$ rpki-client -vvf rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft File: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft (raw, json) Hash identifier: n8M07mMiGGeqbFmJ97tw7T2HC4iZr6uPgcQrLieza1c= Subject key identifier: DA:01:7E:71:95:5E:93:BD:65:83:73:EF:FB:BB:2E:B8:0E:61:56:75 Authority key identifier: 54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 Certificate issuer: /CN=A91936EB/serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Certificate serial: 0BF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft Manifest number: 0BE7 Signing time: Fri 30 May 2025 18:58:18 +0000 Manifest this update: Fri 30 May 2025 18:58:18 +0000 Manifest next update: Fri 06 Jun 2025 18:58:18 +0000 Files and hashes: 1: VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl (hash: p36CEprLn3G2Ovpcch0fNowJnFlBUsqN0fBiv8L4gJs=) 2: 5EA04634181911EA9CA3C619C4F9AE02.roa (hash: 29yqRgflWjw/V78Nb1MTmLxw9ept1pEu77NRsVFXw6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3057 (0xbf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91936EB, serialNumber=54721E086109690A39652CBAA8A0E61AB0A9F072 Validity Not Before: May 30 18:58:18 2025 GMT Not After : Jun 6 18:58:18 2025 GMT Subject: CN=6839ffca-f593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dd:7f:05:25:c7:eb:a3:34:05:d4:f6:16:50: a5:4b:ed:ad:60:38:52:68:3f:82:03:65:2c:ae:b9: 51:4a:65:41:63:31:cc:57:27:c2:22:26:a3:60:fc: 9d:24:f7:46:e7:2c:b7:13:f0:0f:e9:75:f2:14:1f: ca:1e:ba:9b:34:aa:78:b6:f4:42:7a:90:b5:76:f7: b9:8d:ca:a4:d4:88:52:0f:e1:50:b2:4d:cb:fc:1b: db:28:a6:44:9b:35:57:fe:90:e0:f5:0b:9d:b5:0d: 12:60:bd:ed:7f:a3:5c:b2:ac:21:3f:5f:0c:c6:63: a2:55:22:aa:09:b4:90:78:a3:7a:05:47:77:47:14: 0d:e6:81:d8:a2:8a:01:c2:2b:1d:cb:ac:d8:41:ea: 68:42:14:ae:23:f4:4e:da:df:eb:cf:2d:d1:ea:3c: 50:f4:ce:75:e6:2b:ca:6c:8c:82:7a:2d:10:61:d0: 4e:5a:be:52:a3:56:cd:12:53:33:51:ff:5c:e9:49: 14:25:37:59:03:a6:9d:dd:61:9e:64:77:6c:ae:2b: 66:14:ce:f2:7c:f2:49:ff:34:a4:cb:40:7e:aa:de: 3e:b3:c6:9b:86:3b:b7:8f:dc:2d:f3:e8:f0:68:d1: bf:a3:ad:a5:dc:fe:89:b7:62:4a:b6:1a:ff:e8:2e: f0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:01:7E:71:95:5E:93:BD:65:83:73:EF:FB:BB:2E:B8:0E:61:56:75 X509v3 Authority Key Identifier: keyid:54:72:1E:08:61:09:69:0A:39:65:2C:BA:A8:A0:E6:1A:B0:A9:F0:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936EB/3EC02ECA175A11EAB2A6A851C4F9AE02/VHIeCGEJaQo5ZSy6qKDmGrCp8HI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:93:28:87:35:6e:4b:06:4b:6f:fb:91:7a:aa:bf:f5:43:80: 