$ rpki-client -vvf rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft File: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft (raw, json) Hash identifier: gpgIql8qrFCj+sxbfDEW8QvxmtD2Te4K0yENCWerfLE= Subject key identifier: DB:E7:0B:48:03:03:80:3F:E9:F6:79:BF:A9:E6:FE:D9:30:69:E5:60 Authority key identifier: 56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE Certificate issuer: /CN=A9155001/serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft Manifest number: 95 Signing time: Sat 31 May 2025 06:00:34 +0000 Manifest this update: Sat 31 May 2025 06:00:34 +0000 Manifest next update: Sat 07 Jun 2025 06:00:34 +0000 Files and hashes: 1: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl (hash: i5wHVpr5J3KGOKtfJ35TJmcUG1vUmzIkRu6Hd0hU5lg=) 2: B527A9C8604111EF97252962C4F9AE02.roa (hash: c2522H0euUuP0sg8Mvl3kcMxQDDI8YZRAF5eJnZgtNo=) 3: 9FB99556604111EFB4652062C4F9AE02.roa (hash: gAXZmB2qUQ7sV8azWi6YJhPEFVxj4U+stV/Xuikiv/k=) 4: 18E15164604011EF82C9CE5FC4F9AE02.roa (hash: kerAf5g9k1HzAUucdXB7gorLYyfAcdKUtOEyl+siFgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155001, serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE Validity Not Before: May 31 06:00:34 2025 GMT Not After : Jun 7 06:00:34 2025 GMT Subject: CN=683a9b02-63c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:09:a3:b7:15:a7:a5:0c:6f:af:fa:98:02:18: 17:f1:2f:38:8c:a6:fc:1d:43:80:3a:bb:f0:dd:25: dc:e7:38:7f:14:42:8f:f8:f9:b5:c5:c4:9a:d9:f5: 5a:cb:0b:aa:4e:da:a7:92:bb:2d:1d:7c:94:86:4d: 65:a9:e0:9d:da:16:c9:ee:87:76:ad:04:f5:b0:3c: a6:f8:0c:c5:3c:4b:72:e9:b3:3a:5f:d0:4c:a1:66: bf:ff:bc:13:db:52:55:ce:d1:6f:04:17:d7:e9:85: 10:b2:a3:5e:27:55:06:fb:2e:12:82:a1:d7:e8:22: 7f:4f:2c:7f:67:8d:61:4d:60:28:76:2f:1a:c0:d0: 13:90:e8:be:94:60:92:06:7e:36:f5:4d:df:90:12: 36:55:30:14:a6:97:00:93:6e:5c:b0:cf:66:08:a0: 9a:7a:e9:ad:f6:49:8a:1a:37:05:57:d6:2b:a6:a3: 7b:39:6b:f9:8d:0b:bd:4c:24:7c:a2:41:f3:3b:a1: fe:e5:6d:8d:7a:1b:68:79:ec:eb:d4:48:a2:96:14: e0:f2:ab:a9:3a:4c:77:51:e0:8d:ae:5d:56:4e:20: 2d:b9:bf:af:31:66:5b:0a:ce:83:e7:b2:87:37:63: 83:c0:2b:33:0b:d4:41:96:18:77:1e:15:ec:45:92: 9b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E7:0B:48:03:03:80:3F:E9:F6:79:BF:A9:E6:FE:D9:30:69:E5:60 X509v3 Authority Key Identifier: keyid:56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:65:b0:7e:0a:38:72:36:e4:eb:fb:8e:34:50:c7:d6:2f:c1: 