$ rpki-client -vvf rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft File: VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft (raw, json) Hash identifier: uvcMfF5xIeoxSCB2uSMkztcmRyzupe1AFJqWxzL5jr4= Subject key identifier: 49:93:C0:6D:F1:0B:BF:67:C2:36:71:CA:23:8D:5D:0C:BC:B9:A8:66 Authority key identifier: 56:D5:24:19:D5:6A:AC:DF:7D:00:5B:A1:5D:9D:DB:8F:14:2E:3A:D0 Certificate issuer: /CN=A912F592/serialNumber=56D52419D56AACDF7D005BA15D9DDB8F142E3AD0 Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft Manifest number: 01DC Signing time: Fri 25 Apr 2025 01:55:04 +0000 Manifest this update: Fri 25 Apr 2025 01:55:03 +0000 Manifest next update: Fri 02 May 2025 01:55:03 +0000 Files and hashes: 1: VtUkGdVqrN99AFuhXZ3bjxQuOtA.crl (hash: 5oIASNfv6VLY0DuP9yrRnS1QSiXuvLu04BV5wXhk/DU=) 2: 20BFA0B64A4911EDACB7AB0CC4F9AE02.roa (hash: fM0f1U3uv8elOOSoakvi5zas2tW7Yg5J98LgfW+bqBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.crl rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F592, serialNumber=56D52419D56AACDF7D005BA15D9DDB8F142E3AD0 Validity Not Before: Apr 25 01:55:03 2025 GMT Not After : May 2 01:55:03 2025 GMT Subject: CN=680aeb78-d0a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c6:c1:58:c1:45:a1:1c:8e:56:1c:d4:96:87: 9b:ad:59:e1:d2:7a:04:79:f3:d0:52:c7:6f:d9:a4: 0c:aa:3d:fd:e0:65:3b:93:a3:9d:46:dc:8c:54:bd: c2:4b:26:f0:a3:79:fe:86:eb:8d:e8:ed:c4:6c:84: bc:47:f6:e0:14:4e:7d:32:e1:63:01:3a:fe:4e:ca: c4:49:39:b8:57:11:04:e8:d5:c3:56:92:d2:33:17: ee:1b:4b:84:b2:e9:c1:97:54:f7:36:50:c9:9a:e8: e8:8d:4e:9d:ea:3f:13:06:27:c6:d7:e1:b1:5a:b3: 01:f0:ca:1f:55:d6:d3:f5:a1:f4:75:70:fc:ab:07: ad:ae:ad:5e:93:66:37:4e:d0:14:49:dc:32:a2:82: a4:c0:74:06:44:82:a7:76:0d:09:37:ea:9b:e7:34: 02:d0:0f:f1:bf:5a:3e:23:d9:2f:e6:97:59:2c:58: 5c:f4:30:75:a2:99:51:7f:72:fa:c1:55:ea:5f:d7: 4c:b2:75:0e:d3:88:64:15:04:45:7d:63:da:47:ea: 99:fd:b2:86:0e:73:94:7d:2b:e9:df:cb:69:49:e7: 50:70:2c:06:1f:45:03:72:74:18:c0:e3:0a:48:c9: be:08:4c:99:cc:a3:a8:c5:4b:1a:0e:77:d1:4f:65: b6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:93:C0:6D:F1:0B:BF:67:C2:36:71:CA:23:8D:5D:0C:BC:B9:A8:66 X509v3 Authority Key Identifier: keyid:56:D5:24:19:D5:6A:AC:DF:7D:00:5B:A1:5D:9D:DB:8F:14:2E:3A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:e0:10:ec:af:cb:d3:ac:53:9d:73:6e:84:0d:b2:dd:c8:6e: