$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft File: vcSlFjMX9zCX8CejQrhgp5LX8dw.mft (raw, json) Hash identifier: iMUMAYaL4YRaK/zOJozgXzLBQTeYORHZuaqQWOpA2ps= Subject key identifier: E3:D2:5D:E7:16:86:12:D6:BF:BB:35:99:FA:40:D5:EA:E2:3F:04:A1 Authority key identifier: BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC Certificate issuer: /CN=A9179F64/serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft Manifest number: 8B Signing time: Tue 13 May 2025 05:44:36 +0000 Manifest this update: Tue 13 May 2025 05:44:35 +0000 Manifest next update: Tue 20 May 2025 05:44:35 +0000 Files and hashes: 1: vcSlFjMX9zCX8CejQrhgp5LX8dw.crl (hash: X3d2UXL2CFJnwy60/4D6vVR8OlmlUxRZKm4gZeJ5c4I=) 2: AB4A60EECBA311EFB9E20E13C4F9AE02.roa (hash: Xcy4MFhRyr2k/5Jm4R5iv0t1VBaS/P+wq9LQCj1UUVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F64, serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC Validity Not Before: May 13 05:44:35 2025 GMT Not After : May 20 05:44:35 2025 GMT Subject: CN=6822dc43-e337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a5:82:a8:0c:9a:56:ae:2f:57:1c:e9:bd:79: 9b:60:b3:2c:f8:19:9e:b9:02:d5:1f:b5:6c:b0:af: 1f:2b:7d:93:cb:6d:41:86:d6:21:56:48:64:7f:5c: a0:34:d4:ee:0e:40:35:4a:72:4e:e6:cb:90:3a:d3: 0d:11:99:6d:ea:d9:d3:d5:9b:0b:51:d8:66:31:ca: 12:c8:0e:f8:57:3b:b9:f9:26:5f:b1:e3:b3:95:39: 08:4a:09:66:2b:e6:de:69:de:fd:d0:e5:71:ea:2c: 23:98:45:70:48:3e:15:72:a3:3d:dc:09:91:7e:77: 83:3e:99:47:a4:37:e4:6e:84:28:24:0e:75:e9:25: 5a:2b:a4:33:00:e3:6c:b2:ca:42:a4:c1:7f:35:cd: 36:f8:b1:2c:b2:19:40:95:f0:32:4e:f0:19:48:4e: e6:1a:0e:c0:9f:3b:7a:1c:92:40:14:28:82:99:51: 7e:98:69:78:6b:6c:4c:d7:84:3d:f2:db:7e:35:4e: 3a:1a:e6:35:f7:ba:03:ea:a8:77:5e:59:07:51:08: fa:fc:55:2d:55:85:c4:fa:7b:ca:a0:14:04:16:85: f6:b2:50:10:9b:53:0f:a4:1f:ec:7d:a6:3c:4d:20: 6e:94:f4:93:d5:2d:a7:dc:f9:f2:a7:f5:07:05:d3: d0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D2:5D:E7:16:86:12:D6:BF:BB:35:99:FA:40:D5:EA:E2:3F:04:A1 X509v3 Authority Key Identifier: keyid:BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:28:af:fb:38:4e:f0:35:40:4a:3e:75:50:43:05:16:30:30: ba:95:ce:f8:25:cb:f4:d1:cd:20:ce:01:e3:74:20:ef:d9:ce: af:8b:b8:dd:13:55:12:82:6d:71:85:50:ba:4d:48:23:1a:a0: 42:bf:d3:2c:17:dc:d1:28:4d:ea:9e:9a:f7:a5:08:48:cb:8d: 98:74:65:8f:9c:68:f9:84:ae:fb:8d:fb:8a:2c:ba:90:40:71: fe:dc:d8:0b:2f:5f:e2:5f:8d:73:b4:6c:51:f5:2d:2d:6c:a8: 99:68:d1:59:1b:7a:13:53:44:d5:2f:ce:9e:52:3b:8d:be:95: be:9f:2b:71:44:92:07:8b:aa:3f:e0:c4:c6:f9:c4:2b:2f:14: 10:19:76:60:0c:3f:79:a3:2d:9b:fb:b3:c6:9f:ff:49:db:e4: a9:55:cc:d5:81:5e:bd:39:e2:66:ec:b6:f3:57:8b:40:9e:0a: 17:75:0e:92:d2:bc:0b:7d:eb:be:e7:7b:b4:9e:14:57:02:b5: cb:3c:a8:a2:89:a3:7c:f5:8d:28:43:9e:17:f4:d5:83:60:36: 5c:be:a6:73:17:37:19:75:9e:22:ca:64:a5:cd:de:bb:a9:b2: 1f:f2:f8:12:0e:81:3e:e8:c1:15:70:4f:62:a9:f6:cf:91:ed: d3:00:de:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGNjQxMTAvBgNVBAUTKEJEQzRBNTE2MzMxN0Y3MzA5N0YwMjdBMzQyQjg2MEE3 OTJEN0YxREMwHhcNMjUwNTEzMDU0NDM1WhcNMjUwNTIwMDU0NDM1WjAYMRYwFAYD VQQDEw02ODIyZGM0My1lMzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6WCqAyaVq4vVxzpvXmbYLMs+BmeuQLVH7VssK8fK32Ty21BhtYhVkhkf1yg NNTuDkA1SnJO5suQOtMNEZlt6tnT1ZsLUdhmMcoSyA74Vzu5+SZfseOzlTkISglm K+bead790OVx6iwjmEVwSD4VcqM93AmRfneDPplHpDfkboQoJA516SVaK6QzAONs sspCpMF/Nc02+LEsshlAlfAyTvAZSE7mGg7Anzt6HJJAFCiCmVF+mGl4a2xM14Q9 8tt+NU46GuY197oD6qh3XlkHUQj6/FUtVYXE+nvKoBQEFoX2slAQm1MPpB/sfaY8 TSBulPST1S2n3Pnyp/UHBdPQ8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPSXecW hhLWv7s1mfpA1eriPwShMB8GA1UdIwQYMBaAFL3EpRYzF/cwl/Ano0K4YKeS1/Hc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2NC84MDkzODQ2NDYy NEIxMUVGQUIxMjBGNEZDNEY5QUUwMi92Y1NsRmpNWDl6Q1g4Q2VqUXJoZ3A1TFg4 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZjU2xGak1YOXpDWDhDZWpRcmhncDVMWDhkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUY2NC84MDkzODQ2NDYyNEIxMUVGQUIxMjBGNEZDNEY5QUUwMi92Y1NsRmpNWDl6 Q1g4Q2VqUXJoZ3A1TFg4ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeKK/7OE7wNUBKPnVQQwUWMDC6lc74Jcv00c0gzgHjdCDv2c6vi7jd E1USgm1xhVC6TUgjGqBCv9MsF9zRKE3qnpr3pQhIy42YdGWPnGj5hK77jfuKLLqQ QHH+3NgLL1/iX41ztGxR9S0tbKiZaNFZG3oTU0TVL86eUjuNvpW+nytxRJIHi6o/ 4MTG+cQrLxQQGXZgDD95oy2b+7PGn/9J2+SpVczVgV69OeJm7LbzV4tAngoXdQ6S 0rwLfeu+53u0nhRXArXLPKiiiaN89Y0oQ54X9NWDYDZcvqZzFzcZdZ4iymSlzd67 qbIf8vgSDoE+6MEVcE9iqfbPke3TAN7E -----END CERTIFICATE-----Generated at Wed May 14 12:56:54 2025 by rpki-client