$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft File: VJnONj3wXJSTIjSIKXmbEO_x05I.mft (raw, json) Hash identifier: MrgzwFXBFkkpzYA5jDovJ7J7vqt+pZ0+AStFMrwkKLo= Subject key identifier: BB:A0:A3:C2:07:65:65:E5:E2:DD:36:BE:1E:24:65:17:99:3D:76:AE Authority key identifier: 54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92 Certificate issuer: /CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392 Certificate serial: 02A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft Manifest number: 029D Signing time: Fri 25 Apr 2025 01:17:52 +0000 Manifest this update: Fri 25 Apr 2025 01:17:52 +0000 Manifest next update: Fri 02 May 2025 01:17:52 +0000 Files and hashes: 1: VJnONj3wXJSTIjSIKXmbEO_x05I.crl (hash: i+tDX4PX46t8kBLy8rOXdhlVZRhcCR7Un7lWGZXuOnI=) 2: 6FE49AFE8F6E11EF8CE37D0FC4F9AE02.roa (hash: cQYcptVUdqg4RQhUU70P0qYWcn62DA0vSq8TBncoINY=) 3: B4B5BF16907F11EF824E2340C4F9AE02.roa (hash: 3cjuGP2NkUpzwp+CuoNdIlymZnKHR1pKawYbEQT3I3U=) 4: B588D018907F11EF824E2340C4F9AE02.roa (hash: /kcY+NtEqZhcbJZ1YFUIs/mD1vWwcYLdov89hkEo5QI=) 5: 7142EF7E30F511ED91FE0B2CC4F9AE02.roa (hash: fh/nPQv/nYQcKywo8IbkfJ3ertJ4PhkZqi8lqFawXaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 680 (0x2a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DB83, serialNumber=5499CE363DF05C949322348829799B10EFF1D392 Validity Not Before: Apr 25 01:17:52 2025 GMT Not After : May 2 01:17:52 2025 GMT Subject: CN=680ae2c0-1380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:90:83:ec:47:ee:3c:0f:61:72:ce:0e:5b:22: 34:13:b5:d7:3a:22:9a:cb:ec:6a:d5:cc:fe:6b:0a: 02:4c:f9:63:9d:f6:19:38:92:0a:0f:fe:be:1c:5a: 85:e4:ca:1d:53:c0:c7:51:01:a9:ad:47:f7:b4:70: 6a:78:d8:70:b5:7a:1c:8f:f8:7a:b9:2c:19:2f:26: b3:9e:46:06:9a:18:ab:33:8f:64:ed:75:40:2e:f7: 5e:b2:b0:1c:4a:16:c3:fd:e5:27:d5:4e:65:dd:87: c5:fb:fe:0a:af:83:cd:35:da:3b:25:76:3c:d6:77: 3a:85:e8:c6:9e:b9:48:eb:e7:7b:f7:16:37:f2:33: 91:8c:e6:0e:1d:f7:4d:a9:c7:65:7d:68:45:13:04: 46:82:9d:9f:eb:8e:55:c6:a4:d6:54:0d:2e:db:4f: a5:2e:58:06:b3:d4:08:5b:39:cc:d2:15:f0:fd:aa: 9a:3a:a0:b4:47:24:0b:fd:c8:16:8f:80:ae:72:da: cd:a6:73:75:b8:f3:aa:83:74:3b:48:51:4c:16:51: ee:2d:ad:ef:53:0d:7e:6e:4d:cc:db:25:dc:42:2b: 75:15:e0:b4:c9:e9:30:8c:8d:bf:18:14:b9:c3:ce: 01:07:ca:1c:41:8d:f9:7a:96:21:9c:43:b2:fa:0e: 73:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A0:A3:C2:07:65:65:E5:E2:DD:36:BE:1E:24:65:17:99:3D:76:AE X509v3 Authority Key Identifier: