$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft File: VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft (raw, json) Hash identifier: 9dUhtF6tFnYbxmahheEHkLoDfd0XrFG/TyjOzr9CR0c= Subject key identifier: DB:A5:27:80:1E:5A:B2:6C:22:6A:45:93:38:8C:A1:2A:E1:45:1A:1A Authority key identifier: 54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 Certificate issuer: /CN=A916DAC0/serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft Manifest number: E9 Signing time: Sat 31 May 2025 05:01:30 +0000 Manifest this update: Sat 31 May 2025 05:01:29 +0000 Manifest next update: Sat 07 Jun 2025 05:01:29 +0000 Files and hashes: 1: VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl (hash: 9h+rfhNG38bgRGS50ZHYv8dp5aaM6pwpUimJGGZTRjQ=) 2: 2C06DFA22C4C11EFB6974530C4F9AE02.roa (hash: x0R7/aV5SAgSCY1aeBWFVSWK6YKsQh3+SMh4O+dO85w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DAC0, serialNumber=54B966AD8B57316416529507F5BCA9C00E1181B9 Validity Not Before: May 31 05:01:29 2025 GMT Not After : Jun 7 05:01:29 2025 GMT Subject: CN=683a8d29-5d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:55:d1:db:e4:14:0a:96:e5:13:f8:74:6f:1c: fe:dc:46:06:80:eb:d6:87:47:8d:9d:f7:98:33:5c: c0:d8:f3:e4:8a:32:74:22:31:d8:7e:84:6b:b8:a0: 45:eb:32:44:42:6d:1d:6b:d0:41:69:24:3c:45:4c: bf:e5:e1:b6:51:e7:fa:0c:2c:04:d3:e9:37:35:ee: dc:2b:45:dd:40:a4:1d:40:0b:fd:4c:2c:f1:a0:77: 63:60:a0:9f:40:b7:9a:03:be:f6:b4:dd:94:75:10: a8:70:9a:04:61:0f:b5:a8:58:79:c9:f7:35:2a:a5: 90:7a:48:48:7a:e1:27:78:f8:15:de:ab:8e:87:53: 37:0f:34:d1:3c:89:23:9a:23:d1:b3:5c:c6:e3:c8: 79:4d:48:5d:6c:d2:fe:a5:62:c7:0d:74:7b:61:a9: 17:80:00:bb:76:a7:ba:5b:cf:e0:e8:37:a6:83:b8: e2:2d:ce:7f:71:f4:85:92:54:c7:47:d5:cf:e5:19: 4b:3e:83:b5:1d:07:da:f8:2c:29:dc:a1:b0:e3:47: 77:34:cf:c5:97:63:b6:62:7a:e6:bf:1a:52:c3:98: a9:20:5c:d3:2d:f6:fe:f5:6a:9c:e9:96:d8:dc:16: 4b:ca:e6:e7:21:5e:52:82:f7:29:e0:6f:bf:df:f8: 0c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A5:27:80:1E:5A:B2:6C:22:6A:45:93:38:8C:A1:2A:E1:45:1A:1A X509v3 Authority Key Identifier: keyid:54:B9:66:AD:8B:57:31:64:16:52:95:07:F5:BC:A9:C0:0E:11:81:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLlmrYtXMWQWUpUH9bypwA4Rgbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/E763AA8ADE8811EE93D9A744C4F9AE02/VLlmrYtXMWQWUpUH9bypwA4Rgbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:93:1d:b2:72:ac:97:94:84:81:60:8e:57:aa:92:7b:58:ef: 