$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft File: VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft (raw, json) Hash identifier: Q2MOo8V4UIUmX4OgfBSqPTnjybmIuEXf3boO/JqGzvg= Subject key identifier: 46:9E:32:64:18:3D:50:6F:AB:31:04:CD:DC:70:34:29:2F:81:27:5E Authority key identifier: 55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 Certificate issuer: /CN=A91C23DC/serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Certificate serial: 0C28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft Manifest number: 0C1A Signing time: Thu 24 Apr 2025 18:32:37 +0000 Manifest this update: Thu 24 Apr 2025 18:32:36 +0000 Manifest next update: Thu 01 May 2025 18:32:36 +0000 Files and hashes: 1: VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl (hash: tFtOozAhAPrM1s+ELuEz6qg616m2pKnyiySMqyK2LA4=) 2: 598BD2E268D111ED99477B87C4F9AE02.roa (hash: CC9X+3CcYjfvDOG+Jd491zfowlADhabzoyJw/gqJGUg=) 3: 5AA3FD0868D111ED99477B87C4F9AE02.roa (hash: erICH0cme0SAzh4DFMOpR5Ja+e0q51Z/KWddXql4mQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3112 (0xc28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23DC, serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Validity Not Before: Apr 24 18:32:36 2025 GMT Not After : May 1 18:32:36 2025 GMT Subject: CN=680a83c5-26e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:18:14:7e:1e:fa:9e:b0:9f:17:7b:92:0e: 94:8d:99:4c:10:25:1f:82:d5:20:c0:91:5b:89:c4: ea:c8:59:76:cd:af:e9:02:07:dc:5a:ce:79:18:18: 2c:6f:9f:81:d5:85:d4:40:17:65:24:8a:e0:a5:83: 78:48:cc:3b:3c:54:fc:92:03:70:51:34:56:b3:37: 94:11:dc:6c:9e:1d:f7:9e:6c:a1:7b:9c:1e:f1:c1: 29:d5:81:32:ee:e0:22:fc:14:aa:e7:74:e2:d6:f9: ff:9e:10:88:fa:5e:ef:ec:f0:7c:0b:e3:6e:c3:32: 5a:21:84:8f:d2:f6:23:30:b9:75:ce:08:08:e3:95: 55:e0:db:42:c8:12:7f:70:3d:35:d4:d9:1f:f7:ad: 07:95:66:b7:85:81:16:1f:8f:c3:39:c6:4d:96:9b: da:47:34:8f:ec:43:70:c3:01:e6:cb:d2:db:55:ac: 92:4d:c0:36:bd:53:04:13:95:27:b7:14:9f:a2:cc: 74:c6:3e:70:97:51:9a:d9:98:28:7c:98:21:17:c9: 1c:60:b2:d6:b5:e5:c1:f7:be:7d:bb:d1:3e:6d:a1: f9:06:9b:2d:2f:aa:42:2c:c3:ee:55:4b:79:ba:c4: ba:34:b5:bf:f9:af:3b:ab:30:e4:d1:9d:d8:b6:dd: a1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9E:32:64:18:3D:50:6F:AB:31:04:CD:DC:70:34:29:2F:81:27:5E X509v3 Authority Key Identifier: keyid:55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:3f:a1:60:82:5a:df:0d:21:63:84:15:71:12:c8:9d:1d:f7: 18:d0:92:93:6c:b5:d8:ee:76:d9:0a:e2:2b:86:d2:6d:37:a2: 2f:67:8f:cd:de:ba:71:0c:90:5e:af:b1:16:e7:fc:23:b9:d2: ab:ca:d8:7c:9e:eb:74:b1:53:81:b7:92:3d:5e:57:75:6c:53: f3:17:bf:d2:6e:52:56:68:fa:39:2b:3e:9a:04:ee:05:80:d7: e2:74:93:f3:13:fd:35:57:b5:21:68:be:b2:b2:5f:75:bc:f8: 79:15:c8:04:64:c7:f8:0a:d6:f9:fb:49:d9:c6:93:09:9d:94: b7:3c:4a:71:37:70:74:ec:ca:3a:c3:a6:9d:16:bb:aa:00:76: b1:2a:6a:93:35:3b:c5:03:b7:2d:fc:58:f8:9c:81:41:23:8d: a7:de:a4:89:81:11:be:19:f5:49:95:23:60:db:aa:81:c3:b7: 9f:1e:26:03:d2:95:1f:16:c6:e1:ca:b9:58:41:2c:ba:7a:e6: 25:67:9c:b6:a1:f7:f7:99:56:70:4b:87:0e:db:92:18:c5:fd: ac:d2:73:f7:a9:54:36:9c:bb:d9:b1:91:8c:ea:08:13:7b:b6: 75:28:92:ef:be:1f:e3:db:c6:e4:1c:bc:a5:38:8a:e0:6b:0c: 17:d5:7b:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzREMxMTAvBgNVBAUTKDU1RjJFNDg3NDAwNThFOEZDQzRGOTAxQTRBMzNFMUY0 MTc2MjAwRjgwHhcNMjUwNDI0MTgzMjM2WhcNMjUwNTAxMTgzMjM2WjAYMRYwFAYD VQQDEw02ODBhODNjNS0yNmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJ4YFH4e+p6wnxd7kg6UjZlMECUfgtUgwJFbicTqyFl2za/pAgfcWs55GBgs b5+B1YXUQBdlJIrgpYN4SMw7PFT8kgNwUTRWszeUEdxsnh33nmyhe5we8cEp1YEy 7uAi/BSq53Ti1vn/nhCI+l7v7PB8C+NuwzJaIYSP0vYjMLl1zggI45VV4NtCyBJ/ cD011Nkf960HlWa3hYEWH4/DOcZNlpvaRzSP7ENwwwHmy9LbVaySTcA2vVMEE5Un txSfosx0xj5wl1Ga2ZgofJghF8kcYLLWteXB9759u9E+baH5BpstL6pCLMPuVUt5 usS6NLW/+a87qzDk0Z3Ytt2hgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaeMmQY PVBvqzEEzdxwNCkvgSdeMB8GA1UdIwQYMBaAFFXy5IdABY6PzE+QGkoz4fQXYgD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNEQy8wNjYzOUY4NjBB OTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpvX01UNUFhU2pQaDlCZGlB UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZmTGtoMEFGam9fTVQ1QWFTalBoOUJkaUFQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjNEQy8wNjYzOUY4NjBBOTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpv X01UNUFhU2pQaDlCZGlBUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnP6FgglrfDSFjhBVxEsidHfcY0JKTbLXY7nbZCuIrhtJtN6IvZ4/N 3rpxDJBer7EW5/wjudKryth8nut0sVOBt5I9Xld1bFPzF7/SblJWaPo5Kz6aBO4F gNfidJPzE/01V7UhaL6ysl91vPh5FcgEZMf4Ctb5+0nZxpMJnZS3PEpxN3B07Mo6 w6adFruqAHaxKmqTNTvFA7ct/Fj4nIFBI42n3qSJgRG+GfVJlSNg26qBw7efHiYD 0pUfFsbhyrlYQSy6euYlZ5y2off3mVZwS4cO25IYxf2s0nP3qVQ2nLvZsZGM6ggT e7Z1KJLvvh/j28bkHLylOIrgawwX1Xua -----END CERTIFICATE-----Generated at Sat Apr 26 16:50:28 2025 by rpki-client