$ rpki-client -vvf rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft File: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft (raw, json) Hash identifier: j4M2WebqcKCq2IkKAWWL/WM5KqVpZcb7rhq0ZRtWxLg= Subject key identifier: AC:22:B7:D2:28:3A:78:82:E3:64:1E:56:A2:00:31:1B:08:1D:F4:C2 Authority key identifier: 56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE Certificate issuer: /CN=A9155001/serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft Manifest number: 89 Signing time: Mon 05 May 2025 05:25:56 +0000 Manifest this update: Mon 05 May 2025 05:25:56 +0000 Manifest next update: Mon 12 May 2025 05:25:56 +0000 Files and hashes: 1: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl (hash: 8s9DIJ2/iK0aZ/Af/REE9IhXsl6wkjOnYs7WzAuRmN4=) 2: B527A9C8604111EF97252962C4F9AE02.roa (hash: c2522H0euUuP0sg8Mvl3kcMxQDDI8YZRAF5eJnZgtNo=) 3: 9FB99556604111EFB4652062C4F9AE02.roa (hash: gAXZmB2qUQ7sV8azWi6YJhPEFVxj4U+stV/Xuikiv/k=) 4: 18E15164604011EF82C9CE5FC4F9AE02.roa (hash: kerAf5g9k1HzAUucdXB7gorLYyfAcdKUtOEyl+siFgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 05:25:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155001, serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE Validity Not Before: May 5 05:25:56 2025 GMT Not After : May 12 05:25:56 2025 GMT Subject: CN=68184be4-8aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0a:07:0d:d3:61:4c:7e:fe:00:f7:0c:e8:66: b8:74:70:8b:ac:3f:7b:f0:51:c2:9c:32:ba:0b:1c: a1:cf:3e:c1:82:e8:26:f8:fc:a3:38:b5:c9:c0:6d: cf:f5:12:9a:5d:d3:45:02:5b:77:79:c0:47:22:e4: db:e1:ed:45:b2:43:5a:7d:ff:21:76:7a:26:54:34: 7a:45:fe:72:3f:a4:d7:ba:26:fc:ec:e9:5f:4f:74: ae:3f:6f:0e:60:64:ce:79:7a:0f:00:f3:0a:1f:dd: 90:c5:75:22:98:3a:3a:09:22:97:7e:59:c2:fd:e1: 4b:eb:56:db:be:84:a1:ce:e6:87:26:c7:74:75:bc: 3d:91:3e:0b:35:c3:bb:46:e0:1b:1c:87:a1:b5:9c: 7c:97:9c:e3:29:0b:d8:90:c4:5a:d0:60:70:5b:95: bd:54:93:27:bb:2b:42:20:69:fa:05:05:03:99:8a: 41:25:95:be:08:11:0a:18:08:9a:2c:33:a0:cf:82: ad:cc:71:a3:a7:bf:93:47:24:7f:24:aa:9e:9a:0f: ed:20:2d:57:d2:82:58:9f:44:b2:0b:f9:55:df:37: 6d:6f:7d:93:d1:72:7a:d4:a3:df:02:7f:ff:b0:b1: 16:e8:80:1c:0c:1e:ba:22:5d:63:2c:2e:bd:ac:5f: 72:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:22:B7:D2:28:3A:78:82:E3:64:1E:56:A2:00:31:1B:08:1D:F4:C2 X509v3 Authority Key Identifier: