$ rpki-client -vvf rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft File: VRHewp3K7aF782u_M5UycVnxSoE.mft (raw, json) Hash identifier: YCX+vcn+ZpSQ6PJj96ZpTLtH2FWLavAb4sNd8OPxjWg= Subject key identifier: BB:91:10:DA:47:F9:62:6E:15:7E:5E:9A:63:D9:EA:52:9A:23:C9:48 Authority key identifier: 55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 Certificate issuer: /CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Certificate serial: 0C6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft Manifest number: 0C5B Signing time: Thu 24 Apr 2025 18:15:02 +0000 Manifest this update: Thu 24 Apr 2025 18:15:01 +0000 Manifest next update: Thu 01 May 2025 18:15:01 +0000 Files and hashes: 1: VRHewp3K7aF782u_M5UycVnxSoE.crl (hash: AyTGbjWDz5zzO7H49KLOKK9dfZRWdfdJLlLXdFGNBQg=) 2: F3E543B4CBB611EB94FE6E68C4F9AE02.roa (hash: ZXJMtYkkqA7hHeKOhLlOV4cY6XESDyR/pKiToP5eSgg=) 3: F2B52DF6CBB611EB94FE6E68C4F9AE02.roa (hash: pSxfk0FHnFoiI4DMtbpzZ2ySSBds/zGBYa4EKLwgCes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3183 (0xc6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192248, serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Validity Not Before: Apr 24 18:15:01 2025 GMT Not After : May 1 18:15:01 2025 GMT Subject: CN=680a7fa5-a5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:76:59:e3:f2:01:1d:75:0a:eb:ca:91:42:ad: 17:99:c9:97:a0:44:22:c1:a2:d6:ba:45:f7:37:0c: ef:5a:26:9c:9d:10:f3:03:70:0e:81:57:f5:43:67: 90:e8:a3:4f:c1:7c:fe:d0:7a:6d:16:15:ae:3b:84: 09:c8:ae:bd:ad:dc:48:09:12:50:be:74:8c:d8:41: f6:3b:e5:36:07:e9:66:56:f0:f3:60:fa:7c:ef:a0: 45:4d:20:f2:ae:33:96:14:31:b8:1f:35:1d:1f:02: de:78:3e:bd:fb:3b:1e:67:27:a0:37:e4:f2:c1:62: 93:fc:52:3c:78:e8:86:54:f2:25:d4:60:2c:e7:17: 99:62:eb:f8:73:ab:34:13:fa:5e:20:4c:6b:c1:8a: c9:85:1f:5f:ef:1e:e4:f1:87:cc:56:fc:0d:5c:7d: 33:0b:5a:c0:8d:e0:74:5f:53:64:1e:14:dd:03:1d: c7:6f:e6:66:85:72:81:42:ab:13:d4:b3:43:4d:32: 48:da:77:33:27:ec:1e:43:a3:37:ee:9a:a1:3b:e2: 98:76:b4:8a:23:a9:34:7a:5a:74:46:02:07:ec:43: 74:6d:15:9b:1d:6a:22:a9:8b:12:82:33:a2:af:fe: f8:35:7f:34:a2:ae:ca:d1:3e:cd:68:3d:df:a6:52: 34:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:91:10:DA:47:F9:62:6E:15:7E:5E:9A:63:D9:EA:52:9A:23:C9:48 X509v3 Authority Key Identifier: keyid:55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:4f:f4:14:17:15:3b:c9:64:c8:c1:b3:91:4e:88:08:cf:73: 1b:eb:e0:c0:84:e8:ff:ec:14:54:54:b7:a7:22:de:1a:80:8a: c0:7e:45:99:ea:d8:e0:dc:48:02:4c:05:10:fa:22:aa:7a:d4: ff:1a:89:a8:36:24:25:46:f2:69:98:ba:a2:62:dc:7a:e4:ee: 1b:5f:04:5d:a2:1f:50:45:06:0b:33:3f:7d:d8:d9:0a:3a:91: e4:00:af:70:86:03:0d:70:9e:37:e2:07:16:23:53:a6:ee:51: 1b:50:0f:8a:ce:fb:b7:f1:d4:1f:5a:0e:40:28:42:61:ed:2d: 07:a1:21:a3:99:12:27:63:45:e6:51:2f:4f:00:10:4d:77:1b: 68:bf:d8:5b:96:48:89:fa:6f:1c:d5:54:b9:bd:df:8c:8b:06: 8f:cc:65:69:4c:ef:c7:1c:6c:14:dd:6e:c4:9d:75:d2:2a:4a: d2:94:23:d8:1b:1b:f7:ca:2e:d5:d7:44:9f:a2:01:a2:da:37: ff:b0:2a:81:d4:08:25:4c:fd:9f:bf:74:31:15:a1:06:bb:41: 71:b8:bc:0a:bd:01:9d:c5:54:04:7f:2e:94:89:ab:56:71:96: 85:e7:7b:82:36:49:8c:00:1f:b4:8d:90:97:0c:be:c3:1b:41: 19:20:b8:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIyNDgxMTAvBgNVBAUTKDU1MTFERUMyOURDQUVEQTE3QkYzNkJCRjMzOTUzMjcx NTlGMTRBODEwHhcNMjUwNDI0MTgxNTAxWhcNMjUwNTAxMTgxNTAxWjAYMRYwFAYD VQQDEw02ODBhN2ZhNS1hNWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznZZ4/IBHXUK68qRQq0XmcmXoEQiwaLWukX3NwzvWiacnRDzA3AOgVf1Q2eQ 6KNPwXz+0HptFhWuO4QJyK69rdxICRJQvnSM2EH2O+U2B+lmVvDzYPp876BFTSDy rjOWFDG4HzUdHwLeeD69+zseZyegN+TywWKT/FI8eOiGVPIl1GAs5xeZYuv4c6s0 E/peIExrwYrJhR9f7x7k8YfMVvwNXH0zC1rAjeB0X1NkHhTdAx3Hb+ZmhXKBQqsT 1LNDTTJI2nczJ+weQ6M37pqhO+KYdrSKI6k0elp0RgIH7EN0bRWbHWoiqYsSgjOi r/74NX80oq7K0T7NaD3fplI0ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuRENpH +WJuFX5emmPZ6lKaI8lIMB8GA1UdIwQYMBaAFFUR3sKdyu2he/NrvzOVMnFZ8UqB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjI0OC9DNzk4QTBGQUZG MDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdhRjc4MnVfTTVVeWNWbnhT b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSSGV3cDNLN2FGNzgydV9NNVV5Y1ZueFNvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjI0OC9DNzk4QTBGQUZGMDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdh Rjc4MnVfTTVVeWNWbnhTb0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3T/QUFxU7yWTIwbORTogIz3Mb6+DAhOj/7BRUVLenIt4agIrAfkWZ 6tjg3EgCTAUQ+iKqetT/GomoNiQlRvJpmLqiYtx65O4bXwRdoh9QRQYLMz992NkK OpHkAK9whgMNcJ434gcWI1Om7lEbUA+Kzvu38dQfWg5AKEJh7S0HoSGjmRInY0Xm US9PABBNdxtov9hblkiJ+m8c1VS5vd+MiwaPzGVpTO/HHGwU3W7EnXXSKkrSlCPY Gxv3yi7V10SfogGi2jf/sCqB1AglTP2fv3QxFaEGu0FxuLwKvQGdxVQEfy6UiatW cZaF53uCNkmMAB+0jZCXDL7DG0EZILjp -----END CERTIFICATE-----Generated at Sat Apr 26 15:03:55 2025 by rpki-client