$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft File: Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft (raw, json) Hash identifier: 4ODkKh1y9/b4tCFrgAmW0fA0WRFYohIew8PbvYZ9+jQ= Subject key identifier: 9C:9C:A2:18:99:DA:B6:A3:5B:66:0A:79:B0:DE:A7:75:AA:3E:13:6A Authority key identifier: 56:0B:BD:60:06:CE:CD:73:00:D1:52:4C:8A:27:43:9A:BB:F1:59:7E Certificate issuer: /CN=A9171172/serialNumber=560BBD6006CECD7300D1524C8A27439ABBF1597E Certificate serial: 0758 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft Manifest number: 0758 Signing time: Thu 24 Apr 2025 21:23:49 +0000 Manifest this update: Thu 24 Apr 2025 21:23:49 +0000 Manifest next update: Thu 01 May 2025 21:23:49 +0000 Files and hashes: 1: Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl (hash: YD/m1tBK24hCxr9q8GbTsEvECCPT6pNKflzqobsxO2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1880 (0x758) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171172, serialNumber=560BBD6006CECD7300D1524C8A27439ABBF1597E Validity Not Before: Apr 24 21:23:49 2025 GMT Not After : May 1 21:23:49 2025 GMT Subject: CN=680aabe5-0b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:98:98:d7:61:2a:37:1a:6e:6c:04:c1:ea:cc: 16:58:e7:c7:07:90:1f:60:cc:5c:5c:77:36:c3:cd: fc:02:a1:ba:41:e3:22:32:e5:06:fe:94:66:7f:9f: 3c:2a:cb:3b:46:96:e7:38:c6:47:88:f5:f2:ce:18: 79:b5:fb:79:1b:f5:a5:74:2c:9d:7c:2f:07:e7:86: 28:a1:90:6e:5e:1c:94:10:8f:ab:b5:99:3b:40:31: 7e:95:0c:52:cc:73:0b:bc:15:3b:25:0b:be:ba:b1: 98:df:88:f5:51:df:1c:20:ca:a5:f8:ee:37:93:34: 59:56:47:98:94:09:67:08:de:f8:ff:3c:50:1e:42: b3:6d:91:a4:fc:75:35:c2:bc:6e:9a:77:82:46:a1: 94:63:cd:56:d7:a0:c0:92:68:44:7a:06:df:27:98: 69:67:57:26:14:0c:bd:2b:1a:d9:dc:9b:49:9d:80: c2:40:e3:b7:2d:b1:02:99:f9:b9:c5:0a:bf:0b:dd: b9:10:66:0f:45:ca:74:94:01:93:77:97:83:69:59: 4a:58:1b:0a:3b:1d:37:12:bd:0b:8d:c3:13:e6:93: 43:1d:4b:e3:76:3f:2d:07:02:81:ef:25:ff:02:7e: e9:ef:f1:15:35:c2:35:2c:24:36:7c:01:8f:72:48: 81:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9C:A2:18:99:DA:B6:A3:5B:66:0A:79:B0:DE:A7:75:AA:3E:13:6A X509v3 Authority Key Identifier: keyid:56:0B:BD:60:06:CE:CD:73:00:D1:52:4C:8A:27:43:9A:BB:F1:59:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:38:ce:09:cf:7b:a4:40:04:e7:40:9c:fd:b0:80:48:bf:78: de:11:cb:93:f2:a0:4f:54:89:d8:1b:59:2b:19:e1:6b:ff:15: 66:de:de:11:32:5c:52:fc:0f:d9:bb:99:2e:a4:21:34:eb:ca: 64:fc:8a:f5:e1:db:a0:9b:48:04:e0:95:4e:84:70:4b:d1:0b: 54:21:43:c5:31:4e:94:41:a3:ba:cd:e9:57:89:c9:4a:fa:82: 8c:28:67:c0:91:ac:b5:83:03:04:18:7f:bb:9d:27:ca:96:cf: 4f:e4:56:5f:43:2f:29:e4:8f:fe:37:4f:7e:c3:6f:f3:8d:d2: 95:ae:75:6e:30:68:7e:0a:d7:da:ac:bb:06:1a:d0:ed:4a:ee: ad:c1:24:14:ee:9c:18:79:b7:1a:3b:f9:1f:d6:f3:6d:df:87: 84:50:df:17:22:56:c1:5e:e4:dc:e9:79:ea:04:99:c5:4a:fe: 90:8f:57:d0:58:a6:41:31:7f:4d:76:e1:1f:aa:05:34:5e:be: 89:05:c5:9b:24:44:61:99:47:84:a2:cc:eb:a5:f0:50:5b:8e: 24:37:17:7f:51:75:e2:cd:5d:ab:26:0d:ba:f2:76:64:c4:84: 52:7e:6a:0b:e1:f2:7f:07:5d:45:e3:3c:d3:4e:28:f2:c8:ac: 3e:89:ea:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzExNzIxMTAvBgNVBAUTKDU2MEJCRDYwMDZDRUNENzMwMEQxNTI0QzhBMjc0MzlB QkJGMTU5N0UwHhcNMjUwNDI0MjEyMzQ5WhcNMjUwNTAxMjEyMzQ5WjAYMRYwFAYD VQQDEw02ODBhYWJlNS0wYjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JiY12EqNxpubATB6swWWOfHB5AfYMxcXHc2w838AqG6QeMiMuUG/pRmf588 Kss7RpbnOMZHiPXyzhh5tft5G/WldCydfC8H54YooZBuXhyUEI+rtZk7QDF+lQxS zHMLvBU7JQu+urGY34j1Ud8cIMql+O43kzRZVkeYlAlnCN74/zxQHkKzbZGk/HU1 wrxumneCRqGUY81W16DAkmhEegbfJ5hpZ1cmFAy9KxrZ3JtJnYDCQOO3LbECmfm5 xQq/C925EGYPRcp0lAGTd5eDaVlKWBsKOx03Er0LjcMT5pNDHUvjdj8tBwKB7yX/ An7p7/EVNcI1LCQ2fAGPckiB0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJycohiZ 2rajW2YKebDep3WqPhNqMB8GA1UdIwQYMBaAFFYLvWAGzs1zANFSTIonQ5q78Vl+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTE3Mi84ODZCOUExQzE4 QkUxMUVCQUMxMERFNDZDNEY5QUUwMi9WZ3U5WUFiT3pYTUEwVkpNaWlkRG1ydnhX WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZndTlZQWJPelhNQTBWSk1paWREbXJ2eFdYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTE3Mi84ODZCOUExQzE4QkUxMUVCQUMxMERFNDZDNEY5QUUwMi9WZ3U5WUFiT3pY TUEwVkpNaWlkRG1ydnhXWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvOM4Jz3ukQATnQJz9sIBIv3jeEcuT8qBPVInYG1krGeFr/xVm3t4R MlxS/A/Zu5kupCE068pk/Ir14dugm0gE4JVOhHBL0QtUIUPFMU6UQaO6zelXiclK +oKMKGfAkay1gwMEGH+7nSfKls9P5FZfQy8p5I/+N09+w2/zjdKVrnVuMGh+Ctfa rLsGGtDtSu6twSQU7pwYebcaO/kf1vNt34eEUN8XIlbBXuTc6XnqBJnFSv6Qj1fQ WKZBMX9NduEfqgU0Xr6JBcWbJERhmUeEoszrpfBQW44kNxd/UXXizV2rJg268nZk xIRSfmoL4fJ/B11F4zzTTijyyKw+iep+ -----END CERTIFICATE-----Generated at Sat Apr 26 15:05:29 2025 by rpki-client