$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft File: vAv4-dc7foz8yOpen0LXqFUjPXw.mft (raw, json) Hash identifier: HvMpRG4jxDWuEJDr95DvUpyrYeKgRrmcRXOYJuG9e5k= Subject key identifier: 6A:3D:AD:B8:F6:18:1C:5A:89:BD:94:A5:4E:63:D6:A1:5F:BB:F0:EA Authority key identifier: BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C Certificate issuer: /CN=A9163EB9/serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft Manifest number: 91 Signing time: Sun 11 May 2025 05:10:19 +0000 Manifest this update: Sun 11 May 2025 05:10:19 +0000 Manifest next update: Sun 18 May 2025 05:10:19 +0000 Files and hashes: 1: vAv4-dc7foz8yOpen0LXqFUjPXw.crl (hash: SAy9hscKgojZUy3SihcbYs+FCnt+qb9DDd92sUWfI1I=) 2: 710FB354979E11EF99310B40C4F9AE02.roa (hash: bruRF8XqvNXc2lROOKilx3DJEF2Mi08/zHCfWANPCjg=) 3: 27AEE7D0979D11EFB1426839C4F9AE02.roa (hash: FRD/IGf5tsKizstdT15eHvBke9+NzOwPHHiU7wEzleM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EB9, serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C Validity Not Before: May 11 05:10:19 2025 GMT Not After : May 18 05:10:19 2025 GMT Subject: CN=6820313b-16e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:37:4a:5d:11:38:78:c2:a8:9a:f7:36:93:1a: 5a:45:f5:e6:88:75:10:62:b6:cb:f6:ae:ce:a5:f3: 7d:e6:09:e2:c0:9a:94:e6:d9:03:64:1d:a3:24:8d: 88:6a:d6:e7:92:48:92:c0:55:a2:06:dc:de:a9:df: 1e:94:98:af:e3:99:9b:3f:f3:b2:10:28:27:f1:3f: 78:b7:ce:bd:b0:1d:5a:e9:96:77:e5:22:f8:24:3d: 87:f8:97:ee:a5:20:6e:e3:34:86:2d:0d:1b:24:49: e7:bf:26:3d:15:dd:5f:56:f4:49:95:99:25:93:65: 5d:68:80:3a:23:b8:3d:20:56:12:07:88:07:ea:dc: 47:2b:7c:4c:e6:5a:70:13:77:df:2b:52:54:e2:d5: 64:fa:6d:6d:e4:93:14:92:d1:0c:25:22:87:7e:ac: e8:74:a1:d0:3d:61:8d:e9:c9:2b:11:56:6c:48:be: 38:b9:29:af:ff:1b:ae:aa:60:64:49:73:5c:df:d4: 3a:1a:10:13:dd:05:e0:c2:70:8e:47:4a:55:09:7a: a8:41:26:8c:8d:79:4b:67:c1:fb:b3:cf:16:ee:ae: 6f:b2:a4:0a:5c:d6:ca:9c:f1:da:01:90:b6:32:9d: d5:18:c7:2d:90:9c:c6:4f:21:cd:5d:0d:c6:91:62: 80:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3D:AD:B8:F6:18:1C:5A:89:BD:94:A5:4E:63:D6:A1:5F:BB:F0:EA X509v3 Authority Key Identifier: keyid:BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:8e:08:e6:ab:2a:44:fe:64:f1:84:d0:5c:1f:71:ba:43:1e: 42:cd:41:61:26:86:2e:72:82:d3:78:66:c1:48:a6:cf:f4:99: 