$ rpki-client -vvf rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft File: VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft (raw, json) Hash identifier: hLrOjjhDi4GrdzwpuY1AckEJX8lmez6QmALZUsKER1U= Subject key identifier: 86:E7:0A:55:7C:AE:88:2C:6F:3F:EE:94:4E:E4:12:9A:62:CE:A8:E3 Authority key identifier: 54:B6:DE:06:91:A9:C6:D5:65:CD:18:01:1D:D2:2B:10:9E:02:37:9B Certificate issuer: /CN=A9116119/serialNumber=54B6DE0691A9C6D565CD18011DD22B109E02379B Certificate serial: 10D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft Manifest number: 10CD Signing time: Wed 02 Apr 2025 17:21:08 +0000 Manifest this update: Wed 02 Apr 2025 17:21:08 +0000 Manifest next update: Wed 09 Apr 2025 17:21:08 +0000 Files and hashes: 1: VLbeBpGpxtVlzRgBHdIrEJ4CN5s.crl (hash: FNt1Kc0wfINeKsn7M0+iCrVernNOIyOQGaCQ4jPOsDA=) 2: 991E066C1DB711EB95324E17C4F9AE02.roa (hash: /nPv0Yq4GGkQfcr8qvWam0XNmS67EN12p0o/3hMFLgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.crl rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 17:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4309 (0x10d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116119 Validity Not Before: Apr 2 17:21:08 2025 GMT Not After : Apr 9 17:21:08 2025 GMT Subject: CN=67ed7204-8c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bf:0c:7e:2a:58:e9:e5:12:fe:57:f2:92:27: 2c:29:08:29:99:46:85:c6:4b:70:b3:ef:96:18:63: 5a:8c:b1:4e:fa:ca:be:b8:b7:08:ac:74:28:b5:da: 4c:cd:db:a0:f1:32:0c:f9:fa:e0:62:65:f9:63:6b: 2c:e6:51:76:25:bb:c7:1e:cf:5b:a0:ca:93:e1:e6: c0:71:b2:44:51:69:59:ba:90:9b:c1:d4:49:7d:da: d0:98:0b:74:8d:ae:4b:cb:56:f9:9a:a6:70:92:04: 24:2f:c4:ff:2b:56:81:b2:7e:55:34:cd:c1:c8:af: 2c:83:06:ab:34:ac:3d:b9:b8:bd:5a:da:b6:84:69: 9d:06:02:7b:27:23:ef:92:60:46:f8:17:19:63:d4: 51:cf:10:e3:a0:2f:ce:82:79:a2:f2:fd:55:ae:5d: 34:a7:9c:36:6a:8b:6c:4a:26:dc:61:fc:a7:1c:04: 7f:71:4b:58:bb:e8:d0:a2:14:0f:a9:5f:37:53:90: 32:f2:6b:92:34:ec:bc:37:c2:0c:ee:d1:f4:2d:49: 67:b4:80:3e:f0:7f:3d:0b:cb:87:2d:4b:e2:6e:a5: 29:a6:b8:f0:1a:24:7d:7d:c6:af:c5:b0:f4:4b:be: 9e:e2:12:68:7b:d2:10:a3:5f:db:38:4f:80:72:0e: 01:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E7:0A:55:7C:AE:88:2C:6F:3F:EE:94:4E:E4:12:9A:62:CE:A8:E3 X509v3 Authority Key Identifier: keyid:54:B6:DE:06:91:A9:C6:D5:65:CD:18:01:1D:D2:2B:10:9E:02:37:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:d9:f8:8c:63:17:05:3b:e9:f5:93:99:b9:32:fc:10:b2:52: a7:fd:6d:f5:a4:87:46:3b:5e:49:68:de:fd:63:8d:5a:85:f4: 5e:e5:8b:c8:d9:b1:d5:5e:c2:1a:3a:88:66:9b:ab:c4:61:c6: 60:88:24:5f:61:1f:42:ef:88:79:45:f0:df:5a:48:0d:06:81: db:f9:32:dd:33:13:98:36:39:6b:4c:91:7a:3b:1f:5f:ab:1f: bb:3e:a6:74:5e:7a:25:a3:e4:e6:a2:4e:71:74:87:76:38:98: 39:a0:17:4d:b1:22:d0:22:8a:73:73:8f:c0:fc:62:1e:b2:d4: da:2a:0a:c2:30:8a:20:45:bb:d1:6a:5a:36:55:f1:17:d3:f5: b6:91:fa:55:ec:18:0a:71:b7:7c:d4:16:71:a1:db:c5:b4:4b: ed:13:1c:8b:f6:34:cc:38:b3:22:9b:59:82:0b:a9:69:e4:56: cb:9b:a7:b7:c9:ea:db:02:ad:ca:c6:71:17:0e:6e:a6:54:c5: 0e:67:34:23:6a:a9:28:79:aa:7b:64:2b:46:82:3b:5f:64:74: 10:3a:b8:0a:57:55:3b:ca:75:1b:a8:d0:af:02:93:80:f5:b7: 5c:6e:10:3e:67:aa:df:29:80:f1:ea:15:5c:07:0d:29:ea:83: 9e:b1:8c:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYxMTkxMTAvBgNVBAUTKDU0QjZERTA2OTFBOUM2RDU2NUNEMTgwMTFERDIyQjEw OUUwMjM3OUIwHhcNMjUwNDAyMTcyMTA4WhcNMjUwNDA5MTcyMTA4WjAYMRYwFAYD VQQDEw02N2VkNzIwNC04YzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvb8MfipY6eUS/lfykicsKQgpmUaFxktws++WGGNajLFO+sq+uLcIrHQotdpM zdug8TIM+frgYmX5Y2ss5lF2JbvHHs9boMqT4ebAcbJEUWlZupCbwdRJfdrQmAt0 ja5Ly1b5mqZwkgQkL8T/K1aBsn5VNM3ByK8sgwarNKw9ubi9Wtq2hGmdBgJ7JyPv kmBG+BcZY9RRzxDjoC/Ognmi8v1Vrl00p5w2aotsSibcYfynHAR/cUtYu+jQohQP qV83U5Ay8muSNOy8N8IM7tH0LUlntIA+8H89C8uHLUvibqUpprjwGiR9fcavxbD0 S76e4hJoe9IQo1/bOE+Acg4B7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbnClV8 rogsbz/ulE7kEppizqjjMB8GA1UdIwQYMBaAFFS23gaRqcbVZc0YAR3SKxCeAjeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjExOS81NDQ4MTc5RTFB QkMxMUU5QkRBNEZDNDhDNEY5QUUwMi9WTGJlQnBHcHh0Vmx6UmdCSGRJckVKNENO NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZMYmVCcEdweHRWbHpSZ0JIZElyRUo0Q041cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjExOS81NDQ4MTc5RTFBQkMxMUU5QkRBNEZDNDhDNEY5QUUwMi9WTGJlQnBHcHh0 Vmx6UmdCSGRJckVKNENONXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn2fiMYxcFO+n1k5m5MvwQslKn/W31pIdGO15JaN79Y41ahfRe5YvI 2bHVXsIaOohmm6vEYcZgiCRfYR9C74h5RfDfWkgNBoHb+TLdMxOYNjlrTJF6Ox9f qx+7PqZ0Xnolo+Tmok5xdId2OJg5oBdNsSLQIopzc4/A/GIestTaKgrCMIogRbvR alo2VfEX0/W2kfpV7BgKcbd81BZxodvFtEvtExyL9jTMOLMim1mCC6lp5FbLm6e3 yerbAq3KxnEXDm6mVMUOZzQjaqkoeap7ZCtGgjtfZHQQOrgKV1U7ynUbqNCvApOA 9bdcbhA+Z6rfKYDx6hVcBw0p6oOesYz0 -----END CERTIFICATE-----Generated at Fri Apr 4 18:29:53 2025 by rpki-client