$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft File: vhLS7vQqHJ3CpXIERscDFsfCBlA.mft (raw, json) Hash identifier: lqXQFImfDOat6bQYHn/RDz46jUZjqK0mnrY6vLHZPlA= Subject key identifier: 83:F3:B1:67:5E:59:CD:B7:C0:59:1B:DC:FC:3C:B8:35:EC:C4:8F:81 Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Certificate serial: 27EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft Manifest number: 27D3 Signing time: Fri 30 May 2025 15:46:15 +0000 Manifest this update: Fri 30 May 2025 15:46:15 +0000 Manifest next update: Fri 06 Jun 2025 15:46:15 +0000 Files and hashes: 1: vhLS7vQqHJ3CpXIERscDFsfCBlA.crl (hash: I4JM64iGxh+MhhHLXiCDx5FNLz5A+6ojcDZFgw2QdC4=) 2: B70AE7D20C6B11EC82638A40C4F9AE02.roa (hash: qyTxkkSSZz/mEPJmCPmO4drOsBAzqss/jEsEWzyS7n4=) 3: 5B7F22440AF811ECB423A671C4F9AE02.roa (hash: IqEsazWsEikd3PbwO1Zi4SKIR5/W/ukREa4rnvdDPhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10222 (0x27ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Validity Not Before: May 30 15:46:15 2025 GMT Not After : Jun 6 15:46:15 2025 GMT Subject: CN=6839d2c7-bb29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bb:bf:66:dc:bc:af:ce:e1:ca:62:22:36:c0: 52:28:14:3a:b9:1d:da:ba:c3:39:53:07:11:86:ca: 3a:4b:2c:93:5a:64:b5:e0:2c:58:f1:a8:d0:03:b3: f8:93:6c:18:15:68:6b:40:6b:fd:7b:c2:81:c4:98: aa:08:7b:58:d0:6d:58:6c:89:99:4f:e3:7e:06:e0: cb:bb:68:f6:85:09:fb:58:2b:36:37:0e:a0:bd:36: 17:9a:b6:3c:b0:37:e8:08:52:14:8f:0c:77:27:11: 7b:2d:10:22:b8:af:2e:d6:4f:08:8d:c2:bf:7b:12: df:bb:35:0d:df:ea:bc:75:bd:0f:cf:8b:58:1d:53: f5:92:c6:95:24:cb:02:fa:66:14:f4:de:ab:06:c5: 17:25:18:6c:24:ef:92:1e:66:29:ec:52:dd:7a:a3: 36:2a:df:53:4f:49:eb:7b:44:f0:09:81:e6:e7:9a: df:93:93:d5:ab:ec:b5:fa:d7:24:00:72:43:b6:8f: ec:5c:c2:27:d8:72:d6:ef:6c:98:13:de:73:3d:33: 8a:41:c6:e2:a9:75:8e:36:1d:21:52:7f:eb:47:64: 76:52:e5:2e:d4:0c:71:3b:f7:b0:00:74:da:1a:3f: 6d:79:67:96:db:dc:41:c7:bf:5c:48:b6:0f:aa:e5: 7a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F3:B1:67:5E:59:CD:B7:C0:59:1B:DC:FC:3C:B8:35:EC:C4:8F:81 X509v3 Authority Key Identifier: keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:1a:a2:3b:a0:5c:aa:83:0b:99:b7:dd:e4:b9:ea:1a:59:3f: 35:13:0b:78:0f:fd:c3:6a:53:97:be:bd:80:83:47:02:fe:43: 3e:ef:d7:5f:32:11:e9:fa:34:d7:28:b6:f6:a2:7e:4e:1a:1b: e4:a6:da:d8:29:c0:d6:41:9e:a3:c2:56:7e:bf:dd:18:75:0e: 64:82:04:87:a5:68:d2:f0:5a:63:84:d6:40:fa:26:62:b7:8f: de:8b:ad:b8:e2:d0:b1:2c:06:29:6f:67:84:bb:58:19:8d:0e: 5a:a4:4e:5b:29:4d:e5:4f:aa:42:6a:0b:86:1f:86:ee:02:9f: 63:32:69:8d:34:c6:4c:26:db:4e:f2:ab:0b:2d:f9:ec:24:ae: 2e:22:8a:03:01:7e:51:c4:53:e6:a1:50:19:38:64:f9:e9:33: 9a:77:21:82:36:b2:bc:9a:07:57:f9:d8:ca:19:53:25:e3:80: d2:5b:e7:0e:ce:bd:e1:11:a8:87:93:79:26:6c:e8:a1:7d:1f: 48:0c:e7:be:92:7c:f5:32:ca:1a:0f:54:57:80:7f:12:6b:3d: 64:fe:98:1f:53:0c:c7:44:61:35:02:e8:99:ff:64:07:e7:59: 8a:c6:09:b5:69:6f:2e:b6:ac:02:b1:67:8b:fe:8a:05:99:d7: 7f:02:63:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNkIxMTAvBgNVBAUTKEJFMTJEMkVFRjQyQTFDOURDMkE1NzIwNDQ2QzcwMzE2 QzdDMjA2NTAwHhcNMjUwNTMwMTU0NjE1WhcNMjUwNjA2MTU0NjE1WjAYMRYwFAYD VQQDEw02ODM5ZDJjNy1iYjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbu/Zty8r87hymIiNsBSKBQ6uR3ausM5UwcRhso6SyyTWmS14CxY8ajQA7P4 k2wYFWhrQGv9e8KBxJiqCHtY0G1YbImZT+N+BuDLu2j2hQn7WCs2Nw6gvTYXmrY8 sDfoCFIUjwx3JxF7LRAiuK8u1k8IjcK/exLfuzUN3+q8db0Pz4tYHVP1ksaVJMsC +mYU9N6rBsUXJRhsJO+SHmYp7FLdeqM2Kt9TT0nre0TwCYHm55rfk5PVq+y1+tck AHJDto/sXMIn2HLW72yYE95zPTOKQcbiqXWONh0hUn/rR2R2UuUu1AxxO/ewAHTa Gj9teWeW29xBx79cSLYPquV6uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPzsWde Wc23wFkb3Pw8uDXsxI+BMB8GA1UdIwQYMBaAFL4S0u70KhydwqVyBEbHAxbHwgZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE2Qi83NTI0NEI2MkEx NjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhKM0NwWElFUnNjREZzZkNC bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoTFM3dlFxSEozQ3BYSUVSc2NERnNmQ0JsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEE2Qi83NTI0NEI2MkExNjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhK M0NwWElFUnNjREZzZkNCbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6GqI7oFyqgwuZt93kueoaWT81Ewt4D/3DalOXvr2Ag0cC/kM+79df MhHp+jTXKLb2on5OGhvkptrYKcDWQZ6jwlZ+v90YdQ5kggSHpWjS8FpjhNZA+iZi t4/ei6244tCxLAYpb2eEu1gZjQ5apE5bKU3lT6pCaguGH4buAp9jMmmNNMZMJttO 8qsLLfnsJK4uIooDAX5RxFPmoVAZOGT56TOadyGCNrK8mgdX+djKGVMl44DSW+cO zr3hEaiHk3kmbOihfR9IDOe+knz1MsoaD1RXgH8Saz1k/pgfUwzHRGE1AuiZ/2QH 51mKxgm1aW8utqwCsWeL/ooFmdd/AmOR -----END CERTIFICATE-----Generated at Sat May 31 16:47:41 2025 by rpki-client