$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.mft File: vc-jy52E0VT-MqVOm0uJXlyNWR4.mft (raw, json) Hash identifier: fL4AsKxXPxruZmC2tuUq7MbR2buV12KuwKv7SCNvc38= Subject key identifier: 7D:F9:04:FA:91:9A:05:B9:EA:4D:EE:AF:4E:1C:EA:20:46:5A:1A:8C Authority key identifier: BD:CF:A3:CB:9D:84:D1:54:FE:32:A5:4E:9B:4B:89:5E:5C:8D:59:1E Certificate issuer: /CN=A9161B37/serialNumber=BDCFA3CB9D84D154FE32A54E9B4B895E5C8D591E Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vc-jy52E0VT-MqVOm0uJXlyNWR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.mft Manifest number: 4F Signing time: Fri 25 Apr 2025 06:16:45 +0000 Manifest this update: Fri 25 Apr 2025 06:16:44 +0000 Manifest next update: Fri 02 May 2025 06:16:44 +0000 Files and hashes: 1: vc-jy52E0VT-MqVOm0uJXlyNWR4.crl (hash: g5jHTWgnKanRc7LVGsjezuC8iAy1L0etodJiwkY1wdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.crl rsync://rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vc-jy52E0VT-MqVOm0uJXlyNWR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B37, serialNumber=BDCFA3CB9D84D154FE32A54E9B4B895E5C8D591E Validity Not Before: Apr 25 06:16:44 2025 GMT Not After : May 2 06:16:44 2025 GMT Subject: CN=680b28cd-af8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:40:5a:69:40:78:c4:d1:50:c2:3e:6f:a3:e6: 79:7b:bb:26:6c:22:fb:f4:52:bc:b5:cd:46:77:89: d3:d2:60:a5:bb:e6:53:62:cf:38:a3:55:81:ed:b4: 34:0b:07:46:0c:a6:b0:8b:2e:45:65:3d:a1:13:50: d5:26:1d:13:ef:a5:e1:e8:fe:e5:47:4f:2c:6e:9d: 9c:65:e6:b4:02:58:15:9f:47:06:8e:da:ac:f3:4a: 8a:b0:2f:23:c8:33:61:e3:f9:43:6f:48:b9:9d:d3: 94:17:15:6c:99:d6:20:80:1f:1d:a7:95:d1:62:fd: 40:da:6d:f6:76:55:f9:41:08:96:4b:ad:a3:22:43: c4:7c:b4:7b:9a:41:5e:c1:d8:d0:9f:44:53:f1:0a: 81:11:89:5e:95:07:04:0b:7f:58:bf:78:a4:1d:89: b8:1e:ee:e9:a5:e7:3d:39:3e:03:bb:8c:b5:62:e5: f5:e5:93:83:ba:e7:26:56:7e:89:e2:39:5b:a3:79: 91:ee:1b:7c:f1:a6:46:65:ee:05:58:7d:0d:24:6f: 2a:80:f2:5a:cb:77:5b:ff:20:ef:26:f6:bd:21:10: 7c:2b:56:2e:56:bf:fd:66:a0:f5:65:fd:5b:3f:72: e2:8d:90:98:e5:c0:dc:0e:f4:8a:74:38:07:b2:25: 25:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F9:04:FA:91:9A:05:B9:EA:4D:EE:AF:4E:1C:EA:20:46:5A:1A:8C X509v3 Authority Key Identifier: keyid:BD:CF:A3:CB:9D:84:D1:54:FE:32:A5:4E:9B:4B:89:5E:5C:8D:59:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vc-jy52E0VT-MqVOm0uJXlyNWR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6a:c9:e3:4a:8c:0e:d8:93:93:1d:50:be:98:fb:0e:96:4b: 