$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft File: vcSlFjMX9zCX8CejQrhgp5LX8dw.mft (raw, json) Hash identifier: GuYGmxjlmi76Qv58Ye87rOiBzQPPHkOPbyqkhu/2a5A= Subject key identifier: F3:42:1C:FF:0F:47:76:8F:00:3F:D7:92:5C:75:08:0F:F4:36:C0:EB Authority key identifier: BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC Certificate issuer: /CN=A9179F64/serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft Manifest number: 9B Signing time: Sun 15 Jun 2025 05:28:00 +0000 Manifest this update: Sun 15 Jun 2025 05:27:59 +0000 Manifest next update: Sun 22 Jun 2025 05:27:59 +0000 Files and hashes: 1: vcSlFjMX9zCX8CejQrhgp5LX8dw.crl (hash: Ou7XhMhv0BSPzz/nuWIEpYVbEMEuciNik2mL/T6WKRw=) 2: AB4A60EECBA311EFB9E20E13C4F9AE02.roa (hash: Xcy4MFhRyr2k/5Jm4R5iv0t1VBaS/P+wq9LQCj1UUVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F64, serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC Validity Not Before: Jun 15 05:27:59 2025 GMT Not After : Jun 22 05:27:59 2025 GMT Subject: CN=684e59df-12f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:62:a0:a0:67:3c:3e:da:a6:3c:f9:79:73:f7: 7f:c8:bd:d1:e1:2a:ab:f3:a8:ad:bd:41:30:2e:1c: 8a:3e:2d:f3:8f:ce:6b:04:38:27:5e:9a:0a:67:bb: da:b7:67:60:5d:6e:16:f5:82:4c:96:4b:df:42:91: f3:6f:fd:09:08:75:90:74:a7:e3:c6:05:70:2e:5a: 49:be:9a:fa:bc:6d:ef:4c:61:17:cb:52:11:01:3e: a5:17:d2:c5:ff:b6:fa:86:56:32:93:06:06:21:1f: 7b:69:e2:15:64:ba:69:94:aa:15:42:0f:22:38:10: 3d:b8:dd:da:0a:01:53:84:77:a3:b0:d1:76:c3:30: 7f:f8:7d:93:51:47:51:84:62:a2:5b:08:5a:c9:f0: 59:b5:7f:76:eb:99:b6:a8:7a:59:ae:21:c5:c2:e7: 6d:0c:ac:d9:b3:60:72:0b:b0:af:d3:9c:52:7e:e8: f7:6d:cb:aa:35:f0:ad:c8:2d:49:1f:bb:0c:bb:53: ab:4e:7e:d1:64:a5:3c:1d:b3:98:32:e5:78:ea:b5: 99:d1:19:28:f8:2d:bc:36:7f:0c:e0:4d:42:06:0c: d4:78:a5:34:0e:b7:02:e5:d2:ff:b0:27:84:02:45: f0:16:3c:0e:99:5f:39:a1:1e:3d:ee:46:a5:6d:66: ff:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:42:1C:FF:0F:47:76:8F:00:3F:D7:92:5C:75:08:0F:F4:36:C0:EB X509v3 Authority Key Identifier: keyid:BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:0c:dc:aa:c3:40:04:98:95:32:17:2d:87:6d:82:18:13:10: 50:eb:df:46:bf:38:b4:87:e5:4c:59:63:4f:d7:e0:26:be:76: 67:45:6e:e5:a4:2d:7d:0a:43:d9:0f:49:9e:64:49:07:e4:c4: d5:05:7c:e9:18:b7:dd:25:e2:07:5e:7f:69:04:fa:15:95:55: 44:45:88:62:b8:0e:6c:52:ff:c7:18:c1:48:2d:01:dd:36:7c: 57:84:82:81:fd:8f:e0:ee:6d:9c:26:a1:74:cd:ff:64:43:59: 48:fa:2d:9e:60:c6:30:cb:0c:9d:1b:7e:60:6b:78:e5:a4:03: 1e:92:2c:4d:34:7d:92:0f:13:c4:6f:44:dd:a9:99:39:90:4c: 57:2f:0d:87:7b:80:59:34:87:44:5e:37:56:7f:19:cf:7f:56: c1:7e:b1:db:a9:7d:50:a5:bd:94:1f:3c:1b:37:57:ba:76:57: aa:37:40:a0:bd:01:63:51:87:5e:bd:75:ff:ca:56:be:48:95: fd:7d:bc:11:9c:fc:6b:9a:c4:99:be:f5:48:1f:0d:ee:97:59: 55:c3:ea:7a:5d:8d:5e:16:6c:1b:c5:b8:e6:9b:bb:d6:2e:6f: c4:13:8c:55:96:fd:0f:a6:83:94:f7:7b:8e:fe:35:27:5e:b9: 4f:c4:61:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGNjQxMTAvBgNVBAUTKEJEQzRBNTE2MzMxN0Y3MzA5N0YwMjdBMzQyQjg2MEE3 OTJEN0YxREMwHhcNMjUwNjE1MDUyNzU5WhcNMjUwNjIyMDUyNzU5WjAYMRYwFAYD VQQDEw02ODRlNTlkZi0xMmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5GKgoGc8PtqmPPl5c/d/yL3R4Sqr86itvUEwLhyKPi3zj85rBDgnXpoKZ7va t2dgXW4W9YJMlkvfQpHzb/0JCHWQdKfjxgVwLlpJvpr6vG3vTGEXy1IRAT6lF9LF /7b6hlYykwYGIR97aeIVZLpplKoVQg8iOBA9uN3aCgFThHejsNF2wzB/+H2TUUdR hGKiWwhayfBZtX9265m2qHpZriHFwudtDKzZs2ByC7Cv05xSfuj3bcuqNfCtyC1J H7sMu1OrTn7RZKU8HbOYMuV46rWZ0Rko+C28Nn8M4E1CBgzUeKU0DrcC5dL/sCeE AkXwFjwOmV85oR497kalbWb/bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNCHP8P R3aPAD/Xklx1CA/0NsDrMB8GA1UdIwQYMBaAFL3EpRYzF/cwl/Ano0K4YKeS1/Hc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2NC84MDkzODQ2NDYy NEIxMUVGQUIxMjBGNEZDNEY5QUUwMi92Y1NsRmpNWDl6Q1g4Q2VqUXJoZ3A1TFg4 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZjU2xGak1YOXpDWDhDZWpRcmhncDVMWDhkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUY2NC84MDkzODQ2NDYyNEIxMUVGQUIxMjBGNEZDNEY5QUUwMi92Y1NsRmpNWDl6 Q1g4Q2VqUXJoZ3A1TFg4ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhDNyqw0AEmJUyFy2HbYIYExBQ699Gvzi0h+VMWWNP1+AmvnZnRW7l pC19CkPZD0meZEkH5MTVBXzpGLfdJeIHXn9pBPoVlVVERYhiuA5sUv/HGMFILQHd NnxXhIKB/Y/g7m2cJqF0zf9kQ1lI+i2eYMYwywydG35ga3jlpAMekixNNH2SDxPE b0TdqZk5kExXLw2He4BZNIdEXjdWfxnPf1bBfrHbqX1Qpb2UHzwbN1e6dleqN0Cg vQFjUYdevXX/yla+SJX9fbwRnPxrmsSZvvVIHw3ul1lVw+p6XY1eFmwbxbjmm7vW Lm/EE4xVlv0PpoOU93uO/jUnXrlPxGGj -----END CERTIFICATE-----Generated at Sun Jun 15 09:32:23 2025 by rpki-client