$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.mft File: ViN5KFSLCC9bE8Fu3D5qfC-A_PE.mft (raw, json) Hash identifier: pDfnB3ujE5BvxCE7OnTg+Rd/owcIKoO6CPzeTph5ppY= Subject key identifier: 0A:24:4E:DA:14:67:50:FC:71:2C:15:DE:46:C1:82:F0:85:4E:59:C2 Authority key identifier: 56:23:79:28:54:8B:08:2F:5B:13:C1:6E:DC:3E:6A:7C:2F:80:FC:F1 Certificate issuer: /CN=A91AEB42/serialNumber=56237928548B082F5B13C16EDC3E6A7C2F80FCF1 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.mft Manifest number: 01DE Signing time: Fri 25 Apr 2025 02:06:36 +0000 Manifest this update: Fri 25 Apr 2025 02:06:35 +0000 Manifest next update: Fri 02 May 2025 02:06:35 +0000 Files and hashes: 1: ViN5KFSLCC9bE8Fu3D5qfC-A_PE.crl (hash: +qEbcqn+uQ3kdvXqIEnwIZcBdM8++466zkR2HMPDxx4=) 2: 7F12211CB57611EF8568F73EC4F9AE02.roa (hash: tE7lbrYSKWHXNwxQkI50sh8OrhEWZzAGOQjYNvq3v5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.crl rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEB42, serialNumber=56237928548B082F5B13C16EDC3E6A7C2F80FCF1 Validity Not Before: Apr 25 02:06:35 2025 GMT Not After : May 2 02:06:35 2025 GMT Subject: CN=680aee2b-7eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a5:7b:a5:57:ac:7c:e4:3d:c9:b3:a2:be:74: f9:7f:b9:c7:92:f1:75:c0:09:97:75:68:1a:a9:a2: a9:cb:d9:f3:e9:90:df:c4:74:0b:49:68:fb:7a:0b: 17:c7:3c:38:98:a5:f6:2d:c2:74:7d:ea:5d:c4:d9: 21:e8:fa:26:20:6c:ec:34:43:00:88:38:db:22:e1: 90:bd:ee:e0:e9:fa:0b:63:3b:2b:c5:11:69:20:85: c8:f6:4c:4f:e9:17:fd:57:2c:f8:1c:ce:6d:f4:f7: 31:ca:b5:d4:7b:34:14:5a:28:34:3a:e2:64:d1:cb: 2a:4c:92:3b:98:e3:54:66:ff:29:b8:d0:84:6a:bb: ef:13:95:bb:95:dd:d1:f7:6d:e2:d8:23:b4:ba:17: 27:9f:02:64:4f:4f:2f:e8:83:61:f7:98:e3:f1:56: af:71:e9:aa:bc:05:4a:a2:03:6b:d4:6a:a8:95:e5: 06:d1:48:0b:6d:e3:55:19:07:15:a0:a4:77:d0:8f: c3:cc:20:38:36:1c:15:37:42:c2:60:96:a0:45:cc: 6f:ea:43:91:d6:40:03:6b:23:72:38:34:0c:4f:0a: f6:ad:0f:c0:db:81:43:f1:b1:ec:52:52:6e:f8:1d: 25:59:57:f0:0a:a1:ed:55:81:4d:b0:6e:dc:b6:7e: b5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:24:4E:DA:14:67:50:FC:71:2C:15:DE:46:C1:82:F0:85:4E:59:C2 X509v3 Authority Key Identifier: keyid:56:23:79:28:54:8B:08:2F:5B:13:C1:6E:DC:3E:6A:7C:2F:80:FC:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:69:04:78:a2:e3:1e:bd:2f:4d:30:a6:e5:03:e4:48:a1:c2: b9:1b:8d:dc:d4:76:c0:ce:87:35:06:e7:01:8d:cb:fc:48:1f: 0b:f0:a4:fa:2d:af:e3:39:76:df:f9:d5:00:42:b4:b0:13:47: 16:63:09:49:75:3c:5c:da:aa:89:5c:80:eb:c2:ce:e9:fd:89: c4:36:b5:31:d9:1c:91:5e:99:7e:a2:fe:b4:47:50:81:07:21: ee:65:dd:4d:48:51:3f:44:e9:12:3a:d5:35:3b:7e:dc:dd:3d: 66:d6:4c:ba:45:03:61:a4:76:46:21:8b:48:7b:fb:ae:4f:2e: f4:37:6a:5d:88:a3:bd:d5:cf:54:40:a7:ad:de:bc:56:e6:c1: 34:28:f2:f1:c1:b1:4c:72:c2:aa:b9:79:92:19:5a:3b:77:6d: d4:59:4f:82:bb:91:11:60:5e:ff:3c:0e:40:34:2b:1f:57:c7: 8d:6c:fa:51:a8:91:7c:5f:1a:52:e6:2b:86:29:8f:03:ae:95: 09:45:f2:bf:a4:66:6c:69:93:b8:aa:34:35:20:43:f8:85:15: 48:a8:ce:5a:9c:f6:d3:46:df:db:d9:b9:9d:cb:a1:62:3d:54: ee:b4:6a:20:4f:98:ac:82:78:0e:7c:65:1d:e0:5e:64:a7:6e: 0c:5d:97:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVCNDIxMTAvBgNVBAUTKDU2MjM3OTI4NTQ4QjA4MkY1QjEzQzE2RURDM0U2QTdD MkY4MEZDRjEwHhcNMjUwNDI1MDIwNjM1WhcNMjUwNTAyMDIwNjM1WjAYMRYwFAYD VQQDEw02ODBhZWUyYi03ZWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoKV7pVesfOQ9ybOivnT5f7nHkvF1wAmXdWgaqaKpy9nz6ZDfxHQLSWj7egsX xzw4mKX2LcJ0fepdxNkh6PomIGzsNEMAiDjbIuGQve7g6foLYzsrxRFpIIXI9kxP 6Rf9Vyz4HM5t9PcxyrXUezQUWig0OuJk0csqTJI7mONUZv8puNCEarvvE5W7ld3R 923i2CO0uhcnnwJkT08v6INh95jj8VavcemqvAVKogNr1GqoleUG0UgLbeNVGQcV oKR30I/DzCA4NhwVN0LCYJagRcxv6kOR1kADayNyODQMTwr2rQ/A24FD8bHsUlJu +B0lWVfwCqHtVYFNsG7ctn615wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAokTtoU Z1D8cSwV3kbBgvCFTlnCMB8GA1UdIwQYMBaAFFYjeShUiwgvWxPBbtw+anwvgPzx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUI0Mi8xQUQ5N0I2NDZB NkUxMUVEQkI5OTAzNjNDNEY5QUUwMi9WaU41S0ZTTENDOWJFOEZ1M0Q1cWZDLUFf UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZpTjVLRlNMQ0M5YkU4RnUzRDVxZkMtQV9QRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUI0Mi8xQUQ5N0I2NDZBNkUxMUVEQkI5OTAzNjNDNEY5QUUwMi9WaU41S0ZTTEND OWJFOEZ1M0Q1cWZDLUFfUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzaQR4ouMevS9NMKblA+RIocK5G43c1HbAzoc1BucBjcv8SB8L8KT6 La/jOXbf+dUAQrSwE0cWYwlJdTxc2qqJXIDrws7p/YnENrUx2RyRXpl+ov60R1CB ByHuZd1NSFE/ROkSOtU1O37c3T1m1ky6RQNhpHZGIYtIe/uuTy70N2pdiKO91c9U QKet3rxW5sE0KPLxwbFMcsKquXmSGVo7d23UWU+Cu5ERYF7/PA5ANCsfV8eNbPpR qJF8XxpS5iuGKY8DrpUJRfK/pGZsaZO4qjQ1IEP4hRVIqM5anPbTRt/b2bmdy6Fi PVTutGogT5isgngOfGUd4F5kp24MXZdQ -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:45 2025 by rpki-client