$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft File: VZvvzzSYaXPTvkWTUWF45MOs4os.mft (raw, json) Hash identifier: +qI0018Rbh3RbkxPDEHIqQ4lXD5/x4d1Z08CQlVHPWc= Subject key identifier: BB:D4:81:76:6F:5B:89:8C:A1:F3:3A:3B:F5:08:4D:FF:10:87:6E:D8 Authority key identifier: 55:9B:EF:CF:34:98:69:73:D3:BE:45:93:51:61:78:E4:C3:AC:E2:8B Certificate issuer: /CN=A9167003/serialNumber=559BEFCF34986973D3BE4593516178E4C3ACE28B Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft Manifest number: A0 Signing time: Fri 25 Apr 2025 05:15:35 +0000 Manifest this update: Fri 25 Apr 2025 05:15:35 +0000 Manifest next update: Fri 02 May 2025 05:15:35 +0000 Files and hashes: 1: VZvvzzSYaXPTvkWTUWF45MOs4os.crl (hash: 6tBRiMZtawEbiBz7OPIEZVGaNSzn0qQLhVYdtaMSqOA=) 2: 27D9C99632C611EFA04EE118C4F9AE02.roa (hash: x/2d3a4iuMVyEl0CLBETXRLfdHnzlHoY8qTBJbPRcVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.crl rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167003, serialNumber=559BEFCF34986973D3BE4593516178E4C3ACE28B Validity Not Before: Apr 25 05:15:35 2025 GMT Not After : May 2 05:15:35 2025 GMT Subject: CN=680b1a77-2b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:42:db:d4:51:68:74:37:9f:17:3d:ad:75:5b: 23:76:d6:35:20:c4:90:6e:c1:0b:f8:8d:02:cf:57: 81:7a:e3:88:15:5d:9e:f6:12:1d:9c:67:85:4d:43: f3:c8:89:4f:b3:8d:76:6b:5b:35:90:95:2f:00:53: 1f:9b:0c:db:a8:00:fb:cc:ce:c0:0e:2b:0f:4f:f7: b6:52:88:bf:cf:75:a2:c6:0f:d7:9b:5d:66:fe:02: 2b:8a:4c:0b:db:25:77:22:9c:7f:54:09:29:ab:7a: fb:c4:dd:64:34:f5:f2:0b:df:5e:1d:0d:48:16:de: c6:f9:7b:9f:e2:de:e2:71:9e:f2:6f:37:35:8b:34: e9:cf:90:fd:4b:5b:6e:79:c6:78:27:df:8e:82:de: f9:9c:1c:08:37:9c:c7:9e:2f:20:93:06:47:57:96: 5d:80:39:20:ef:f1:11:5e:b1:01:37:16:fe:55:40: 10:fc:b6:52:a1:4a:fd:6d:9a:33:24:84:5e:9a:02: 35:78:13:76:fc:11:dd:e7:7f:1c:cf:b7:63:b1:6c: 29:9a:9b:9d:36:10:a4:85:a3:39:45:a8:d1:7f:ed: f5:16:81:3a:9c:42:e7:fe:38:eb:5e:a8:3e:7f:5c: 83:d7:bc:54:db:da:b5:83:dd:9e:e5:21:be:a3:f7: 4d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D4:81:76:6F:5B:89:8C:A1:F3:3A:3B:F5:08:4D:FF:10:87:6E:D8 X509v3 Authority Key Identifier: keyid:55:9B:EF:CF:34:98:69:73:D3:BE:45:93:51:61:78:E4:C3:AC:E2:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:5f:27:a3:13:b4:05:6f:66:fd:fc:40:40:ee:c7:9f:6c:e9: 67:2a:72:cc:f3:f4:a1:9d:db:2a:24:4e:73:79:18:5d:8e:f6: 