$ rpki-client -vvf rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft File: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft (raw, json) Hash identifier: yiNrS5iyAHJRXd/yz8OCaNCU8933Hr/95e5huuwEyJU= Subject key identifier: E4:FA:8B:00:B0:BC:94:BF:0B:C8:14:5E:34:9A:82:A2:B8:56:10:CF Authority key identifier: 56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE Certificate issuer: /CN=A9155001/serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft Manifest number: A4 Signing time: Sun 29 Jun 2025 05:17:26 +0000 Manifest this update: Sun 29 Jun 2025 05:17:25 +0000 Manifest next update: Sun 06 Jul 2025 05:17:25 +0000 Files and hashes: 1: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl (hash: ScqyzsJu8nQDAftiree/OB8Xwo30vuQs2ESixI2lH+k=) 2: B527A9C8604111EF97252962C4F9AE02.roa (hash: c2522H0euUuP0sg8Mvl3kcMxQDDI8YZRAF5eJnZgtNo=) 3: 9FB99556604111EFB4652062C4F9AE02.roa (hash: gAXZmB2qUQ7sV8azWi6YJhPEFVxj4U+stV/Xuikiv/k=) 4: 18E15164604011EF82C9CE5FC4F9AE02.roa (hash: kerAf5g9k1HzAUucdXB7gorLYyfAcdKUtOEyl+siFgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155001, serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE Validity Not Before: Jun 29 05:17:25 2025 GMT Not After : Jul 6 05:17:25 2025 GMT Subject: CN=6860cc66-4fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2e:47:14:c4:cf:c2:f3:62:dc:6b:84:48:d0: 69:63:ce:76:b4:40:cc:2e:53:ca:d4:33:a5:24:d4: e7:7b:6b:d0:56:51:08:ec:28:51:e1:f7:21:30:de: d0:84:50:ce:c9:0a:8f:eb:4b:1b:21:d3:19:1c:0f: 6f:9a:a9:7e:af:f7:aa:70:d3:ad:13:39:c2:ba:14: bc:4c:ff:86:8f:48:21:25:49:e5:f5:2e:5f:d2:7d: 5b:ca:e5:84:ad:ba:ae:7f:2f:73:c5:ea:21:e6:ae: e1:58:3a:76:16:f8:f5:bd:fa:32:3a:cc:a1:f4:77: 0f:60:b4:7d:3e:9b:64:70:f7:83:20:84:34:bd:fd: 84:9b:2b:a3:3d:45:52:71:a6:4b:db:04:4d:9a:27: fd:7a:d3:e4:a2:e8:65:6c:a5:fb:ca:ff:84:47:73: 16:31:61:21:09:f3:14:36:c6:ac:de:0d:5f:09:8e: fd:8e:4f:5c:ba:45:06:3c:3b:de:11:ff:23:73:b4: ee:b2:5b:c8:c7:95:5c:e2:ee:ad:17:91:3d:a8:9e: 8e:94:f6:b0:83:ac:fc:37:79:b2:8c:7f:bf:a5:17: 85:7b:02:ee:41:0d:9c:02:24:ab:dc:9a:fa:71:e7: e9:06:bd:85:22:94:d3:8e:dd:ad:97:31:94:f1:e0: 3f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FA:8B:00:B0:BC:94:BF:0B:C8:14:5E:34:9A:82:A2:B8:56:10:CF X509v3 Authority Key Identifier: keyid:56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:52:61:25:0e:40:72:7b:ba:84:4f:08:bc:f3:50:c3:cf:01: