$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.mft File: vi_5e5tTTVONpBoJtsCNAjMuhlU.mft (raw, json) Hash identifier: etk5XV2+qtcRBB/+bVA+VQ4jClPXULKb1O0lzrP3zxo= Subject key identifier: 4A:02:D9:91:F1:5F:B6:69:7D:C4:33:B8:63:76:DC:D3:D7:EB:88:A2 Authority key identifier: BE:2F:F9:7B:9B:53:4D:53:8D:A4:1A:09:B6:C0:8D:02:33:2E:86:55 Certificate issuer: /CN=A9173D07/serialNumber=BE2FF97B9B534D538DA41A09B6C08D02332E8655 Certificate serial: 0758 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vi_5e5tTTVONpBoJtsCNAjMuhlU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.mft Manifest number: 0752 Signing time: Thu 24 Apr 2025 21:25:59 +0000 Manifest this update: Thu 24 Apr 2025 21:25:59 +0000 Manifest next update: Thu 01 May 2025 21:25:58 +0000 Files and hashes: 1: vi_5e5tTTVONpBoJtsCNAjMuhlU.crl (hash: H5tHJfiSxZblAVJFsYMj4Dx0BuzcDESIFjQQ7FhTn/s=) 2: AD2ACD6423F411EB8FBA6A83C4F9AE02.roa (hash: zDoEmMgh0Ofm4a5TBSo1aulp2cylUWbLMdlBm8sXwCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.crl rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vi_5e5tTTVONpBoJtsCNAjMuhlU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1880 (0x758) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D07, serialNumber=BE2FF97B9B534D538DA41A09B6C08D02332E8655 Validity Not Before: Apr 24 21:25:59 2025 GMT Not After : May 1 21:25:58 2025 GMT Subject: CN=680aac67-f435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5a:11:70:d3:ca:64:62:02:1c:5b:54:93:4a: 1b:97:f4:10:9f:74:56:0d:19:2c:c9:20:dd:09:6c: 62:0a:4a:76:67:e2:d9:18:be:4b:8d:e0:ee:f3:07: 78:24:3b:3f:65:ab:32:8b:e4:36:de:a7:39:20:a9: 5f:8b:82:c9:b1:6e:9c:d4:69:72:39:18:d2:c7:7d: 05:7a:e3:e6:55:ed:32:bb:86:19:13:f8:70:77:12: 93:d4:3b:b5:2d:7b:9a:bc:be:90:13:9d:44:0c:81: 5c:f6:58:e5:82:65:82:39:4a:c0:7f:4c:6b:51:0e: b1:82:2e:97:96:ba:15:10:d8:a7:5a:af:73:d1:9d: 74:04:fc:c4:84:9b:ff:6e:4d:67:59:7d:db:ba:bf: 84:dd:7d:33:a3:7d:65:dd:1d:40:96:60:73:e3:c2: fd:7c:08:e3:1c:52:c5:77:65:84:a2:53:18:3c:ea: 8e:97:27:b2:4e:44:3a:9a:ae:c8:9f:55:bb:e9:61: cf:8c:bc:d4:e5:90:d5:fa:1a:7c:ff:cf:d2:e7:4b: 1a:27:b8:14:0f:d3:64:62:cb:a3:50:3a:ef:48:de: 7d:9b:a2:ca:a9:29:da:57:fb:7e:7c:ef:e5:54:1b: d2:e4:f7:3d:46:9b:4b:8b:13:2a:cb:d8:83:e2:2d: 5b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:02:D9:91:F1:5F:B6:69:7D:C4:33:B8:63:76:DC:D3:D7:EB:88:A2 X509v3 Authority Key Identifier: keyid:BE:2F:F9:7B:9B:53:4D:53:8D:A4:1A:09:B6:C0:8D:02:33:2E:86:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vi_5e5tTTVONpBoJtsCNAjMuhlU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:73:75:c1:f2:1e:92:0d:9e:12:4e:c4:ee:16:54:e4:47:4b: f6:ce:91:11:31:d5:1e:67:a2:d7:42:4d:a2:46:aa:e4:ab:cb: fc:91:8c:89:e2:a7:ab:05:16:4d:16:eb:08:05:a6:cd:77:9d: 49:f7:d9:ce:f0:e5:1b:8b:8d:83:b7:61:f2:1f:61:3e:1b:c2: 99:9a:ce:7c:55:93:17:86:58:38:b4:26:31:bd:18:e2:ed:8d: 5c:bd:ff:7d:9f:21:80:ec:96:b9:2e:94:58:11:ba:b5:2e:83: a3:82:ce:79:4e:d4:c0:52:5c:e5:43:d5:68:e1:19:6e:d5:f6: 58:7d:6d:54:0c:74:0f:13:dc:9f:fd:b9:98:00:f0:5c:0d:29: 6c:3c:8b:3a:51:8a:69:f6:6e:a7:fe:ae:e7:84:3e:28:64:a4: d2:56:53:9a:e5:c5:e1:55:41:22:30:76:b3:98:5f:1d:95:b3: 33:83:8f:d5:f0:aa:a4:7c:3f:d7:c5:7c:50:5e:a9:da:41:6f: 26:36:be:a1:4e:90:e3:07:f8:12:6c:1e:bd:1b:88:d4:b2:78: a9:e6:fe:7d:0b:a5:b7:57:bb:bb:14:d1:16:7e:fc:c3:04:71: 80:e8:05:f3:16:b6:da:c8:84:4a:ea:86:57:3c:4a:13:2e:98: da:0e:aa:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNEMDcxMTAvBgNVBAUTKEJFMkZGOTdCOUI1MzRENTM4REE0MUEwOUI2QzA4RDAy MzMyRTg2NTUwHhcNMjUwNDI0MjEyNTU5WhcNMjUwNTAxMjEyNTU4WjAYMRYwFAYD VQQDEw02ODBhYWM2Ny1mNDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11oRcNPKZGICHFtUk0obl/QQn3RWDRksySDdCWxiCkp2Z+LZGL5LjeDu8wd4 JDs/Zasyi+Q23qc5IKlfi4LJsW6c1GlyORjSx30FeuPmVe0yu4YZE/hwdxKT1Du1 LXuavL6QE51EDIFc9ljlgmWCOUrAf0xrUQ6xgi6XlroVENinWq9z0Z10BPzEhJv/ bk1nWX3bur+E3X0zo31l3R1AlmBz48L9fAjjHFLFd2WEolMYPOqOlyeyTkQ6mq7I n1W76WHPjLzU5ZDV+hp8/8/S50saJ7gUD9NkYsujUDrvSN59m6LKqSnaV/t+fO/l VBvS5Pc9RptLixMqy9iD4i1blwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoC2ZHx X7ZpfcQzuGN23NPX64iiMB8GA1UdIwQYMBaAFL4v+XubU01TjaQaCbbAjQIzLoZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0QwNy9CRjlBRkY0QzFD RDIxMUVCOTlENThCMkNDNEY5QUUwMi92aV81ZTV0VFRWT05wQm9KdHNDTkFqTXVo bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZpXzVlNXRUVFZPTnBCb0p0c0NOQWpNdWhsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0QwNy9CRjlBRkY0QzFDRDIxMUVCOTlENThCMkNDNEY5QUUwMi92aV81ZTV0VFRW T05wQm9KdHNDTkFqTXVobFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChc3XB8h6SDZ4STsTuFlTkR0v2zpERMdUeZ6LXQk2iRqrkq8v8kYyJ 4qerBRZNFusIBabNd51J99nO8OUbi42Dt2HyH2E+G8KZms58VZMXhlg4tCYxvRji 7Y1cvf99nyGA7Ja5LpRYEbq1LoOjgs55TtTAUlzlQ9Vo4Rlu1fZYfW1UDHQPE9yf /bmYAPBcDSlsPIs6UYpp9m6n/q7nhD4oZKTSVlOa5cXhVUEiMHazmF8dlbMzg4/V 8KqkfD/XxXxQXqnaQW8mNr6hTpDjB/gSbB69G4jUsnip5v59C6W3V7u7FNEWfvzD BHGA6AXzFrbayIRK6oZXPEoTLpjaDqoh -----END CERTIFICATE-----Generated at Sat Apr 26 13:46:58 2025 by rpki-client