$ rpki-client -vvf rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft File: VR9YpoyP5pILLvCsbpCi0_NYinY.mft (raw, json) Hash identifier: hB4fnPvCqkwSWCkiq7VKTdnFMR9nO/XR8sR6IlG81a8= Subject key identifier: C0:72:CA:AF:09:37:CE:FA:46:37:95:6B:4C:79:34:BE:3B:85:BE:0E Authority key identifier: 55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76 Certificate issuer: /CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76 Certificate serial: 1042 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft Manifest number: 101E Signing time: Fri 30 May 2025 17:38:23 +0000 Manifest this update: Fri 30 May 2025 17:38:22 +0000 Manifest next update: Fri 06 Jun 2025 17:38:22 +0000 Files and hashes: 1: VR9YpoyP5pILLvCsbpCi0_NYinY.crl (hash: 1ct9c1YVfr3D/UNM9Lcd6fmBrMsishFfFn23a6CtFVo=) 2: 5318EFAC6BAE11EBA5B87E56C4F9AE02.roa (hash: O/zDQK+5XXecDsvlrrRdDdVdYXgD1MTmZzBzRrBq/J0=) 3: E973A832656511EC85A7CA2CC4F9AE02.roa (hash: sn836Q2nMHQU64NdjOs0ZiA4VlzUNBBTB3I7t0SZgIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4162 (0x1042) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160856, serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76 Validity Not Before: May 30 17:38:22 2025 GMT Not After : Jun 6 17:38:22 2025 GMT Subject: CN=6839ed0f-6e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8d:79:18:1e:f4:af:d9:2a:f6:9c:4d:75:d7: 6f:3c:cb:7e:de:85:b8:9f:e9:ad:23:94:a7:d9:35: 1b:76:7c:d9:6a:00:c9:ab:4d:26:1a:7a:ab:ec:ff: 0b:69:f1:37:dd:29:1b:fe:d0:79:9d:46:49:0c:6a: 8e:6d:ab:e8:20:b0:22:fd:23:3d:16:c1:a1:15:ef: 8c:ac:2a:af:4c:3d:10:78:d5:0e:53:c5:17:7a:7a: 75:92:0d:68:bf:f9:2c:04:16:ac:76:6d:7d:45:9a: b6:74:ab:66:a2:21:53:4d:32:bd:17:68:28:5d:4b: 03:80:98:be:59:b2:72:b3:b5:d4:02:bd:84:e4:32: 44:c3:9e:20:47:76:8c:0e:fc:17:63:15:6d:ba:86: 89:f7:b6:22:09:be:08:17:9c:da:96:1a:ac:56:11: 34:65:33:81:f5:a0:f1:8a:ad:56:81:14:d9:e8:52: cd:02:bd:22:1f:10:bf:ab:de:1f:c4:f9:94:d3:9b: b7:f8:d4:41:a3:79:a4:55:1f:74:38:0b:93:a6:84: 1f:89:5d:01:82:1b:1b:c3:99:3b:50:4b:3d:a8:18: d5:65:8a:d5:08:dd:a0:21:ea:21:27:e7:43:6d:50: b5:64:0e:3a:e6:a1:1e:55:b9:61:8b:9e:14:2c:e5: fb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:72:CA:AF:09:37:CE:FA:46:37:95:6B:4C:79:34:BE:3B:85:BE:0E X509v3 Authority Key Identifier: keyid:55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:d8:08:95:00:bf:c2:6a:3d:c4:05:1e:d5:ff:97:67:5f:fd: ee:a7:d3:e7:e1:16:8f:95:39:7c:4d:a0:cb:df:01:26:ab:82: f3:bd:03:8a:f0:32:63:b5:29:d6:ae:22:f7:de:b4:bf:91:42: 67:4b:94:96:9b:be:6d:80:33:c8:c9:ad:75:8d:ee:25:29:8f: 9d:75:88:1c:63:5d:56:74:39:21:4c:04:3c:1f:01:a2:d4:8d: f1:29:ff:f0:2a:18:93:01:9c:1c:df:24:06:83:c5:16:e9:f7: cc:c4:8a:52:a6:5d:b7:23:5c:5b:be:a2:69:7b:f7:78:ff:53: fe:51:ca:72:bb:58:c6:51:fa:d4:b8:f4:6b:81:49:84:75:6c: ad:48:f5:f6:94:32:e6:7f:51:9c:14:f1:26:1d:fc:66:f9:f6: bd:4d:93:d5:c0:04:88:7e:db:0b:0d:fd:5f:92:6c:87:b6:7b: 8b:02:6e:0a:8a:18:ae:87:39:65:2c:21:b0:51:68:58:70:1d: a5:e4:bd:8b:e6:ba:9a:cb:94:37:5f:27:1e:06:6a:03:73:ab: 5c:65:3f:37:47:54:6d:a9:b7:5f:4f:34:83:6d:20:9b:36:41: 64:b7:7f:1f:3b:4c:41:ff:17:e8:3f:bf:d2:10:bd:21:01:f0: 8a:00:83:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA4NTYxMTAvBgNVBAUTKDU1MUY1OEE2OEM4RkU2OTIwQjJFRjBBQzZFOTBBMkQz RjM1ODhBNzYwHhcNMjUwNTMwMTczODIyWhcNMjUwNjA2MTczODIyWjAYMRYwFAYD VQQDEw02ODM5ZWQwZi02ZTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl415GB70r9kq9pxNdddvPMt+3oW4n+mtI5Sn2TUbdnzZagDJq00mGnqr7P8L afE33Skb/tB5nUZJDGqObavoILAi/SM9FsGhFe+MrCqvTD0QeNUOU8UXenp1kg1o v/ksBBasdm19RZq2dKtmoiFTTTK9F2goXUsDgJi+WbJys7XUAr2E5DJEw54gR3aM DvwXYxVtuoaJ97YiCb4IF5zalhqsVhE0ZTOB9aDxiq1WgRTZ6FLNAr0iHxC/q94f xPmU05u3+NRBo3mkVR90OAuTpoQfiV0Bghsbw5k7UEs9qBjVZYrVCN2gIeohJ+dD bVC1ZA465qEeVblhi54ULOX71wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMByyq8J N876RjeVa0x5NL47hb4OMB8GA1UdIwQYMBaAFFUfWKaMj+aSCy7wrG6QotPzWIp2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDg1Ni9FRDU3Nzk1RTRD NzQxMUU5OUUxQjk5NTZDNEY5QUUwMi9WUjlZcG95UDVwSUxMdkNzYnBDaTBfTllp blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSOVlwb3lQNXBJTEx2Q3NicENpMF9OWWluWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDg1Ni9FRDU3Nzk1RTRDNzQxMUU5OUUxQjk5NTZDNEY5QUUwMi9WUjlZcG95UDVw SUxMdkNzYnBDaTBfTllpblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA2AiVAL/Caj3EBR7V/5dnX/3up9Pn4RaPlTl8TaDL3wEmq4LzvQOK 8DJjtSnWriL33rS/kUJnS5SWm75tgDPIya11je4lKY+ddYgcY11WdDkhTAQ8HwGi 1I3xKf/wKhiTAZwc3yQGg8UW6ffMxIpSpl23I1xbvqJpe/d4/1P+Ucpyu1jGUfrU uPRrgUmEdWytSPX2lDLmf1GcFPEmHfxm+fa9TZPVwASIftsLDf1fkmyHtnuLAm4K ihiuhzllLCGwUWhYcB2l5L2L5rqay5Q3XyceBmoDc6tcZT83R1RtqbdfTzSDbSCb NkFkt38fO0xB/xfoP7/SEL0hAfCKAINU -----END CERTIFICATE-----Generated at Sat May 31 17:57:48 2025 by rpki-client