$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft File: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft (raw, json) Hash identifier: 5f2rB+n7h4s8qii83ccT/Ju92Z526CtuDyz+EzTNvFA= Subject key identifier: 37:9E:CE:F3:6D:62:9F:69:86:B8:A1:D1:85:C4:C1:B8:F2:67:B6:41 Authority key identifier: 56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29 Certificate issuer: /CN=A9136BD7/serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829 Certificate serial: 05EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft Manifest number: 05E5 Signing time: Thu 24 Apr 2025 22:44:43 +0000 Manifest this update: Thu 24 Apr 2025 22:44:42 +0000 Manifest next update: Thu 01 May 2025 22:44:42 +0000 Files and hashes: 1: VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl (hash: IJXbb2Q/Pl69vfwuvKppb7Y1lrVA8fwda1uLN2nWD0M=) 2: E22BD636AC5011EBA37CCA28C4F9AE02.roa (hash: fdFSt8Mu6WuYnLA2fbE3V7b+qZmpKdHiBdsuXljNq4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1514 (0x5ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BD7, serialNumber=56A03167FAE12B1BA14BB8474D442B6770BB9829 Validity Not Before: Apr 24 22:44:42 2025 GMT Not After : May 1 22:44:42 2025 GMT Subject: CN=680abeda-bdd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3f:3f:aa:93:c5:20:9b:ac:da:c8:37:dc:a1: a9:2c:47:26:ba:ae:f4:53:b9:c4:62:6c:6a:2e:4a: d4:73:1c:1a:b7:03:6b:bc:04:25:d5:b4:3d:31:bb: 07:eb:a6:d9:32:fe:2f:3b:ec:62:e0:db:a5:9e:a6: 8a:7d:bd:5c:7b:6b:40:66:17:65:87:7b:87:e5:ed: 81:8d:6f:d4:1f:f3:9a:56:ca:49:bc:e9:2c:35:e0: d6:43:36:5b:9c:88:ed:84:a9:bb:97:73:86:6d:05: 7f:e7:59:98:bf:47:29:e7:54:94:44:7c:0f:ef:a6: 5c:1e:98:8b:c2:4f:6b:72:62:30:ed:35:e0:a0:2a: ef:11:45:01:3a:41:39:95:0e:31:c1:1a:64:9f:5c: e7:b1:a5:c3:d9:f3:8a:73:13:9f:2a:75:90:18:6b: 69:a9:08:d3:f0:6b:bd:0c:31:1a:ad:7a:d7:53:7a: a7:2a:77:86:60:97:de:d1:71:8f:ee:51:70:64:07: 3f:1b:e4:78:b0:47:79:f9:72:92:be:aa:78:53:de: 2b:9b:4f:0b:b5:4b:4a:6c:8f:84:d6:e3:d4:40:06: 84:71:ea:f7:67:ed:24:5a:98:21:ed:c1:b7:f1:1a: ad:ee:94:06:6a:3e:6d:ef:c7:ad:3a:fd:69:ea:9b: 04:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9E:CE:F3:6D:62:9F:69:86:B8:A1:D1:85:C4:C1:B8:F2:67:B6:41 X509v3 Authority Key Identifier: keyid:56:A0:31:67:FA:E1:2B:1B:A1:4B:B8:47:4D:44:2B:67:70:BB:98:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BD7/A651B474AC4F11EB83D18E28C4F9AE02/VqAxZ_rhKxuhS7hHTUQrZ3C7mCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:74:6a:7b:75:84:42:93:89:09:e2:35:21:db:05:52:d6:ff: 