$ rpki-client -vvf rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft File: VRT85Dhj9Rga80k4LThBTpYPCW8.mft (raw, json) Hash identifier: DlPskSKMpKzix4E4u0pjDpwXlOaSSshHMl7CjBde83A= Subject key identifier: AB:18:C4:78:64:7A:E3:BE:4E:87:59:C5:AA:0D:0C:99:CB:A1:E9:22 Authority key identifier: 55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F Certificate issuer: /CN=A9195262/serialNumber=5514FCE43863F5181AF349382D38414E960F096F Certificate serial: 08DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft Manifest number: 08D6 Signing time: Fri 30 May 2025 20:40:19 +0000 Manifest this update: Fri 30 May 2025 20:40:19 +0000 Manifest next update: Fri 06 Jun 2025 20:40:19 +0000 Files and hashes: 1: VRT85Dhj9Rga80k4LThBTpYPCW8.crl (hash: WZglBW4NH/my5q6IvNwlbBTxfm14t9eDg/+CafE22HA=) 2: DFC21CD8B1CF11EAA8732709C4F9AE02.roa (hash: fBbrGPpyBqHG5VjMBpwa+Y1+AP7kUm89FdDIYPNDwG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2271 (0x8df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195262, serialNumber=5514FCE43863F5181AF349382D38414E960F096F Validity Not Before: May 30 20:40:19 2025 GMT Not After : Jun 6 20:40:19 2025 GMT Subject: CN=683a17b3-4dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cc:35:b3:1f:39:08:86:0c:2e:91:90:82:48: 4e:8f:fd:22:b8:58:07:28:fa:c0:71:8f:ce:8c:ad: 96:87:54:b8:8b:e8:a8:b4:63:48:02:52:4a:75:40: eb:7a:1e:c0:a4:5e:7c:10:35:a5:4f:3e:01:5d:1c: 61:0f:eb:f0:b2:69:a4:8c:aa:39:05:58:2b:ea:3f: 7e:ca:2d:54:36:f6:93:22:08:76:73:bb:ad:d4:d7: 14:68:88:9c:0d:0c:ac:e2:dd:10:87:82:0c:ae:b5: e8:85:b9:ed:13:b4:42:fd:85:a4:61:1a:96:9f:9d: ae:02:3c:64:1e:e2:49:7c:bc:6a:62:14:9a:2d:15: b0:08:d1:ba:16:91:48:d8:85:b6:34:e9:02:90:16: 4b:29:9c:53:c9:4f:68:a9:91:a2:ff:18:ad:2f:29: 46:60:7d:09:11:dc:9e:0b:b6:b6:d5:c1:b0:04:f5: eb:4d:88:02:d3:1c:c3:79:3b:e5:0e:a3:3d:c0:9d: 20:8e:af:a7:02:51:eb:62:eb:23:ce:ae:f6:f2:e7: 99:b9:24:55:bd:4c:14:59:57:06:3a:91:7c:4d:b3: d1:27:6f:9f:b5:8e:5d:50:7a:41:a5:c7:3e:91:80: ad:29:0d:49:16:02:65:ff:e1:73:8d:e9:bb:e5:d9: 15:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:18:C4:78:64:7A:E3:BE:4E:87:59:C5:AA:0D:0C:99:CB:A1:E9:22 X509v3 Authority Key Identifier: keyid:55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:cf:b9:5c:1b:4c:f7:e6:f9:b5:72:5d:39:b2:b2:c7:16:bd: 76:e0:e6:54:50:4a:24:15:4f:85:d5:b8:0d:fd:00:fb:51:31: 6f:9f:ae:8b:fa:63:86:03:9a:26:1c:06:1c:09:2a:f8:3d:b1: 5f:11:da:51:22:53:cf:67:87:6a:d2:21:2c:ea:dc:d2:04:0d: ce:bc:4e:e5:36:09:a5:69:3d:01:58:4a:9e:9a:10:c2:fb:7f: 1d:59:7d:46:d8:ec:8e:9e:67:b5:60:02:98:9a:f6:c0:b6:e9: d8:07:d5:53:82:b5:25:e1:a9:55:43:dd:20:97:57:d7:66:7e: 37:ca:ac:02:a7:f9:2f:05:13:d8:b4:6d:c1:e4:8e:5d:ac:9c: 29:34:a1:99:98:c7:ca:86:c0:f4:bd:99:b2:20:bf:53:49:f2: c5:2b:07:8a:84:4b:a5:1f:93:9d:0b:b9:87:df:f6:77:da:06: 93:f3:ca:ae:39:71:93:93:b8:69:46:9e:d1:a7:f5:ba:bf:81: b4:a1:c7:89:cf:d4:25:82:08:46:09:01:b7:d4:ea:36:4c:1b: 63:f3:e4:dd:b9:d1:6c:84:9b:9f:d5:5f:b6:1d:a4:17:13:b9: 8e:fa:90:02:0d:33:cd:98:a4:9e:d4:7f:1b:8f:8c:04:76:8b: 76:24:ae:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUyNjIxMTAvBgNVBAUTKDU1MTRGQ0U0Mzg2M0Y1MTgxQUYzNDkzODJEMzg0MTRF OTYwRjA5NkYwHhcNMjUwNTMwMjA0MDE5WhcNMjUwNjA2MjA0MDE5WjAYMRYwFAYD VQQDEw02ODNhMTdiMy00ZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcw1sx85CIYMLpGQgkhOj/0iuFgHKPrAcY/OjK2Wh1S4i+iotGNIAlJKdUDr eh7ApF58EDWlTz4BXRxhD+vwsmmkjKo5BVgr6j9+yi1UNvaTIgh2c7ut1NcUaIic DQys4t0Qh4IMrrXohbntE7RC/YWkYRqWn52uAjxkHuJJfLxqYhSaLRWwCNG6FpFI 2IW2NOkCkBZLKZxTyU9oqZGi/xitLylGYH0JEdyeC7a21cGwBPXrTYgC0xzDeTvl DqM9wJ0gjq+nAlHrYusjzq728ueZuSRVvUwUWVcGOpF8TbPRJ2+ftY5dUHpBpcc+ kYCtKQ1JFgJl/+Fzjem75dkVdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsYxHhk euO+TodZxaoNDJnLoekiMB8GA1UdIwQYMBaAFFUU/OQ4Y/UYGvNJOC04QU6WDwlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTI2Mi9GN0E2RDU5Q0Iw RkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlSZ2E4MGs0TFRoQlRwWVBD VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSVDg1RGhqOVJnYTgwazRMVGhCVHBZUENXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTI2Mi9GN0E2RDU5Q0IwRkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlS Z2E4MGs0TFRoQlRwWVBDVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhz7lcG0z35vm1cl05srLHFr124OZUUEokFU+F1bgN/QD7UTFvn66L +mOGA5omHAYcCSr4PbFfEdpRIlPPZ4dq0iEs6tzSBA3OvE7lNgmlaT0BWEqemhDC +38dWX1G2OyOnme1YAKYmvbAtunYB9VTgrUl4alVQ90gl1fXZn43yqwCp/kvBRPY tG3B5I5drJwpNKGZmMfKhsD0vZmyIL9TSfLFKweKhEulH5OdC7mH3/Z32gaT88qu OXGTk7hpRp7Rp/W6v4G0oceJz9QlgghGCQG31Oo2TBtj8+TdudFshJuf1V+2HaQX E7mO+pACDTPNmKSe1H8bj4wEdot2JK4G -----END CERTIFICATE-----Generated at Sat May 31 16:34:56 2025 by rpki-client