$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft File: VZvvzzSYaXPTvkWTUWF45MOs4os.mft (raw, json) Hash identifier: rnUjjfDNfDCwaELqjsb2Ak+WaNi/I/Emdzt0B5R2gTQ= Subject key identifier: 33:03:AF:5D:91:37:CD:E0:60:C9:C5:4F:B5:5D:15:60:6B:8C:CB:46 Authority key identifier: 55:9B:EF:CF:34:98:69:73:D3:BE:45:93:51:61:78:E4:C3:AC:E2:8B Certificate issuer: /CN=A9167003/serialNumber=559BEFCF34986973D3BE4593516178E4C3ACE28B Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft Manifest number: B9 Signing time: Sun 15 Jun 2025 05:03:48 +0000 Manifest this update: Sun 15 Jun 2025 05:03:47 +0000 Manifest next update: Sun 22 Jun 2025 05:03:47 +0000 Files and hashes: 1: VZvvzzSYaXPTvkWTUWF45MOs4os.crl (hash: fNEKyxVVFTiF03J2tja4K2ZL06i02gdpyMrXq0IA44k=) 2: 27D9C99632C611EFA04EE118C4F9AE02.roa (hash: x/2d3a4iuMVyEl0CLBETXRLfdHnzlHoY8qTBJbPRcVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.crl rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167003, serialNumber=559BEFCF34986973D3BE4593516178E4C3ACE28B Validity Not Before: Jun 15 05:03:47 2025 GMT Not After : Jun 22 05:03:47 2025 GMT Subject: CN=684e5433-4650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4a:1f:c1:21:cb:e8:37:fa:bc:9b:6e:ff:f4: a5:4a:b6:4d:ac:7d:0b:71:fa:0a:d2:ec:61:cb:a6: 2a:27:29:73:8b:fd:be:2b:73:bb:33:bd:b7:9f:78: 14:44:af:5b:18:35:29:c8:e0:d3:e2:c2:7a:b0:12: 54:13:27:fa:30:d0:1e:53:84:2c:7f:77:77:f6:22: 88:08:f1:09:d2:cd:71:a0:b5:e6:b1:d1:f7:03:25: 52:42:6a:9f:07:15:bd:86:30:7d:b5:fb:66:3c:e7: b0:cd:fb:da:4f:c5:60:95:4e:93:b2:3c:8b:eb:25: d0:f0:da:3f:6c:89:de:27:ce:74:53:49:f7:5a:35: 34:6d:91:88:1b:f3:27:f7:94:f2:f8:80:9d:e8:e3: 20:3a:28:b9:f2:bc:79:72:ad:bc:e1:62:42:bb:cf: dd:63:52:ca:ad:60:0a:7d:34:c0:60:7e:5b:fa:b7: de:2a:81:72:a8:b1:22:9e:b1:cd:34:fb:ce:80:81: 22:6a:db:38:9f:8f:1f:2a:d9:95:26:78:67:ca:b5: 07:ac:60:a1:0b:be:23:d6:cf:fc:3a:ba:9d:22:fa: e0:42:54:f5:a1:09:7b:98:e8:ad:53:20:63:cf:e8: 7d:e3:cd:4a:e9:f5:11:0d:cf:ae:be:1c:f4:2d:60: 64:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:03:AF:5D:91:37:CD:E0:60:C9:C5:4F:B5:5D:15:60:6B:8C:CB:46 X509v3 Authority Key Identifier: keyid:55:9B:EF:CF:34:98:69:73:D3:BE:45:93:51:61:78:E4:C3:AC:E2:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:cb:30:19:c2:30:d6:f3:47:af:00:92:2f:27:c9:c4:88:70: a1:c7:34:cb:d6:a6:fc:dd:ca:42:5d:d8:64:34:e0:0f:8e:a6: 