$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft File: vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft (raw, json) Hash identifier: Vp9zqoU5Vdg3bCfdJtgrOozDmHs+09dFcWNiXch/VDw= Subject key identifier: 38:17:18:5C:8D:72:A7:9C:A5:F0:AF:3A:B8:F2:61:32:0E:0B:76:86 Authority key identifier: BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF Certificate issuer: /CN=A91ACC41/serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF Certificate serial: 0C1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft Manifest number: 0C15 Signing time: Thu 24 Apr 2025 18:31:50 +0000 Manifest this update: Thu 24 Apr 2025 18:31:50 +0000 Manifest next update: Thu 01 May 2025 18:31:50 +0000 Files and hashes: 1: vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl (hash: rExIq2W0N7B4zWrE6jbtFfIqsZMeOUeuE5neBqWmUvM=) 2: 674009AE09D811EA9BCFCE1EC4F9AE02.roa (hash: 6L60AAj2lTmMuUfie+8gmkdZ9wTJGKc1X+KnYu5hWQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3099 (0xc1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACC41, serialNumber=BDD5EB156338393D744DAE2FC532D5832BC785BF Validity Not Before: Apr 24 18:31:50 2025 GMT Not After : May 1 18:31:50 2025 GMT Subject: CN=680a8396-7c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c9:29:5b:e5:55:4d:1d:dd:b8:13:c3:7a:eb: ef:8e:b1:cc:13:b0:19:0a:b5:3f:71:e9:1a:5b:da: 1b:14:d0:83:c5:d0:7e:f3:dd:f6:37:e2:e9:8d:5e: c9:7d:15:81:04:6f:69:19:5a:0f:b0:e7:61:23:06: 2e:85:a0:fb:9a:03:cc:d4:23:34:37:bf:a0:55:18: dc:52:44:5a:53:66:0b:01:30:a6:9e:a3:18:fe:b1: ec:38:e4:f4:a4:47:4b:99:fc:7f:4b:ac:4c:f4:3f: 51:2a:ed:38:cf:21:da:23:0a:02:88:8c:88:08:b7: d7:8e:d0:d8:b2:f9:78:9c:92:09:37:39:fd:7f:23: da:4c:a3:dd:36:d4:d7:bc:c7:05:cc:98:3e:ab:1c: 6f:62:4d:2e:c0:80:fe:77:3b:9f:ac:75:41:31:7c: d4:39:e4:e7:e6:e4:c1:37:63:d7:10:ee:25:98:cb: 84:37:fe:2c:ca:38:aa:52:5f:f2:9d:a5:78:ac:be: 4f:4b:0a:1f:9c:a8:9d:7d:52:4d:64:ac:73:43:48: 46:f4:71:a7:9b:c1:96:26:8e:40:af:9f:5b:62:38: 92:be:2e:7d:8c:29:f2:92:e3:ff:50:11:a1:18:e5: 53:0b:e3:eb:28:28:0f:58:93:0d:13:9c:7f:12:4d: 4c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:17:18:5C:8D:72:A7:9C:A5:F0:AF:3A:B8:F2:61:32:0E:0B:76:86 X509v3 Authority Key Identifier: keyid:BD:D5:EB:15:63:38:39:3D:74:4D:AE:2F:C5:32:D5:83:2B:C7:85:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vdXrFWM4OT10Ta4vxTLVgyvHhb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC41/E6BA544809D611EA9D299E1CC4F9AE02/vdXrFWM4OT10Ta4vxTLVgyvHhb8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:16:02:77:de:9e:9d:2b:2b:6d:ce:10:27:06:33:e1:49:23: