$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.mft File: f_vcP3eaj5llMF597lHmpsU1_7g.mft (raw, json) Hash identifier: dJLZ5aB+zWLf62JspNaDcKQ6SOXFgIZ6OA+c+0zIayQ= Subject key identifier: 03:7F:EE:DA:26:9F:D8:95:C5:F7:EB:B9:64:38:E8:21:49:06:65:9C Authority key identifier: 7F:FB:DC:3F:77:9A:8F:99:65:30:5E:7D:EE:51:E6:A6:C5:35:FF:B8 Certificate issuer: /CN=A9196E05/serialNumber=7FFBDC3F779A8F9965305E7DEE51E6A6C535FFB8 Certificate serial: 0848 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.mft Manifest number: 0834 Signing time: Thu 24 Apr 2025 20:39:56 +0000 Manifest this update: Thu 24 Apr 2025 20:39:55 +0000 Manifest next update: Thu 01 May 2025 20:39:55 +0000 Files and hashes: 1: f_vcP3eaj5llMF597lHmpsU1_7g.crl (hash: t6qMN6m7BW/X2PDapMjGjqP1GiAY3pW9oBwO4IuZmSQ=) 2: B3C00B80CD6111ED9BB1B571C4F9AE02.roa (hash: 1uFjTFe9Amsbq8/7U9vAw2GFeZcNsCf1O+GdbeaI35g=) 3: EF76C18C071C11EF9CF42877C4F9AE02.roa (hash: E3TzLkNtv/k+JSiXVZ+yE4299EE9gUcobjsGLwBVBpk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.crl rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2120 (0x848) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196E05, serialNumber=7FFBDC3F779A8F9965305E7DEE51E6A6C535FFB8 Validity Not Before: Apr 24 20:39:55 2025 GMT Not After : May 1 20:39:55 2025 GMT Subject: CN=680aa19c-2cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4f:3b:e3:3b:b3:28:5f:88:0b:99:77:ad:b3: f9:8d:1f:3b:db:bb:a6:31:08:c2:be:df:9f:a9:49: 3d:4e:ba:3e:49:51:1e:bc:64:c4:9a:b4:d2:cb:df: 4a:4e:6b:4b:b0:dd:9a:55:b8:54:9f:78:c9:94:d4: 83:ea:65:15:b1:25:ab:d5:79:9d:11:bf:a7:d3:0b: bd:d0:5b:0f:15:0d:74:0f:35:91:96:a8:72:ac:be: 08:d8:a4:5e:47:5e:df:3f:d7:ec:78:a6:08:f1:b8: df:d9:b6:d6:74:a9:93:c2:86:bd:95:5a:45:33:1f: d0:2d:50:ba:ec:d5:aa:0c:5c:53:fc:c1:3f:67:d5: 53:92:19:72:d3:6c:84:d9:45:1a:82:8a:4d:23:ee: 9f:6f:8f:ae:4a:ab:bd:3d:53:3d:4c:50:c8:3e:bc: 58:48:7b:79:db:96:5d:a4:bc:18:c9:1b:23:e6:dd: f0:c9:6f:99:37:13:41:7f:ad:92:7a:df:88:29:cb: fa:47:71:fc:8c:f8:c2:09:e5:0d:ff:e5:ac:e7:f0: a9:1e:2e:b8:a3:88:bf:6e:90:5d:7e:17:7b:a6:85: ec:99:fc:ac:97:04:19:32:b9:69:95:51:df:ef:70: 08:76:91:f7:a0:dc:24:5f:43:af:7b:5b:86:37:94: f7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7F:EE:DA:26:9F:D8:95:C5:F7:EB:B9:64:38:E8:21:49:06:65:9C X509v3 Authority Key Identifier: keyid:7F:FB:DC:3F:77:9A:8F:99:65:30:5E:7D:EE:51:E6:A6:C5:35:FF:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ca:4d:0f:9a:17:43:53:13:cb:ea:4a:2d:12:14:77:84:01: 2e:05:bb:ff:b0:10:3f:38:71:e5:55:42:04:db:70:cf:20:64: 12:d4:25:c4:e7:74:91:5a:03:23:a5:bb:f2:9f:90:0d:e0:b7: 97:e0:96:a1:f5:35:44:8f:96:93:97:d1:b0:6f:a5:af:62:11: a6:79:c3:15:26:b5:06:9a:bd:cb:0e:0e:72:d3:89:16:18:f9: db:f3:61:66:9c:b3:da:dc:c5:65:56:ba:bc:15:d6:00:12:3c: 54:11:4e:76:75:4a:74:d1:2d:b9:3c:b6:29:4b:e1:50:12:e9: 6d:1c:76:b5:3c:e5:95:17:03:8f:36:d0:a2:14:31:26:ab:74: 10:23:2d:59:0b:16:a0:80:a6:e2:ed:ee:60:4f:3e:ca:6d:4b: 35:b0:53:76:27:1e:15:f1:e8:33:06:8e:3c:6d:b6:c8:68:43: d6:bc:7b:bc:c2:e8:b8:d8:89:ed:80:01:10:10:c4:d8:eb:a1: c0:1a:ea:fb:76:6b:24:62:36:d4:17:28:3f:d8:93:3f:ff:1c: 2c:02:b3:2c:ee:ba:83:8b:74:37:b7:22:d1:e3:97:ee:cb:18: a7:a1:38:1d:91:65:e5:f3:93:52:06:17:a2:0d:c8:55:41:e0: 3f:5a:e2:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZFMDUxMTAvBgNVBAUTKDdGRkJEQzNGNzc5QThGOTk2NTMwNUU3REVFNTFFNkE2 QzUzNUZGQjgwHhcNMjUwNDI0MjAzOTU1WhcNMjUwNTAxMjAzOTU1WjAYMRYwFAYD VQQDEw02ODBhYTE5Yy0yY2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyk874zuzKF+IC5l3rbP5jR8727umMQjCvt+fqUk9Tro+SVEevGTEmrTSy99K TmtLsN2aVbhUn3jJlNSD6mUVsSWr1XmdEb+n0wu90FsPFQ10DzWRlqhyrL4I2KRe R17fP9fseKYI8bjf2bbWdKmTwoa9lVpFMx/QLVC67NWqDFxT/ME/Z9VTkhly02yE 2UUagopNI+6fb4+uSqu9PVM9TFDIPrxYSHt525ZdpLwYyRsj5t3wyW+ZNxNBf62S et+IKcv6R3H8jPjCCeUN/+Ws5/CpHi64o4i/bpBdfhd7poXsmfyslwQZMrlplVHf 73AIdpH3oNwkX0Ove1uGN5T3AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAN/7tom n9iVxffruWQ46CFJBmWcMB8GA1UdIwQYMBaAFH/73D93mo+ZZTBefe5R5qbFNf+4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkUwNS80Mjk1NTUxMENF NTMxMUVBOEU4QzkyNENDNEY5QUUwMi9mX3ZjUDNlYWo1bGxNRjU5N2xIbXBzVTFf N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfdmNQM2VhajVsbE1GNTk3bEhtcHNVMV83Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkUwNS80Mjk1NTUxMENFNTMxMUVBOEU4QzkyNENDNEY5QUUwMi9mX3ZjUDNlYWo1 bGxNRjU5N2xIbXBzVTFfN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPyk0PmhdDUxPL6kotEhR3hAEuBbv/sBA/OHHlVUIE23DPIGQS1CXE 53SRWgMjpbvyn5AN4LeX4Jah9TVEj5aTl9Gwb6WvYhGmecMVJrUGmr3LDg5y04kW GPnb82FmnLPa3MVlVrq8FdYAEjxUEU52dUp00S25PLYpS+FQEultHHa1POWVFwOP NtCiFDEmq3QQIy1ZCxaggKbi7e5gTz7KbUs1sFN2Jx4V8egzBo48bbbIaEPWvHu8 wui42IntgAEQEMTY66HAGur7dmskYjbUFyg/2JM//xwsArMs7rqDi3Q3tyLR45fu yxinoTgdkWXl85NSBheiDchVQeA/WuLT -----END CERTIFICATE-----Generated at Sat Apr 26 17:00:04 2025 by rpki-client