$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft File: VZvvzzSYaXPTvkWTUWF45MOs4os.mft (raw, json) Hash identifier: 0SJ+Wh+73YD4sXsumim3fl7YsmRhKzR3//FVkhg7ZUo= Subject key identifier: 2A:4A:86:36:70:49:49:EF:38:86:57:7E:59:8C:CC:21:7F:6A:94:A7 Authority key identifier: 55:9B:EF:CF:34:98:69:73:D3:BE:45:93:51:61:78:E4:C3:AC:E2:8B Certificate issuer: /CN=A9167003/serialNumber=559BEFCF34986973D3BE4593516178E4C3ACE28B Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft Manifest number: A1 Signing time: Sun 27 Apr 2025 05:05:23 +0000 Manifest this update: Sun 27 Apr 2025 05:05:22 +0000 Manifest next update: Sun 04 May 2025 05:05:22 +0000 Files and hashes: 1: VZvvzzSYaXPTvkWTUWF45MOs4os.crl (hash: CY3kCHcXgUr1ICwKqcNmAlkoUwp3C0jHSLei02iJZNo=) 2: 27D9C99632C611EFA04EE118C4F9AE02.roa (hash: x/2d3a4iuMVyEl0CLBETXRLfdHnzlHoY8qTBJbPRcVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.crl rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167003, serialNumber=559BEFCF34986973D3BE4593516178E4C3ACE28B Validity Not Before: Apr 27 05:05:22 2025 GMT Not After : May 4 05:05:22 2025 GMT Subject: CN=680dbb13-1aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:af:6b:38:3c:d9:f8:ef:67:4a:36:3a:c3:f7: b0:df:cd:ae:0a:12:ca:0e:24:0d:22:a5:e6:bf:ad: b0:6d:7c:35:da:2b:ec:7a:03:d7:48:f0:03:42:75: 7c:00:b9:95:ea:f1:0d:6c:5f:76:38:98:03:c5:dd: 39:e2:d2:b9:cd:6c:36:55:51:25:e8:77:be:ea:39: f6:39:6f:ef:51:cb:91:6a:ab:39:59:dd:c2:1f:f0: f5:33:6b:c2:47:b4:e0:7d:5d:dd:6f:fa:24:02:b7: e1:db:c1:25:05:2f:15:9c:60:b2:c2:03:b9:0e:86: b0:7d:74:16:d2:30:eb:a6:82:14:a1:ba:42:bf:0b: 34:22:8b:a4:de:c1:04:d0:73:be:b7:22:b7:37:c2: a3:bb:5d:be:b2:c1:1b:dd:17:82:96:af:9f:2d:2e: 98:a2:4d:52:e8:00:92:82:a5:ad:b3:3b:b3:39:69: ec:a0:2a:81:3a:b6:4e:db:21:da:54:1f:c6:ad:78: 6f:7d:73:c5:43:b4:03:14:30:1b:ed:38:58:91:de: 73:ae:2e:d7:a2:2a:bc:d3:2c:28:5c:72:ae:24:bd: ee:47:28:c8:2e:9b:7c:69:29:c0:41:54:f5:24:c8: c1:09:02:af:69:f6:c9:b9:1f:d0:80:4c:db:85:3c: 7f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4A:86:36:70:49:49:EF:38:86:57:7E:59:8C:CC:21:7F:6A:94:A7 X509v3 Authority Key Identifier: keyid:55:9B:EF:CF:34:98:69:73:D3:BE:45:93:51:61:78:E4:C3:AC:E2:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:3e:f4:68:c3:4e:30:c0:b6:f1:22:17:a2:68:48:8c:a6:90: 0f:bf:f0:4e:cf:60:c9:e7:09:9b:b7:72:40:cf:43:d6:e4:3d: 