f0:cc:30:6f:7c:f7:b5:40:ec:95:d8:f8:1d:6f:a5:33:57:45: 4c:46:ea:c3:9d:46:d7:4b:87:5b:9c:94:78:f9:e3:b0:bd:c7: 94:5a:09:51:49:e9:cf:27:05:be:3a:a1:64:7f:53:7a:ad:98: ae:df:e0:49:d9:19:cc:3b:8a:dd:0c:94:d3:3b:40:9a:d3:ce: 58:4d:a2:de:26:87:a7:af:fe:75:ac:96:5d:3a:f8:47:3e:96: c8:ef:ac:e6:b1:3f:0d:5e:38:3e:10:dc:75:14:c7:96:35:02: 00:d8:70:c9:22:5a:05:fc:3e:6e:77:89:d5:13:89:10:91:37: ae:cc:47:4c:9a:e5:4a:b5:e9:42:8b:36:0e:8b:96:8d:80:7f: 25:c5:f6:c4:76:45:78:d3:11:23:a1:20:03:11:8f:51:52:8c: 8f:a5:43:63:4f:4e:6a:2d:4f:a5:52:2e:21:a2:71:87:92:2d: 37:fa:1e:cc:01:ff:6a:aa:ff:ca:89:1d:6c:43:95:61:e7:d1: 4b:b2:a0:7f:6d:64:b4:d0:4c:19:25:a3:30:64:99:1e:02:6e: 28:ff:c2:dc:71:bf:c6:11:5d:63:36:b0:9d:ac:8a:be:7a:aa: 3b:2b:08:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1OTIxMTAvBgNVBAUTKDU2RDUyNDE5RDU2QUFDREY3RDAwNUJBMTVEOUREQjhG MTQyRTNBRDAwHhcNMjUwNDI1MDE1NTAzWhcNMjUwNTAyMDE1NTAzWjAYMRYwFAYD VQQDEw02ODBhZWI3OC1kMGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cbBWMFFoRyOVhzUloebrVnh0noEefPQUsdv2aQMqj394GU7k6OdRtyMVL3C Sybwo3n+huuN6O3EbIS8R/bgFE59MuFjATr+TsrESTm4VxEE6NXDVpLSMxfuG0uE sunBl1T3NlDJmujojU6d6j8TBifG1+GxWrMB8MofVdbT9aH0dXD8qwetrq1ek2Y3 TtAUSdwyooKkwHQGRIKndg0JN+qb5zQC0A/xv1o+I9kv5pdZLFhc9DB1oplRf3L6 wVXqX9dMsnUO04hkFQRFfWPaR+qZ/bKGDnOUfSvp38tpSedQcCwGH0UDcnQYwOMK SMm+CEyZzKOoxUsaDnfRT2W2OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmTwG3x C79nwjZxyiONXQy8uahmMB8GA1UdIwQYMBaAFFbVJBnVaqzffQBboV2d248ULjrQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjU5Mi9GQTU5MTJERTRB NDUxMUVEOTUzQjQxODZDNEY5QUUwMi9WdFVrR2RWcXJOOTlBRnVoWFozYmp4UXVP dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z0VWtHZFZxck45OUFGdWhYWjNianhRdU90QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjU5Mi9GQTU5MTJERTRBNDUxMUVEOTUzQjQxODZDNEY5QUUwMi9WdFVrR2RWcXJO OTlBRnVoWFozYmp4UXVPdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD4BDsr8vTrFOdc26EDbLdyG7wzDBvfPe1QOyV2Pgdb6UzV0VMRurD nUbXS4dbnJR4+eOwvceUWglRSenPJwW+OqFkf1N6rZiu3+BJ2RnMO4rdDJTTO0Ca 085YTaLeJoenr/51rJZdOvhHPpbI76zmsT8NXjg+ENx1FMeWNQIA2HDJIloF/D5u d4nVE4kQkTeuzEdMmuVKtelCizYOi5aNgH8lxfbEdkV40xEjoSADEY9RUoyPpUNj T05qLU+lUi4honGHki03+h7MAf9qqv/KiR1sQ5Vh59FLsqB/bWS00EwZJaMwZJke Am4o/8Lccb/GEV1jNrCdrIq+eqo7Kwiw -----END CERTIFICATE-----Generated at Sat Apr 26 15:25:20 2025 by rpki-client