$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft File: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft (raw, json) Hash identifier: LX++mc7OdkQ+3DN42puYKSzKo8Y1RvB6lvOZ8ITnMeY= Subject key identifier: 75:69:2C:CD:7C:23:AD:03:98:03:BD:C5:6F:B3:25:54:C7:9C:99:54 Authority key identifier: 54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39 Certificate issuer: /CN=A9195AA2/serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39 Certificate serial: 0C2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft Manifest number: 13F8 Signing time: Sat 10 May 2025 18:18:54 +0000 Manifest this update: Sat 10 May 2025 18:18:54 +0000 Manifest next update: Sat 17 May 2025 18:18:54 +0000 Files and hashes: 1: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl (hash: Vu5OUnNBwvSh2H9+p06ENxIuTUeaddq3S62t3CV1grI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3119 (0xc2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195AA2, serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39 Validity Not Before: May 10 18:18:54 2025 GMT Not After : May 17 18:18:54 2025 GMT Subject: CN=681f988e-9cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0c:09:6b:d7:72:b2:66:71:1c:58:47:38:c2: e2:6f:f7:6d:e2:f8:28:d4:3d:52:56:49:8f:b7:b1: bb:c9:52:79:ff:f2:22:05:c4:ce:2f:f0:ec:1c:7a: 3a:08:01:62:17:80:df:2b:13:5e:33:08:e3:15:ab: 24:1c:ae:40:7a:8a:30:06:87:3d:84:27:fc:cc:d3: 7c:50:2f:9a:ef:de:c3:29:64:d5:2e:d3:46:81:ab: fa:ab:4d:0b:29:bc:97:6c:f8:54:63:4d:61:b0:e5: 56:06:64:5f:62:d7:cf:26:d0:58:69:95:da:aa:4b: 75:c0:c4:ed:29:74:56:22:4b:c3:d8:1c:a1:dd:e1: 18:69:24:0a:82:ce:d9:23:bd:c6:a5:08:22:a8:d0: 03:7b:83:44:72:62:ce:d2:5f:a3:82:d0:4b:8a:6d: c9:83:06:69:e6:f5:a9:38:32:ae:59:d2:ee:45:60: ac:67:f3:ae:5e:52:07:ff:e9:1d:9f:79:80:df:35: 41:3c:4a:0d:ea:6c:1f:6c:0b:e4:fb:5e:9b:b1:f2: 1f:18:22:bb:02:07:3f:20:be:c0:59:90:29:8e:8f: 0c:27:a7:d6:31:e0:c4:16:58:75:25:3a:52:8a:93: 4c:b0:91:21:e0:2f:54:96:5a:8e:8e:69:6f:06:5a: 83:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:69:2C:CD:7C:23:AD:03:98:03:BD:C5:6F:B3:25:54:C7:9C:99:54 X509v3 Authority Key Identifier: keyid:54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:e8:91:ef:b5:2d:3b:43:be:c4:17:80:a6:32:0f:86:3e:37: 22:1e:91:8f:9e:55:04:86:dd:75:db:43:c0:28:5d:08:be:61: cf:3f:bb:d4:13:2f:de:c8:c0:69:78:0a:53:d1:a4:51:95:ec: bd:f8:ef:f1:cc:5c:42:41:1d:f0:f7:49:d9:9d:c3:59:55:69: ce:9e:37:b6:7c:c1:06:e9:c0:83:89:c9:15:ea:15:9e:11:bb: 1c:43:5b:8f:c9:54:bb:22:76:71:ac:ad:2b:94:0a:a2:72:1f: c9:cb:58:30:da:f5:c8:4e:d4:78:31:58:d3:e7:40:41:72:91: fd:51:44:da:13:47:01:0e:42:8e:6a:ab:69:a6:45:23:0a:ac: 84:f5:80:e3:89:d6:05:36:27:6a:1a:5b:34:51:95:ad:2c:78: 14:38:8e:22:6d:6b:e3:0b:3b:c7:2f:0e:07:09:53:ac:22:6d: 55:9d:fd:66:ef:7b:ad:1f:d9:42:dc:92:9d:36:01:f4:42:24: 7d:05:cc:c2:5b:12:15:3a:ca:e9:61:00:a5:8d:73:f4:41:fc: 6a:60:7b:85:2f:d9:81:9d:f4:0d:d8:0b:92:35:63:77:aa:df: 46:7b:17:41:d9:54:e4:1e:82:9a:66:f9:27:70:92:77:e1:e2: 76:8e:5c:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBQTIxMTAvBgNVBAUTKDU0NTgzQzI5QkJGQjUwMDlEQjlDQzA1NjE0RjYzRDYy QkNCNzdDMzkwHhcNMjUwNTEwMTgxODU0WhcNMjUwNTE3MTgxODU0WjAYMRYwFAYD VQQDEw02ODFmOTg4ZS05Y2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgwJa9dysmZxHFhHOMLib/dt4vgo1D1SVkmPt7G7yVJ5//IiBcTOL/DsHHo6 CAFiF4DfKxNeMwjjFaskHK5AeoowBoc9hCf8zNN8UC+a797DKWTVLtNGgav6q00L KbyXbPhUY01hsOVWBmRfYtfPJtBYaZXaqkt1wMTtKXRWIkvD2Byh3eEYaSQKgs7Z I73GpQgiqNADe4NEcmLO0l+jgtBLim3JgwZp5vWpODKuWdLuRWCsZ/OuXlIH/+kd n3mA3zVBPEoN6mwfbAvk+16bsfIfGCK7Agc/IL7AWZApjo8MJ6fWMeDEFlh1JTpS ipNMsJEh4C9UllqOjmlvBlqDfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVpLM18 I60DmAO9xW+zJVTHnJlUMB8GA1UdIwQYMBaAFFRYPCm7+1AJ25zAVhT2PWK8t3w5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2 QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VBbmJuTUJXRlBZOVlyeTNm RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGZzhLYnY3VUFuYm5NQldGUFk5WXJ5M2ZEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VB bmJuTUJXRlBZOVlyeTNmRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ6JHvtS07Q77EF4CmMg+GPjciHpGPnlUEht1120PAKF0IvmHPP7vU Ey/eyMBpeApT0aRRley9+O/xzFxCQR3w90nZncNZVWnOnje2fMEG6cCDickV6hWe EbscQ1uPyVS7InZxrK0rlAqich/Jy1gw2vXITtR4MVjT50BBcpH9UUTaE0cBDkKO aqtppkUjCqyE9YDjidYFNidqGls0UZWtLHgUOI4ibWvjCzvHLw4HCVOsIm1Vnf1m 73utH9lC3JKdNgH0QiR9BczCWxIVOsrpYQCljXP0QfxqYHuFL9mBnfQN2AuSNWN3 qt9GexdB2VTkHoKaZvkncJJ34eJ2jlzl -----END CERTIFICATE-----Generated at Mon May 12 12:37:08 2025 by rpki-client