$ rpki-client -vvf rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft File: 0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft (raw, json) Hash identifier: b4SrJP2FmczcLPzd/BjrbwXtaoD9fX3o/3+6ecwMgC8= Subject key identifier: F9:FF:33:13:85:03:2A:95:D1:79:76:B6:5E:82:C7:ED:5D:8D:15:73 Authority key identifier: D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16 Certificate issuer: /CN=A9143684/serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft Manifest number: 0158 Signing time: Thu 24 Apr 2025 15:12:16 +0000 Manifest this update: Thu 24 Apr 2025 15:12:16 +0000 Manifest next update: Thu 01 May 2025 15:12:16 +0000 Files and hashes: 1: 0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl (hash: 9aJpy9aHo6LUzQ3eAT9puSrlci1P9I6CjiWSeX1FqJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143684, serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16 Validity Not Before: Apr 24 15:12:16 2025 GMT Not After : May 1 15:12:16 2025 GMT Subject: CN=680a54d0-2336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b7:e1:af:28:f6:ba:8c:5d:5c:bc:67:dd:ad: aa:f4:a2:cd:54:35:65:40:45:0e:6a:99:db:23:73: 4b:c7:8a:a8:b3:b0:9c:38:92:ee:bd:2b:c7:b5:6e: 20:72:98:64:a9:17:f4:38:e0:ae:f6:d5:3b:20:dc: 74:67:38:e3:12:71:91:f4:dd:e1:7e:a7:74:dc:02: 99:f8:9a:44:48:fe:52:28:05:78:04:39:03:4f:63: 1b:23:c6:8c:44:1e:a3:b9:9e:23:ee:f5:3b:c0:51: be:92:f8:3e:84:af:4a:48:ac:11:fc:bc:0a:eb:a3: 03:36:71:b0:c2:64:c0:da:78:86:8e:a6:e0:3f:85: 91:23:74:ec:78:fc:3d:f7:f1:f1:6a:ea:73:ba:5a: a1:61:0e:ca:4a:8a:53:ee:87:44:3d:dd:63:7e:5e: 22:38:3f:ec:b9:14:78:44:43:c9:87:fa:ab:e7:da: c0:fb:5f:98:95:3a:e7:5f:ed:18:4d:71:a5:5e:93: 38:6e:40:94:6f:b8:24:50:72:b1:31:55:df:4b:c8: 2e:87:ea:c8:c5:12:1a:e4:50:1c:d9:d5:a0:53:2a: 40:a4:41:10:77:a8:88:52:3a:4f:46:2f:84:18:01: 83:b4:e2:8d:d2:69:90:3f:a4:1c:46:e4:3b:4a:33: 88:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FF:33:13:85:03:2A:95:D1:79:76:B6:5E:82:C7:ED:5D:8D:15:73 X509v3 Authority Key Identifier: keyid:D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:1b:c4:d5:41:5a:0f:f2:53:9d:81:de:62:eb:44:f7:c5:18: 5c:39:be:7e:14:e8:b1:2c:4a:36:04:c5:17:21:07:a4:89:e8: 2f:ad:c6:6d:fe:fa:37:ad:84:8c:3e:2a:4a:59:b4:ab:b8:34: 69:ff:21:1c:c1:19:81:c1:a6:58:32:c6:0f:ae:b4:bd:da:7a: ab:3b:5a:3c:02:dd:37:83:3b:58:a3:7c:3c:ec:77:4f:1a:dc: 49:fb:48:bd:c8:e5:fc:a6:a8:a0:c2:cf:c4:67:76:a0:b6:6e: a0:66:cb:32:bd:60:05:b2:0c:21:c1:1c:b7:63:5a:d0:02:24: ac:a0:0e:4d:ab:1f:d2:cd:ef:f2:a6:70:b7:14:c6:bb:c4:b8: b3:6a:d1:a0:d0:92:0f:9c:a8:d8:18:ac:6e:c8:04:cb:32:fd: 84:fd:36:8e:51:9b:5e:66:c0:39:98:61:fd:72:ad:28:93:3c: 78:cc:55:c7:8c:2c:a2:40:72:08:68:b4:18:c0:a9:8f:fa:03: 85:d7:d5:e7:76:46:bb:60:46:d3:9f:e9:dc:85:62:b3:b6:b7: 35:71:98:13:bb:1a:5a:f0:fe:c0:a7:1f:ee:6f:85:ed:e7:e6: 36:3b:f6:62:1d:5f:21:c0:a5:4a:48:05:b6:81:85:f8:9a:9e: f1:22:3a:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM2ODQxMTAvBgNVBAUTKEQxNTNGNzU4NUY2MkU5QzMxNTEyRDI4Njg4ODQwMUMx QTY4RERFMTYwHhcNMjUwNDI0MTUxMjE2WhcNMjUwNTAxMTUxMjE2WjAYMRYwFAYD VQQDEw02ODBhNTRkMC0yMzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07fhryj2uoxdXLxn3a2q9KLNVDVlQEUOapnbI3NLx4qos7CcOJLuvSvHtW4g cphkqRf0OOCu9tU7INx0ZzjjEnGR9N3hfqd03AKZ+JpESP5SKAV4BDkDT2MbI8aM RB6juZ4j7vU7wFG+kvg+hK9KSKwR/LwK66MDNnGwwmTA2niGjqbgP4WRI3TsePw9 9/HxaupzulqhYQ7KSopT7odEPd1jfl4iOD/suRR4REPJh/qr59rA+1+YlTrnX+0Y TXGlXpM4bkCUb7gkUHKxMVXfS8guh+rIxRIa5FAc2dWgUypApEEQd6iIUjpPRi+E GAGDtOKN0mmQP6QcRuQ7SjOIZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPn/MxOF AyqV0Xl2tl6Cx+1djRVzMB8GA1UdIwQYMBaAFNFT91hfYunDFRLShoiEAcGmjd4W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzY4NC9BNkM4NDBCMjJB QjAxMUVFQUUyRTVEMUFDNEY5QUUwMi8wVlAzV0Y5aTZjTVZFdEtHaUlRQndhYU4z aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBWUDNXRjlpNmNNVkV0S0dpSVFCd2FhTjNoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzY4NC9BNkM4NDBCMjJBQjAxMUVFQUUyRTVEMUFDNEY5QUUwMi8wVlAzV0Y5aTZj TVZFdEtHaUlRQndhYU4zaFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTG8TVQVoP8lOdgd5i60T3xRhcOb5+FOixLEo2BMUXIQekiegvrcZt /vo3rYSMPipKWbSruDRp/yEcwRmBwaZYMsYPrrS92nqrO1o8At03gztYo3w87HdP GtxJ+0i9yOX8pqigws/EZ3agtm6gZssyvWAFsgwhwRy3Y1rQAiSsoA5Nqx/Sze/y pnC3FMa7xLizatGg0JIPnKjYGKxuyATLMv2E/TaOUZteZsA5mGH9cq0okzx4zFXH jCyiQHIIaLQYwKmP+gOF19Xndka7YEbTn+nchWKztrc1cZgTuxpa8P7Apx/ub4Xt 5+Y2O/ZiHV8hwKVKSAW2gYX4mp7xIjrF -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:19 2025 by rpki-client