keyid:56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:80:cf:bd:63:67:33:37:a5:67:ef:ad:43:3e:32:ca:af:30: f9:b4:23:9b:2a:0d:77:5c:35:db:a4:54:66:e8:a5:c7:b6:a5: e3:9b:79:73:99:fc:71:53:bf:45:83:3e:54:2d:82:ea:6c:19: 18:cd:bf:ce:d3:31:e7:b2:65:37:e7:bf:0e:90:87:2d:57:ee: 12:e5:60:1b:b0:0f:a6:23:eb:e7:af:d0:88:bf:0c:4a:91:de: 28:97:c5:6a:8d:3e:22:8d:49:b8:54:05:bb:2a:c8:a7:4f:60: cf:48:19:fc:bd:18:f0:51:97:ea:d1:0f:f4:c2:ce:72:b8:15: e2:a2:f9:dd:41:ec:fb:23:42:f0:b0:36:11:05:74:a7:bf:2f: 66:f8:93:b5:92:57:16:0c:68:39:92:8f:82:3f:70:51:a3:a6: 72:54:00:68:a7:b0:cf:5e:96:71:ab:28:0e:90:3f:30:a9:50: 68:52:bd:ee:2e:ef:c5:39:e8:47:2a:93:53:68:b9:53:48:c0: 1e:12:b0:02:27:02:82:e4:8a:f9:ac:88:38:f9:02:f6:56:55: 21:41:91:d8:0b:f8:ef:e9:20:38:cf:46:36:b0:fe:c7:1d:b3: cb:77:66:c3:b1:8b:20:50:32:05:23:5e:48:ae:7c:23:a5:09: ac:7f:53:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUwMDExMTAvBgNVBAUTKDU2NUM4RUM0RTgzNDQ3RUNGRkE2OUUxREVFMTYzN0Mx NUY0NUEzRkUwHhcNMjUwNTA1MDUyNTU2WhcNMjUwNTEyMDUyNTU2WjAYMRYwFAYD VQQDEw02ODE4NGJlNC04YWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwoHDdNhTH7+APcM6Ga4dHCLrD978FHCnDK6Cxyhzz7Bgugm+PyjOLXJwG3P 9RKaXdNFAlt3ecBHIuTb4e1FskNaff8hdnomVDR6Rf5yP6TXuib87OlfT3SuP28O YGTOeXoPAPMKH92QxXUimDo6CSKXflnC/eFL61bbvoShzuaHJsd0dbw9kT4LNcO7 RuAbHIehtZx8l5zjKQvYkMRa0GBwW5W9VJMnuytCIGn6BQUDmYpBJZW+CBEKGAia LDOgz4KtzHGjp7+TRyR/JKqemg/tIC1X0oJYn0SyC/lV3zdtb32T0XJ61KPfAn// sLEW6IAcDB66Il1jLC69rF9y8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwit9Io OniC42QeVqIAMRsIHfTCMB8GA1UdIwQYMBaAFFZcjsToNEfs/6aeHe4WN8FfRaP+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTAwMS9ERDFDQkQ3MjYw M0UxMUVGODY2RkU4M0VDNEY5QUUwMi9WbHlPeE9nMFItel9wcDRkN2hZM3dWOUZv XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZseU94T2cwUi16X3BwNGQ3aFkzd1Y5Rm9fNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTAwMS9ERDFDQkQ3MjYwM0UxMUVGODY2RkU4M0VDNEY5QUUwMi9WbHlPeE9nMFIt el9wcDRkN2hZM3dWOUZvXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCgM+9Y2czN6Vn761DPjLKrzD5tCObKg13XDXbpFRm6KXHtqXjm3lz mfxxU79Fgz5ULYLqbBkYzb/O0zHnsmU3578OkIctV+4S5WAbsA+mI+vnr9CIvwxK kd4ol8VqjT4ijUm4VAW7KsinT2DPSBn8vRjwUZfq0Q/0ws5yuBXiovndQez7I0Lw sDYRBXSnvy9m+JO1klcWDGg5ko+CP3BRo6ZyVABop7DPXpZxqygOkD8wqVBoUr3u Lu/FOehHKpNTaLlTSMAeErACJwKC5Ir5rIg4+QL2VlUhQZHYC/jv6SA4z0Y2sP7H HbPLd2bDsYsgUDIFI15IrnwjpQmsf1Ng -----END CERTIFICATE-----Generated at Mon May 5 18:03:27 2025 by rpki-client