$ rpki-client -vvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft File: vadiHhrG4FsLoMLvFUF0yL5cE7k.mft (raw, json) Hash identifier: W90gfwsqAQNYFkfcwFI8Cx0X+1VK+DH8PAmurQRfWqs= Subject key identifier: EA:92:E4:AD:9F:DD:3F:C4:4A:BA:DD:D2:87:70:19:A6:AB:BB:C2:F8 Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 Certificate issuer: /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft Manifest number: 01E1 Signing time: Sun 15 Jun 2025 01:58:42 +0000 Manifest this update: Sun 15 Jun 2025 01:58:42 +0000 Manifest next update: Sun 22 Jun 2025 01:58:42 +0000 Files and hashes: 1: vadiHhrG4FsLoMLvFUF0yL5cE7k.crl (hash: pOrnVa73+DxbXfo0hFdYN4xbnQNXNmA3Gx3eWt9Ln70=) 2: 673F4DC6894911EEB032426EC4F9AE02.roa (hash: A4cWT1FQnbB1RV9fDjJNCe1bIriG2tb4PlUO0o2Lg90=) 3: A8A932CC894911EE8CA8D26EC4F9AE02.roa (hash: eI5qe3WuZ3ca7j939pJeQIuLSMWClo4MltkC7KKSMl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912885B, serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Validity Not Before: Jun 15 01:58:42 2025 GMT Not After : Jun 22 01:58:42 2025 GMT Subject: CN=684e28d2-126a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f3:ae:bb:0e:e2:80:7c:59:08:15:f9:9f:d4: 2b:13:2e:53:e7:81:71:43:6d:2f:df:cd:e2:eb:74: 67:4d:3c:3a:68:04:49:6d:7d:b8:97:01:79:ef:6e: a8:fe:0c:ed:44:fd:d4:d2:f5:18:82:5d:87:5d:39: 10:00:b8:75:97:e0:58:c6:00:6a:5e:f9:82:83:6a: 20:f6:a7:da:14:70:d2:6c:2a:b3:fe:44:49:38:a8: 88:1a:d8:45:33:47:a3:1e:35:d7:51:9d:7b:01:e8: dc:7c:09:83:ff:a3:3a:fd:48:6e:21:74:92:1d:35: ad:55:16:4b:d1:04:6a:b6:63:7e:c6:34:10:d4:18: 44:61:4f:5a:e3:d8:4f:8e:8e:29:c4:06:4e:e5:ea: 70:a5:b0:62:4d:dc:77:de:b1:93:60:7c:fc:6e:e3: e4:7f:44:d0:a6:84:e6:59:93:5f:e2:e5:3e:61:8a: 70:72:b6:38:cf:46:b9:23:c8:39:bc:d4:ad:7e:c3: 28:6e:01:93:90:cc:09:a7:32:da:c0:28:ce:c3:a4: bb:97:0e:2a:bf:a8:59:f0:63:90:0b:3a:90:0a:f8: 7a:ef:83:69:ad:c0:f9:83:e3:15:61:18:39:d2:f5: f7:ef:16:74:03:39:11:d4:ff:53:38:41:50:b2:d6: 14:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:92:E4:AD:9F:DD:3F:C4:4A:BA:DD:D2:87:70:19:A6:AB:BB:C2:F8 X509v3 Authority Key Identifier: keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:41:0d:20:d1:17:1a:d9:d5:01:d8:5f:da:99:9f:db:c2:11: 46:b3:72:80:5d:90:48:7c:e3:d6:44:2c:03:e5:80:b4:a1:7d: 65:45:1b:49:c0:42:a8:f2:08:11:fb:ff:10:f9:da:6e:ef:bc: de:02:d9:0f:aa:15:11:4a:92:0c:67:04:fe:55:d1:ca:e0:dc: 8b:bc:21:ef:0a:25:f5:fc:cd:60:e3:ca:e0:6d:af:c7:1d:19: 8d:40:98:48:1b:e3:f2:a0:34:b7:ae:6d:59:17:6d:68:c5:83: c1:b0:37:52:0f:5d:9f:94:e8:f5:d0:47:2e:a8:a3:d3:3f:94: 1e:e0:d2:42:b3:d7:c3:a6:ad:a1:f9:21:f6:7f:1c:b5:e2:71: 65:70:4f:8c:46:4b:2c:85:82:d1:d9:cf:fa:d6:1e:e9:d9:f3: 20:97:71:b4:44:b5:80:84:9f:1b:4a:9d:56:88:8c:51:93:ac: f0:17:90:a7:0d:01:fb:23:0f:68:ed:01:2c:4c:09:4a:33:cf: 92:dd:88:1e:6d:e0:5c:74:c0:42:63:bc:cf:13:20:1d:80:9b: bf:83:b4:e4:8c:3e:80:5d:bc:bd:38:e8:79:33:73:d5:c8:2d: 15:aa:d9:8d:8e:3a:da:84:ff:f8:6f:10:61:86:c1:06:8b:ce: 7c:fd:93:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4NUIxMTAvBgNVBAUTKEJEQTc2MjFFMUFDNkUwNUIwQkEwQzJFRjE1NDE3NEM4 QkU1QzEzQjkwHhcNMjUwNjE1MDE1ODQyWhcNMjUwNjIyMDE1ODQyWjAYMRYwFAYD VQQDEw02ODRlMjhkMi0xMjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPOuuw7igHxZCBX5n9QrEy5T54FxQ20v383i63RnTTw6aARJbX24lwF5726o /gztRP3U0vUYgl2HXTkQALh1l+BYxgBqXvmCg2og9qfaFHDSbCqz/kRJOKiIGthF M0ejHjXXUZ17AejcfAmD/6M6/UhuIXSSHTWtVRZL0QRqtmN+xjQQ1BhEYU9a49hP jo4pxAZO5epwpbBiTdx33rGTYHz8buPkf0TQpoTmWZNf4uU+YYpwcrY4z0a5I8g5 vNStfsMobgGTkMwJpzLawCjOw6S7lw4qv6hZ8GOQCzqQCvh674NprcD5g+MVYRg5 0vX37xZ0AzkR1P9TOEFQstYUxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqS5K2f 3T/ESrrd0odwGaaru8L4MB8GA1UdIwQYMBaAFL2nYh4axuBbC6DC7xVBdMi+XBO5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODg1Qi9BOTlDMTg5MDZD NzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRGc0xvTUx2RlVGMHlMNWNF N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZhZGlIaHJHNEZzTG9NTHZGVUYweUw1Y0U3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODg1Qi9BOTlDMTg5MDZDNzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRG c0xvTUx2RlVGMHlMNWNFN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsQQ0g0Rca2dUB2F/amZ/bwhFGs3KAXZBIfOPWRCwD5YC0oX1lRRtJ wEKo8ggR+/8Q+dpu77zeAtkPqhURSpIMZwT+VdHK4NyLvCHvCiX1/M1g48rgba/H HRmNQJhIG+PyoDS3rm1ZF21oxYPBsDdSD12flOj10EcuqKPTP5Qe4NJCs9fDpq2h +SH2fxy14nFlcE+MRksshYLR2c/61h7p2fMgl3G0RLWAhJ8bSp1WiIxRk6zwF5Cn DQH7Iw9o7QEsTAlKM8+S3YgebeBcdMBCY7zPEyAdgJu/g7TkjD6AXby9OOh5M3PV yC0VqtmNjjrahP/4bxBhhsEGi858/ZNV -----END CERTIFICATE-----Generated at Sun Jun 15 22:00:22 2025 by rpki-client