$ rpki-client -vvf rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft File: vxurTPDVSTDgAbctJPMLPtaK4rM.mft (raw, json) Hash identifier: IO/z5IyFg2FIHY4880I2C9RsrAiR2IJJYq6AV+TGSQ0= Subject key identifier: 67:26:AE:64:46:6D:C7:69:44:11:D8:31:1F:2A:85:46:78:C8:9B:0F Authority key identifier: BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3 Certificate issuer: /CN=A916F95E/serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3 Certificate serial: 10A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft Manifest number: 109D Signing time: Thu 24 Apr 2025 17:20:17 +0000 Manifest this update: Thu 24 Apr 2025 17:20:17 +0000 Manifest next update: Thu 01 May 2025 17:20:17 +0000 Files and hashes: 1: vxurTPDVSTDgAbctJPMLPtaK4rM.crl (hash: ItwTH+gE6I+5fEZ5YQuns1/eSORdhtUndlKz/bctI20=) 2: 1BB160C225EB11E9ADD6867FC4F9AE02.roa (hash: lwN0HxFqk+P+paikgj5BShG8YqJ+QsducNmiygkfDAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4261 (0x10a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F95E, serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3 Validity Not Before: Apr 24 17:20:17 2025 GMT Not After : May 1 17:20:17 2025 GMT Subject: CN=680a72d1-3831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:17:65:7c:02:cd:fa:f7:5b:bf:97:62:5e:95: 3c:8f:08:51:ec:8e:03:bf:1b:53:7a:ef:1f:29:6d: d6:95:14:ac:fb:40:79:fc:52:86:d9:18:9e:1e:c1: 78:8b:db:0b:97:c5:a3:15:ca:b5:0f:19:80:fe:34: 58:d4:57:6c:2c:ce:2f:10:36:b2:62:2d:cc:9a:b4: 2b:05:46:0f:2e:d3:49:d3:99:8f:3a:6b:fb:b7:9d: 0f:27:af:a1:17:cd:4b:73:22:ed:f0:21:72:1b:66: d8:65:24:fa:98:e3:9e:ac:b3:f7:ea:f6:db:1d:d8: 2d:ac:c9:1f:79:b9:34:cf:2d:7c:87:35:c4:ad:5c: bc:54:e4:d5:32:14:4a:21:27:61:2a:a1:b8:bc:e9: b6:22:13:da:57:fa:9a:23:3c:f2:69:dd:f8:1b:71: 50:99:1a:5f:17:db:01:79:c8:ec:2f:7e:f9:0c:e0: f7:d7:2b:20:69:7b:5a:7f:27:07:b8:ef:39:c7:19: c5:a1:9d:6a:45:c5:29:93:3c:fb:50:51:4e:7d:66: 6e:0b:b4:e7:63:e3:db:a0:1d:ad:2b:88:37:47:41: c1:5c:c6:e2:f7:77:aa:24:44:4d:60:32:2c:96:73: 57:a8:28:be:2f:01:36:23:ad:81:29:ee:ac:cb:06: b9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:26:AE:64:46:6D:C7:69:44:11:D8:31:1F:2A:85:46:78:C8:9B:0F X509v3 Authority Key Identifier: keyid:BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:ce:59:5e:9c:53:6c:4d:4c:3c:f5:c2:7d:02:57:6e:3a:ed: db:cc:34:ae:a0:58:19:5b:9b:1a:8c:d3:f4:b8:73:22:c0:15: cb:24:b1:7b:48:b7:9c:d3:e2:b1:a5:01:ea:c6:6d:01:8f:ea: 7c:47:5a:a2:e9:89:b3:f4:58:22:c3:6e:4f:54:0f:12:ba:82: 75:ef:c2:b0:c9:43:e0:e4:ac:63:0e:2b:e0:a2:5d:68:45:0c: 98:75:12:3d:84:5d:e7:6d:b6:6e:cd:27:fb:2d:52:09:e4:b1: 33:6f:ac:17:59:d2:a2:ab:ec:17:b8:55:1c:ec:02:d2:a3:10: db:b2:94:a0:70:ba:b2:4a:c7:04:11:87:b6:85:c6:0a:42:62: 7a:96:6e:79:7c:63:35:a0:0d:36:04:3d:1c:68:5a:09:b5:5e: 9a:b4:f9:87:31:ae:cd:f4:cb:8d:51:fd:bd:95:9d:b7:a7:59: 60:58:6e:7d:9a:33:da:88:a8:79:5f:39:c0:ed:54:14:75:08: fa:91:d7:5f:2c:f5:0d:53:35:0e:a6:57:d2:09:08:79:ea:5f: b0:15:eb:58:69:c6:31:b8:c3:18:2c:22:b3:5e:ce:8c:8f:4e: bf:29:cf:86:96:c4:3a:39:11:44:f2:b2:27:1a:b2:8e:d1:8a: a7:68:5c:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY5NUUxMTAvBgNVBAUTKEJGMUJBQjRDRjBENTQ5MzBFMDAxQjcyRDI0RjMwQjNF RDY4QUUyQjMwHhcNMjUwNDI0MTcyMDE3WhcNMjUwNTAxMTcyMDE3WjAYMRYwFAYD VQQDEw02ODBhNzJkMS0zODMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhdlfALN+vdbv5diXpU8jwhR7I4DvxtTeu8fKW3WlRSs+0B5/FKG2RieHsF4 i9sLl8WjFcq1DxmA/jRY1FdsLM4vEDayYi3MmrQrBUYPLtNJ05mPOmv7t50PJ6+h F81LcyLt8CFyG2bYZST6mOOerLP36vbbHdgtrMkfebk0zy18hzXErVy8VOTVMhRK ISdhKqG4vOm2IhPaV/qaIzzyad34G3FQmRpfF9sBecjsL375DOD31ysgaXtafycH uO85xxnFoZ1qRcUpkzz7UFFOfWZuC7TnY+PboB2tK4g3R0HBXMbi93eqJERNYDIs lnNXqCi+LwE2I62BKe6sywa5sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcmrmRG bcdpRBHYMR8qhUZ4yJsPMB8GA1UdIwQYMBaAFL8bq0zw1Ukw4AG3LSTzCz7WiuKz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Rjk1RS9CNzA4Nzk2ODI1 RTkxMUU5QkUzMUQ0N0RDNEY5QUUwMi92eHVyVFBEVlNURGdBYmN0SlBNTFB0YUs0 ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z4dXJUUERWU1REZ0FiY3RKUE1MUHRhSzRyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Rjk1RS9CNzA4Nzk2ODI1RTkxMUU5QkUzMUQ0N0RDNEY5QUUwMi92eHVyVFBEVlNU RGdBYmN0SlBNTFB0YUs0ck0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXzllenFNsTUw89cJ9AlduOu3bzDSuoFgZW5sajNP0uHMiwBXLJLF7 SLec0+KxpQHqxm0Bj+p8R1qi6Ymz9Fgiw25PVA8SuoJ178KwyUPg5KxjDivgol1o RQyYdRI9hF3nbbZuzSf7LVIJ5LEzb6wXWdKiq+wXuFUc7ALSoxDbspSgcLqySscE EYe2hcYKQmJ6lm55fGM1oA02BD0caFoJtV6atPmHMa7N9MuNUf29lZ23p1lgWG59 mjPaiKh5XznA7VQUdQj6kddfLPUNUzUOplfSCQh56l+wFetYacYxuMMYLCKzXs6M j06/Kc+GlsQ6ORFE8rInGrKO0YqnaFwX -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:12 2025 by rpki-client