$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft File: vIYhQTCXFsDk3Dff_zPlqwxVStA.mft (raw, json) Hash identifier: +CdgmktzaBf29QhXovldaZ0ISn4ThjV5fFVGRSQHA4I= Subject key identifier: 21:0D:3E:37:58:01:A1:71:83:97:DC:D3:4D:36:8C:FB:C4:D0:66:F8 Authority key identifier: BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0 Certificate issuer: /CN=A911EA27/serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0 Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft Manifest number: 01F9 Signing time: Sun 15 Jun 2025 01:43:59 +0000 Manifest this update: Sun 15 Jun 2025 01:43:58 +0000 Manifest next update: Sun 22 Jun 2025 01:43:58 +0000 Files and hashes: 1: vIYhQTCXFsDk3Dff_zPlqwxVStA.crl (hash: SGc7OS879Irb3O52KNexMTvyE9B1JWb8PwGgKaQovdM=) 2: 3DE0E9065F0811EDB42DC97FC4F9AE02.roa (hash: MoE7MEPCOyGB/9EMlTXV0tN9ZG/UinteAkee65hBGJ0=) 3: 3F2E65045F0811EDB42DC97FC4F9AE02.roa (hash: IgAv5ZJEhwoH7uEYAUCxosir/fX/9UUdUT7CtlM0EKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EA27, serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0 Validity Not Before: Jun 15 01:43:58 2025 GMT Not After : Jun 22 01:43:58 2025 GMT Subject: CN=684e255e-e0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c6:c4:06:e6:93:40:2b:ff:df:34:f8:70:82: 75:5e:49:f7:0e:fe:45:92:e6:5d:e1:ed:11:cf:60: 76:d5:75:b9:7f:39:22:7c:f8:89:c5:1b:09:7d:a3: 9f:d8:02:2b:31:d0:76:f1:16:f5:33:1d:47:83:21: 13:58:c6:36:33:28:89:b5:2c:79:9d:3c:d9:b5:7b: 3b:93:c0:b4:04:7b:11:0a:3c:51:a8:3e:00:40:9f: 20:81:5e:d9:1e:3d:1b:c3:cb:cc:c2:5e:7d:e0:6f: ce:ad:27:23:6a:c3:0a:66:2a:c5:f0:98:87:7a:0e: a9:ae:3d:a2:dc:4e:f0:69:e8:02:ee:a8:1d:16:3e: 75:f0:94:07:12:7f:7e:0f:8f:9a:39:ee:37:17:91: fc:d9:99:23:8e:ee:f3:c0:eb:21:30:69:9b:28:fe: d3:0a:9c:94:28:46:09:b3:88:57:93:ab:4a:fa:50: d5:b8:6b:a1:19:be:15:2b:7f:a9:16:0d:1a:07:8f: 0b:a1:4d:da:6c:50:a4:6c:2e:8d:99:89:c2:5d:44: 47:5c:f3:3a:b3:68:4a:f7:42:fb:94:ce:c4:cd:f8: 01:a3:43:a9:97:ed:c5:a5:18:8f:48:f9:74:70:95: 3b:ad:46:ca:b9:da:12:59:a7:cb:cc:cd:c0:73:74: d0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0D:3E:37:58:01:A1:71:83:97:DC:D3:4D:36:8C:FB:C4:D0:66:F8 X509v3 Authority Key Identifier: keyid:BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:46:4f:2f:2b:57:30:19:f6:6c:56:d9:a5:bf:85:3e:93:2f: da:6f:ec:0a:dd:97:e6:6b:e4:80:8d:98:ac:29:a8:9f:15:03: 4b:dd:bf:a2:3a:96:56:45:19:da:4f:0a:12:af:50:15:24:ba: 5c:96:75:77:35:1b:39:61:23:c0:a0:50:ae:fa:b9:6e:13:04: 0f:fc:f2:69:5e:16:99:eb:2f:3b:41:89:97:85:cc:5d:ee:e1: 3c:d7:9f:f5:d9:0c:d0:c3:75:d6:1c:96:82:ce:13:af:ca:08: 04:af:7c:d2:16:ba:09:ba:c7:9b:68:0a:2b:97:54:8e:9b:e8: 71:91:aa:b9:12:fc:ff:a7:03:31:0d:3b:c2:2c:bd:d2:39:d8: b9:6f:53:1a:a5:10:21:5e:f2:79:e9:db:66:25:e7:51:7c:5d: 52:3c:6f:b9:4c:82:3a:67:95:2d:1f:1a:04:e0:43:9a:48:c0: 8b:39:d4:59:c8:19:c7:fe:9e:1d:0b:90:1c:8f:c4:bf:ea:22: 08:8a:a5:85:60:72:cf:b3:b2:c3:70:29:ce:a1:e7:63:8c:73: 93:e3:fb:ac:f6:81:49:cf:e3:96:10:7b:2f:6d:e9:83:e9:bd: f9:64:09:53:4e:4a:46:c3:a7:d3:8b:48:03:5c:09:72:06:4d: 5f:cb:bc:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVBMjcxMTAvBgNVBAUTKEJDODYyMTQxMzA5NzE2QzBFNERDMzdERkZGMzNFNUFC MEM1NTRBRDAwHhcNMjUwNjE1MDE0MzU4WhcNMjUwNjIyMDE0MzU4WjAYMRYwFAYD VQQDEw02ODRlMjU1ZS1lMGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsbEBuaTQCv/3zT4cIJ1Xkn3Dv5FkuZd4e0Rz2B21XW5fzkifPiJxRsJfaOf 2AIrMdB28Rb1Mx1HgyETWMY2MyiJtSx5nTzZtXs7k8C0BHsRCjxRqD4AQJ8ggV7Z Hj0bw8vMwl594G/OrScjasMKZirF8JiHeg6prj2i3E7waegC7qgdFj518JQHEn9+ D4+aOe43F5H82Zkjju7zwOshMGmbKP7TCpyUKEYJs4hXk6tK+lDVuGuhGb4VK3+p Fg0aB48LoU3abFCkbC6NmYnCXURHXPM6s2hK90L7lM7EzfgBo0Opl+3FpRiPSPl0 cJU7rUbKudoSWafLzM3Ac3TQwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCENPjdY AaFxg5fc0002jPvE0Gb4MB8GA1UdIwQYMBaAFLyGIUEwlxbA5Nw33/8z5asMVUrQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUEyNy82QThCRDA4QzQ0 NkYxMUVEOTA5NUQ1NjVDNEY5QUUwMi92SVloUVRDWEZzRGszRGZmX3pQbHF3eFZT dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJWWhRVENYRnNEazNEZmZfelBscXd4VlN0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUEyNy82QThCRDA4QzQ0NkYxMUVEOTA5NUQ1NjVDNEY5QUUwMi92SVloUVRDWEZz RGszRGZmX3pQbHF3eFZTdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAORk8vK1cwGfZsVtmlv4U+ky/ab+wK3Zfma+SAjZisKaifFQNL3b+i OpZWRRnaTwoSr1AVJLpclnV3NRs5YSPAoFCu+rluEwQP/PJpXhaZ6y87QYmXhcxd 7uE815/12QzQw3XWHJaCzhOvyggEr3zSFroJusebaAorl1SOm+hxkaq5Evz/pwMx DTvCLL3SOdi5b1MapRAhXvJ56dtmJedRfF1SPG+5TII6Z5UtHxoE4EOaSMCLOdRZ yBnH/p4dC5Acj8S/6iIIiqWFYHLPs7LDcCnOoedjjHOT4/us9oFJz+OWEHsvbemD 6b35ZAlTTkpGw6fTi0gDXAlyBk1fy7ym -----END CERTIFICATE-----Generated at Mon Jun 16 10:07:55 2025 by rpki-client