$ rpki-client -vvf rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft File: VRHewp3K7aF782u_M5UycVnxSoE.mft (raw, json) Hash identifier: PqVTOXLo/qYvKUQA5auk1H35MVMoxid0HHU2QjOyWbQ= Subject key identifier: 96:4F:C1:60:FA:41:D3:F6:AC:CB:0E:55:08:7A:83:43:7A:DF:D7:9A Authority key identifier: 55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 Certificate issuer: /CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Certificate serial: 0CB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft Manifest number: 0CA1 Signing time: Mon 08 Sep 2025 18:14:55 +0000 Manifest this update: Mon 08 Sep 2025 18:14:54 +0000 Manifest next update: Mon 15 Sep 2025 18:14:54 +0000 Files and hashes: 1: VRHewp3K7aF782u_M5UycVnxSoE.crl (hash: UBh6n1hsc9PJUmJM16L9Z8jV7OI0cf7Y56nP2fC+faU=) 2: F3E543B4CBB611EB94FE6E68C4F9AE02.roa (hash: ZXJMtYkkqA7hHeKOhLlOV4cY6XESDyR/pKiToP5eSgg=) 3: F2B52DF6CBB611EB94FE6E68C4F9AE02.roa (hash: pSxfk0FHnFoiI4DMtbpzZ2ySSBds/zGBYa4EKLwgCes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 18:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3253 (0xcb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192248, serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Validity Not Before: Sep 8 18:14:54 2025 GMT Not After : Sep 15 18:14:54 2025 GMT Subject: CN=68bf1d1e-23b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:72:bb:08:9a:d5:86:74:c6:29:28:a6:62:2c: 5f:24:0d:87:ab:5c:0f:a5:cf:54:c4:78:95:50:01: 58:e9:cd:13:72:73:5b:8e:0e:c4:7c:f2:d4:27:0c: 13:b8:6d:47:3d:af:1d:32:d6:12:6c:3e:72:8b:d5: a5:9b:e1:ba:89:de:42:7f:02:6f:16:42:d9:49:16: b4:50:ba:66:13:40:0d:8d:56:5e:8c:6f:89:5a:29: 6a:1d:be:83:c8:43:de:f9:16:ce:be:8b:b3:22:97: 68:41:87:9d:46:cc:07:1e:1c:5f:2c:b2:e5:55:1b: a1:05:20:9a:da:58:3a:11:ae:d2:fb:68:8d:bc:66: 32:8b:a8:75:82:60:ff:70:af:9d:c6:9d:b2:79:f6: 29:9a:90:27:9f:a3:37:ee:3f:4f:55:45:30:ef:0f: a1:4c:c7:0c:16:95:fe:fd:48:eb:b7:67:da:22:3c: 66:0c:e5:70:8a:51:78:39:33:29:1a:aa:97:c4:31: 51:e2:35:be:e1:3d:f2:9c:25:1b:1c:eb:ed:b4:3a: 5d:6d:08:d7:fc:51:46:5e:1e:cb:e5:7d:56:c6:58: 64:2a:74:08:d8:72:d2:46:b4:a0:98:6d:89:42:1e: 58:da:3b:85:bc:c4:29:8c:bf:00:93:30:8c:d4:92: f8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4F:C1:60:FA:41:D3:F6:AC:CB:0E:55:08:7A:83:43:7A:DF:D7:9A X509v3 Authority Key Identifier: keyid:55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:e9:97:60:b8:56:07:ee:39:43:37:87:46:91:85:5c:02:0c: 36:b6:d3:f0:8f:02:63:b7:a9:f7:09:46:6e:0b:e9:aa:76:99: 10:b9:ed:af:9e:ea:ea:6f:0e:b7:ec:0e:f9:99:c0:b0:c0:3a: 94:66:25:a6:46:fd:65:1f:85:79:53:3e:6a:ef:98:89:db:f4: 8e:1a:0b:91:3c:45:c4:af:4e:dd:6c:e1:bb:30:17:e3:8c:a1: ea:50:e6:d4:da:5e:c1:2a:61:f1:b7:63:c0:80:46:88:2f:0b: 44:a1:96:04:6a:b2:06:42:10:4a:ae:df:25:14:4f:4d:10:96: a9:0d:aa:0e:2a:a4:34:26:f6:74:26:23:c5:cb:0e:32:74:3f: cf:12:3a:77:05:fa:ea:6b:61:6c:59:46:04:3f:ac:64:ef:4f: 0d:37:77:bf:71:c3:2c:65:53:b9:08:7a:7e:ef:44:2e:11:3a: b0:a0:63:0b:2f:4c:b3:b0:54:3e:3c:2d:36:ff:93:9b:c0:d7: 66:b9:b4:e9:42:4e:56:e3:29:33:6e:1c:6d:ef:cc:59:c4:31: 07:95:1c:52:cd:64:47:e5:0e:39:57:f9:81:9e:77:d7:86:0c: 81:b2:59:70:a9:8d:9b:47:02:f3:dc:7d:7a:8e:11:12:57:c8: d0:3b:ab:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIyNDgxMTAvBgNVBAUTKDU1MTFERUMyOURDQUVEQTE3QkYzNkJCRjMzOTUzMjcx NTlGMTRBODEwHhcNMjUwOTA4MTgxNDU0WhcNMjUwOTE1MTgxNDU0WjAYMRYwFAYD VQQDEw02OGJmMWQxZS0yM2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA73K7CJrVhnTGKSimYixfJA2Hq1wPpc9UxHiVUAFY6c0TcnNbjg7EfPLUJwwT uG1HPa8dMtYSbD5yi9Wlm+G6id5CfwJvFkLZSRa0ULpmE0ANjVZejG+JWilqHb6D yEPe+RbOvouzIpdoQYedRswHHhxfLLLlVRuhBSCa2lg6Ea7S+2iNvGYyi6h1gmD/ cK+dxp2yefYpmpAnn6M37j9PVUUw7w+hTMcMFpX+/Ujrt2faIjxmDOVwilF4OTMp GqqXxDFR4jW+4T3ynCUbHOvttDpdbQjX/FFGXh7L5X1WxlhkKnQI2HLSRrSgmG2J Qh5Y2juFvMQpjL8AkzCM1JL4nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZPwWD6 QdP2rMsOVQh6g0N639eaMB8GA1UdIwQYMBaAFFUR3sKdyu2he/NrvzOVMnFZ8UqB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjI0OC9DNzk4QTBGQUZG MDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdhRjc4MnVfTTVVeWNWbnhT b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSSGV3cDNLN2FGNzgydV9NNVV5Y1ZueFNvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjI0OC9DNzk4QTBGQUZGMDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdh Rjc4MnVfTTVVeWNWbnhTb0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDa6ZdguFYH7jlDN4dGkYVcAgw2ttPwjwJjt6n3CUZuC+mqdpkQue2v nurqbw637A75mcCwwDqUZiWmRv1lH4V5Uz5q75iJ2/SOGguRPEXEr07dbOG7MBfj jKHqUObU2l7BKmHxt2PAgEaILwtEoZYEarIGQhBKrt8lFE9NEJapDaoOKqQ0JvZ0 JiPFyw4ydD/PEjp3Bfrqa2FsWUYEP6xk708NN3e/ccMsZVO5CHp+70QuETqwoGML L0yzsFQ+PC02/5ObwNdmubTpQk5W4ykzbhxt78xZxDEHlRxSzWRH5Q45V/mBnnfX hgyBsllwqY2bRwLz3H16jhESV8jQO6si -----END CERTIFICATE-----Generated at Tue Sep 9 17:09:41 2025 by rpki-client