$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft File: vjP21UgZuYkyL1Kj7LXzP98OFZY.mft (raw, json) Hash identifier: n7Ma8F6AVk2AL8lCryXGx4krs1lpLZMDzQiRbaZzHiI= Subject key identifier: 77:F0:56:E4:D8:E7:C7:EA:3A:57:BC:3F:8E:1B:83:BE:E6:B5:F1:6E Authority key identifier: BE:33:F6:D5:48:19:B9:89:32:2F:52:A3:EC:B5:F3:3F:DF:0E:15:96 Certificate issuer: /CN=A9178EF3/serialNumber=BE33F6D54819B989322F52A3ECB5F33FDF0E1596 Certificate serial: 06EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft Manifest number: 06E7 Signing time: Wed 30 Apr 2025 21:42:22 +0000 Manifest this update: Wed 30 Apr 2025 21:42:22 +0000 Manifest next update: Wed 07 May 2025 21:42:22 +0000 Files and hashes: 1: vjP21UgZuYkyL1Kj7LXzP98OFZY.crl (hash: 3/NK3T+N2mcqIjFSC0XdkLyabO7iRAd+GGXle0fQUSY=) 2: 4BC1EE9A4AAF11EBBF031959C4F9AE02.roa (hash: 9QXEZ3KUMVxM1IFtAM5AqpjiZSShCfJ9XhH0+sUzVjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.crl rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 21:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1774 (0x6ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EF3, serialNumber=BE33F6D54819B989322F52A3ECB5F33FDF0E1596 Validity Not Before: Apr 30 21:42:22 2025 GMT Not After : May 7 21:42:22 2025 GMT Subject: CN=6812993e-2537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e5:ca:7f:95:bb:2a:31:e3:61:cb:7d:e6:57: 94:cc:e1:50:04:fd:56:a8:90:5f:98:a8:05:8a:7a: 8c:e7:fa:99:72:19:ad:97:58:e6:a7:23:74:c0:8f: 7f:01:d1:04:98:39:bd:80:46:27:ca:77:06:91:e2: b5:2c:76:0d:0d:87:cc:33:66:af:88:11:0c:13:3b: 50:b3:71:25:4d:50:6e:05:4c:82:ec:b6:c6:d5:b9: a9:74:e9:57:9b:d2:9f:7f:21:ee:89:2d:bd:99:5c: 25:9b:73:f6:50:29:47:1f:03:0d:b6:45:f8:46:36: de:8d:40:bd:ad:69:76:fd:6b:40:18:b4:ea:9d:4a: 74:98:99:66:12:19:d7:26:aa:2f:d8:c9:18:c4:ca: bf:2b:96:12:bf:bd:79:86:63:af:8c:fe:5d:4a:48: bc:06:d3:40:0b:de:86:51:f8:19:41:f4:ab:06:59: e8:cc:86:c6:50:31:f5:d2:42:40:a7:e7:6d:dd:8c: 10:bb:11:58:0e:ba:45:87:da:0c:8b:ce:10:6f:e5: cf:41:24:c6:d6:7f:c7:4e:2c:0f:b3:a9:a0:58:1f: f2:b3:8f:7e:85:62:2c:ee:fc:aa:a0:07:50:2d:23: d5:a5:44:eb:34:43:5d:9e:81:25:0e:1d:6f:96:c9: 16:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F0:56:E4:D8:E7:C7:EA:3A:57:BC:3F:8E:1B:83:BE:E6:B5:F1:6E X509v3 Authority Key Identifier: keyid:BE:33:F6:D5:48:19:B9:89:32:2F:52:A3:EC:B5:F3:3F:DF:0E:15:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:dd:5d:ee:66:d6:0c:b8:48:60:55:ab:44:a7:a7:f9:f1:0f: 