$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft File: vcSlFjMX9zCX8CejQrhgp5LX8dw.mft (raw, json) Hash identifier: hvM1CqqP76Y02m1FEGwrSj5MBK3iT0YuoUq0qJZmDMc= Subject key identifier: A2:99:21:1A:07:62:91:42:DD:CF:A0:9E:1D:17:99:B6:93:97:1E:9A Authority key identifier: BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC Certificate issuer: /CN=A9179F64/serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft Manifest number: 93 Signing time: Sat 31 May 2025 06:01:27 +0000 Manifest this update: Sat 31 May 2025 06:01:27 +0000 Manifest next update: Sat 07 Jun 2025 06:01:27 +0000 Files and hashes: 1: vcSlFjMX9zCX8CejQrhgp5LX8dw.crl (hash: 8zNojV/dGA30JubNqbOAb013NOT+gTQNI1WjmDl4qRE=) 2: AB4A60EECBA311EFB9E20E13C4F9AE02.roa (hash: Xcy4MFhRyr2k/5Jm4R5iv0t1VBaS/P+wq9LQCj1UUVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F64, serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC Validity Not Before: May 31 06:01:27 2025 GMT Not After : Jun 7 06:01:27 2025 GMT Subject: CN=683a9b37-561c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f0:2b:2c:39:fd:02:7a:a3:50:39:00:ae:da: fa:f6:93:70:37:ee:f7:58:1c:b9:26:d0:c5:a3:2c: d2:1d:0a:a1:2b:d6:4b:f3:6b:74:5d:99:3e:c0:3e: 1a:16:03:b8:cc:b7:67:5a:0d:6a:39:b3:4e:21:a1: d8:d2:9b:3c:1c:d9:3f:a2:de:e7:9a:8c:d6:47:0b: 7e:e1:11:c9:6e:00:2a:3e:52:7b:f9:6a:b4:b1:8c: a2:24:73:f2:6b:87:b3:bc:8c:9d:b4:34:14:23:53: 85:ae:1e:3a:ef:ad:6c:cd:51:60:24:ca:60:9f:17: 5a:58:05:68:ba:fa:6b:0a:b0:0c:47:d3:10:2d:72: f7:2d:63:90:10:c7:54:13:b8:eb:19:44:9b:75:45: 49:f5:32:74:b3:4a:4d:93:cd:78:0e:c4:b5:af:66: 29:14:3d:00:97:88:cb:b4:cd:44:37:1e:6a:5c:55: 02:2e:d5:51:7d:a7:20:1d:b9:03:99:31:5f:67:89: 34:f9:9d:28:d8:fc:34:7f:aa:75:f4:05:a1:e0:50: 8e:f7:a5:d3:05:70:0c:9a:8d:b1:03:63:f2:82:ac: 45:88:2b:a0:d7:73:30:80:58:9f:45:e1:22:c3:a3: a9:53:f8:4b:14:16:0c:12:b6:3a:e1:06:c5:5c:52: 91:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:99:21:1A:07:62:91:42:DD:CF:A0:9E:1D:17:99:B6:93:97:1E:9A X509v3 Authority Key Identifier: keyid:BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:03:4e:11:61:f7:2e:33:c8:8e:9b:c5:2a:51:ac:d2:c6:6b: 38:bf:3d:f0:6f:28:61:02:a0:76:6c:ea:a4:bd:24:be:31:56: 69:3d:af:fd:ab:7b:aa:b4:0d:78:48:a5:3c:83:db:19:93:fd: 99:68:9f:1e:5d:e8:6b:11:20:05:97:20:cf:0e:09:49:c7:d9: 14:ee:95:08:9e:51:dc:eb:c9:b4:c4:88:77:1e:de:56:d6:cb: 96:ba:8d:e1:69:f2:9c:7c:9d:b7:da:da:f7:65:aa:93:f1:a9: e1:d9:ae:dc:40:b8:5b:42:7f:9b:51:a4:3b:2e:b3:a5:9a:83: 0c:b5:b7:66:15:c6:24:90:7d:c2:db:39:7a:da:03:e2:86:04: d5:5c:22:1c:fd:1d:24:fd:6a:a5:1f:13:16:b7:35:18:39:23: 33:94:e1:cf:42:fb:22:c4:cd:9c:fe:69:3c:02:4f:fd:7f:cf: 03:21:7e:3b:7a:c4:48:b0:62:50:09:b3:6d:86:d2:03:2a:c7: cb:3d:0d:c4:6c:79:34:09:56:66:55:8b:3f:bb:1c:1b:ae:34: 85:b4:05:5e:bf:ae:e0:ad:a0:33:79:8e:5e:50:02:a7:34:17: f8:b4:ff:61:dc:91:3a:e0:15:d5:69:c1:d6:f0:eb:b6:86:3f: a3:a6:48:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGNjQxMTAvBgNVBAUTKEJEQzRBNTE2MzMxN0Y3MzA5N0YwMjdBMzQyQjg2MEE3 OTJEN0YxREMwHhcNMjUwNTMxMDYwMTI3WhcNMjUwNjA3MDYwMTI3WjAYMRYwFAYD VQQDEw02ODNhOWIzNy01NjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8PArLDn9AnqjUDkArtr69pNwN+73WBy5JtDFoyzSHQqhK9ZL82t0XZk+wD4a FgO4zLdnWg1qObNOIaHY0ps8HNk/ot7nmozWRwt+4RHJbgAqPlJ7+Wq0sYyiJHPy a4ezvIydtDQUI1OFrh46761szVFgJMpgnxdaWAVouvprCrAMR9MQLXL3LWOQEMdU E7jrGUSbdUVJ9TJ0s0pNk814DsS1r2YpFD0Al4jLtM1ENx5qXFUCLtVRfacgHbkD mTFfZ4k0+Z0o2Pw0f6p19AWh4FCO96XTBXAMmo2xA2PygqxFiCug13MwgFifReEi w6OpU/hLFBYMErY64QbFXFKRWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKZIRoH YpFC3c+gnh0XmbaTlx6aMB8GA1UdIwQYMBaAFL3EpRYzF/cwl/Ano0K4YKeS1/Hc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2NC84MDkzODQ2NDYy NEIxMUVGQUIxMjBGNEZDNEY5QUUwMi92Y1NsRmpNWDl6Q1g4Q2VqUXJoZ3A1TFg4 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZjU2xGak1YOXpDWDhDZWpRcmhncDVMWDhkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUY2NC84MDkzODQ2NDYyNEIxMUVGQUIxMjBGNEZDNEY5QUUwMi92Y1NsRmpNWDl6 Q1g4Q2VqUXJoZ3A1TFg4ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyA04RYfcuM8iOm8UqUazSxms4vz3wbyhhAqB2bOqkvSS+MVZpPa/9 q3uqtA14SKU8g9sZk/2ZaJ8eXehrESAFlyDPDglJx9kU7pUInlHc68m0xIh3Ht5W 1suWuo3hafKcfJ232tr3ZaqT8anh2a7cQLhbQn+bUaQ7LrOlmoMMtbdmFcYkkH3C 2zl62gPihgTVXCIc/R0k/WqlHxMWtzUYOSMzlOHPQvsixM2c/mk8Ak/9f88DIX47 esRIsGJQCbNthtIDKsfLPQ3EbHk0CVZmVYs/uxwbrjSFtAVev67graAzeY5eUAKn NBf4tP9h3JE64BXVacHW8Ou2hj+jpkim -----END CERTIFICATE-----Generated at Sat May 31 17:14:34 2025 by rpki-client