97:6a:fa:25:fb:81:5d:5a:05:64:0a:29:ff:19:43:ee:de:e7: f2:4b:22:09:79:ee:28:30:31:78:1f:99:97:05:50:c5:9a:37: 08:30:20:5b:03:12:57:64:46:05:01:96:80:fb:ef:90:ee:c3: 80:bd:ee:d6:b6:c2:8e:8d:e0:9b:9f:09:e1:5a:65:32:53:a1: 97:a2:b6:f7:80:56:be:f8:90:b0:56:af:b4:3a:b5:8e:22:3b: 83:fc:c9:b2:aa:06:6a:0b:ab:50:38:4a:33:d2:b2:f8:e6:af: 66:af:e9:70:ac:7d:1d:3d:1a:5e:56:ae:2c:95:98:a8:68:48: 21:e0:c7:2c:0c:9e:1e:e9:59:fd:8a:ba:8e:df:f7:d6:2b:d1: af:0c:04:55:6e:3a:65:fa:b4:9d:ab:77:44:3d:6b:d3:65:28: cc:2b:37:5f:5c:1a:cb:19:db:b7:a8:fe:f0:36:30:fc:fe:1f: 2d:7a:ff:b3:8a:2e:af:2c:3e:1d:45:50:b9:47:e4:73:f4:40: 11:80:3a:e6:08:2a:51:76:79:49:b4:5c:62:64:66:28:90:01: de:82:b5:bd:81:5b:e5:1e:94:21:c0:21:ff:b5:e9:c8:b3:b4: 88:f1:b0:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwMDExMTAvBgNVBAUTKDU2NUM4RUM0RTgzNDQ3RUNGRkE2OUUxREVFMTYzN0Mx NUY0NUEzRkUwHhcNMjUwNTMxMDYwMDM0WhcNMjUwNjA3MDYwMDM0WjAYMRYwFAYD VQQDEw02ODNhOWIwMi02M2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wmjtxWnpQxvr/qYAhgX8S84jKb8HUOAOrvw3SXc5zh/FEKP+Pm1xcSa2fVa ywuqTtqnkrstHXyUhk1lqeCd2hbJ7od2rQT1sDym+AzFPEty6bM6X9BMoWa//7wT 21JVztFvBBfX6YUQsqNeJ1UG+y4SgqHX6CJ/Tyx/Z41hTWAodi8awNATkOi+lGCS Bn429U3fkBI2VTAUppcAk25csM9mCKCaeumt9kmKGjcFV9YrpqN7OWv5jQu9TCR8 okHzO6H+5W2Nehtoeezr1EiilhTg8qupOkx3UeCNrl1WTiAtub+vMWZbCs6D57KH N2ODwCszC9RBlhh3HhXsRZKbIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvnC0gD A4A/6fZ5v6nm/tkwaeVgMB8GA1UdIwQYMBaAFFZcjsToNEfs/6aeHe4WN8FfRaP+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTAwMS9ERDFDQkQ3MjYw M0UxMUVGODY2RkU4M0VDNEY5QUUwMi9WbHlPeE9nMFItel9wcDRkN2hZM3dWOUZv XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZseU94T2cwUi16X3BwNGQ3aFkzd1Y5Rm9fNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTAwMS9ERDFDQkQ3MjYwM0UxMUVGODY2RkU4M0VDNEY5QUUwMi9WbHlPeE9nMFIt el9wcDRkN2hZM3dWOUZvXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACZbB+CjhyNuTr+440UMfWL8GXavol+4FdWgVkCin/GUPu3ufySyIJ ee4oMDF4H5mXBVDFmjcIMCBbAxJXZEYFAZaA+++Q7sOAve7WtsKOjeCbnwnhWmUy U6GXorb3gFa++JCwVq+0OrWOIjuD/MmyqgZqC6tQOEoz0rL45q9mr+lwrH0dPRpe Vq4slZioaEgh4McsDJ4e6Vn9irqO3/fWK9GvDARVbjpl+rSdq3dEPWvTZSjMKzdf XBrLGdu3qP7wNjD8/h8tev+zii6vLD4dRVC5R+Rz9EARgDrmCCpRdnlJtFxiZGYo kAHegrW9gVvlHpQhwCH/tenIs7SI8bCN -----END CERTIFICATE-----Generated at Sat May 31 16:27:43 2025 by rpki-client