6a:12:bf:c9:25:7c:1d:01:45:ee:3d:ea:83:6c:24:a2:c7:7d: 55:c4:58:24:23:a7:83:15:e4:a8:f4:99:c6:4b:8d:5f:04:89: 1e:54:df:74:3f:53:60:6f:60:6d:8d:cb:ec:d0:55:57:0e:56: 1f:64:51:0f:d1:9b:cf:04:ad:5c:56:4c:72:51:b0:09:8d:41: 7d:50:e9:fb:32:cf:d3:08:2d:73:a5:6c:b3:ef:3f:02:9b:32: 10:48:fb:24:93:23:be:40:1f:71:3a:70:10:7f:48:3c:25:e4: d7:93:92:87:eb:d5:28:07:3e:c9:d3:4e:3d:7b:ae:de:0a:3a: 68:f1:bb:99:36:ad:5d:e0:e0:e9:58:4d:a5:02:0b:70:e3:2d: 33:f5:df:7e:f8:4c:49:bf:4d:8b:93:56:0b:e8:74:fd:4d:bc: 2f:0f:89:c3:a6:71:13:19:14:d9:35:03:35:88:5d:86:73:19: 3d:8a:4a:ac:cf:86:e9:2f:e2:f7:83:3d:72:ec:8f:96:b5:55: 9e:16:0f:04:ea:7e:57:ed:96:62:a7:c9:c0:8a:c0:c7:34:d6: 3f:72:2a:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwMDMxMTAvBgNVBAUTKDU1OUJFRkNGMzQ5ODY5NzNEM0JFNDU5MzUxNjE3OEU0 QzNBQ0UyOEIwHhcNMjUwNDI1MDUxNTM1WhcNMjUwNTAyMDUxNTM1WjAYMRYwFAYD VQQDEw02ODBiMWE3Ny0yYjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ULb1FFodDefFz2tdVsjdtY1IMSQbsEL+I0Cz1eBeuOIFV2e9hIdnGeFTUPz yIlPs412a1s1kJUvAFMfmwzbqAD7zM7ADisPT/e2Uoi/z3Wixg/Xm11m/gIrikwL 2yV3Ipx/VAkpq3r7xN1kNPXyC99eHQ1IFt7G+Xuf4t7icZ7ybzc1izTpz5D9S1tu ecZ4J9+Ogt75nBwIN5zHni8gkwZHV5ZdgDkg7/ERXrEBNxb+VUAQ/LZSoUr9bZoz JIRemgI1eBN2/BHd538cz7djsWwpmpudNhCkhaM5RajRf+31FoE6nELn/jjrXqg+ f1yD17xU29q1g92e5SG+o/dNFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvUgXZv W4mMofM6O/UITf8Qh27YMB8GA1UdIwQYMBaAFFWb7880mGlz075Fk1FheOTDrOKL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzAwMy8yRjkzRjVDQzMy QkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9WWnZ2enpTWWFYUFR2a1dUVVdGNDVNT3M0 b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZadnZ6elNZYVhQVHZrV1RVV0Y0NU1PczRvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzAwMy8yRjkzRjVDQzMyQkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9WWnZ2enpTWWFY UFR2a1dUVVdGNDVNT3M0b3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPXyejE7QFb2b9/EBA7sefbOlnKnLM8/ShndsqJE5zeRhdjvZqEr/J JXwdAUXuPeqDbCSix31VxFgkI6eDFeSo9JnGS41fBIkeVN90P1Ngb2Btjcvs0FVX DlYfZFEP0ZvPBK1cVkxyUbAJjUF9UOn7Ms/TCC1zpWyz7z8CmzIQSPskkyO+QB9x OnAQf0g8JeTXk5KH69UoBz7J0049e67eCjpo8buZNq1d4ODpWE2lAgtw4y0z9d9+ +ExJv02Lk1YL6HT9TbwvD4nDpnETGRTZNQM1iF2Gcxk9ikqsz4bpL+L3gz1y7I+W tVWeFg8E6n5X7ZZip8nAisDHNNY/cipV -----END CERTIFICATE-----Generated at Sat Apr 26 12:31:50 2025 by rpki-client