68:f8:d7:76:63:ee:c7:b7:9a:3b:b9:2d:b6:8a:3e:ad:6c:71: b2:af:50:65:7d:7b:c1:2e:68:23:25:f6:8a:43:1d:c5:17:63: 06:7a:8f:01:34:63:f6:78:b2:ea:91:63:88:48:d5:a6:fa:8f: b7:7c:72:2e:2f:3f:80:c6:30:a3:ca:ba:05:bc:b8:16:fc:e7: 32:82:d5:d8:20:39:7e:ad:0d:df:6f:aa:8c:ac:91:3f:be:87: 13:44:cc:43:16:b6:7a:13:59:b1:c4:55:b9:cf:9a:6b:07:fe: 4e:48:d9:4d:b7:62:cf:ff:7b:e0:df:20:78:ac:db:a4:7b:1f: 73:c8:65:73:42:65:ce:d9:53:4f:6e:6f:5c:79:b3:21:0a:3a: 92:db:95:26:b7:51:0a:34:b3:6f:0f:de:47:7e:8a:c8:aa:e4: 3b:71:7e:b6:58:5e:f8:a5:3a:ce:17:94:85:20:a7:93:96:dc: 9b:3f:c2:6b:ef:38:19:07:6a:4c:6b:e3:31:64:8c:58:da:ef: 91:8d:db:18:5a:c7:d3:89:6f:71:15:2c:40:8b:c9:54:29:a2: a5:20:6e:72:01:df:1c:39:ad:58:30:67:23:37:0b:aa:4c:34: 18:01:1f:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFRjMxMTAvBgNVBAUTKEJFMzNGNkQ1NDgxOUI5ODkzMjJGNTJBM0VDQjVGMzNG REYwRTE1OTYwHhcNMjUwNDMwMjE0MjIyWhcNMjUwNTA3MjE0MjIyWjAYMRYwFAYD VQQDEw02ODEyOTkzZS0yNTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOXKf5W7KjHjYct95leUzOFQBP1WqJBfmKgFinqM5/qZchmtl1jmpyN0wI9/ AdEEmDm9gEYnyncGkeK1LHYNDYfMM2aviBEMEztQs3ElTVBuBUyC7LbG1bmpdOlX m9KffyHuiS29mVwlm3P2UClHHwMNtkX4RjbejUC9rWl2/WtAGLTqnUp0mJlmEhnX Jqov2MkYxMq/K5YSv715hmOvjP5dSki8BtNAC96GUfgZQfSrBlnozIbGUDH10kJA p+dt3YwQuxFYDrpFh9oMi84Qb+XPQSTG1n/HTiwPs6mgWB/ys49+hWIs7vyqoAdQ LSPVpUTrNENdnoElDh1vlskWhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfwVuTY 58fqOle8P44bg77mtfFuMB8GA1UdIwQYMBaAFL4z9tVIGbmJMi9So+y18z/fDhWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVGMy85MjgxMDM0QTRB QUQxMUVCOTA2MzdFNTdDNEY5QUUwMi92alAyMVVnWnVZa3lMMUtqN0xYelA5OE9G WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZqUDIxVWdadVlreUwxS2o3TFh6UDk4T0ZaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVGMy85MjgxMDM0QTRBQUQxMUVCOTA2MzdFNTdDNEY5QUUwMi92alAyMVVnWnVZ a3lMMUtqN0xYelA5OE9GWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC83V3uZtYMuEhgVatEp6f58Q9o+Nd2Y+7Ht5o7uS22ij6tbHGyr1Bl fXvBLmgjJfaKQx3FF2MGeo8BNGP2eLLqkWOISNWm+o+3fHIuLz+AxjCjyroFvLgW /OcygtXYIDl+rQ3fb6qMrJE/vocTRMxDFrZ6E1mxxFW5z5prB/5OSNlNt2LP/3vg 3yB4rNukex9zyGVzQmXO2VNPbm9cebMhCjqS25Umt1EKNLNvD95HforIquQ7cX62 WF74pTrOF5SFIKeTltybP8Jr7zgZB2pMa+MxZIxY2u+RjdsYWsfTiW9xFSxAi8lU KaKlIG5yAd8cOa1YMGcjNwuqTDQYAR9y -----END CERTIFICATE-----Generated at Fri May 2 15:33:22 2025 by rpki-client