$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft File: vFNsAPhfWQQdnEwpYfciQr9g1R4.mft (raw, json) Hash identifier: l9Re87bcV/7FIq1IWuIHSI6TStYjlreg5BdJzFopm0c= Subject key identifier: F8:45:8A:D2:5F:F4:75:B5:98:59:9A:B2:EA:6C:5F:9A:1F:98:05:21 Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Certificate serial: 124A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft Manifest number: 1215 Signing time: Thu 24 Apr 2025 17:11:32 +0000 Manifest this update: Thu 24 Apr 2025 17:11:32 +0000 Manifest next update: Thu 01 May 2025 17:11:32 +0000 Files and hashes: 1: vFNsAPhfWQQdnEwpYfciQr9g1R4.crl (hash: ME/PA9s/KrgK7OWj+wiDzqW4biXau0qltxDDeZQytj0=) 2: DA505546B74C11ED916B5A6AC4F9AE02.roa (hash: 9RHwtONKgQdHSDennn4HM2Ikhdy+C6zf57qmecAxamQ=) 3: 3A9AD3CEDAD411EBB35DA50AC4F9AE02.roa (hash: EztUCIPqk3y/a6AcLfvax6DUhCHP6l9BEvQIvIo9iws=) 4: E0ACCAC4ECD211EFA6C15823C4F9AE02.roa (hash: /d3XQ565KopoANcg+pwgBZqGoqy8+pW8EGFbyyXXzys=) 5: 57A84138605911EE8ABC9318C4F9AE02.roa (hash: acU+THblHTmNuI3hvXPa2l7l+23XT3W88AntJDw2zgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:11:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4682 (0x124a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Validity Not Before: Apr 24 17:11:32 2025 GMT Not After : May 1 17:11:32 2025 GMT Subject: CN=680a70c4-f38e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:48:05:1b:95:bb:bc:f3:81:0c:1b:5a:46:70: fe:dc:c8:f3:98:32:ad:57:66:8a:d7:4e:3b:cf:89: 01:eb:72:a2:af:22:9b:e5:48:f3:12:d4:71:2c:6b: 90:a1:53:9b:d9:05:6a:69:ef:eb:7a:6e:25:48:8d: 1c:c7:a5:66:c0:a9:67:bd:8a:92:80:a1:6d:2a:0d: 89:50:2d:2a:cc:b7:31:f7:bf:d8:ed:03:eb:f8:7d: d2:ac:0d:b2:b5:b9:af:35:ce:9b:c0:b0:10:f6:e5: 61:46:fd:a9:9c:8f:a7:41:10:53:b4:71:ff:57:6b: b7:3b:ed:55:c3:34:69:05:2c:8d:e6:f7:1e:44:3d: 6a:20:46:17:08:e7:4d:27:8b:18:40:f7:0c:2d:40: a0:69:61:d0:81:a5:d5:bc:89:eb:a1:a3:f5:f9:5a: 6e:8f:c3:fc:7c:b2:a7:2d:6d:db:26:2f:a0:05:74: 2b:f7:a8:7e:90:1f:8e:df:63:7b:a6:19:a1:76:80: bb:cf:c6:a6:ec:ca:a7:d6:8a:f2:7c:15:a7:3a:a5: 6b:fe:f7:b9:fd:f2:e3:8f:cb:d3:35:5b:b6:91:62: 4c:20:00:68:7e:24:8d:c7:5f:47:f6:a9:1e:42:ad: 4b:9c:53:18:ee:76:c4:35:92:fa:5b:7b:1f:a7:db: 2b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:45:8A:D2:5F:F4:75:B5:98:59:9A:B2:EA:6C:5F:9A:1F:98:05:21 X509v3 Authority Key Identifier: keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:21:67:54:34:3a:51:70:44:f7:70:b1:29:64:d2:54:e1:71: 1e:b5:bd:d9:8c:4c:81:1d:7c:0d:6c:ae:df:22:a1:cb:17:8c: 0d:7d:74:68:e1:db:20:35:39:3e:b5:7e:d3:9f:45:34:ee:81: 36:74:ea:ea:bb:9e:8d:f4:3a:df:43:2c:35:42:69:82:2f:e3: 95:67:4a:6e:21:3c:c6:9c:95:f7:a7:02:ce:11:c5:c0:5e:55: 9e:eb:e8:7c:9f:f3:70:a7:13:7c:a1:bc:c3:70:bb:28:7b:7b: 3e:db:3b:84:c7:62:03:fd:de:3b:01:e4:a2:9c:e9:4f:fa:32: 6b:6f:45:0d:9c:35:a6:ce:c1:61:4a:0d:e8:d4:d9:88:ca:04: 45:4b:d7:8d:82:e7:e3:6b:01:ff:8f:02:08:bf:8d:84:7f:79: 8a:cd:1f:64:84:b3:06:d4:b3:41:b5:bc:be:09:1f:c0:30:f5: 4c:c8:0c:c2:f6:65:63:7c:65:1e:0a:6e:86:d2:1e:9d:31:e2: 7f:24:88:04:9b:d3:93:5f:eb:16:83:26:e9:72:00:60:b5:74: a7:03:dd:83:2d:09:6b:55:b4:4f:12:25:44:b4:c5:02:1f:30: a4:63:d4:c8:88:0f:2c:58:71:b4:b3:a3:36:c1:09:4a:48:90: 86:50:18:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy QkY2MEQ1MUUwHhcNMjUwNDI0MTcxMTMyWhcNMjUwNTAxMTcxMTMyWjAYMRYwFAYD VQQDEw02ODBhNzBjNC1mMzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0gFG5W7vPOBDBtaRnD+3MjzmDKtV2aK1047z4kB63KiryKb5UjzEtRxLGuQ oVOb2QVqae/rem4lSI0cx6VmwKlnvYqSgKFtKg2JUC0qzLcx97/Y7QPr+H3SrA2y tbmvNc6bwLAQ9uVhRv2pnI+nQRBTtHH/V2u3O+1VwzRpBSyN5vceRD1qIEYXCOdN J4sYQPcMLUCgaWHQgaXVvInroaP1+Vpuj8P8fLKnLW3bJi+gBXQr96h+kB+O32N7 phmhdoC7z8am7Mqn1oryfBWnOqVr/ve5/fLjj8vTNVu2kWJMIABofiSNx19H9qke Qq1LnFMY7nbENZL6W3sfp9sr8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhFitJf 9HW1mFmasupsX5ofmAUhMB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5 NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDg2MC9CNDAxQzk4MkU5NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldR UWRuRXdwWWZjaVFyOWcxUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLIWdUNDpRcET3cLEpZNJU4XEetb3ZjEyBHXwNbK7fIqHLF4wNfXRo 4dsgNTk+tX7Tn0U07oE2dOrqu56N9DrfQyw1QmmCL+OVZ0puITzGnJX3pwLOEcXA XlWe6+h8n/NwpxN8obzDcLsoe3s+2zuEx2ID/d47AeSinOlP+jJrb0UNnDWmzsFh Sg3o1NmIygRFS9eNgufjawH/jwIIv42Ef3mKzR9khLMG1LNBtby+CR/AMPVMyAzC 9mVjfGUeCm6G0h6dMeJ/JIgEm9OTX+sWgybpcgBgtXSnA92DLQlrVbRPEiVEtMUC HzCkY9TIiA8sWHG0s6M2wQlKSJCGUBiN -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:16 2025 by rpki-client