79:44:b2:d9:fa:d3:a2:6f:25:da:52:48:98:43:3e:f6:77:7e: e8:27:ec:f3:72:ba:42:b0:65:54:2b:65:5f:42:a6:7f:ed:56: 8e:97:8c:49:d9:ff:e1:c7:d2:f9:78:07:67:ab:86:0c:79:3b: 02:ba:9d:e7:7d:63:0f:5c:f0:41:86:2b:de:3c:89:0f:b8:ee: ce:c6:19:dd:40:33:81:f6:6b:9c:20:8a:5f:6c:5a:d5:d7:92: 4c:79:b7:12:ad:66:38:66:80:17:31:2f:ff:7f:d8:d1:54:2d: de:be:de:44:24:e4:55:0f:ab:a7:52:02:00:c4:b2:11:0d:9d: 6c:96:38:e0:0c:25:0b:2f:8e:37:86:b5:b4:41:a9:c5:47:05: 1f:64:6d:0b:55:a7:6c:5c:ea:eb:da:03:72:14:01:fa:1a:90: 9a:6a:ee:5c:95:dc:c0:2c:27:d7:3a:90:90:08:a6:b4:ad:19: 5e:ef:78:fd:47:d8:b5:a9:71:cd:f2:0b:91:17:bc:94:b7:8b: b2:f2:1f:a3:4a:22:8d:c2:3c:f6:13:be:76:b4:a0:18:2d:4a: 3b:2f:39:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwMDMxMTAvBgNVBAUTKDU1OUJFRkNGMzQ5ODY5NzNEM0JFNDU5MzUxNjE3OEU0 QzNBQ0UyOEIwHhcNMjUwNjE1MDUwMzQ3WhcNMjUwNjIyMDUwMzQ3WjAYMRYwFAYD VQQDEw02ODRlNTQzMy00NjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0ofwSHL6Df6vJtu//SlSrZNrH0LcfoK0uxhy6YqJylzi/2+K3O7M723n3gU RK9bGDUpyODT4sJ6sBJUEyf6MNAeU4Qsf3d39iKICPEJ0s1xoLXmsdH3AyVSQmqf BxW9hjB9tftmPOewzfvaT8VglU6TsjyL6yXQ8No/bIneJ850U0n3WjU0bZGIG/Mn 95Ty+ICd6OMgOii58rx5cq284WJCu8/dY1LKrWAKfTTAYH5b+rfeKoFyqLEinrHN NPvOgIEiats4n48fKtmVJnhnyrUHrGChC74j1s/8OrqdIvrgQlT1oQl7mOitUyBj z+h9481K6fURDc+uvhz0LWBkgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMDr12R N83gYMnFT7VdFWBrjMtGMB8GA1UdIwQYMBaAFFWb7880mGlz075Fk1FheOTDrOKL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzAwMy8yRjkzRjVDQzMy QkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9WWnZ2enpTWWFYUFR2a1dUVVdGNDVNT3M0 b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZadnZ6elNZYVhQVHZrV1RVV0Y0NU1PczRvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzAwMy8yRjkzRjVDQzMyQkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9WWnZ2enpTWWFY UFR2a1dUVVdGNDVNT3M0b3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKyzAZwjDW80evAJIvJ8nEiHChxzTL1qb83cpCXdhkNOAPjqZ5RLLZ +tOibyXaUkiYQz72d37oJ+zzcrpCsGVUK2VfQqZ/7VaOl4xJ2f/hx9L5eAdnq4YM eTsCup3nfWMPXPBBhivePIkPuO7OxhndQDOB9mucIIpfbFrV15JMebcSrWY4ZoAX MS//f9jRVC3evt5EJORVD6unUgIAxLIRDZ1sljjgDCULL443hrW0QanFRwUfZG0L VadsXOrr2gNyFAH6GpCaau5cldzALCfXOpCQCKa0rRle73j9R9i1qXHN8guRF7yU t4uy8h+jSiKNwjz2E752tKAYLUo7LzkT -----END CERTIFICATE-----Generated at Sun Jun 15 09:31:00 2025 by rpki-client