4a:67:91:66:69:6f:b5:6c:2f:b9:6e:c3:01:1a:80:ee:05:40: b8:57:e9:00:93:9a:3f:fc:a0:49:b4:bc:9e:f7:87:90:2d:28: 37:e0:a1:72:6b:9e:36:91:20:71:33:ed:c4:d0:76:09:b6:68: aa:52:87:c5:ed:9d:23:4c:f6:ce:0b:71:c3:f0:3c:08:d3:76: 5f:ef:00:d5:02:7a:76:cc:e3:1d:2f:7a:32:35:5c:27:09:21: 84:ef:3d:1d:04:6f:a8:ab:69:45:d0:c1:d5:00:64:f9:33:94: d2:f8:4e:22:a4:ce:08:44:ab:4c:5c:25:ec:80:a9:44:7f:4a: 02:3e:37:10:04:d5:8e:ed:41:c3:50:c3:0c:5f:db:f7:df:7e: 1f:e8:13:da:30:30:79:04:67:49:e5:b8:69:f7:3a:2f:74:c4: 40:3d:aa:c3:5f:b5:68:84:99:8b:08:0a:ca:29:76:bf:e4:9a: c1:85:36:4a:73:15:0f:e7:dc:f1:33:0a:0e:b8:fd:2c:01:aa: 34:05:e5:3e:95:38:7a:d9:16:1b:2a:b2:1e:d8:9c:eb:8e:b5: f9:0e:d6:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFQjkxMTAvBgNVBAUTKEJDMEJGOEY5RDczQjdFOENGQ0M4RUE1RTlGNDJEN0E4 NTUyMzNEN0MwHhcNMjUwNTExMDUxMDE5WhcNMjUwNTE4MDUxMDE5WjAYMRYwFAYD VQQDEw02ODIwMzEzYi0xNmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDdKXRE4eMKomvc2kxpaRfXmiHUQYrbL9q7OpfN95gniwJqU5tkDZB2jJI2I atbnkkiSwFWiBtzeqd8elJiv45mbP/OyECgn8T94t869sB1a6ZZ35SL4JD2H+Jfu pSBu4zSGLQ0bJEnnvyY9Fd1fVvRJlZklk2VdaIA6I7g9IFYSB4gH6txHK3xM5lpw E3ffK1JU4tVk+m1t5JMUktEMJSKHfqzodKHQPWGN6ckrEVZsSL44uSmv/xuuqmBk SXNc39Q6GhAT3QXgwnCOR0pVCXqoQSaMjXlLZ8H7s88W7q5vsqQKXNbKnPHaAZC2 Mp3VGMctkJzGTyHNXQ3GkWKAIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGo9rbj2 GBxaib2UpU5j1qFfu/DqMB8GA1UdIwQYMBaAFLwL+PnXO36M/MjqXp9C16hVIz18 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VCOS9GQ0Q1NUMwQTU0 OUYxMUVGODZBRTU5MjJDNEY5QUUwMi92QXY0LWRjN2Zvejh5T3BlbjBMWHFGVWpQ WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZBdjQtZGM3Zm96OHlPcGVuMExYcUZValBYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VCOS9GQ0Q1NUMwQTU0OUYxMUVGODZBRTU5MjJDNEY5QUUwMi92QXY0LWRjN2Zv ejh5T3BlbjBMWHFGVWpQWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGjgjmqypE/mTxhNBcH3G6Qx5CzUFhJoYucoLTeGbBSKbP9JlKZ5Fm aW+1bC+5bsMBGoDuBUC4V+kAk5o//KBJtLye94eQLSg34KFya542kSBxM+3E0HYJ tmiqUofF7Z0jTPbOC3HD8DwI03Zf7wDVAnp2zOMdL3oyNVwnCSGE7z0dBG+oq2lF 0MHVAGT5M5TS+E4ipM4IRKtMXCXsgKlEf0oCPjcQBNWO7UHDUMMMX9v3334f6BPa MDB5BGdJ5bhp9zovdMRAParDX7VohJmLCArKKXa/5JrBhTZKcxUP59zxMwoOuP0s Aao0BeU+lTh62RYbKrIe2JzrjrX5DtYo -----END CERTIFICATE-----Generated at Mon May 12 19:51:11 2025 by rpki-client