35:ea:63:46:d6:15:ea:43:57:0c:7c:c5:d7:7f:2f:4c:c3:ec: 33:85:05:2f:2a:a7:63:d0:71:c3:d9:ce:62:2d:a1:9c:12:68: 70:10:db:9a:53:e3:77:e9:3c:ba:3f:7f:62:9a:96:d5:a6:3c: 1f:15:e0:b4:bc:96:83:7b:d7:18:6c:d5:15:84:ba:cc:3c:7f: 27:53:0a:02:dd:7c:19:d6:e6:87:0c:29:bb:03:25:23:54:91: b5:43:5a:6d:c8:92:4d:c1:90:b5:6b:17:55:cb:94:e7:2a:d2: b6:03:53:39:8d:ec:db:01:7c:31:39:d2:d9:4e:f6:58:8f:57: 88:74:23:99:60:0c:5f:60:18:8c:55:39:cc:eb:0d:36:7e:bc: 52:c9:b6:4d:ed:bc:e0:9c:4a:f8:c2:7a:cc:84:8e:f8:25:9e: a9:3a:86:2e:f6:41:07:07:24:3d:b9:e5:f9:02:28:ea:4c:cb: e9:d9:bb:10:2e:9e:ab:89:77:6a:f5:3f:eb:b7:c5:f7:1b:d6: 76:1d:1b:9a:86:ae:40:e0:86:9c:e2:6a:b7:56:13:ca:20:5d: a1:74:18:f6:a8:c9:8c:89:56:fa:f3:83:9e:cb:a3:13:3a:37: ac:3c:f6:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2RUIxMTAvBgNVBAUTKDU0NzIxRTA4NjEwOTY5MEEzOTY1MkNCQUE4QTBFNjFB QjBBOUYwNzIwHhcNMjUwNTMwMTg1ODE4WhcNMjUwNjA2MTg1ODE4WjAYMRYwFAYD VQQDEw02ODM5ZmZjYS1mNTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzt1/BSXH66M0BdT2FlClS+2tYDhSaD+CA2UsrrlRSmVBYzHMVyfCIiajYPyd JPdG5yy3E/AP6XXyFB/KHrqbNKp4tvRCepC1dve5jcqk1IhSD+FQsk3L/BvbKKZE mzVX/pDg9QudtQ0SYL3tf6NcsqwhP18MxmOiVSKqCbSQeKN6BUd3RxQN5oHYoooB wisdy6zYQepoQhSuI/RO2t/rzy3R6jxQ9M515ivKbIyCei0QYdBOWr5So1bNElMz Uf9c6UkUJTdZA6ad3WGeZHdsritmFM7yfPJJ/zSky0B+qt4+s8abhju3j9wt8+jw aNG/o62l3P6Jt2JKthr/6C7wIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNoBfnGV XpO9ZYNz7/u7LrgOYVZ1MB8GA1UdIwQYMBaAFFRyHghhCWkKOWUsuqig5hqwqfBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzZFQi8zRUMwMkVDQTE3 NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFRbzVaU3k2cUtEbUdyQ3A4 SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZISWVDR0VKYVFvNVpTeTZxS0RtR3JDcDhISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzZFQi8zRUMwMkVDQTE3NUExMUVBQjJBNkE4NTFDNEY5QUUwMi9WSEllQ0dFSmFR bzVaU3k2cUtEbUdyQ3A4SEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOkyiHNW5LBktv+5F6qr/1Q4A16mNG1hXqQ1cMfMXXfy9Mw+wzhQUv Kqdj0HHD2c5iLaGcEmhwENuaU+N36Ty6P39impbVpjwfFeC0vJaDe9cYbNUVhLrM PH8nUwoC3XwZ1uaHDCm7AyUjVJG1Q1ptyJJNwZC1axdVy5TnKtK2A1M5jezbAXwx OdLZTvZYj1eIdCOZYAxfYBiMVTnM6w02frxSybZN7bzgnEr4wnrMhI74JZ6pOoYu 9kEHByQ9ueX5AijqTMvp2bsQLp6riXdq9T/rt8X3G9Z2HRuahq5A4Iac4mq3VhPK IF2hdBj2qMmMiVb684Oey6MTOjesPPbB -----END CERTIFICATE-----Generated at Sat May 31 17:14:44 2025 by rpki-client