$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft File: vAv4-dc7foz8yOpen0LXqFUjPXw.mft (raw, json) Hash identifier: WTyWh2fSZI2hXYTyQZRbwV10GRdRLvEe7XgGzfK2DXA= Subject key identifier: E9:1A:9E:3E:9E:2F:09:D3:D3:28:90:2C:6D:62:82:93:93:39:FE:78 Authority key identifier: BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C Certificate issuer: /CN=A9163EB9/serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft Manifest number: 9C Signing time: Tue 03 Jun 2025 06:03:19 +0000 Manifest this update: Tue 03 Jun 2025 06:03:18 +0000 Manifest next update: Tue 10 Jun 2025 06:03:18 +0000 Files and hashes: 1: vAv4-dc7foz8yOpen0LXqFUjPXw.crl (hash: MWj7VJC3Qqpg5SxJ4WO0sPr3VoAYXdHnRfArZE3Wo8A=) 2: 710FB354979E11EF99310B40C4F9AE02.roa (hash: bruRF8XqvNXc2lROOKilx3DJEF2Mi08/zHCfWANPCjg=) 3: 27AEE7D0979D11EFB1426839C4F9AE02.roa (hash: FRD/IGf5tsKizstdT15eHvBke9+NzOwPHHiU7wEzleM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EB9, serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C Validity Not Before: Jun 3 06:03:18 2025 GMT Not After : Jun 10 06:03:18 2025 GMT Subject: CN=683e9026-3f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6b:54:6a:39:da:5c:71:70:ae:6c:4a:2f:1c: b7:43:7d:00:73:b7:23:cb:56:62:66:43:44:86:6a: 8f:b4:4f:53:fe:f4:4e:ab:f5:61:0c:0a:db:3b:33: d5:28:36:f3:39:ce:64:72:e4:57:3d:90:b1:1c:3a: b5:b3:80:56:61:10:a1:d1:07:65:d0:3d:48:54:4e: a9:7c:31:db:41:b3:38:ca:67:1a:2e:91:3a:47:96: 2d:b0:4c:7b:94:87:34:82:a8:7b:8e:12:48:34:78: e4:4e:68:97:69:82:c0:24:fc:fd:96:04:55:bc:a3: 25:10:8f:57:e4:b2:ff:81:47:39:0b:8c:3c:44:37: e6:89:bd:44:70:64:34:68:a2:78:d1:67:8b:12:b6: 94:a0:13:a5:01:4b:01:74:cb:c6:79:f5:80:76:fb: 9a:ff:da:30:cd:9d:d7:ed:db:a8:63:52:0f:df:f9: 7a:21:c1:1f:a6:21:88:82:24:4c:fa:a8:c3:3d:30: 3a:18:80:02:3c:64:10:9f:24:35:9f:02:ee:c3:bc: 24:4d:1f:0e:97:06:0f:a7:30:44:6a:d6:57:0c:2d: 14:fc:2c:9d:d3:f3:12:97:e5:f0:32:8b:dd:64:2c: 3a:30:30:a9:e4:44:8e:33:25:02:9d:b7:72:46:84: 71:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1A:9E:3E:9E:2F:09:D3:D3:28:90:2C:6D:62:82:93:93:39:FE:78 X509v3 Authority Key Identifier: keyid:BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:12:1b:00:b8:84:c0:7a:76:c2:6e:5f:d1:34:98:70:a1:3e: 0c:b3:c2:b9:79:8b:38:d9:20:1b:53:fd:a4:47:15:04:33:4e: 