65:86:d7:59:f8:40:95:eb:20:04:10:48:d3:76:01:17:9e:df: be:5c:40:38:ee:9c:3c:37:a8:fb:24:15:e5:cd:3c:55:02:c3: 01:93:26:43:fe:10:46:6b:ec:7b:25:0c:5c:16:de:c8:f3:bb: a3:89:b9:da:99:1d:0b:87:85:74:12:a1:a8:16:25:05:d7:50: bf:6e:b9:aa:59:ad:7f:5e:1b:14:bd:8a:65:64:1c:e7:4f:63: 2a:19:32:49:d3:78:9e:f0:fa:ab:59:4c:86:72:01:55:33:32: 1f:22:ca:a1:fd:24:e4:77:fe:a1:17:4f:09:95:ac:22:3e:7b: 31:7f:eb:66:d4:e2:cf:59:e7:de:9a:14:24:39:18:c2:d9:d1: c1:47:57:69:39:36:ab:58:65:7e:2e:de:31:f4:19:7d:e6:42: e1:95:44:29:ce:c8:10:cb:05:1f:de:c1:54:2e:fc:a3:12:25: 9b:fb:3b:d9:bf:c4:65:31:06:79:5b:62:82:81:31:7d:0e:4d: 96:ad:c9:36:7f:76:ec:28:52:f1:88:b8:81:a7:48:78:32:f4: 48:91:96:b8:eb:b2:c2:1b:a9:d7:de:bd:e0:8b:80:28:78:43: 8d:f1:8f:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUIzNzExMC8GA1UEBRMoQkRDRkEzQ0I5RDg0RDE1NEZFMzJBNTRFOUI0Qjg5NUU1 QzhENTkxRTAeFw0yNTA0MjUwNjE2NDRaFw0yNTA1MDIwNjE2NDRaMBgxFjAUBgNV BAMTDTY4MGIyOGNkLWFmOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFQFppQHjE0VDCPm+j5nl7uyZsIvv0Ury1zUZ3idPSYKW75lNizzijVYHttDQL B0YMprCLLkVlPaETUNUmHRPvpeHo/uVHTyxunZxl5rQCWBWfRwaO2qzzSoqwLyPI M2Hj+UNvSLmd05QXFWyZ1iCAHx2nldFi/UDabfZ2VflBCJZLraMiQ8R8tHuaQV7B 2NCfRFPxCoERiV6VBwQLf1i/eKQdibge7uml5z05PgO7jLVi5fXlk4O65yZWfoni OVujeZHuG3zxpkZl7gVYfQ0kbyqA8lrLd1v/IO8m9r0hEHwrVi5Wv/1moPVl/Vs/ cuKNkJjlwNwO9Ip0OAeyJSXbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUffkE+pGa BbnqTe6vThzqIEZaGowwHwYDVR0jBBgwFoAUvc+jy52E0VT+MqVOm0uJXlyNWR4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQjM3LzVBRUMwQzMwQUJC QzExRUZCM0Q5Q0U2RUM0RjlBRTAyL3ZjLWp5NTJFMFZULU1xVk9tMHVKWGx5TldS NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdmMtank1MkUwVlQtTXFWT20wdUpYbHlOV1I0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx QjM3LzVBRUMwQzMwQUJCQzExRUZCM0Q5Q0U2RUM0RjlBRTAyL3ZjLWp5NTJFMFZU LU1xVk9tMHVKWGx5TldSNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEpqyeNKjA7Yk5MdUL6Y+w6WS2WG11n4QJXrIAQQSNN2ARee375cQDju nDw3qPskFeXNPFUCwwGTJkP+EEZr7HslDFwW3sjzu6OJudqZHQuHhXQSoagWJQXX UL9uuapZrX9eGxS9imVkHOdPYyoZMknTeJ7w+qtZTIZyAVUzMh8iyqH9JOR3/qEX TwmVrCI+ezF/62bU4s9Z596aFCQ5GMLZ0cFHV2k5NqtYZX4u3jH0GX3mQuGVRCnO yBDLBR/ewVQu/KMSJZv7O9m/xGUxBnlbYoKBMX0OTZatyTZ/duwoUvGIuIGnSHgy 9EiRlrjrssIbqdfeveCLgCh4Q43xj0k= -----END CERTIFICATE-----Generated at Sat Apr 26 14:18:51 2025 by rpki-client