$ rpki-client -vvf rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft File: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft (raw, json) Hash identifier: FFzX6x0yKra4DVLg+997dxX5zjGO7AX5YXwMIeNyP24= Subject key identifier: C2:CA:E1:72:39:A5:FF:90:C9:F2:87:5A:84:D1:33:A2:6F:11:60:C0 Authority key identifier: 56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE Certificate issuer: /CN=A9155001/serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft Manifest number: 7D Signing time: Fri 11 Apr 2025 05:56:24 +0000 Manifest this update: Fri 11 Apr 2025 05:56:23 +0000 Manifest next update: Fri 18 Apr 2025 05:56:23 +0000 Files and hashes: 1: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl (hash: bbXF14k+j0k0BwG1a3rLQX5LWGrML1sZv3U082MjM7E=) 2: B527A9C8604111EF97252962C4F9AE02.roa (hash: c2522H0euUuP0sg8Mvl3kcMxQDDI8YZRAF5eJnZgtNo=) 3: 9FB99556604111EFB4652062C4F9AE02.roa (hash: gAXZmB2qUQ7sV8azWi6YJhPEFVxj4U+stV/Xuikiv/k=) 4: 18E15164604011EF82C9CE5FC4F9AE02.roa (hash: kerAf5g9k1HzAUucdXB7gorLYyfAcdKUtOEyl+siFgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 05:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155001, serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE Validity Not Before: Apr 11 05:56:23 2025 GMT Not After : Apr 18 05:56:23 2025 GMT Subject: CN=67f8af08-94cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c4:d2:7e:69:c7:06:c2:f9:bc:10:69:60:5f: 6c:10:e2:6b:58:61:12:f6:d3:7e:d9:06:98:37:4f: 48:53:4a:9e:f9:2d:5d:c4:da:80:c3:6c:01:d4:28: c1:87:df:f2:6f:43:5e:54:11:2d:de:18:27:a2:14: 3f:3e:57:7c:51:cf:d1:ab:16:d5:39:a7:1d:ca:e1: 65:1c:91:ba:66:39:48:99:c6:b8:4b:41:9b:ea:59: d7:39:8b:de:ec:31:c6:a4:3e:35:a6:40:46:33:9a: 25:87:38:d4:32:2f:ec:56:e2:1b:0b:16:f7:d4:bb: 0e:fd:18:15:28:97:35:fa:17:8a:e8:21:0c:f5:3d: f4:29:67:5b:0c:dd:88:5e:68:0f:9c:56:a9:9c:0c: df:23:0f:84:6e:4b:02:2c:1a:e0:cf:cb:a9:0b:0a: 04:71:3d:4c:5d:fb:08:81:87:1f:34:5b:20:a9:00: ad:1b:45:20:2f:2d:f3:9c:c5:90:36:a9:9f:84:35: f2:a1:a9:6f:80:66:06:b9:60:ee:62:68:3f:8f:9f: b9:65:35:b3:b6:4d:f9:ae:cc:c2:07:2f:d5:18:78: 22:f0:02:93:1b:0c:ef:00:b4:7d:6a:75:f7:9b:21: 2a:8b:6e:9e:70:c6:da:70:ce:b0:51:e0:39:89:93: d6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CA:E1:72:39:A5:FF:90:C9:F2:87:5A:84:D1:33:A2:6F:11:60:C0 X509v3 Authority Key Identifier: keyid:56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:8d:1a:db:04:31:09:b5:7e:d5:51:4a:56:28:b2:a7:2c:53: fe:b7:02:6b:e8:c0:60:9c:0c:62:58:cc:74:82:cf:85:b4:06: 81:16:85:28:26:42:b7:8b:60:eb:19:93:02:ee:70:24:84:8e: d5:14:18:a5:98:a3:11:2f:3a:18:df:06:13:4d:21:ae:d7:4b: 38:68:83:18:74:c6:08:fb:14:7e:1b:08:ef:1d:16:26:1e:28: 4a:ad:a7:c1:eb:9e:38:14:af:11:33:c0:f5:d4:ef:10:07:88: 96:a4:44:ad:6a:a3:ea:8c:d6:92:c4:ce:17:56:31:86:6e:a3: 11:51:6d:16:a8:98:a2:4f:c7:86:0b:90:c3:79:4f:3d:0f:27: ec:5a:2a:c6:8c:eb:c8:7c:ef:cc:f9:25:d5:8f:57:0a:0f:f4: 45:d9:7d:28:3d:1f:dd:0c:92:cf:84:af:cf:98:5e:04:b7:a2: be:99:eb:04:29:14:ef:22:09:df:94:d6:5a:bc:82:1d:8e:d5: 6f:70:2d:e4:35:4b:b4:84:5d:e9:a1:ec:68:fe:9f:d5:c7:d9: 48:1e:db:64:c5:fa:45:dd:87:1b:bf:ff:d7:9a:f7:23:13:72: 56:4e:f6:e9:b0:4a:e7:5c:8b:b8:04:a0:65:e2:83:63:12:b8: 60:2f:a8:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwMDExMTAvBgNVBAUTKDU2NUM4RUM0RTgzNDQ3RUNGRkE2OUUxREVFMTYzN0Mx NUY0NUEzRkUwHhcNMjUwNDExMDU1NjIzWhcNMjUwNDE4MDU1NjIzWjAYMRYwFAYD VQQDEw02N2Y4YWYwOC05NGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsTSfmnHBsL5vBBpYF9sEOJrWGES9tN+2QaYN09IU0qe+S1dxNqAw2wB1CjB h9/yb0NeVBEt3hgnohQ/Pld8Uc/RqxbVOacdyuFlHJG6ZjlImca4S0Gb6lnXOYve 7DHGpD41pkBGM5olhzjUMi/sVuIbCxb31LsO/RgVKJc1+heK6CEM9T30KWdbDN2I XmgPnFapnAzfIw+EbksCLBrgz8upCwoEcT1MXfsIgYcfNFsgqQCtG0UgLy3znMWQ NqmfhDXyoalvgGYGuWDuYmg/j5+5ZTWztk35rszCBy/VGHgi8AKTGwzvALR9anX3 myEqi26ecMbacM6wUeA5iZPWYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLK4XI5 pf+QyfKHWoTRM6JvEWDAMB8GA1UdIwQYMBaAFFZcjsToNEfs/6aeHe4WN8FfRaP+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTAwMS9ERDFDQkQ3MjYw M0UxMUVGODY2RkU4M0VDNEY5QUUwMi9WbHlPeE9nMFItel9wcDRkN2hZM3dWOUZv XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZseU94T2cwUi16X3BwNGQ3aFkzd1Y5Rm9fNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTAwMS9ERDFDQkQ3MjYwM0UxMUVGODY2RkU4M0VDNEY5QUUwMi9WbHlPeE9nMFIt el9wcDRkN2hZM3dWOUZvXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDjRrbBDEJtX7VUUpWKLKnLFP+twJr6MBgnAxiWMx0gs+FtAaBFoUo JkK3i2DrGZMC7nAkhI7VFBilmKMRLzoY3wYTTSGu10s4aIMYdMYI+xR+GwjvHRYm HihKrafB6544FK8RM8D11O8QB4iWpEStaqPqjNaSxM4XVjGGbqMRUW0WqJiiT8eG C5DDeU89DyfsWirGjOvIfO/M+SXVj1cKD/RF2X0oPR/dDJLPhK/PmF4Et6K+mesE KRTvIgnflNZavIIdjtVvcC3kNUu0hF3poexo/p/Vx9lIHttkxfpF3Ycbv//Xmvcj E3JWTvbpsErnXIu4BKBl4oNjErhgL6jO -----END CERTIFICATE-----Generated at Sat Apr 12 15:16:28 2025 by rpki-client