4b:ea:6f:5b:1e:2b:02:96:2d:e9:47:80:c0:f2:b1:5e:45:de: 03:7a:3e:21:78:cf:69:75:d4:24:49:a6:f0:d0:48:1d:b2:25: 47:a9:89:fe:c5:8a:63:d8:9e:84:1d:52:80:df:57:3d:7e:ca: c6:fe:89:1b:4a:6b:7d:d2:68:a2:0f:d9:a9:f6:31:73:21:3a: c1:1b:c3:1e:3b:07:2b:ec:ca:d2:c7:55:d6:32:4e:31:78:d1: 46:c2:41:a8:47:f9:f4:0c:a8:86:f1:39:42:28:36:7e:2f:1b: f9:8b:c9:75:ca:78:29:13:67:07:37:60:a0:82:8c:77:c9:02: b9:c7:db:77:00:bb:92:d7:8e:95:b8:5a:c7:40:da:b6:0b:af: 47:60:fc:c6:74:22:da:b5:91:6b:c0:5a:76:9c:f3:a0:f1:49: 7e:6f:4b:3e:0f:f1:88:f2:44:ca:3a:f8:c3:16:6f:60:5c:7f: 20:46:66:9a:2a:35:3d:58:bd:1c:f2:dc:58:58:f1:15:9a:1d: 93:00:16:e9:20:f2:48:93:4d:cb:8a:07:db:3b:d9:e3:c3:3a: 49:ff:3e:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwMDMxMTAvBgNVBAUTKDU1OUJFRkNGMzQ5ODY5NzNEM0JFNDU5MzUxNjE3OEU0 QzNBQ0UyOEIwHhcNMjUwNDI3MDUwNTIyWhcNMjUwNTA0MDUwNTIyWjAYMRYwFAYD VQQDEw02ODBkYmIxMy0xYWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA169rODzZ+O9nSjY6w/ew382uChLKDiQNIqXmv62wbXw12ivsegPXSPADQnV8 ALmV6vENbF92OJgDxd054tK5zWw2VVEl6He+6jn2OW/vUcuRaqs5Wd3CH/D1M2vC R7TgfV3db/okArfh28ElBS8VnGCywgO5DoawfXQW0jDrpoIUobpCvws0Iouk3sEE 0HO+tyK3N8Kju12+ssEb3ReClq+fLS6Yok1S6ACSgqWtszuzOWnsoCqBOrZO2yHa VB/GrXhvfXPFQ7QDFDAb7ThYkd5zri7Xoiq80ywoXHKuJL3uRyjILpt8aSnAQVT1 JMjBCQKvafbJuR/QgEzbhTx/rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpKhjZw SUnvOIZXflmMzCF/apSnMB8GA1UdIwQYMBaAFFWb7880mGlz075Fk1FheOTDrOKL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzAwMy8yRjkzRjVDQzMy QkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9WWnZ2enpTWWFYUFR2a1dUVVdGNDVNT3M0 b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZadnZ6elNZYVhQVHZrV1RVV0Y0NU1PczRvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzAwMy8yRjkzRjVDQzMyQkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9WWnZ2enpTWWFY UFR2a1dUVVdGNDVNT3M0b3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcPvRow04wwLbxIheiaEiMppAPv/BOz2DJ5wmbt3JAz0PW5D1L6m9b HisCli3pR4DA8rFeRd4Dej4heM9pddQkSabw0EgdsiVHqYn+xYpj2J6EHVKA31c9 fsrG/okbSmt90miiD9mp9jFzITrBG8MeOwcr7MrSx1XWMk4xeNFGwkGoR/n0DKiG 8TlCKDZ+Lxv5i8l1yngpE2cHN2Cggox3yQK5x9t3ALuS146VuFrHQNq2C69HYPzG dCLatZFrwFp2nPOg8Ul+b0s+D/GI8kTKOvjDFm9gXH8gRmaaKjU9WL0c8txYWPEV mh2TABbpIPJIk03LigfbO9njwzpJ/z6/ -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:48 2025 by rpki-client on console.sobornost.net