a2:91:bf:99:b2:5a:74:16:b6:c0:7d:e4:0c:ca:1c:c3:0e:f6: fa:13:db:e6:b7:b9:a5:cb:f4:79:1c:fd:5a:34:a0:d3:62:e9: f2:77:f4:de:0a:3c:f5:06:ff:9f:dc:3b:61:c8:3a:5c:7c:6d: 5d:79:8e:69:56:e5:71:64:0f:11:9b:51:a2:42:50:71:cf:64: 80:1d:ae:28:09:fb:71:ec:b9:dd:31:e2:ef:c8:e0:a5:0a:98: fe:8c:bb:5e:b8:23:2b:ee:ca:10:5e:85:08:68:4b:9d:d3:29: cb:ee:f7:4a:91:73:6f:b3:de:53:1e:30:f5:03:11:93:a0:7f: 6c:c5:09:29:d1:3b:5f:25:ac:2f:5b:e1:45:65:0e:44:cb:db: 89:f3:4a:35:19:3d:67:d7:3b:d3:30:41:13:fd:47:7c:46:cd: 0d:77:16:54:4f:f1:92:e9:a0:ca:98:a5:ad:9e:a5:ed:6a:cb: 6c:7d:c1:20:96:a6:cd:5b:69:e5:14:40:f9:f3:9d:b6:83:1f: 2f:a7:8a:5c:8f:de:c6:71:83:b2:cd:79:6c:84:51:8b:24:f4: fc:71:0d:20:11:a1:9a:9a:83:8d:79:b3:c9:71:64:c8:f6:5d: 58:df:0f:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwMDExMTAvBgNVBAUTKDU2NUM4RUM0RTgzNDQ3RUNGRkE2OUUxREVFMTYzN0Mx NUY0NUEzRkUwHhcNMjUwNjI5MDUxNzI1WhcNMjUwNzA2MDUxNzI1WjAYMRYwFAYD VQQDEw02ODYwY2M2Ni00ZmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsy5HFMTPwvNi3GuESNBpY852tEDMLlPK1DOlJNTne2vQVlEI7ChR4fchMN7Q hFDOyQqP60sbIdMZHA9vmql+r/eqcNOtEznCuhS8TP+Gj0ghJUnl9S5f0n1byuWE rbqufy9zxeoh5q7hWDp2Fvj1vfoyOsyh9HcPYLR9PptkcPeDIIQ0vf2EmyujPUVS caZL2wRNmif9etPkouhlbKX7yv+ER3MWMWEhCfMUNsas3g1fCY79jk9cukUGPDve Ef8jc7TuslvIx5Vc4u6tF5E9qJ6OlPawg6z8N3myjH+/pReFewLuQQ2cAiSr3Jr6 cefpBr2FIpTTjt2tlzGU8eA/dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOT6iwCw vJS/C8gUXjSagqK4VhDPMB8GA1UdIwQYMBaAFFZcjsToNEfs/6aeHe4WN8FfRaP+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTAwMS9ERDFDQkQ3MjYw M0UxMUVGODY2RkU4M0VDNEY5QUUwMi9WbHlPeE9nMFItel9wcDRkN2hZM3dWOUZv XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZseU94T2cwUi16X3BwNGQ3aFkzd1Y5Rm9fNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTAwMS9ERDFDQkQ3MjYwM0UxMUVGODY2RkU4M0VDNEY5QUUwMi9WbHlPeE9nMFIt el9wcDRkN2hZM3dWOUZvXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANUmElDkBye7qETwi881DDzwGikb+Zslp0FrbAfeQMyhzDDvb6E9vm t7mly/R5HP1aNKDTYunyd/TeCjz1Bv+f3DthyDpcfG1deY5pVuVxZA8Rm1GiQlBx z2SAHa4oCftx7LndMeLvyOClCpj+jLteuCMr7soQXoUIaEud0ynL7vdKkXNvs95T HjD1AxGToH9sxQkp0TtfJawvW+FFZQ5Ey9uJ80o1GT1n1zvTMEET/Ud8Rs0NdxZU T/GS6aDKmKWtnqXtastsfcEglqbNW2nlFED58522gx8vp4pcj97GcYOyzXlshFGL JPT8cQ0gEaGamoONebPJcWTI9l1Y3w8l -----END CERTIFICATE-----Generated at Sun Jun 29 19:48:04 2025 by rpki-client