$ rpki-client -vvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft File: vadiHhrG4FsLoMLvFUF0yL5cE7k.mft (raw, json) Hash identifier: 5K1bMv+vEih+fMsx8g/OjGwdBut7/a6s3yVNJBjp40Y= Subject key identifier: 1A:C3:59:77:8C:29:A7:A6:D2:CB:AC:0F:ED:11:14:2F:F5:60:D5:C8 Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 Certificate issuer: /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft Manifest number: 01C8 Signing time: Fri 25 Apr 2025 02:08:08 +0000 Manifest this update: Fri 25 Apr 2025 02:08:08 +0000 Manifest next update: Fri 02 May 2025 02:08:08 +0000 Files and hashes: 1: vadiHhrG4FsLoMLvFUF0yL5cE7k.crl (hash: u3WAGawHPYVClE2jVT7hULk6kgy7xXWX/zdI9ShlFBw=) 2: 673F4DC6894911EEB032426EC4F9AE02.roa (hash: A4cWT1FQnbB1RV9fDjJNCe1bIriG2tb4PlUO0o2Lg90=) 3: A8A932CC894911EE8CA8D26EC4F9AE02.roa (hash: eI5qe3WuZ3ca7j939pJeQIuLSMWClo4MltkC7KKSMl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912885B, serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Validity Not Before: Apr 25 02:08:08 2025 GMT Not After : May 2 02:08:08 2025 GMT Subject: CN=680aee88-0d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:45:c8:78:69:be:e3:0c:a3:45:28:d8:91:61: 6e:98:c2:35:e5:39:cc:b9:c8:84:a0:38:08:b1:e4: 61:ba:b2:2b:f2:42:c2:10:27:5a:17:dd:f1:46:b5: cf:16:27:b3:9e:8e:3a:98:17:81:85:c3:85:f5:9b: 57:b4:3e:a7:83:e3:96:13:ba:e7:4b:17:63:16:d9: 2e:83:8e:4e:f6:ae:05:b5:c8:e1:2c:bb:9d:27:7f: 5b:ff:67:40:28:2f:90:9c:13:d5:35:00:e2:f0:e6: 3c:a9:99:42:77:26:09:3c:3d:8e:09:9c:50:fc:ce: 07:48:c6:c1:58:6e:02:54:31:0d:c2:b9:58:fb:32: a9:6b:4c:2c:d0:c7:a8:02:6e:ec:51:39:07:d5:da: c5:6c:7b:95:7c:d0:33:72:36:40:a8:9f:5a:0a:40: 4d:bc:91:75:94:5c:65:b3:ab:8a:7f:a8:ae:9d:8c: 1f:35:21:68:30:f9:6d:4b:bb:22:dd:1b:e3:2e:4d: fa:f2:b7:f2:28:11:46:5c:a3:76:03:68:cf:52:d7: ec:cf:a1:d5:f0:1a:43:f2:d2:34:85:c0:31:67:56: cf:a2:05:e7:ee:fc:40:26:15:f2:56:8f:bf:b6:88: d6:ce:8d:6c:47:f8:1e:e9:ea:17:01:ad:e1:aa:21: a4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C3:59:77:8C:29:A7:A6:D2:CB:AC:0F:ED:11:14:2F:F5:60:D5:C8 X509v3 Authority Key Identifier: keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:4e:04:65:8c:81:4b:44:f4:53:7b:27:e8:8f:fe:b3:51:c3: 56:fe:1b:e3:ea:05:73:7f:eb:4a:95:2e:42:65:df:05:d7:8c: fe:ef:f9:4e:1c:13:30:51:d9:53:d3:77:ae:ca:3d:61:a5:0e: 54:00:f6:af:b3:5e:81:6b:18:c2:91:1b:17:db:33:3f:0e:3e: 70:c2:d4:18:ec:e9:08:a7:9f:80:d1:ce:04:c5:4d:36:ce:61: 11:45:4c:70:d8:3d:1f:28:c6:74:81:8a:89:89:2e:6d:cb:1c: 7b:c6:c1:66:06:cd:26:c1:ee:94:45:7f:ec:bf:5d:fd:cd:40: 43:4a:0b:d4:e6:b2:43:d7:bf:b3:b4:ea:ea:36:30:97:cc:f4: 81:16:79:34:61:03:90:86:0c:19:26:e0:a8:a5:a8:55:33:8c: 4a:06:db:b8:e7:a3:14:58:c0:87:b5:61:8f:94:17:6d:ee:65: 3f:da:20:6b:37:e2:e8:c4:0d:10:cd:6f:fc:40:d3:08:8b:60: 0c:bb:88:ab:bd:64:12:24:54:ab:52:52:61:1d:8b:83:83:95: 59:94:ad:46:6d:bb:d5:af:27:73:97:a6:8e:5e:6d:2c:40:6e: cd:1a:0b:64:31:af:19:3e:dd:d0:76:77:04:f4:b7:c6:37:5f: 7a:31:22:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4NUIxMTAvBgNVBAUTKEJEQTc2MjFFMUFDNkUwNUIwQkEwQzJFRjE1NDE3NEM4 QkU1QzEzQjkwHhcNMjUwNDI1MDIwODA4WhcNMjUwNTAyMDIwODA4WjAYMRYwFAYD VQQDEw02ODBhZWU4OC0wZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4EXIeGm+4wyjRSjYkWFumMI15TnMuciEoDgIseRhurIr8kLCECdaF93xRrXP Fiezno46mBeBhcOF9ZtXtD6ng+OWE7rnSxdjFtkug45O9q4FtcjhLLudJ39b/2dA KC+QnBPVNQDi8OY8qZlCdyYJPD2OCZxQ/M4HSMbBWG4CVDENwrlY+zKpa0ws0Meo Am7sUTkH1drFbHuVfNAzcjZAqJ9aCkBNvJF1lFxls6uKf6iunYwfNSFoMPltS7si 3RvjLk368rfyKBFGXKN2A2jPUtfsz6HV8BpD8tI0hcAxZ1bPogXn7vxAJhXyVo+/ tojWzo1sR/ge6eoXAa3hqiGkswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBrDWXeM Kaem0susD+0RFC/1YNXIMB8GA1UdIwQYMBaAFL2nYh4axuBbC6DC7xVBdMi+XBO5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODg1Qi9BOTlDMTg5MDZD NzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRGc0xvTUx2RlVGMHlMNWNF N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZhZGlIaHJHNEZzTG9NTHZGVUYweUw1Y0U3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODg1Qi9BOTlDMTg5MDZDNzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRG c0xvTUx2RlVGMHlMNWNFN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnTgRljIFLRPRTeyfoj/6zUcNW/hvj6gVzf+tKlS5CZd8F14z+7/lO HBMwUdlT03euyj1hpQ5UAPavs16BaxjCkRsX2zM/Dj5wwtQY7OkIp5+A0c4ExU02 zmERRUxw2D0fKMZ0gYqJiS5tyxx7xsFmBs0mwe6URX/sv139zUBDSgvU5rJD17+z tOrqNjCXzPSBFnk0YQOQhgwZJuCopahVM4xKBtu456MUWMCHtWGPlBdt7mU/2iBr N+LoxA0QzW/8QNMIi2AMu4irvWQSJFSrUlJhHYuDg5VZlK1GbbvVrydzl6aOXm0s QG7NGgtkMa8ZPt3QdncE9LfGN196MSK9 -----END CERTIFICATE-----Generated at Sat Apr 26 12:20:58 2025 by rpki-client