$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft File: VFjEVinBBKqnpYcoaG-NHihyqSo.mft (raw, json) Hash identifier: hIPwZSg1nAxYtYT3aNXj1rxd6+7NibU6vg3fpFQfTTg= Subject key identifier: 2A:DD:C5:D6:20:94:A4:60:12:92:FD:F1:59:1D:48:07:08:3F:DD:6C Authority key identifier: 54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A Certificate issuer: /CN=A9153C27/serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A Certificate serial: 0C47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft Manifest number: 0C3F Signing time: Wed 02 Apr 2025 18:23:48 +0000 Manifest this update: Wed 02 Apr 2025 18:23:48 +0000 Manifest next update: Wed 09 Apr 2025 18:23:48 +0000 Files and hashes: 1: VFjEVinBBKqnpYcoaG-NHihyqSo.crl (hash: KYB1EgchEpO20WC7Gz0v0MPBwypdglmCmmHRu+Y6CpE=) 2: DB020E9C010D11EAA82AD83CC4F9AE02.roa (hash: +/HgExCatPcRmJalycUeFMmwknrCCg9dQk/HjuFZjUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 18:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3143 (0xc47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153C27 Validity Not Before: Apr 2 18:23:48 2025 GMT Not After : Apr 9 18:23:48 2025 GMT Subject: CN=67ed80b4-e318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:84:84:25:66:8e:b8:61:8c:90:63:bb:5d:03: 99:ad:2f:a1:db:dd:3f:1f:a8:e0:2e:ca:c1:ea:fe: 86:aa:26:df:c1:59:dc:d9:4d:db:09:53:e4:93:42: 8a:d5:26:08:a3:90:b7:3a:7c:bc:50:48:b1:1a:18: 6d:ed:e0:99:1e:f5:87:7e:8c:ee:fa:42:8c:eb:f3: 5a:60:73:98:dd:d9:b5:1c:b5:c7:c2:dd:63:c7:2b: 84:96:03:a0:1a:cc:06:f9:eb:bb:95:10:05:7a:d0: 12:d4:54:73:da:58:68:ad:5c:fe:8d:79:ca:55:57: ab:5c:01:4e:24:74:ad:29:57:d0:26:c2:e3:4c:1d: 01:d8:aa:f5:d8:4f:3c:91:99:42:97:da:08:8d:cd: 45:06:9d:bd:93:93:84:3c:38:89:94:5c:4a:b4:4d: f7:86:0e:2d:b7:e5:b2:38:d7:40:ff:b5:fb:a8:ac: ef:6a:aa:af:33:a1:de:0c:d4:c4:ae:75:ec:6d:a5: 02:c7:4b:7e:23:0d:4f:20:a3:30:4f:48:0d:40:90: 21:30:d9:9d:1a:eb:f4:dc:66:91:df:4a:87:96:fc: 59:2a:26:23:be:e8:81:7c:19:ac:f3:10:f6:cd:e5: 77:eb:ec:e6:5b:db:e0:76:e9:9b:7a:dc:44:ba:64: 40:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DD:C5:D6:20:94:A4:60:12:92:FD:F1:59:1D:48:07:08:3F:DD:6C X509v3 Authority Key Identifier: keyid:54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:e2:bc:fd:f7:35:fb:cf:25:73:8b:ec:d7:1a:1b:06:30:21: c5:ef:69:54:62:89:89:bb:37:40:26:6f:7d:84:29:78:9b:23: ae:ab:04:1c:1b:30:de:fb:4c:d0:68:25:c4:95:44:13:bb:8d: fb:9d:c6:22:e4:ae:02:d9:e2:62:30:65:04:63:f7:ef:5b:dc: 93:63:3f:f3:53:cf:46:7c:62:9a:fe:eb:eb:72:61:7b:33:0c: dd:c0:09:f5:43:b7:9a:30:a7:94:dd:67:c1:45:8f:84:1d:be: 61:55:fe:52:ed:61:79:22:c1:79:3a:17:42:44:11:58:e0:75: d4:d7:cd:a9:d1:db:b2:85:54:58:9a:4f:86:00:79:98:9e:7e: 2b:fa:df:2e:43:11:4b:6b:41:3f:30:97:09:86:79:83:04:5c: 41:f1:1e:33:b5:45:fc:17:c8:09:8d:5a:67:e6:e1:ad:a5:89: ee:e8:5c:78:93:ac:2f:10:3d:1a:7b:3c:55:18:23:b1:a7:7a: b5:58:70:55:fd:76:82:96:cc:9e:76:6a:77:aa:b1:94:5e:6a: e2:35:f6:62:a8:9e:d5:12:91:ee:04:58:2c:bb:cc:12:71:99: 14:f0:d9:19:ab:20:47:b0:4b:2d:fb:b3:82:3d:2d:ef:5a:a2: 17:13:89:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDMjcxMTAvBgNVBAUTKDU0NThDNDU2MjlDMTA0QUFBN0E1ODcyODY4NkY4RDFF Mjg3MkE5MkEwHhcNMjUwNDAyMTgyMzQ4WhcNMjUwNDA5MTgyMzQ4WjAYMRYwFAYD VQQDEw02N2VkODBiNC1lMzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoSEJWaOuGGMkGO7XQOZrS+h290/H6jgLsrB6v6GqibfwVnc2U3bCVPkk0KK 1SYIo5C3Ony8UEixGhht7eCZHvWHfozu+kKM6/NaYHOY3dm1HLXHwt1jxyuElgOg GswG+eu7lRAFetAS1FRz2lhorVz+jXnKVVerXAFOJHStKVfQJsLjTB0B2Kr12E88 kZlCl9oIjc1FBp29k5OEPDiJlFxKtE33hg4tt+WyONdA/7X7qKzvaqqvM6HeDNTE rnXsbaUCx0t+Iw1PIKMwT0gNQJAhMNmdGuv03GaR30qHlvxZKiYjvuiBfBms8xD2 zeV36+zmW9vgdumbetxEumRArwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrdxdYg lKRgEpL98VkdSAcIP91sMB8GA1UdIwQYMBaAFFRYxFYpwQSqp6WHKGhvjR4ocqkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0MyNy82NUJCNDg5QzAw NEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJLcW5wWWNvYUctTkhpaHlx U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGakVWaW5CQktxbnBZY29hRy1OSGloeXFTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0MyNy82NUJCNDg5QzAwNEExMUVBOTgwRjJBN0NDNEY5QUUwMi9WRmpFVmluQkJL cW5wWWNvYUctTkhpaHlxU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC64rz99zX7zyVzi+zXGhsGMCHF72lUYomJuzdAJm99hCl4myOuqwQc GzDe+0zQaCXElUQTu437ncYi5K4C2eJiMGUEY/fvW9yTYz/zU89GfGKa/uvrcmF7 MwzdwAn1Q7eaMKeU3WfBRY+EHb5hVf5S7WF5IsF5OhdCRBFY4HXU182p0duyhVRY mk+GAHmYnn4r+t8uQxFLa0E/MJcJhnmDBFxB8R4ztUX8F8gJjVpn5uGtpYnu6Fx4 k6wvED0aezxVGCOxp3q1WHBV/XaClsyedmp3qrGUXmriNfZiqJ7VEpHuBFgsu8wS cZkU8NkZqyBHsEst+7OCPS3vWqIXE4ka -----END CERTIFICATE-----Generated at Fri Apr 4 18:45:35 2025 by rpki-client