$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft File: vcSlFjMX9zCX8CejQrhgp5LX8dw.mft (raw, json) Hash identifier: CulrJH0qf/fb1Cx6jWuZpKE+AXtItpZuvpCEqyjbXn8= Subject key identifier: FC:3D:22:42:92:72:B5:23:EB:9E:04:34:B5:E6:05:5B:FF:98:04:BC Authority key identifier: BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC Certificate issuer: /CN=A9179F64/serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft Manifest number: 82 Signing time: Fri 25 Apr 2025 05:39:55 +0000 Manifest this update: Fri 25 Apr 2025 05:39:55 +0000 Manifest next update: Fri 02 May 2025 05:39:55 +0000 Files and hashes: 1: vcSlFjMX9zCX8CejQrhgp5LX8dw.crl (hash: pMuPC5Ac/ycXAHuZb5vE/CTjkto2Ay7HjFcUoTgXGHk=) 2: AB4A60EECBA311EFB9E20E13C4F9AE02.roa (hash: Xcy4MFhRyr2k/5Jm4R5iv0t1VBaS/P+wq9LQCj1UUVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F64, serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC Validity Not Before: Apr 25 05:39:55 2025 GMT Not After : May 2 05:39:55 2025 GMT Subject: CN=680b202b-9d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f1:8e:e2:e6:9f:46:0f:cb:fd:02:cd:20:aa: d2:8c:de:16:0c:5d:2c:cf:a8:4d:a2:97:2c:24:91: 5b:05:32:17:91:03:57:65:c9:d5:08:65:c6:a8:c0: fa:70:94:a9:9a:c2:b3:94:77:a9:03:6b:1a:6b:49: 69:bf:01:b6:e1:24:3b:8f:1a:3f:16:bf:50:1f:1b: dc:94:c0:9e:1b:04:30:a3:68:f9:f4:0e:18:30:95: 28:9f:a7:db:e6:87:08:64:8c:16:c1:6d:5b:50:51: fc:99:7e:5b:ff:da:73:da:c7:52:b4:f9:20:71:38: 38:19:eb:50:26:b8:b3:40:e3:2f:a3:71:e9:82:1f: 3d:5f:04:2a:15:fc:f3:01:38:dc:e1:1f:43:d0:d0: d9:ec:5a:16:c4:67:e4:6c:1f:ec:39:5f:7b:ad:ad: 9f:35:e6:dc:8c:92:05:78:20:b1:da:6c:04:1c:56: 18:dc:6b:c4:f5:37:1e:0a:04:e7:58:c4:9b:7d:d7: c2:2e:87:6f:26:4e:6b:c5:63:02:16:d4:c7:99:51: 87:96:4d:f1:ee:34:be:be:61:17:18:88:9c:5e:c1: 74:e6:c9:e2:f8:6b:fd:29:97:8f:85:7b:fc:56:c6: 40:c3:c9:69:fb:e2:ad:72:c2:2d:5c:22:2c:5c:54: 1a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3D:22:42:92:72:B5:23:EB:9E:04:34:B5:E6:05:5B:FF:98:04:BC X509v3 Authority Key Identifier: keyid:BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:1e:64:d3:ec:28:2e:19:0f:6f:15:27:68:d3:50:a7:d5:00: 7f:f2:b8:56:f8:84:dc:40:f1:93:92:6d:72:04:0c:b6:51:2d: 7d:f6:27:d7:e1:bb:98:57:fe:80:36:05:bc:5b:36:dc:2d:08: ca:d2:86:c5:1d:08:1e:53:11:f6:6d:09:12:ed:36:a2:cd:43: c8:e5:a7:c3:f5:4f:bb:d8:d9:91:cb:67:ef:52:6f:1e:ab:0b: ca:5c:be:90:2c:06:ef:b1:a3:57:c2:a1:45:50:52:66:30:4d: f5:6a:2a:5b:06:02:9c:e7:80:5b:fa:78:e0:da:6f:5e:18:ce: 63:13:1e:a7:f1:59:8c:33:6d:9b:f0:d8:cd:55:c4:a3:42:c4: 2b:8f:39:1f:d9:58:7c:b8:e5:96:1a:25:e6:5b:bc:ac:ac:fc: 4a:49:00:c1:0f:09:63:7b:47:0c:7e:b0:aa:9a:f2:de:58:1f: dc:05:3f:bf:46:e3:1c:e2:72:30:0a:e0:60:d6:da:46:6b:17: 61:32:47:87:45:f4:79:7d:0e:1e:5e:55:fb:e2:26:78:97:d8: 95:f3:e3:ce:04:c1:cb:24:ed:9f:ac:44:95:b1:1d:35:ae:b1: 43:68:5b:f3:a5:3f:b5:35:b9:54:34:bc:15:89:c9:ac:23:98: 67:5a:94:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGNjQxMTAvBgNVBAUTKEJEQzRBNTE2MzMxN0Y3MzA5N0YwMjdBMzQyQjg2MEE3 OTJEN0YxREMwHhcNMjUwNDI1MDUzOTU1WhcNMjUwNTAyMDUzOTU1WjAYMRYwFAYD VQQDEw02ODBiMjAyYi05ZDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/GO4uafRg/L/QLNIKrSjN4WDF0sz6hNopcsJJFbBTIXkQNXZcnVCGXGqMD6 cJSpmsKzlHepA2saa0lpvwG24SQ7jxo/Fr9QHxvclMCeGwQwo2j59A4YMJUon6fb 5ocIZIwWwW1bUFH8mX5b/9pz2sdStPkgcTg4GetQJrizQOMvo3Hpgh89XwQqFfzz ATjc4R9D0NDZ7FoWxGfkbB/sOV97ra2fNebcjJIFeCCx2mwEHFYY3GvE9TceCgTn WMSbfdfCLodvJk5rxWMCFtTHmVGHlk3x7jS+vmEXGIicXsF05sni+Gv9KZePhXv8 VsZAw8lp++KtcsItXCIsXFQazQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPw9IkKS crUj654ENLXmBVv/mAS8MB8GA1UdIwQYMBaAFL3EpRYzF/cwl/Ano0K4YKeS1/Hc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2NC84MDkzODQ2NDYy NEIxMUVGQUIxMjBGNEZDNEY5QUUwMi92Y1NsRmpNWDl6Q1g4Q2VqUXJoZ3A1TFg4 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZjU2xGak1YOXpDWDhDZWpRcmhncDVMWDhkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUY2NC84MDkzODQ2NDYyNEIxMUVGQUIxMjBGNEZDNEY5QUUwMi92Y1NsRmpNWDl6 Q1g4Q2VqUXJoZ3A1TFg4ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxHmTT7CguGQ9vFSdo01Cn1QB/8rhW+ITcQPGTkm1yBAy2US199ifX 4buYV/6ANgW8WzbcLQjK0obFHQgeUxH2bQkS7TaizUPI5afD9U+72NmRy2fvUm8e qwvKXL6QLAbvsaNXwqFFUFJmME31aipbBgKc54Bb+njg2m9eGM5jEx6n8VmMM22b 8NjNVcSjQsQrjzkf2Vh8uOWWGiXmW7ysrPxKSQDBDwlje0cMfrCqmvLeWB/cBT+/ RuMc4nIwCuBg1tpGaxdhMkeHRfR5fQ4eXlX74iZ4l9iV8+POBMHLJO2frESVsR01 rrFDaFvzpT+1NblUNLwVicmsI5hnWpRP -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:50 2025 by rpki-client