keyid:54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:ed:ce:17:6f:2c:df:6b:9e:13:a9:7f:62:0c:d7:18:20:c3: f7:00:76:e4:b4:fe:a7:1d:e6:f5:36:ac:a1:ee:43:e4:ec:1a: 48:d4:cd:6f:43:4a:4b:a3:96:31:6e:98:06:fc:5d:9c:98:a2: f7:2c:2d:1f:06:eb:81:46:3d:4a:65:55:dc:95:ec:00:9a:2b: b4:01:6e:83:01:56:2b:ae:dc:f8:12:7d:2e:8d:d6:9c:d2:00: b7:5b:7f:10:3b:e1:3d:cd:36:5f:8e:25:d8:4c:1b:c1:4c:3b: 52:2b:86:37:bd:a8:66:22:de:5d:72:68:76:5f:6a:e0:28:48: 2f:2b:a3:61:d5:73:5a:c6:64:28:8a:5e:21:38:58:12:d8:b2: 40:26:a5:c8:89:37:18:ab:b8:87:82:73:47:31:68:36:59:eb: fa:6e:43:06:48:f9:38:69:f8:c7:a7:20:bd:f4:ec:aa:36:d6: 83:fb:9c:44:19:92:46:9d:d9:cb:49:48:cc:07:a0:e0:ed:53: 32:20:f9:f0:a2:57:2b:06:c2:4d:7a:d1:47:c4:1d:40:c8:09: da:ba:02:cc:b2:05:11:ac:ba:c1:ca:0e:e3:85:e0:90:53:c6: f5:c8:90:ff:71:f2:18:75:1f:c5:e1:ef:c3:0d:bf:6e:b4:7a: bc:45:48:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRCODMxMTAvBgNVBAUTKDU0OTlDRTM2M0RGMDVDOTQ5MzIyMzQ4ODI5Nzk5QjEw RUZGMUQzOTIwHhcNMjUwNDI1MDExNzUyWhcNMjUwNTAyMDExNzUyWjAYMRYwFAYD VQQDEw02ODBhZTJjMC0xMzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJCD7EfuPA9hcs4OWyI0E7XXOiKay+xq1cz+awoCTPljnfYZOJIKD/6+HFqF 5ModU8DHUQGprUf3tHBqeNhwtXocj/h6uSwZLyaznkYGmhirM49k7XVALvdesrAc ShbD/eUn1U5l3YfF+/4Kr4PNNdo7JXY81nc6hejGnrlI6+d79xY38jORjOYOHfdN qcdlfWhFEwRGgp2f645VxqTWVA0u20+lLlgGs9QIWznM0hXw/aqaOqC0RyQL/cgW j4CuctrNpnN1uPOqg3Q7SFFMFlHuLa3vUw1+bk3M2yXcQit1FeC0yekwjI2/GBS5 w84BB8ocQY35epYhnEOy+g5zVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLugo8IH ZWXl4t02vh4kZReZPXauMB8GA1UdIwQYMBaAFFSZzjY98FyUkyI0iCl5mxDv8dOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI4My8xRUZFMjkyQ0ZC NUQxMUVDQkI2MTBDODVDNEY5QUUwMi9WSm5PTmozd1hKU1RJalNJS1htYkVPX3gw NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZKbk9OajN3WEpTVElqU0lLWG1iRU9feDA1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REI4My8xRUZFMjkyQ0ZCNUQxMUVDQkI2MTBDODVDNEY5QUUwMi9WSm5PTmozd1hK U1RJalNJS1htYkVPX3gwNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDO7c4Xbyzfa54TqX9iDNcYIMP3AHbktP6nHeb1Nqyh7kPk7BpI1M1v Q0pLo5YxbpgG/F2cmKL3LC0fBuuBRj1KZVXclewAmiu0AW6DAVYrrtz4En0ujdac 0gC3W38QO+E9zTZfjiXYTBvBTDtSK4Y3vahmIt5dcmh2X2rgKEgvK6Nh1XNaxmQo il4hOFgS2LJAJqXIiTcYq7iHgnNHMWg2Wev6bkMGSPk4afjHpyC99OyqNtaD+5xE GZJGndnLSUjMB6Dg7VMyIPnwolcrBsJNetFHxB1AyAnaugLMsgURrLrByg7jheCQ U8b1yJD/cfIYdR/F4e/DDb9utHq8RUjr -----END CERTIFICATE-----Generated at Sat Apr 26 12:25:42 2025 by rpki-client