$ rpki-client -vvf rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.mft File: VloR-W0tjoTDhh_i4Psx3QvkBrI.mft (raw, json) Hash identifier: gRf+ehBVBD88eB+mxuFkVkrgNNnbyrX2jfKz3rdzeCU= Subject key identifier: 93:60:5A:C1:46:70:3A:E8:20:09:35:13:5E:F2:09:54:C9:68:75:3C Authority key identifier: 56:5A:11:F9:6D:2D:8E:84:C3:86:1F:E2:E0:FB:31:DD:0B:E4:06:B2 Certificate issuer: /CN=A912481E/serialNumber=565A11F96D2D8E84C3861FE2E0FB31DD0BE406B2 Certificate serial: 098E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VloR-W0tjoTDhh_i4Psx3QvkBrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.mft Manifest number: 0988 Signing time: Thu 24 Apr 2025 19:59:24 +0000 Manifest this update: Thu 24 Apr 2025 19:59:24 +0000 Manifest next update: Thu 01 May 2025 19:59:24 +0000 Files and hashes: 1: VloR-W0tjoTDhh_i4Psx3QvkBrI.crl (hash: VGx4be2NegZ81DKD4YGcxpDUJE7ek5DqdFMIeutdPyQ=) 2: EE89292C896211EA9036675BC4F9AE02.roa (hash: lA5e2mSPqe8KgSZZwnBXpDPyEahqBBJS32O+7JF2tPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.crl rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VloR-W0tjoTDhh_i4Psx3QvkBrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2446 (0x98e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912481E, serialNumber=565A11F96D2D8E84C3861FE2E0FB31DD0BE406B2 Validity Not Before: Apr 24 19:59:24 2025 GMT Not After : May 1 19:59:24 2025 GMT Subject: CN=680a981c-0101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6b:d3:5b:84:62:30:3c:2e:07:76:18:c0:7b: 07:f3:ed:c7:94:f5:64:5c:68:f7:2a:86:54:b7:ef: 95:bd:d9:4f:47:4b:e9:04:32:2f:e8:91:bc:12:50: 81:d1:ce:ee:95:ab:d3:ce:aa:ad:10:82:10:d0:45: fe:c3:77:60:3e:b5:4e:15:e6:0c:af:70:1a:16:0f: 9a:01:61:4d:5f:fb:ef:89:bc:52:e2:c9:d0:31:87: 91:79:4e:9a:38:b3:3f:cf:9c:8a:95:d3:3a:c9:9e: 5f:44:a3:b4:2e:5f:01:7c:0a:44:c1:af:d8:98:c4: cb:99:96:4c:74:5a:b9:98:3d:34:55:46:b6:e3:7e: f0:75:93:a4:80:29:ee:09:d0:67:c7:3b:85:0f:93: 28:81:31:40:19:f9:67:32:af:d0:d4:29:23:69:8e: c2:5d:53:d5:90:95:22:01:ae:4b:d1:6f:dc:d0:10: 5d:13:47:d2:b4:c7:b9:e8:2c:0e:a2:d8:fb:4e:0e: bb:69:74:b5:e4:9a:ae:76:3a:d6:45:c9:7c:0e:7d: fc:41:c9:97:07:eb:3a:ae:6f:50:7c:6c:cc:3f:9a: a6:d7:08:00:71:cd:ed:d9:32:c9:8e:e8:ed:c0:c1: 94:ec:ce:05:a5:a0:c3:ed:f7:33:40:2f:a0:cf:ea: 99:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:60:5A:C1:46:70:3A:E8:20:09:35:13:5E:F2:09:54:C9:68:75:3C X509v3 Authority Key Identifier: keyid:56:5A:11:F9:6D:2D:8E:84:C3:86:1F:E2:E0:FB:31:DD:0B:E4:06:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VloR-W0tjoTDhh_i4Psx3QvkBrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912481E/A9223C26896111EA9E605657C4F9AE02/VloR-W0tjoTDhh_i4Psx3QvkBrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5e:c8:e1:76:d3:08:f2:46:c1:fd:17:53:c0:02:28:be:0e: f8:33:ae:64:8c:8b:d6:a6:d5:aa:bc:ba:18:f4:7d:bf:6a:a9: 5a:e0:18:f6:1a:19:f7:89:90:72:72:ca:7f:94:3c:48:ca:c0: ca:ad:3b:f0:3c:e0:cf:f9:80:69:7d:d6:62:39:d2:ab:f0:09: 20:58:cc:5e:81:38:5b:d5:d7:25:0b:2c:fa:ba:f2:ab:69:f6: c0:6d:eb:39:5a:9c:53:6f:af:27:56:a7:cb:44:e0:ab:15:f4: d3:83:22:00:c1:57:25:74:ed:bb:69:96:0c:08:10:e5:90:8b: 55:e2:ff:e2:52:57:5b:64:c8:bf:2f:41:ce:9d:3e:47:46:d5: e1:b8:9d:e8:23:a5:90:65:85:b4:9a:19:3e:07:a3:90:80:2f: b8:b9:27:02:7a:49:77:74:91:c8:ba:9a:9e:f5:26:fe:9e:e7: 39:b5:23:38:b1:71:a7:a7:3b:64:34:16:27:60:cf:21:15:1b: 9e:77:3a:f1:eb:57:29:5c:bf:19:6d:6c:e2:e1:f6:04:1e:14: 26:34:50:5b:49:69:82:03:de:24:5b:e5:c4:0b:d8:a4:45:e7: bc:e5:65:44:d6:6f:0d:56:79:ac:e9:b6:1a:eb:22:41:32:2f: 0b:b4:d1:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ4MUUxMTAvBgNVBAUTKDU2NUExMUY5NkQyRDhFODRDMzg2MUZFMkUwRkIzMURE MEJFNDA2QjIwHhcNMjUwNDI0MTk1OTI0WhcNMjUwNTAxMTk1OTI0WjAYMRYwFAYD VQQDEw02ODBhOTgxYy0wMTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmvTW4RiMDwuB3YYwHsH8+3HlPVkXGj3KoZUt++VvdlPR0vpBDIv6JG8ElCB 0c7ulavTzqqtEIIQ0EX+w3dgPrVOFeYMr3AaFg+aAWFNX/vvibxS4snQMYeReU6a OLM/z5yKldM6yZ5fRKO0Ll8BfApEwa/YmMTLmZZMdFq5mD00VUa2437wdZOkgCnu CdBnxzuFD5MogTFAGflnMq/Q1CkjaY7CXVPVkJUiAa5L0W/c0BBdE0fStMe56CwO otj7Tg67aXS15JqudjrWRcl8Dn38QcmXB+s6rm9QfGzMP5qm1wgAcc3t2TLJjujt wMGU7M4FpaDD7fczQC+gz+qZwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNgWsFG cDroIAk1E17yCVTJaHU8MB8GA1UdIwQYMBaAFFZaEfltLY6Ew4Yf4uD7Md0L5Aay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDgxRS9BOTIyM0MyNjg5 NjExMUVBOUU2MDU2NTdDNEY5QUUwMi9WbG9SLVcwdGpvVERoaF9pNFBzeDNRdmtC ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Zsb1ItVzB0am9URGhoX2k0UHN4M1F2a0JySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDgxRS9BOTIyM0MyNjg5NjExMUVBOUU2MDU2NTdDNEY5QUUwMi9WbG9SLVcwdGpv VERoaF9pNFBzeDNRdmtCckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPXsjhdtMI8kbB/RdTwAIovg74M65kjIvWptWqvLoY9H2/aqla4Bj2 Ghn3iZBycsp/lDxIysDKrTvwPODP+YBpfdZiOdKr8AkgWMxegThb1dclCyz6uvKr afbAbes5WpxTb68nVqfLROCrFfTTgyIAwVcldO27aZYMCBDlkItV4v/iUldbZMi/ L0HOnT5HRtXhuJ3oI6WQZYW0mhk+B6OQgC+4uScCekl3dJHIupqe9Sb+nuc5tSM4 sXGnpztkNBYnYM8hFRuedzrx61cpXL8ZbWzi4fYEHhQmNFBbSWmCA94kW+XEC9ik Ree85WVE1m8NVnms6bYa6yJBMi8LtNHT -----END CERTIFICATE-----Generated at Sat Apr 26 04:04:52 2025 by rpki-client