$ rpki-client -vvf rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft File: VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft (raw, json) Hash identifier: eoUO9mmKW20aP3jhVX0iMMQHoaloAf8tU1ieCp2fwgI= Subject key identifier: 11:F4:C7:55:9F:0A:32:9D:D2:48:92:81:43:4F:03:0B:7D:43:20:7B Authority key identifier: 54:B6:DE:06:91:A9:C6:D5:65:CD:18:01:1D:D2:2B:10:9E:02:37:9B Certificate issuer: /CN=A9116119/serialNumber=54B6DE0691A9C6D565CD18011DD22B109E02379B Certificate serial: 10E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft Manifest number: 10D8 Signing time: Thu 24 Apr 2025 17:19:08 +0000 Manifest this update: Thu 24 Apr 2025 17:19:07 +0000 Manifest next update: Thu 01 May 2025 17:19:07 +0000 Files and hashes: 1: VLbeBpGpxtVlzRgBHdIrEJ4CN5s.crl (hash: 6wuiMu0liojOwj1/5YwYrsdEeYsnPaVwPRG2E5GvsXw=) 2: 991E066C1DB711EB95324E17C4F9AE02.roa (hash: /nPv0Yq4GGkQfcr8qvWam0XNmS67EN12p0o/3hMFLgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.crl rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4320 (0x10e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116119, serialNumber=54B6DE0691A9C6D565CD18011DD22B109E02379B Validity Not Before: Apr 24 17:19:07 2025 GMT Not After : May 1 17:19:07 2025 GMT Subject: CN=680a728c-907f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:08:f5:29:3b:0e:b3:2b:15:c0:62:66:55:13: 1d:aa:79:fa:70:89:77:ba:40:9d:86:3f:0b:3e:93: 21:2b:9c:65:f3:2b:83:f8:6e:43:3f:ac:05:cd:8f: 27:bd:d4:20:9d:73:39:5d:ac:f1:6a:fa:25:b4:d5: df:1c:09:d9:f7:44:56:30:64:fa:db:59:0c:c7:90: 84:ad:3b:56:9d:b3:55:3f:10:4a:33:45:d5:54:95: 89:83:a1:47:6e:a4:14:92:e7:cf:a6:e6:e7:83:86: 17:05:85:0a:91:cc:ed:8a:c3:ef:78:9b:07:84:30: fe:0a:f8:3a:f9:3c:a0:54:ce:b3:04:f9:d1:a7:7f: ad:2d:10:e1:7b:13:03:6f:ee:cc:da:7e:5c:40:20: ad:02:57:f3:54:12:8c:ef:b0:05:ce:82:98:7f:be: 7e:07:71:ba:f0:46:f6:f7:fe:70:dd:ea:f4:5c:a6: c4:ec:b0:aa:56:86:44:32:2b:d1:87:c8:cf:9d:3d: 72:ab:fd:a1:30:d5:d1:27:34:0a:af:a5:c5:98:4e: ca:6c:6a:7f:3a:77:b8:c5:6c:e1:dd:df:d8:a0:19: cf:f3:0d:48:8f:a1:a4:9c:ab:2d:ec:38:73:6d:58: f6:59:30:d4:2f:30:94:19:c2:54:4c:7c:4e:7b:05: 3d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F4:C7:55:9F:0A:32:9D:D2:48:92:81:43:4F:03:0B:7D:43:20:7B X509v3 Authority Key Identifier: keyid:54:B6:DE:06:91:A9:C6:D5:65:CD:18:01:1D:D2:2B:10:9E:02:37:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:8d:7c:67:0f:ea:5f:bf:60:c1:45:ec:e5:8a:0f:de:17:ab: e6:1b:23:40:b0:c5:ca:89:2b:3c:00:b5:ea:10:27:e0:d1:86: dd:f0:3b:a3:ab:95:25:aa:82:b5:cb:96:56:9c:fd:7e:66:44: 3b:d7:ab:c2:12:56:89:eb:0c:2c:84:f6:2f:06:9e:4a:a3:53: 21:0f:c9:3c:17:bd:3c:be:a4:18:58:8d:ea:71:be:a4:6e:8c: 8e:c6:07:56:86:d9:50:8a:6d:3a:a6:35:6d:c1:de:9a:a9:b5: 73:03:e7:ee:9c:b3:c8:dd:72:97:cb:3d:f7:62:83:d1:58:96: 75:c8:42:2f:f3:c4:06:4a:39:37:88:52:77:e6:89:16:5f:ec: d1:c2:7b:69:1c:70:0b:c2:ea:da:00:6c:4e:c5:14:ab:de:9e: 66:9e:a7:86:64:64:5a:e4:c0:31:cb:81:44:46:de:a2:e1:10: b0:f8:bd:75:be:3c:35:d8:50:95:f9:00:0a:e5:9e:51:83:4a: 22:86:01:15:2c:24:a0:06:21:e7:db:e9:6d:b9:59:af:37:1b: a0:86:01:57:d2:f4:bc:31:84:9b:f5:92:51:2c:a9:d4:78:8e: dc:2d:82:4c:3e:a2:d3:c8:c7:65:92:e3:64:6d:0b:ce:7b:f7: 51:ae:a5:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYxMTkxMTAvBgNVBAUTKDU0QjZERTA2OTFBOUM2RDU2NUNEMTgwMTFERDIyQjEw OUUwMjM3OUIwHhcNMjUwNDI0MTcxOTA3WhcNMjUwNTAxMTcxOTA3WjAYMRYwFAYD VQQDEw02ODBhNzI4Yy05MDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAj1KTsOsysVwGJmVRMdqnn6cIl3ukCdhj8LPpMhK5xl8yuD+G5DP6wFzY8n vdQgnXM5XazxavoltNXfHAnZ90RWMGT621kMx5CErTtWnbNVPxBKM0XVVJWJg6FH bqQUkufPpubng4YXBYUKkcztisPveJsHhDD+Cvg6+TygVM6zBPnRp3+tLRDhexMD b+7M2n5cQCCtAlfzVBKM77AFzoKYf75+B3G68Eb29/5w3er0XKbE7LCqVoZEMivR h8jPnT1yq/2hMNXRJzQKr6XFmE7KbGp/One4xWzh3d/YoBnP8w1Ij6GknKst7Dhz bVj2WTDULzCUGcJUTHxOewU9mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBH0x1Wf CjKd0kiSgUNPAwt9QyB7MB8GA1UdIwQYMBaAFFS23gaRqcbVZc0YAR3SKxCeAjeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjExOS81NDQ4MTc5RTFB QkMxMUU5QkRBNEZDNDhDNEY5QUUwMi9WTGJlQnBHcHh0Vmx6UmdCSGRJckVKNENO NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZMYmVCcEdweHRWbHpSZ0JIZElyRUo0Q041cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjExOS81NDQ4MTc5RTFBQkMxMUU5QkRBNEZDNDhDNEY5QUUwMi9WTGJlQnBHcHh0 Vmx6UmdCSGRJckVKNENONXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3jXxnD+pfv2DBRezlig/eF6vmGyNAsMXKiSs8ALXqECfg0Ybd8Duj q5UlqoK1y5ZWnP1+ZkQ716vCElaJ6wwshPYvBp5Ko1MhD8k8F708vqQYWI3qcb6k boyOxgdWhtlQim06pjVtwd6aqbVzA+funLPI3XKXyz33YoPRWJZ1yEIv88QGSjk3 iFJ35okWX+zRwntpHHALwuraAGxOxRSr3p5mnqeGZGRa5MAxy4FERt6i4RCw+L11 vjw12FCV+QAK5Z5Rg0oihgEVLCSgBiHn2+ltuVmvNxughgFX0vS8MYSb9ZJRLKnU eI7cLYJMPqLTyMdlkuNkbQvOe/dRrqUn -----END CERTIFICATE-----Generated at Sat Apr 26 04:02:31 2025 by rpki-client