07:cb:f9:a1:1a:8c:38:f1:f2:f4:f7:04:05:7f:9b:04:fd:72: d1:c5:ec:b4:79:c1:69:0b:bb:65:a8:02:32:45:df:ff:f7:7f: e2:f9:2b:1d:9c:6d:7e:07:b4:7b:65:60:53:d5:57:34:3d:f3: 95:e6:71:e1:91:04:ce:d4:e9:d9:35:75:af:e7:8d:13:76:48: 80:81:bb:95:15:fd:e8:41:5e:33:be:60:db:3f:6b:dc:c4:fd: d0:82:06:c1:2f:70:de:ca:20:b2:96:fb:00:da:cb:77:82:93: 5c:1a:0e:9b:88:cf:a9:fe:51:99:e9:df:6b:3d:5c:57:7d:a9: 22:c1:a7:c7:12:6b:c8:ec:6d:94:70:94:81:93:0c:ab:61:ca: 09:96:c2:1a:e8:2e:55:83:64:0a:37:59:aa:ba:aa:34:9c:93: c0:bb:71:93:6e:ed:cd:96:2c:fc:fa:10:e7:8a:b0:77:b6:54: cc:10:30:bc:64:2d:ca:7b:a6:0f:1c:a0:60:6d:eb:b2:64:a5: b9:78:d7:16:68:89:79:e3:ce:eb:f0:2f:d0:a1:f1:ee:07:8c: d9:b2:2d:0d:58:16:e2:f3:61:53:f5:d7:00:9c:6e:26:1c:e4: ef:6e:0c:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBQzAxMTAvBgNVBAUTKDU0Qjk2NkFEOEI1NzMxNjQxNjUyOTUwN0Y1QkNBOUMw MEUxMTgxQjkwHhcNMjUwNTMxMDUwMTI5WhcNMjUwNjA3MDUwMTI5WjAYMRYwFAYD VQQDEw02ODNhOGQyOS01ZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFXR2+QUCpblE/h0bxz+3EYGgOvWh0eNnfeYM1zA2PPkijJ0IjHYfoRruKBF 6zJEQm0da9BBaSQ8RUy/5eG2Uef6DCwE0+k3Ne7cK0XdQKQdQAv9TCzxoHdjYKCf QLeaA772tN2UdRCocJoEYQ+1qFh5yfc1KqWQekhIeuEnePgV3quOh1M3DzTRPIkj miPRs1zG48h5TUhdbNL+pWLHDXR7YakXgAC7dqe6W8/g6Demg7jiLc5/cfSFklTH R9XP5RlLPoO1HQfa+Cwp3KGw40d3NM/Fl2O2YnrmvxpSw5ipIFzTLfb+9Wqc6ZbY 3BZLyubnIV5Sgvcp4G+/3/gMUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNulJ4Ae WrJsImpFkziMoSrhRRoaMB8GA1UdIwQYMBaAFFS5Zq2LVzFkFlKVB/W8qcAOEYG5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REFDMC9FNzYzQUE4QURF ODgxMUVFOTNEOUE3NDRDNEY5QUUwMi9WTGxtcll0WE1XUVdVcFVIOWJ5cHdBNFJn YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZMbG1yWXRYTVdRV1VwVUg5Ynlwd0E0Umdiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REFDMC9FNzYzQUE4QURFODgxMUVFOTNEOUE3NDRDNEY5QUUwMi9WTGxtcll0WE1X UVdVcFVIOWJ5cHdBNFJnYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOkx2ycqyXlISBYI5XqpJ7WO8Hy/mhGow48fL09wQFf5sE/XLRxey0 ecFpC7tlqAIyRd//93/i+SsdnG1+B7R7ZWBT1Vc0PfOV5nHhkQTO1OnZNXWv540T dkiAgbuVFf3oQV4zvmDbP2vcxP3QggbBL3DeyiCylvsA2st3gpNcGg6biM+p/lGZ 6d9rPVxXfakiwafHEmvI7G2UcJSBkwyrYcoJlsIa6C5Vg2QKN1mquqo0nJPAu3GT bu3Nliz8+hDnirB3tlTMEDC8ZC3Ke6YPHKBgbeuyZKW5eNcWaIl5487r8C/QofHu B4zZsi0NWBbi82FT9dcAnG4mHOTvbgxm -----END CERTIFICATE-----Generated at Sat May 31 16:43:46 2025 by rpki-client