de:ac:6a:0b:af:f1:1e:c8:5b:76:9e:3d:62:e7:a5:a7:b4:ce: 5c:8f:5a:35:83:b5:bd:61:7c:18:22:81:3b:59:1d:1d:86:fc: 1d:35:e8:e9:c5:8c:d9:04:3d:00:19:c6:7b:9d:3c:52:b6:78: a9:f9:c1:e0:d8:84:d1:b3:e8:bb:e5:35:71:dc:10:ac:a2:4c: b4:14:44:16:0b:fe:77:87:bc:3b:e3:88:ee:a6:f9:51:e4:e7: 23:72:b2:96:8f:b6:f9:4a:ad:4c:da:e5:61:7b:0a:7e:03:7b: 94:4e:fe:a1:3a:d5:e6:73:fa:27:c3:e9:fb:96:39:ff:a2:17: 14:6d:ee:db:18:8a:bf:97:de:f1:c0:0d:7f:e6:e0:e0:d3:be: 98:53:95:58:9d:24:5e:68:a7:c1:aa:0f:49:52:a9:5d:6d:c2: 0e:71:09:73:87:1a:3b:cc:e2:5d:ea:16:cd:35:7b:eb:07:8c: 96:df:4e:94:1b:0d:65:13:93:ec:d6:1f:7b:84:e9:fc:23:2d: da:54:84:51:c1:b9:5f:39:51:2c:85:5e:ba:6f:c0:03:09:76: 65:ef:83:b7:49:ae:7e:d3:5a:c1:35:1a:2f:85:99:35:09:31: 41:10:87:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNDNDExMTAvBgNVBAUTKEJERDVFQjE1NjMzODM5M0Q3NDREQUUyRkM1MzJENTgz MkJDNzg1QkYwHhcNMjUwNDI0MTgzMTUwWhcNMjUwNTAxMTgzMTUwWjAYMRYwFAYD VQQDEw02ODBhODM5Ni03YzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MkpW+VVTR3duBPDeuvvjrHME7AZCrU/cekaW9obFNCDxdB+8932N+LpjV7J fRWBBG9pGVoPsOdhIwYuhaD7mgPM1CM0N7+gVRjcUkRaU2YLATCmnqMY/rHsOOT0 pEdLmfx/S6xM9D9RKu04zyHaIwoCiIyICLfXjtDYsvl4nJIJNzn9fyPaTKPdNtTX vMcFzJg+qxxvYk0uwID+dzufrHVBMXzUOeTn5uTBN2PXEO4lmMuEN/4syjiqUl/y naV4rL5PSwofnKidfVJNZKxzQ0hG9HGnm8GWJo5Ar59bYjiSvi59jCnykuP/UBGh GOVTC+PrKCgPWJMNE5x/Ek1MhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgXGFyN cqecpfCvOrjyYTIOC3aGMB8GA1UdIwQYMBaAFL3V6xVjODk9dE2uL8Uy1YMrx4W/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0M0MS9FNkJBNTQ0ODA5 RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9UMTBUYTR2eFRMVmd5dkho YjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZkWHJGV000T1QxMFRhNHZ4VExWZ3l2SGhiOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0M0MS9FNkJBNTQ0ODA5RDYxMUVBOUQyOTlFMUNDNEY5QUUwMi92ZFhyRldNNE9U MTBUYTR2eFRMVmd5dkhoYjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+FgJ33p6dKyttzhAnBjPhSSPerGoLr/EeyFt2nj1i56WntM5cj1o1 g7W9YXwYIoE7WR0dhvwdNejpxYzZBD0AGcZ7nTxStnip+cHg2ITRs+i75TVx3BCs oky0FEQWC/53h7w744jupvlR5OcjcrKWj7b5Sq1M2uVhewp+A3uUTv6hOtXmc/on w+n7ljn/ohcUbe7bGIq/l97xwA1/5uDg076YU5VYnSReaKfBqg9JUqldbcIOcQlz hxo7zOJd6hbNNXvrB4yW306UGw1lE5Ps1h97hOn8Iy3aVIRRwblfOVEshV66b8AD CXZl74O3Sa5+01rBNRovhZk1CTFBEIco -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:28 2025 by rpki-client