$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft File: vsKCSG834xbxe1ILRVKHvDB_ieg.mft (raw, json) Hash identifier: YuqxXEHVDYt47gOqHEmr2JQZBhtSdYL0H3kT3CXNf60= Subject key identifier: 02:EC:43:C7:A8:D0:3C:D9:37:F9:82:72:56:1A:AB:91:C8:EE:80:72 Authority key identifier: BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8 Certificate issuer: /CN=A918A469/serialNumber=BEC282486F37E316F17B520B455287BC307F89E8 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft Manifest number: C2 Signing time: Fri 25 Apr 2025 04:51:42 +0000 Manifest this update: Fri 25 Apr 2025 04:51:42 +0000 Manifest next update: Fri 02 May 2025 04:51:42 +0000 Files and hashes: 1: vsKCSG834xbxe1ILRVKHvDB_ieg.crl (hash: Zh+nLRRy36UwDxDztedozOGDiIiseL1tXOHqaMCl5IM=) 2: 71403B04F7E511EEBC67981CC4F9AE02.roa (hash: gx9z09oQ5hTA8YH4iSWgc7528eikGurKJ+1nJAQYPAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:51:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A469, serialNumber=BEC282486F37E316F17B520B455287BC307F89E8 Validity Not Before: Apr 25 04:51:42 2025 GMT Not After : May 2 04:51:42 2025 GMT Subject: CN=680b14de-c962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a5:1b:70:30:d1:1c:92:17:ba:7e:5e:a9:b5: 06:ea:49:19:7e:7b:ba:3e:62:b7:44:71:f6:d6:dc: eb:91:f1:0f:31:90:39:5f:c6:8b:4b:93:a9:92:74: d6:d8:7a:60:11:08:5e:94:ba:be:2d:0f:79:1a:89: c3:a8:b6:6a:ec:03:fc:13:55:97:32:9e:c1:8e:ec: 23:44:54:2e:6b:07:e7:2a:1b:91:8c:bd:ba:ea:13: 68:25:5a:56:a6:92:02:80:fc:af:82:21:d2:3f:ae: 6a:45:c9:ae:7f:33:8a:15:2b:ac:28:d5:22:7f:c9: 32:fc:8e:8b:ad:11:1c:df:dc:5e:02:33:6b:3a:12: b5:2f:cb:09:56:ed:79:2d:fc:0d:5d:28:c5:66:d8: e6:83:d6:a2:73:c3:4a:27:a3:83:c8:45:60:77:67: 2e:05:df:ef:8c:a7:39:09:bb:41:75:c7:38:a5:ca: c0:31:22:c8:b8:cb:9b:35:51:6f:2e:83:00:09:94: 6b:a4:a7:8b:bc:17:ba:96:c5:68:0c:2c:41:fd:de: c5:a4:27:09:5f:45:92:62:ca:a8:68:b7:73:34:ab: ea:1a:2a:67:b7:a1:d3:76:55:7a:90:f2:32:12:14: e4:be:8f:e0:2d:79:47:2f:fd:81:77:9b:3f:2a:b5: f4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EC:43:C7:A8:D0:3C:D9:37:F9:82:72:56:1A:AB:91:C8:EE:80:72 X509v3 Authority Key Identifier: keyid:BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:92:94:9f:26:34:8d:bc:41:09:1e:44:1a:fa:6e:4c:90:f9: 58:df:64:f9:62:29:76:4b:50:e5:dc:9c:42:fd:1b:9e:8a:f9: 10:83:a6:3a:9e:09:84:9f:8a:62:9f:4e:79:d4:3e:6e:af:dd: 4d:9f:9d:93:74:3e:c9:9f:80:07:bf:e3:cb:3c:99:44:a7:7e: f2:be:36:bb:dc:fb:5b:73:0a:e6:8c:8c:0b:33:ff:a1:31:11: 5d:14:11:bd:1b:04:4a:61:07:66:dc:c2:5e:5e:25:a3:43:d2: d6:9f:61:9c:d6:87:3d:4f:fb:c5:45:02:48:b5:40:7b:1a:b0: 72:79:f5:7d:29:33:fa:5b:e5:7c:df:f7:ae:4f:e0:38:71:a2: aa:41:33:51:c0:9e:d9:4f:40:0a:10:37:a9:dc:c9:cf:9e:53: dc:d2:a7:6b:0e:ed:da:42:94:40:e9:6b:3d:1c:e9:05:c2:1b: 29:e5:56:b2:b5:6a:a1:83:25:e3:81:a1:fc:82:6f:e5:ab:26: a6:f7:ef:0f:11:0a:f6:c8:fa:0d:08:89:36:9a:6b:e9:6f:89: de:0b:18:5d:65:a4:0e:9b:01:09:ff:3e:d3:f6:37:62:f8:8c: db:c2:42:a9:1f:d9:45:e8:58:2e:1e:9e:52:0d:a8:d1:2e:9f: 95:f9:b2:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE0NjkxMTAvBgNVBAUTKEJFQzI4MjQ4NkYzN0UzMTZGMTdCNTIwQjQ1NTI4N0JD MzA3Rjg5RTgwHhcNMjUwNDI1MDQ1MTQyWhcNMjUwNTAyMDQ1MTQyWjAYMRYwFAYD VQQDEw02ODBiMTRkZS1jOTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqUbcDDRHJIXun5eqbUG6kkZfnu6PmK3RHH21tzrkfEPMZA5X8aLS5OpknTW 2HpgEQhelLq+LQ95GonDqLZq7AP8E1WXMp7BjuwjRFQuawfnKhuRjL266hNoJVpW ppICgPyvgiHSP65qRcmufzOKFSusKNUif8ky/I6LrREc39xeAjNrOhK1L8sJVu15 LfwNXSjFZtjmg9aic8NKJ6ODyEVgd2cuBd/vjKc5CbtBdcc4pcrAMSLIuMubNVFv LoMACZRrpKeLvBe6lsVoDCxB/d7FpCcJX0WSYsqoaLdzNKvqGipnt6HTdlV6kPIy EhTkvo/gLXlHL/2Bd5s/KrX0MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALsQ8eo 0DzZN/mCclYaq5HI7oByMB8GA1UdIwQYMBaAFL7CgkhvN+MW8XtSC0VSh7wwf4no MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTQ2OS9GNTg0MzhGRUY3 RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi92c0tDU0c4MzR4YnhlMUlMUlZLSHZEQl9p ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZzS0NTRzgzNHhieGUxSUxSVktIdkRCX2llZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTQ2OS9GNTg0MzhGRUY3RTMxMUVFQjlBMTI5MUFDNEY5QUUwMi92c0tDU0c4MzR4 YnhlMUlMUlZLSHZEQl9pZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpkpSfJjSNvEEJHkQa+m5MkPlY32T5Yil2S1Dl3JxC/RueivkQg6Y6 ngmEn4pin0551D5ur91Nn52TdD7Jn4AHv+PLPJlEp37yvja73PtbcwrmjIwLM/+h MRFdFBG9GwRKYQdm3MJeXiWjQ9LWn2Gc1oc9T/vFRQJItUB7GrByefV9KTP6W+V8 3/euT+A4caKqQTNRwJ7ZT0AKEDep3MnPnlPc0qdrDu3aQpRA6Ws9HOkFwhsp5Vay tWqhgyXjgaH8gm/lqyam9+8PEQr2yPoNCIk2mmvpb4neCxhdZaQOmwEJ/z7T9jdi +IzbwkKpH9lF6FguHp5SDajRLp+V+bKn -----END CERTIFICATE-----Generated at Sat Apr 26 16:17:50 2025 by rpki-client