:57:6e:ca:f2:5c:c3:77:d0:62:69:6e:30:0b:73: 10:ce:66:c3:ea:c2:6f:04:4e:ca:7a:2e:d9:da:aa: 98:cc:7b:62:d7:a3:1d:7a:50:9f:3a:49:53:8a:d1: 37:5d:85:ef:73:84:a8:46:b0:b2:04:f9:03:7f:2f: 3a:52:0b:52:69:08:55:19:2f:9b:cf:88:2c:6d:0b: 40:c7:99:b6:1b:eb:6e:87:bc:5c:23:58:1e:95:43: 58:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:47:5C:4E:F8:94:88:5C:E6:46:74:94:A0:B2:40:6F:82:AF:9B:F5 X509v3 Authority Key Identifier: keyid:BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:25:96:4a:5e:2c:fb:d3:7e:80:58:c2:4a:3c:24:cf:7c:de: 79:86:54:fc:11:1d:1d:89:34:37:36:e6:80:2a:52:18:1b:30: b6:c5:e1:4f:d0:68:ba:af:e4:eb:05:08:c7:03:b6:06:fa:ba: 05:e9:8f:78:f0:45:2e:ed:4e:eb:30:76:12:e5:b0:4e:8e:e6: 01:b1:34:65:77:c4:88:5b:45:d6:81:7b:63:8e:58:38:23:a5: f9:ea:e3:d4:aa:75:94:c9:1b:5d:19:d6:3d:58:b6:20:85:c4: a1:58:03:f6:df:07:6e:3d:32:ab:18:f0:ce:be:1f:dc:64:da: 1b:68:91:d2:07:92:c5:f3:3a:1b:bb:4c:d3:77:7e:47:96:4b: 69:54:f1:d8:31:54:4c:8f:9f:c0:13:a7:bd:24:97:57:8d:c6: 75:1f:40:e3:73:55:f5:db:3c:4b:2e:b4:61:27:5a:1e:f9:b2: a2:bd:03:4a:b9:cf:dc:db:6b:a0:d8:f6:eb:99:08:b9:9f:39: 0c:e7:10:60:38:e0:cf:27:4a:30:9f:0c:9d:aa:3c:49:51:2e: b0:bd:70:ce:09:2d:ae:44:58:4e:61:ba:7d:7e:24:74:ad:b0: a4:5d:3c:9d:1c:ce:e8:fb:7c:d8:1c:65:e6:36:72:cd:9c:a3: a8:b5:ac:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgyRTQxMTAvBgNVBAUTKEJFMTgzM0NBMDE0MjVDRUY0NzU5NDVGMTk5OTg5RTY1 NDNCMzFFNjIwHhcNMjUwNTMxMDEyNDE4WhcNMjUwNjA3MDEyNDE4WjAYMRYwFAYD VQQDEw02ODNhNWE0Mi00MmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfkatfzUFvzubpIaMgjj3BwEo7QcMnwCKg+5aAWcxPIqmGu+E+Ozb+v50fNl Pm1i3PJ2Oirk0Wl9sVwsuyF2XqYLsy78B4hiH4tUQQ+hAF6EuBL+StUoZZTUJ87v zQ31+5oooaCEMIcoRSmFZP9Dlyu9vzVPppqVNHLyOf5MCbUe9GhY/yCdUqoUFnqm GnWa4hBNnere7+94Ql4t3gjS/TaQ+uaHV27K8lzDd9BiaW4wC3MQzmbD6sJvBE7K ei7Z2qqYzHti16MdelCfOklTitE3XYXvc4SoRrCyBPkDfy86UgtSaQhVGS+bz4gs bQtAx5m2G+tuh7xcI1gelUNYswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENHXE74 lIhc5kZ0lKCyQG+Cr5v1MB8GA1UdIwQYMBaAFL4YM8oBQlzvR1lF8ZmYnmVDsx5i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODJFNC8yMzZGNDA1NEQx MTkxMUVDOTAwQTJGNkZDNEY5QUUwMi92aGd6eWdGQ1hPOUhXVVh4bVppZVpVT3pI bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoZ3p5Z0ZDWE85SFdVWHhtWmllWlVPekhtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODJFNC8yMzZGNDA1NEQxMTkxMUVDOTAwQTJGNkZDNEY5QUUwMi92aGd6eWdGQ1hP OUhXVVh4bVppZVpVT3pIbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJJZZKXiz7036AWMJKPCTPfN55hlT8ER0diTQ3NuaAKlIYGzC2xeFP 0Gi6r+TrBQjHA7YG+roF6Y948EUu7U7rMHYS5bBOjuYBsTRld8SIW0XWgXtjjlg4 I6X56uPUqnWUyRtdGdY9WLYghcShWAP23wduPTKrGPDOvh/cZNobaJHSB5LF8zob u0zTd35HlktpVPHYMVRMj5/AE6e9JJdXjcZ1H0Djc1X12zxLLrRhJ1oe+bKivQNK uc/c22ug2PbrmQi5nzkM5xBgOODPJ0ownwydqjxJUS6wvXDOCS2uRFhOYbp9fiR0 rbCkXTydHM7o+3zYHGXmNnLNnKOotax3 -----END CERTIFICATE-----Generated at Sat May 31 15:16:22 2025 by rpki-client