$ rpki-client -vvf rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft File: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft (raw, json) Hash identifier: X0hnEvTAz6wPFgcbjk96GjdbLkJnMYskZVHKxwI8ivQ= Subject key identifier: 88:4F:AB:8F:03:82:C8:D6:A9:83:BA:A9:47:D5:CB:A6:35:B9:8E:9E Authority key identifier: 56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE Certificate issuer: /CN=A9155001/serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft Manifest number: 84 Signing time: Fri 25 Apr 2025 05:39:03 +0000 Manifest this update: Fri 25 Apr 2025 05:39:02 +0000 Manifest next update: Fri 02 May 2025 05:39:02 +0000 Files and hashes: 1: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl (hash: Bnes6rU14hhZ/7MKt7fuZV4X85w3jq+l/vprUJd8vIc=) 2: B527A9C8604111EF97252962C4F9AE02.roa (hash: c2522H0euUuP0sg8Mvl3kcMxQDDI8YZRAF5eJnZgtNo=) 3: 9FB99556604111EFB4652062C4F9AE02.roa (hash: gAXZmB2qUQ7sV8azWi6YJhPEFVxj4U+stV/Xuikiv/k=) 4: 18E15164604011EF82C9CE5FC4F9AE02.roa (hash: kerAf5g9k1HzAUucdXB7gorLYyfAcdKUtOEyl+siFgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155001, serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE Validity Not Before: Apr 25 05:39:02 2025 GMT Not After : May 2 05:39:02 2025 GMT Subject: CN=680b1ff7-0ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:64:cf:1b:b7:ee:54:ab:98:e1:6c:0b:6f:5f: c9:cc:3a:3e:ce:2b:72:21:d1:c9:c2:9b:50:e2:df: 40:7a:0d:fd:fd:48:48:04:c3:0a:04:dc:58:bf:75: 09:c9:0e:b7:1d:65:35:1e:49:e6:4a:b6:a3:27:3c: 36:04:e7:09:cc:4f:45:56:fb:23:60:23:4b:fa:f9: 97:59:8e:e7:6c:25:1f:24:86:cb:9e:03:8c:6c:9c: 69:57:9d:94:1d:9c:dc:e4:8c:92:dc:fa:2b:99:f4: 24:da:8e:c9:8d:97:c2:fe:b4:ef:cf:9e:0a:6e:c7: bc:24:d8:27:df:5b:63:1c:c6:94:7a:8d:54:b6:d9: fe:02:98:be:e1:58:bd:c9:0a:2a:e3:27:77:cd:44: 38:27:71:fb:ef:8b:a7:2e:6a:27:b9:8c:f5:3c:1a: b0:eb:a8:c0:1f:f7:71:34:3f:9d:55:b2:f3:04:a5: 43:67:c9:40:61:be:e8:8e:3c:9f:fd:bc:be:ac:33: 44:bf:7d:fc:03:16:40:64:71:74:38:f3:5b:29:5c: 4a:3b:94:53:47:26:24:40:4f:4a:a8:d4:d9:76:20: ee:75:06:eb:9f:4c:f6:b5:99:0d:84:1b:4d:6b:80: aa:43:92:c1:f5:04:c1:08:ef:f0:de:5c:d3:af:38: 13:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4F:AB:8F:03:82:C8:D6:A9:83:BA:A9:47:D5:CB:A6:35:B9:8E:9E X509v3 Authority Key Identifier: keyid:56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:dc:ee:55:e1:a5:ae:d2:e8:e1:c2:85:95:61:8c:98:13:01: c7:67:e5:59:d1:a9:6f:88:79:52:73:c2:b2:1c:5f:46:e5:4d: 86:c3:20:52:8d:27:7d:20:e1:91:8b:91:a4:04:32:da:5d:85: 33:78:cc:84:d2:1d:1c:ee:eb:a1:5d:0d:d3:b0:05:0b:1e:f7: 50:63:c1:e2:f9:d3:2c:cf:11:22:01:3d:7f:04:69:6a:19:12: 51:a2:70:cc:23:98:d4:fd:aa:42:1c:e1:e8:93:6e:35:2b:9b: f9:25:2c:5d:2f:9f:65:b1:60:f3:73:1f:31:16:b5:8e:42:aa: 22:c4:10:1c:b6:75:c1:b2:8b:11:05:d7:4c:2c:ad:3e:c0:93: 0d:89:5d:72:77:a4:a8:23:84:79:4c:6c:32:13:fd:7a:9c:ba: 31:a5:7d:6b:11:44:d8:48:62:35:43:d8:c3:88:88:1f:a9:a5: 16:33:f2:7d:39:4e:3a:53:a4:f0:7d:7a:d0:3a:4a:71:18:f4: 21:52:45:b8:f3:1e:a3:8a:85:48:d0:86:12:22:a7:00:6b:40: 93:00:12:a7:69:91:dc:39:78:01:10:ff:bf:94:02:85:56:28: 8f:8f:6a:95:f2:8c:9f:a3:f5:6b:47:4d:c8:e4:27:af:56:73: af:9d:f1:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwMDExMTAvBgNVBAUTKDU2NUM4RUM0RTgzNDQ3RUNGRkE2OUUxREVFMTYzN0Mx NUY0NUEzRkUwHhcNMjUwNDI1MDUzOTAyWhcNMjUwNTAyMDUzOTAyWjAYMRYwFAYD VQQDEw02ODBiMWZmNy0wYWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA22TPG7fuVKuY4WwLb1/JzDo+zityIdHJwptQ4t9Aeg39/UhIBMMKBNxYv3UJ yQ63HWU1HknmSrajJzw2BOcJzE9FVvsjYCNL+vmXWY7nbCUfJIbLngOMbJxpV52U HZzc5IyS3PormfQk2o7JjZfC/rTvz54Kbse8JNgn31tjHMaUeo1Uttn+Api+4Vi9 yQoq4yd3zUQ4J3H774unLmonuYz1PBqw66jAH/dxND+dVbLzBKVDZ8lAYb7ojjyf /by+rDNEv338AxZAZHF0OPNbKVxKO5RTRyYkQE9KqNTZdiDudQbrn0z2tZkNhBtN a4CqQ5LB9QTBCO/w3lzTrzgTlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhPq48D gsjWqYO6qUfVy6Y1uY6eMB8GA1UdIwQYMBaAFFZcjsToNEfs/6aeHe4WN8FfRaP+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTAwMS9ERDFDQkQ3MjYw M0UxMUVGODY2RkU4M0VDNEY5QUUwMi9WbHlPeE9nMFItel9wcDRkN2hZM3dWOUZv XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZseU94T2cwUi16X3BwNGQ3aFkzd1Y5Rm9fNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTAwMS9ERDFDQkQ3MjYwM0UxMUVGODY2RkU4M0VDNEY5QUUwMi9WbHlPeE9nMFIt el9wcDRkN2hZM3dWOUZvXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO3O5V4aWu0ujhwoWVYYyYEwHHZ+VZ0alviHlSc8KyHF9G5U2GwyBS jSd9IOGRi5GkBDLaXYUzeMyE0h0c7uuhXQ3TsAULHvdQY8Hi+dMszxEiAT1/BGlq GRJRonDMI5jU/apCHOHok241K5v5JSxdL59lsWDzcx8xFrWOQqoixBActnXBsosR BddMLK0+wJMNiV1yd6SoI4R5TGwyE/16nLoxpX1rEUTYSGI1Q9jDiIgfqaUWM/J9 OU46U6TwfXrQOkpxGPQhUkW48x6jioVI0IYSIqcAa0CTABKnaZHcOXgBEP+/lAKF ViiPj2qV8oyfo/VrR03I5CevVnOvnfGH -----END CERTIFICATE-----Generated at Sat Apr 26 12:54:59 2025 by rpki-client