$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft File: vAv4-dc7foz8yOpen0LXqFUjPXw.mft (raw, json) Hash identifier: jweEhzNJcG+zFRN2kPBWOhTO8eSXan+2Wjb8U5GXn/Y= Subject key identifier: 62:B8:7B:0A:D6:04:26:CD:66:59:73:56:CE:3E:80:DA:46:5E:C4:35 Authority key identifier: BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C Certificate issuer: /CN=A9163EB9/serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft Manifest number: AB Signing time: Thu 03 Jul 2025 06:16:08 +0000 Manifest this update: Thu 03 Jul 2025 06:16:08 +0000 Manifest next update: Thu 10 Jul 2025 06:16:08 +0000 Files and hashes: 1: vAv4-dc7foz8yOpen0LXqFUjPXw.crl (hash: JFL2W70bTNPHzqO+1eHbkHcsQWSpyGwqCkLM5UBvLyo=) 2: 710FB354979E11EF99310B40C4F9AE02.roa (hash: bruRF8XqvNXc2lROOKilx3DJEF2Mi08/zHCfWANPCjg=) 3: 27AEE7D0979D11EFB1426839C4F9AE02.roa (hash: FRD/IGf5tsKizstdT15eHvBke9+NzOwPHHiU7wEzleM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EB9, serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C Validity Not Before: Jul 3 06:16:08 2025 GMT Not After : Jul 10 06:16:08 2025 GMT Subject: CN=68662028-cbfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:9e:83:f6:50:88:10:e6:55:8c:25:c2:77:c9: 70:cc:e7:b3:91:40:da:d8:7e:9e:0a:23:51:01:0b: c0:08:36:2b:d3:0d:4f:b1:9a:57:76:59:df:2a:52: 07:9e:82:49:5a:cc:67:44:1e:01:30:0f:64:d5:a3: 1f:dc:75:ba:4c:3b:6f:4d:51:0b:60:d9:1c:f2:dd: eb:39:b2:ff:66:87:69:4e:a1:34:93:49:96:cd:cc: 49:68:81:99:f2:57:a9:cd:a1:89:2c:92:19:26:fe: d7:fa:36:77:9c:a3:6d:ff:15:25:c8:2e:f8:bb:3d: 4d:06:1b:0c:8a:7d:13:a8:2e:9a:6c:13:66:4b:ad: dc:d4:e1:2d:95:d0:39:9f:d1:6f:be:a9:de:60:c8: 30:3f:f7:75:6e:d8:5c:4b:4b:48:50:7e:7f:eb:c5: 97:c1:40:be:ad:47:3f:69:ba:76:79:38:60:29:a2: c8:f2:98:38:72:b7:77:b3:d0:38:00:3e:bc:7d:1f: b5:d1:87:dd:16:88:ea:da:2e:3c:7c:6d:56:05:4a: ba:94:88:7a:7f:04:27:e2:ad:3c:4b:ad:ea:b6:a3: ab:01:36:d6:61:22:87:42:a7:15:83:99:00:f7:f0: 75:df:27:a0:4a:7a:09:6e:ab:80:5c:52:dc:2a:e4: ae:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B8:7B:0A:D6:04:26:CD:66:59:73:56:CE:3E:80:DA:46:5E:C4:35 X509v3 Authority Key Identifier: keyid:BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:3e:c2:20:d6:cd:b5:c4:42:57:64:6c:44:b9:83:38:d9:1e: a1:f9:1f:28:22:45:3b:cc:86:5a:3a:de:26:95:9e:05:10:df: a0:4a:35:6d:9a:3f:4e:9a:bc:6c:2a:81:e6:7b:9d:10:42:71: 19:4e:7f:21:97:1f:14:be:0f:fa:92:89:e7:8d:fd:39:cb:ae: b7:00:40:52:93:c4:54:2b:a4:cc:f9:51:e8:1e:99:3b:20:37: 82:d3:cd:b7:ee:c7:a5:5f:d4:47:fc:25:e3:78:a3:0b:b2:4a: a0:0a:27:82:01:cc:30:c6:0c:56:94:ab:0b:3c:a6:07:96:32: ce:29:01:03:1c:8e:75:1a:87:b3:56:a2:6d:77:2b:19:49:1a: 83:aa:b0:8a:47:09:eb:52:6b:c3:8c:31:dd:6a:2b:54:ea:3e: e7:20:d7:41:4f:3a:19:38:c8:a7:bf:ac:2d:7d:e5:1a:c6:8f: ff:96:6d:ae:47:74:53:40:8a:4f:97:bb:ea:05:b1:b4:43:c7: 6b:99:c0:8f:59:ae:d7:cb:0e:bb:16:2a:7e:84:a0:95:f6:82: 9a:75:44:88:70:b2:7b:0a:c1:ec:71:d0:db:95:f1:c5:0f:e0: 1f:df:0f:f8:ec:4b:38:f7:98:d3:41:4b:6b:ff:55:ee:04:ed: a7:48:e7:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFQjkxMTAvBgNVBAUTKEJDMEJGOEY5RDczQjdFOENGQ0M4RUE1RTlGNDJEN0E4 NTUyMzNEN0MwHhcNMjUwNzAzMDYxNjA4WhcNMjUwNzEwMDYxNjA4WjAYMRYwFAYD VQQDEw02ODY2MjAyOC1jYmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Z6D9lCIEOZVjCXCd8lwzOezkUDa2H6eCiNRAQvACDYr0w1PsZpXdlnfKlIH noJJWsxnRB4BMA9k1aMf3HW6TDtvTVELYNkc8t3rObL/ZodpTqE0k0mWzcxJaIGZ 8lepzaGJLJIZJv7X+jZ3nKNt/xUlyC74uz1NBhsMin0TqC6abBNmS63c1OEtldA5 n9FvvqneYMgwP/d1bthcS0tIUH5/68WXwUC+rUc/abp2eThgKaLI8pg4crd3s9A4 AD68fR+10YfdFojq2i48fG1WBUq6lIh6fwQn4q08S63qtqOrATbWYSKHQqcVg5kA 9/B13yegSnoJbquAXFLcKuSuYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGK4ewrW BCbNZllzVs4+gNpGXsQ1MB8GA1UdIwQYMBaAFLwL+PnXO36M/MjqXp9C16hVIz18 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VCOS9GQ0Q1NUMwQTU0 OUYxMUVGODZBRTU5MjJDNEY5QUUwMi92QXY0LWRjN2Zvejh5T3BlbjBMWHFGVWpQ WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZBdjQtZGM3Zm96OHlPcGVuMExYcUZValBYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VCOS9GQ0Q1NUMwQTU0OUYxMUVGODZBRTU5MjJDNEY5QUUwMi92QXY0LWRjN2Zv ejh5T3BlbjBMWHFGVWpQWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgPsIg1s21xEJXZGxEuYM42R6h+R8oIkU7zIZaOt4mlZ4FEN+gSjVt mj9OmrxsKoHme50QQnEZTn8hlx8Uvg/6konnjf05y663AEBSk8RUK6TM+VHoHpk7 IDeC08237selX9RH/CXjeKMLskqgCieCAcwwxgxWlKsLPKYHljLOKQEDHI51Goez VqJtdysZSRqDqrCKRwnrUmvDjDHdaitU6j7nINdBTzoZOMinv6wtfeUaxo//lm2u R3RTQIpPl7vqBbG0Q8drmcCPWa7Xyw67Fip+hKCV9oKadUSIcLJ7CsHscdDblfHF D+Af3w/47Es495jTQUtr/1XuBO2nSOcb -----END CERTIFICATE-----Generated at Thu Jul 3 23:22:41 2025 by rpki-client