8c:ac:af:c6:88:db:0d:1f:5e:67:7b:41:81:ac:8a:49:92:b8: bf:d3:75:ef:35:c7:bf:e1:10:74:11:07:08:8f:88:43:ff:cc: 14:cb:c8:87:4b:63:be:f9:ff:ec:5b:0d:d7:eb:1b:fb:29:9f: 98:9f:32:9d:68:e9:63:69:bb:84:30:dd:be:cd:e6:f4:2e:44: da:6b:b2:05:99:3b:ad:fc:30:48:71:01:37:b6:e1:90:f8:30: df:14:06:28:cc:48:69:3c:da:fc:62:12:49:a6:b4:12:4b:c5: e5:7f:f5:56:68:b3:26:15:9a:18:e6:5d:08:0a:eb:9b:28:09: 4b:a8:35:2a:2c:14:b9:10:b5:ed:bd:4c:9f:08:a8:8e:83:b2: 4d:06:76:85:07:29:db:f5:27:c5:e0:a6:6a:eb:44:e8:7a:f8: 79:fd:eb:de:10:ae:c6:e4:91:c2:21:78:1f:90:36:4b:77:c0: 2b:22:e2:d2:59:10:25:95:6b:46:98:d2:85:8b:33:c7:a3:7e: 68:eb:b3:4d:40:a9:09:99:b6:45:6c:4d:4b:8a:a5:ec:03:fa: 2e:ba:fe:00:f0:db:c5:9c:8b:27:0a:6e:17:a2:07:6e:36:28: 9d:b8:d9:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRDcxMTAvBgNVBAUTKDU2QTAzMTY3RkFFMTJCMUJBMTRCQjg0NzRENDQyQjY3 NzBCQjk4MjkwHhcNMjUwNDI0MjI0NDQyWhcNMjUwNTAxMjI0NDQyWjAYMRYwFAYD VQQDEw02ODBhYmVkYS1iZGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4z8/qpPFIJus2sg33KGpLEcmuq70U7nEYmxqLkrUcxwatwNrvAQl1bQ9MbsH 66bZMv4vO+xi4NulnqaKfb1ce2tAZhdlh3uH5e2BjW/UH/OaVspJvOksNeDWQzZb nIjthKm7l3OGbQV/51mYv0cp51SURHwP76ZcHpiLwk9rcmIw7TXgoCrvEUUBOkE5 lQ4xwRpkn1znsaXD2fOKcxOfKnWQGGtpqQjT8Gu9DDEarXrXU3qnKneGYJfe0XGP 7lFwZAc/G+R4sEd5+XKSvqp4U94rm08LtUtKbI+E1uPUQAaEcer3Z+0kWpgh7cG3 8Rqt7pQGaj5t78etOv1p6psEKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeezvNt Yp9phrih0YXEwbjyZ7ZBMB8GA1UdIwQYMBaAFFagMWf64SsboUu4R01EK2dwu5gp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJENy9BNjUxQjQ3NEFD NEYxMUVCODNEMThFMjhDNEY5QUUwMi9WcUF4Wl9yaEt4dWhTN2hIVFVRclozQzdt Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZxQXhaX3JoS3h1aFM3aEhUVVFyWjNDN21Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkJENy9BNjUxQjQ3NEFDNEYxMUVCODNEMThFMjhDNEY5QUUwMi9WcUF4Wl9yaEt4 dWhTN2hIVFVRclozQzdtQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBndGp7dYRCk4kJ4jUh2wVS1v+MrK/GiNsNH15ne0GBrIpJkri/03Xv Nce/4RB0EQcIj4hD/8wUy8iHS2O++f/sWw3X6xv7KZ+YnzKdaOljabuEMN2+zeb0 LkTaa7IFmTut/DBIcQE3tuGQ+DDfFAYozEhpPNr8YhJJprQSS8Xlf/VWaLMmFZoY 5l0ICuubKAlLqDUqLBS5ELXtvUyfCKiOg7JNBnaFBynb9SfF4KZq60Toevh5/eve EK7G5JHCIXgfkDZLd8ArIuLSWRAllWtGmNKFizPHo35o67NNQKkJmbZFbE1LiqXs A/ouuv4A8NvFnIsnCm4XogduNiiduNk8 -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:54 2025 by rpki-client