$ rpki-client -vvf rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft File: vmOANw9kBuY_dG-vUrxQHsTQvVI.mft (raw, json) Hash identifier: BIL4FB6fCNhjC1N/uBNpkwNyAY3Pw5r9kOUMpj+OjNc= Subject key identifier: 65:AC:48:67:FB:20:5E:78:0B:11:54:4F:FF:46:1E:56:EE:BC:BF:9B Authority key identifier: BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52 Certificate issuer: /CN=A9171B8D/serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft Manifest number: 16 Signing time: Fri 25 Apr 2025 06:59:15 +0000 Manifest this update: Fri 25 Apr 2025 06:59:15 +0000 Manifest next update: Fri 02 May 2025 06:59:14 +0000 Files and hashes: 1: vmOANw9kBuY_dG-vUrxQHsTQvVI.crl (hash: Sqk82XU8MHCIIsR0npPVv611NYiqFPNdWAsRgTOWCiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171B8D, serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52 Validity Not Before: Apr 25 06:59:15 2025 GMT Not After : May 2 06:59:14 2025 GMT Subject: CN=680b32c3-06e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1a:05:a9:27:48:ea:7b:43:b7:51:3d:fa:83: e5:00:51:38:3f:a2:c8:e1:a8:6f:06:0f:b0:db:3f: 53:ca:23:f4:3a:4e:71:b5:56:f5:d4:bd:9b:d9:9c: ee:74:80:c2:15:52:d7:be:93:f1:61:ad:0c:90:87: 9f:53:82:6f:77:97:3f:c0:64:a3:7e:4d:db:8e:1d: b4:cf:4c:9e:33:b5:ca:ee:b7:42:de:b9:01:d5:40: ad:cf:4b:14:36:04:b5:ed:98:28:7a:2d:4a:7c:79: 37:ec:6b:4d:4b:24:6a:a7:90:06:4b:fb:6b:1c:3e: 1a:02:61:98:a0:44:51:ff:ef:0e:8d:3b:06:fe:c3: a3:f5:64:09:a3:0d:79:b3:1d:e2:eb:26:04:11:8e: 96:59:85:3e:c5:1a:85:b3:c2:4c:9b:7e:1d:2c:9d: f2:d8:31:2b:20:e5:83:ba:24:d5:ce:fa:d7:ea:84: 05:eb:dd:74:8f:9a:83:ed:b2:c4:e9:c6:ef:7e:2a: 49:fa:e9:a4:a3:f6:0d:62:90:3b:6d:ae:09:df:62: 66:36:96:c6:25:64:92:30:15:05:b3:7c:71:0e:7e: 13:b5:d2:8e:6e:58:e1:6b:13:76:57:05:e0:23:c8: b0:df:30:f0:f5:33:5c:4d:a6:bc:f6:54:52:0f:7d: 57:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AC:48:67:FB:20:5E:78:0B:11:54:4F:FF:46:1E:56:EE:BC:BF:9B X509v3 Authority Key Identifier: keyid:BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:6c:78:09:1d:bc:fd:c0:6d:f1:54:1b:ff:36:4f:41:cf:f3: 40:30:9d:a4:ce:f7:d4:f0:e4:ea:78:ae:fe:1f:f3:f9:16:b6: e1:cf:3e:f2:b8:e3:cf:cc:6e:21:d5:58:eb:23:b1:b9:ae:ee: 55:73:92:2e:b0:2e:29:da:de:af:e0:95:e5:93:dc:63:85:f6: ec:ea:0e:21:9e:85:f9:8f:ee:6c:b6:3e:27:87:f7:18:9e:eb: 9d:43:58:3c:7d:cc:3b:8c:24:40:ce:90:c3:0f:b5:a6:7c:af: b9:cc:41:19:0e:ba:f6:d5:cf:68:7e:c5:c9:f9:d4:e0:af:39: ce:77:65:c6:fa:d7:8e:37:66:b2:f8:c5:65:f1:8f:4d:ad:a0: b5:f4:41:63:ba:6f:cd:af:21:f1:1d:6c:36:f7:b8:9e:04:68: 77:e5:78:cb:16:ad:2c:ee:30:42:ed:68:7d:ee:7d:7b:63:b1: 90:11:39:fe:19:47:65:cc:e6:ee:1f:0d:43:4b:37:fa:a1:50: 8f:43:11:c8:ed:a1:1d:93:dd:32:62:7e:72:33:0e:92:4b:49: d3:e4:46:51:94:83:32:62:9e:c9:54:22:c5:cf:6e:13:87:7c: 0a:24:78:ab:2d:21:fb:f7:9f:48:9f:2e:d5:e7:8b:14:46:f2: d0:9a:0d:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MUI4RDExMC8GA1UEBRMoQkU2MzgwMzcwRjY0MDZFNjNGNzQ2RkFGNTJCQzUwMUVD NEQwQkQ1MjAeFw0yNTA0MjUwNjU5MTVaFw0yNTA1MDIwNjU5MTRaMBgxFjAUBgNV BAMTDTY4MGIzMmMzLTA2ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTGgWpJ0jqe0O3UT36g+UAUTg/osjhqG8GD7DbP1PKI/Q6TnG1VvXUvZvZnO50 gMIVUte+k/FhrQyQh59Tgm93lz/AZKN+TduOHbTPTJ4ztcrut0LeuQHVQK3PSxQ2 BLXtmCh6LUp8eTfsa01LJGqnkAZL+2scPhoCYZigRFH/7w6NOwb+w6P1ZAmjDXmz HeLrJgQRjpZZhT7FGoWzwkybfh0snfLYMSsg5YO6JNXO+tfqhAXr3XSPmoPtssTp xu9+Kkn66aSj9g1ikDttrgnfYmY2lsYlZJIwFQWzfHEOfhO10o5uWOFrE3ZXBeAj yLDfMPD1M1xNprz2VFIPfVfLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZaxIZ/sg XngLEVRP/0YeVu68v5swHwYDVR0jBBgwFoAUvmOANw9kBuY/dG+vUrxQHsTQvVIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxQjhELzFDRjlBODdBMDNE MTExRjBCMjM0QkMxNUM0RjlBRTAyL3ZtT0FOdzlrQnVZX2RHLXZVcnhRSHNUUXZW SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdm1PQU53OWtCdVlfZEctdlVyeFFIc1RRdlZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx QjhELzFDRjlBODdBMDNEMTExRjBCMjM0QkMxNUM0RjlBRTAyL3ZtT0FOdzlrQnVZ X2RHLXZVcnhRSHNUUXZWSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFhseAkdvP3AbfFUG/82T0HP80AwnaTO99Tw5Op4rv4f8/kWtuHPPvK4 48/MbiHVWOsjsbmu7lVzki6wLina3q/gleWT3GOF9uzqDiGehfmP7my2PieH9xie 651DWDx9zDuMJEDOkMMPtaZ8r7nMQRkOuvbVz2h+xcn51OCvOc53Zcb61443ZrL4 xWXxj02toLX0QWO6b82vIfEdbDb3uJ4EaHfleMsWrSzuMELtaH3ufXtjsZAROf4Z R2XM5u4fDUNLN/qhUI9DEcjtoR2T3TJifnIzDpJLSdPkRlGUgzJinslUIsXPbhOH fAokeKstIfv3n0ifLtXnixRG8tCaDWU= -----END CERTIFICATE-----Generated at Sat Apr 26 17:05:06 2025 by rpki-client