$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.mft File: vc-jy52E0VT-MqVOm0uJXlyNWR4.mft (raw, json) Hash identifier: StWpeLfELuC1TgR713CEjU8XQoSii7qlkUnPCqKgLXQ= Subject key identifier: 48:37:A3:2A:90:42:AF:B2:16:E8:66:97:B7:69:EC:37:CD:8E:20:DC Authority key identifier: BD:CF:A3:CB:9D:84:D1:54:FE:32:A5:4E:9B:4B:89:5E:5C:8D:59:1E Certificate issuer: /CN=A9161B37/serialNumber=BDCFA3CB9D84D154FE32A54E9B4B895E5C8D591E Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vc-jy52E0VT-MqVOm0uJXlyNWR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.mft Manifest number: 60 Signing time: Sat 31 May 2025 06:38:37 +0000 Manifest this update: Sat 31 May 2025 06:38:37 +0000 Manifest next update: Sat 07 Jun 2025 06:38:37 +0000 Files and hashes: 1: vc-jy52E0VT-MqVOm0uJXlyNWR4.crl (hash: +Dj/4YDUks3XjeV9LA4nBvh3MZAqqsxKG7VrlXEdS6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.crl rsync://rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vc-jy52E0VT-MqVOm0uJXlyNWR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B37, serialNumber=BDCFA3CB9D84D154FE32A54E9B4B895E5C8D591E Validity Not Before: May 31 06:38:37 2025 GMT Not After : Jun 7 06:38:37 2025 GMT Subject: CN=683aa3ed-e8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:41:80:df:95:e2:57:58:47:57:cc:2c:5d:9a: c0:c4:c4:a0:d9:a0:0c:f8:f4:b9:ea:18:44:83:84: 04:50:b8:94:28:8c:40:5f:f4:62:ef:2e:83:e7:1c: c3:ca:e6:da:2d:10:7b:a5:1c:6f:3f:59:5f:04:b3: 87:5a:11:dd:3b:4c:38:13:78:5c:ab:4a:2f:40:e3: f9:74:45:63:38:ea:8f:0d:09:41:85:7a:57:74:da: 2c:9c:46:6e:9f:41:b9:c2:a5:0e:5b:63:cb:26:ad: ef:fc:a0:c1:c7:89:a6:7c:cc:69:fc:14:ee:c7:05: 8a:3e:e3:2f:07:c1:98:b4:af:e6:3a:63:b4:85:13: 76:5b:5a:ce:f7:d2:64:66:f0:2c:81:5a:ad:b6:ba: 1e:4e:2c:52:77:9d:72:5b:16:07:a1:aa:71:14:50: ee:11:bc:a4:6c:23:b2:33:d6:8a:cc:d8:38:e8:f0: ff:70:3a:25:a9:35:64:de:7a:f7:53:ec:3a:44:4c: 3f:1d:d6:a5:fa:33:0f:6b:1f:b6:85:e7:06:0a:9b: 7d:c6:6b:66:b9:7f:81:81:bf:66:41:6e:d3:43:ad: 25:88:21:fb:c5:ef:b4:fa:bf:17:f0:20:2c:b7:53: d5:e3:99:ac:bf:9f:9e:0f:d1:b2:57:03:f0:3a:86: e3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:37:A3:2A:90:42:AF:B2:16:E8:66:97:B7:69:EC:37:CD:8E:20:DC X509v3 Authority Key Identifier: keyid:BD:CF:A3:CB:9D:84:D1:54:FE:32:A5:4E:9B:4B:89:5E:5C:8D:59:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vc-jy52E0VT-MqVOm0uJXlyNWR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:c0:f7:a1:b2:3a:5e:ab:1f:e2:18:96:19:d5:6f:90:99:21: e5:7f:d7:6b:30:ec:56:72:42:0a:63:91:cf:68:7b:ab:10:61: 80:1d:88:a3:d7:d7:3d:d0:29:81:1b:47:6a:a5:e2:96:38:36: 25:0a:4f:f0:71:7a:ea:d8:01:93:e0:6c:f4:19:ef:17:4a:79: 74:4a:d4:72:b1:bc:dd:da:6a:d5:45:4a:a9:7a:d7:70:42:12: 35:f4:b8:51:f5:8d:83:33:8f:e0:f6:d3:2e:c2:b0:0c:bd:d1: 3b:f4:f7:6e:cf:2c:95:01:d7:62:ef:c3:37:03:72:84:70:73: 20:ea:d2:32:1f:9c:ac:bf:4b:27:ef:02:fa:21:9e:74:5e:e1: 98:df:ea:07:1f:d6:64:37:15:c9:ca:6e:81:8c:fd:72:f9:9f: 92:a9:23:2e:d4:3a:90:f2:aa:2a:4f:19:d7:b7:39:00:a6:b9: d7:ea:8e:bc:cd:b1:08:5d:03:06:50:59:f7:57:a7:d6:a2:ea: fa:a9:56:25:fd:b1:22:35:a3:6f:f9:c4:33:3e:28:12:85:de: 8e:7a:81:70:60:d2:a1:4f:38:ee:9f:10:bd:6e:0f:bd:ad:f1: 37:3f:fd:0e:2b:7c:d3:c8:dc:23:48:0f:5d:d6:82:47:6e:a1: 6f:9a:c8:cd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUIzNzExMC8GA1UEBRMoQkRDRkEzQ0I5RDg0RDE1NEZFMzJBNTRFOUI0Qjg5NUU1 QzhENTkxRTAeFw0yNTA1MzEwNjM4MzdaFw0yNTA2MDcwNjM4MzdaMBgxFjAUBgNV BAMTDTY4M2FhM2VkLWU4YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3QYDfleJXWEdXzCxdmsDExKDZoAz49LnqGESDhARQuJQojEBf9GLvLoPnHMPK 5totEHulHG8/WV8Es4daEd07TDgTeFyrSi9A4/l0RWM46o8NCUGFeld02iycRm6f QbnCpQ5bY8smre/8oMHHiaZ8zGn8FO7HBYo+4y8HwZi0r+Y6Y7SFE3ZbWs730mRm 8CyBWq22uh5OLFJ3nXJbFgehqnEUUO4RvKRsI7Iz1orM2Djo8P9wOiWpNWTeevdT 7DpETD8d1qX6Mw9rH7aF5wYKm33Ga2a5f4GBv2ZBbtNDrSWIIfvF77T6vxfwICy3 U9Xjmay/n54P0bJXA/A6huOJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSDejKpBC r7IW6GaXt2nsN82OINwwHwYDVR0jBBgwFoAUvc+jy52E0VT+MqVOm0uJXlyNWR4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQjM3LzVBRUMwQzMwQUJC QzExRUZCM0Q5Q0U2RUM0RjlBRTAyL3ZjLWp5NTJFMFZULU1xVk9tMHVKWGx5TldS NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdmMtank1MkUwVlQtTXFWT20wdUpYbHlOV1I0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx QjM3LzVBRUMwQzMwQUJCQzExRUZCM0Q5Q0U2RUM0RjlBRTAyL3ZjLWp5NTJFMFZU LU1xVk9tMHVKWGx5TldSNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKnA96GyOl6rH+IYlhnVb5CZIeV/12sw7FZyQgpjkc9oe6sQYYAdiKPX 1z3QKYEbR2ql4pY4NiUKT/BxeurYAZPgbPQZ7xdKeXRK1HKxvN3aatVFSql613BC EjX0uFH1jYMzj+D20y7CsAy90Tv0927PLJUB12LvwzcDcoRwcyDq0jIfnKy/Syfv AvohnnRe4Zjf6gcf1mQ3FcnKboGM/XL5n5KpIy7UOpDyqipPGde3OQCmudfqjrzN sQhdAwZQWfdXp9ai6vqpViX9sSI1o2/5xDM+KBKF3o56gXBg0qFPOO6fEL1uD72t 8Tc//Q4rfNPI3CNID13WgkduoW+ayM0= -----END CERTIFICATE-----Generated at Sat May 31 17:18:50 2025 by rpki-client