$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft File: vFNsAPhfWQQdnEwpYfciQr9g1R4.mft (raw, json) Hash identifier: 9vQ7qBZYpxmPDiwwDcAb7rK3Q088yiBOeomiIzVyEKI= Subject key identifier: 9B:F4:81:A7:03:56:74:F2:18:7D:2A:A8:FA:70:84:C8:FB:AF:92:D7 Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Certificate serial: 1240 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft Manifest number: 120B Signing time: Fri 04 Apr 2025 17:16:22 +0000 Manifest this update: Fri 04 Apr 2025 17:16:21 +0000 Manifest next update: Fri 11 Apr 2025 17:16:21 +0000 Files and hashes: 1: vFNsAPhfWQQdnEwpYfciQr9g1R4.crl (hash: aFOx5ALUnGwTrPNJf0vvwRT/pkqwEmHPOFrkfQgr2Y4=) 2: DA505546B74C11ED916B5A6AC4F9AE02.roa (hash: 9RHwtONKgQdHSDennn4HM2Ikhdy+C6zf57qmecAxamQ=) 3: 3A9AD3CEDAD411EBB35DA50AC4F9AE02.roa (hash: EztUCIPqk3y/a6AcLfvax6DUhCHP6l9BEvQIvIo9iws=) 4: E0ACCAC4ECD211EFA6C15823C4F9AE02.roa (hash: /d3XQ565KopoANcg+pwgBZqGoqy8+pW8EGFbyyXXzys=) 5: 57A84138605911EE8ABC9318C4F9AE02.roa (hash: acU+THblHTmNuI3hvXPa2l7l+23XT3W88AntJDw2zgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4672 (0x1240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860 Validity Not Before: Apr 4 17:16:21 2025 GMT Not After : Apr 11 17:16:21 2025 GMT Subject: CN=67f013e6-61c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:25:2f:a8:17:fa:1d:af:28:c9:a4:eb:a7:fa: 9e:e7:19:5c:e7:83:be:50:e5:32:9d:f1:a7:c7:b1: 77:02:98:ea:4f:7f:ad:54:f6:d5:fc:98:cd:97:4c: 10:88:17:06:5c:08:87:1a:a1:1a:aa:ef:56:de:2e: fd:e4:a6:46:17:aa:5d:81:8c:03:cf:1d:e4:f0:41: 25:9d:ec:52:30:62:5d:8e:ff:ac:bb:b8:7e:3e:76: 34:fa:d3:e5:25:29:b9:4d:62:76:da:9d:20:3d:1d: bb:ff:0c:e8:e9:24:34:c3:96:f8:bc:d5:18:68:74: be:42:b9:ed:df:27:bd:93:de:75:c4:f2:80:bb:bc: 61:9d:62:53:d2:c8:36:42:98:fe:86:00:35:5b:d4: 50:93:38:dc:29:43:8f:eb:36:18:4e:91:68:89:76: 4a:58:60:b6:6a:e8:3f:3e:e1:f5:38:4b:16:94:22: d1:c4:0b:34:6a:5a:b8:2a:24:83:b4:69:22:98:84: 44:9a:6f:2f:f9:88:ea:f7:4a:12:d4:17:f5:f9:f4: 31:36:96:2a:fb:a7:43:54:3c:fb:4a:50:b3:02:77: 0c:20:bb:3e:f2:98:1d:4b:1a:79:44:6a:72:31:28: 5f:75:62:bb:3d:11:73:e9:cf:30:f4:3e:5f:46:5f: 90:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F4:81:A7:03:56:74:F2:18:7D:2A:A8:FA:70:84:C8:FB:AF:92:D7 X509v3 Authority Key Identifier: keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:56:e8:57:ca:3a:9d:ab:a1:e3:8b:c3:41:af:cb:de:c7:9b: e8:d3:36:bf:19:0e:ae:33:27:0a:76:c5:16:da:48:3d:29:f4: 0f:2f:dd:59:89:2f:aa:99:6f:9b:25:cf:1c:96:e2:a5:01:78: 43:de:44:1c:86:15:91:f9:41:ff:69:ba:cb:a1:45:dd:c5:09: 55:ca:f5:a0:f1:fe:89:ae:9f:d8:53:ef:7d:e4:c5:e7:6c:7e: d5:02:34:e0:0e:f1:89:3d:33:e7:73:f8:69:c9:68:08:de:78: c7:2d:2d:78:23:97:26:2a:71:58:e7:b6:18:c2:36:2c:52:5d: fa:89:e4:30:7e:bf:ce:01:1c:9d:b1:31:f1:cd:a7:4a:40:12: 50:58:d8:f7:7e:10:0e:20:a0:bf:96:d7:de:8f:cc:52:b9:e2: 80:ae:19:8c:55:05:49:2f:3f:3c:35:91:bb:b3:bd:99:5f:61: 58:91:58:90:81:32:6d:58:41:bf:56:16:89:32:5c:b9:82:e1: d5:46:df:0c:4e:82:04:17:02:80:d4:02:2f:a7:1c:a9:23:ec: bf:a2:db:b7:dc:0b:59:4e:bf:3d:c0:9d:2e:22:f2:df:c5:62: 8d:00:a3:92:e1:c7:16:f5:a7:19:fe:53:3b:60:2f:25:f0:92: c6:b7:a2:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy QkY2MEQ1MUUwHhcNMjUwNDA0MTcxNjIxWhcNMjUwNDExMTcxNjIxWjAYMRYwFAYD VQQDEw02N2YwMTNlNi02MWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySUvqBf6Ha8oyaTrp/qe5xlc54O+UOUynfGnx7F3ApjqT3+tVPbV/JjNl0wQ iBcGXAiHGqEaqu9W3i795KZGF6pdgYwDzx3k8EElnexSMGJdjv+su7h+PnY0+tPl JSm5TWJ22p0gPR27/wzo6SQ0w5b4vNUYaHS+Qrnt3ye9k951xPKAu7xhnWJT0sg2 Qpj+hgA1W9RQkzjcKUOP6zYYTpFoiXZKWGC2aug/PuH1OEsWlCLRxAs0alq4KiSD tGkimIREmm8v+Yjq90oS1Bf1+fQxNpYq+6dDVDz7SlCzAncMILs+8pgdSxp5RGpy MShfdWK7PRFz6c8w9D5fRl+QswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJv0gacD VnTyGH0qqPpwhMj7r5LXMB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5 NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDg2MC9CNDAxQzk4MkU5NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldR UWRuRXdwWWZjaVFyOWcxUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCVuhXyjqdq6Hji8NBr8vex5vo0za/GQ6uMycKdsUW2kg9KfQPL91Z iS+qmW+bJc8cluKlAXhD3kQchhWR+UH/abrLoUXdxQlVyvWg8f6Jrp/YU+995MXn bH7VAjTgDvGJPTPnc/hpyWgI3njHLS14I5cmKnFY57YYwjYsUl36ieQwfr/OARyd sTHxzadKQBJQWNj3fhAOIKC/ltfej8xSueKArhmMVQVJLz88NZG7s72ZX2FYkViQ gTJtWEG/VhaJMly5guHVRt8MToIEFwKA1AIvpxypI+y/otu33AtZTr89wJ0uIvLf xWKNAKOS4ccW9acZ/lM7YC8l8JLGt6Ij -----END CERTIFICATE-----Generated at Sun Apr 6 09:11:11 2025 by rpki-client