60:ab:67:f9:58:6f:98:01:86:36:f8:3c:da:74:80:f5:f8:da: 7a:0a:af:38:9b:29:95:4a:de:59:6c:3c:70:df:3e:94:32:4d: 21:e7:d6:80:ae:dd:f4:7d:ee:00:26:59:80:a3:b9:e8:d2:4e: 81:0d:3a:4a:45:00:8a:d4:a2:f7:f2:2d:a6:7e:d2:88:d0:17: 29:07:80:b5:de:d8:9b:ab:20:f9:16:3c:2e:c1:9b:00:ed:93: 90:61:7c:8d:43:6a:c0:76:1b:de:61:29:4b:2c:24:6f:9c:9a: 95:c7:0f:8b:cc:87:73:05:1e:1e:b7:c1:99:7f:8f:ed:8b:9f: d7:81:32:e3:97:1b:26:a4:f2:91:39:e6:e0:56:da:c7:30:cc: be:9d:26:5c:23:e6:81:1a:8c:37:f1:c8:af:7b:1e:b0:8b:0d: 3e:f3:cc:e2:2d:9f:fd:a0:27:b7:a8:e3:42:2b:96:7d:02:34: db:f6:02:49:e9:e2:fd:b5:a9:26:df:e7:16:e6:5e:78:ca:10: fc:5a:ad:dd:97:ba:3a:c9:a0:57:5b:c5:6d:89:b9:09:93:2f: df:ae:3d:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFQjkxMTAvBgNVBAUTKEJDMEJGOEY5RDczQjdFOENGQ0M4RUE1RTlGNDJEN0E4 NTUyMzNEN0MwHhcNMjUwNjAzMDYwMzE4WhcNMjUwNjEwMDYwMzE4WjAYMRYwFAYD VQQDEw02ODNlOTAyNi0zZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GtUajnaXHFwrmxKLxy3Q30Ac7cjy1ZiZkNEhmqPtE9T/vROq/VhDArbOzPV KDbzOc5kcuRXPZCxHDq1s4BWYRCh0Qdl0D1IVE6pfDHbQbM4ymcaLpE6R5YtsEx7 lIc0gqh7jhJINHjkTmiXaYLAJPz9lgRVvKMlEI9X5LL/gUc5C4w8RDfmib1EcGQ0 aKJ40WeLEraUoBOlAUsBdMvGefWAdvua/9owzZ3X7duoY1IP3/l6IcEfpiGIgiRM +qjDPTA6GIACPGQQnyQ1nwLuw7wkTR8OlwYPpzBEatZXDC0U/Cyd0/MSl+XwMovd ZCw6MDCp5ESOMyUCnbdyRoRxtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkanj6e LwnT0yiQLG1igpOTOf54MB8GA1UdIwQYMBaAFLwL+PnXO36M/MjqXp9C16hVIz18 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VCOS9GQ0Q1NUMwQTU0 OUYxMUVGODZBRTU5MjJDNEY5QUUwMi92QXY0LWRjN2Zvejh5T3BlbjBMWHFGVWpQ WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZBdjQtZGM3Zm96OHlPcGVuMExYcUZValBYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VCOS9GQ0Q1NUMwQTU0OUYxMUVGODZBRTU5MjJDNEY5QUUwMi92QXY0LWRjN2Zv ejh5T3BlbjBMWHFGVWpQWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOEhsAuITAenbCbl/RNJhwoT4Ms8K5eYs42SAbU/2kRxUEM05gq2f5 WG+YAYY2+DzadID1+Np6Cq84mymVSt5ZbDxw3z6UMk0h59aArt30fe4AJlmAo7no 0k6BDTpKRQCK1KL38i2mftKI0BcpB4C13tibqyD5FjwuwZsA7ZOQYXyNQ2rAdhve YSlLLCRvnJqVxw+LzIdzBR4et8GZf4/ti5/XgTLjlxsmpPKROebgVtrHMMy+nSZc I+aBGow38civex6wiw0+88ziLZ/9oCe3qONCK5Z9AjTb9gJJ6eL9takm3+cW5l54 yhD8Wq3dl7o6yaBXW8VtibkJky/frj2s -----END CERTIFICATE-----Generated at Tue Jun 3 23:55:53 2025 by rpki-client