$ rpki-client -vvf rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft File: VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft (raw, json) Hash identifier: AqZ1hgObTZUu/t+A5fAYkuW6qnUssQNO3BA6xlAe37g= Subject key identifier: 3F:8C:E6:EB:4B:9E:09:81:FB:24:4E:20:59:04:3F:78:FA:41:2C:07 Authority key identifier: 54:B6:DE:06:91:A9:C6:D5:65:CD:18:01:1D:D2:2B:10:9E:02:37:9B Certificate issuer: /CN=A9116119/serialNumber=54B6DE0691A9C6D565CD18011DD22B109E02379B Certificate serial: 10F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft Manifest number: 10E9 Signing time: Fri 30 May 2025 17:28:44 +0000 Manifest this update: Fri 30 May 2025 17:28:43 +0000 Manifest next update: Fri 06 Jun 2025 17:28:43 +0000 Files and hashes: 1: VLbeBpGpxtVlzRgBHdIrEJ4CN5s.crl (hash: fUaaSBBzfaCvIv5u9FuV76oxz8NQgUxsi0NaUF1Rz6k=) 2: 991E066C1DB711EB95324E17C4F9AE02.roa (hash: /nPv0Yq4GGkQfcr8qvWam0XNmS67EN12p0o/3hMFLgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.crl rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4337 (0x10f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116119, serialNumber=54B6DE0691A9C6D565CD18011DD22B109E02379B Validity Not Before: May 30 17:28:43 2025 GMT Not After : Jun 6 17:28:43 2025 GMT Subject: CN=6839eacc-9a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:46:d4:13:d0:23:f3:2b:2f:de:a3:ab:19:ec: 00:bc:c5:f9:4d:aa:a7:13:a9:c1:7a:ce:26:c9:49: a9:ce:d1:c0:f7:75:50:0f:cd:fd:49:50:db:12:5f: 4b:71:1c:e2:6d:02:29:82:7e:07:d3:55:62:19:a8: 89:d6:2b:a2:0b:19:7f:16:9d:4b:84:3b:02:39:b0: 6a:59:54:c6:19:99:c8:84:bc:0a:8a:e6:b6:19:ce: 1c:c2:c9:be:a3:b7:7c:35:c9:94:30:3f:82:cf:9d: 6a:f4:bc:ea:be:d5:2d:0b:b1:44:c3:61:bd:f8:75: 64:2c:8c:45:6c:0f:54:2f:6a:3c:65:82:1b:d8:93: af:a6:78:bf:7d:c4:f2:ca:91:57:6a:02:bc:1f:65: 1d:c6:b2:7f:d8:f7:cc:6a:12:c2:0a:9c:1e:3b:2b: 18:47:7c:14:14:64:79:98:e3:96:9b:a3:6a:58:c2: f7:fc:be:75:14:bc:b3:07:5f:85:8b:d9:18:9b:1f: 73:2e:fc:51:2d:4f:b1:df:9f:96:50:fe:a0:63:e8: 73:5f:5a:d4:af:fc:59:ba:db:40:64:b0:30:2b:28: 2a:b4:dc:b2:bd:d4:67:94:4b:7c:cb:54:f4:09:55: 69:a1:d8:e3:cf:3d:7e:9a:d7:1a:f2:92:21:e8:53: a5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8C:E6:EB:4B:9E:09:81:FB:24:4E:20:59:04:3F:78:FA:41:2C:07 X509v3 Authority Key Identifier: keyid:54:B6:DE:06:91:A9:C6:D5:65:CD:18:01:1D:D2:2B:10:9E:02:37:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:b5:09:5d:87:7c:66:2f:62:2b:9e:88:df:b8:c6:4b:3e:74: c1:85:54:20:bf:a8:e0:52:86:4a:9f:6d:8e:e6:2b:0a:61:c0: 07:99:29:c4:f6:e8:39:7a:4a:45:58:db:17:17:8c:d2:8c:91: 3e:39:da:0c:6e:a1:f4:38:29:7b:39:93:83:7f:27:dc:6a:0b: b2:c9:6b:d3:a2:a9:72:03:55:63:43:56:77:72:09:0c:7e:0f: b9:a2:ac:19:0b:5b:ee:2e:e1:8f:96:23:5d:ea:b6:26:63:32: 0c:f2:8d:45:48:3a:e0:fb:c9:b3:88:4c:74:ee:62:b7:24:7b: 94:a0:44:5b:74:4c:bb:c4:96:6c:80:1e:a9:0c:71:3c:87:1b: d0:80:29:62:91:82:cb:dc:08:98:74:39:f1:2f:cf:8a:ea:04: 25:30:0e:1f:0c:79:f0:01:7b:46:1c:37:8d:07:27:95:e9:0e: 2a:32:7d:5c:02:b6:0f:4f:89:ac:e6:5a:5d:77:28:4d:da:64: 45:78:a7:fb:8c:56:7e:f3:3a:73:81:bc:a1:99:fc:15:a7:c3: af:8e:db:75:43:ea:55:9c:a6:a8:50:63:05:85:6e:87:8b:b9: 04:34:eb:e3:31:ad:9b:60:5c:27:5a:5d:22:b7:da:68:34:a0: cf:e7:99:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYxMTkxMTAvBgNVBAUTKDU0QjZERTA2OTFBOUM2RDU2NUNEMTgwMTFERDIyQjEw OUUwMjM3OUIwHhcNMjUwNTMwMTcyODQzWhcNMjUwNjA2MTcyODQzWjAYMRYwFAYD VQQDEw02ODM5ZWFjYy05YTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlkbUE9Aj8ysv3qOrGewAvMX5TaqnE6nBes4myUmpztHA93VQD839SVDbEl9L cRzibQIpgn4H01ViGaiJ1iuiCxl/Fp1LhDsCObBqWVTGGZnIhLwKiua2Gc4cwsm+ o7d8NcmUMD+Cz51q9LzqvtUtC7FEw2G9+HVkLIxFbA9UL2o8ZYIb2JOvpni/fcTy ypFXagK8H2UdxrJ/2PfMahLCCpweOysYR3wUFGR5mOOWm6NqWML3/L51FLyzB1+F i9kYmx9zLvxRLU+x35+WUP6gY+hzX1rUr/xZuttAZLAwKygqtNyyvdRnlEt8y1T0 CVVpodjjzz1+mtca8pIh6FOlywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+M5utL ngmB+yROIFkEP3j6QSwHMB8GA1UdIwQYMBaAFFS23gaRqcbVZc0YAR3SKxCeAjeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjExOS81NDQ4MTc5RTFB QkMxMUU5QkRBNEZDNDhDNEY5QUUwMi9WTGJlQnBHcHh0Vmx6UmdCSGRJckVKNENO NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZMYmVCcEdweHRWbHpSZ0JIZElyRUo0Q041cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjExOS81NDQ4MTc5RTFBQkMxMUU5QkRBNEZDNDhDNEY5QUUwMi9WTGJlQnBHcHh0 Vmx6UmdCSGRJckVKNENONXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjtQldh3xmL2IrnojfuMZLPnTBhVQgv6jgUoZKn22O5isKYcAHmSnE 9ug5ekpFWNsXF4zSjJE+OdoMbqH0OCl7OZODfyfcaguyyWvToqlyA1VjQ1Z3cgkM fg+5oqwZC1vuLuGPliNd6rYmYzIM8o1FSDrg+8mziEx07mK3JHuUoERbdEy7xJZs gB6pDHE8hxvQgClikYLL3AiYdDnxL8+K6gQlMA4fDHnwAXtGHDeNByeV6Q4qMn1c ArYPT4ms5lpddyhN2mRFeKf7jFZ+8zpzgbyhmfwVp8Ovjtt1Q+pVnKaoUGMFhW6H i7kENOvjMa2bYFwnWl0it9poNKDP55ne -----END CERTIFICATE-----Generated at Sat May 31 17:45:09 2025 by rpki-client