$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.mft File: vq_Hury3142eGQgg9ussfyi7XYg.mft (raw, json) Hash identifier: 5VroGuTMgaD3uMh52LvfwzeYXpalJYpEFybQtlSG74o= Subject key identifier: E7:45:74:D2:CB:74:99:1A:DD:11:B7:E0:CB:79:8A:10:9A:E8:39:41 Authority key identifier: BE:AF:C7:BA:BC:B7:D7:8D:9E:19:08:20:F6:EB:2C:7F:28:BB:5D:88 Certificate issuer: /CN=A91D3A26/serialNumber=BEAFC7BABCB7D78D9E190820F6EB2C7F28BB5D88 Certificate serial: 062B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vq_Hury3142eGQgg9ussfyi7XYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.mft Manifest number: 0625 Signing time: Thu 24 Apr 2025 22:31:19 +0000 Manifest this update: Thu 24 Apr 2025 22:31:18 +0000 Manifest next update: Thu 01 May 2025 22:31:18 +0000 Files and hashes: 1: vq_Hury3142eGQgg9ussfyi7XYg.crl (hash: G/8XsYADTvKfWypyXAaaEaBNpM+r9JjiRjAUv5R745Q=) 2: 63D1B4C0929E11EBABC48F60C4F9AE02.roa (hash: U7lR5/SoTUzZ7N5QnHfDmyPvzjrTN8A2EyZWFjyTSno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.crl rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vq_Hury3142eGQgg9ussfyi7XYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1579 (0x62b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3A26, serialNumber=BEAFC7BABCB7D78D9E190820F6EB2C7F28BB5D88 Validity Not Before: Apr 24 22:31:18 2025 GMT Not After : May 1 22:31:18 2025 GMT Subject: CN=680abbb7-1d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:35:27:3c:f7:8f:8f:98:89:d3:7e:1c:b3:88: 61:14:95:fb:ba:00:b5:70:c8:8f:47:df:f4:e4:06: 4a:0a:70:1e:6b:f9:f5:d7:96:d0:c9:c9:ce:7e:1d: 97:71:c7:06:92:c3:f8:33:58:cf:3e:d7:0a:6f:0c: 1d:af:ed:ae:2d:77:f8:f9:d1:17:94:f6:ab:c5:5c: 0d:ed:3b:17:2b:02:7e:21:92:5d:99:bf:f1:2f:13: 0d:3b:3b:db:92:65:67:ba:ab:c3:94:f9:e5:3f:6c: 49:ae:0d:0a:0c:79:5c:96:0d:ef:71:60:dc:e9:a6: fa:37:5b:41:97:d2:d8:cb:64:55:5e:e3:b8:6a:5a: 31:76:63:de:bf:3a:f5:7f:5c:e8:1a:49:e4:a7:7d: 9d:97:5d:53:bd:50:f4:32:da:91:44:c4:34:92:48: 42:c5:74:97:85:c2:b0:3c:f2:17:74:a7:3d:6c:39: 9a:3a:7e:ac:8c:4d:fb:11:6a:78:1f:26:03:88:f6: e2:bf:4d:99:9e:2d:f0:90:f7:3f:7f:3a:b1:31:f9: 23:03:b7:8d:51:22:7f:a6:91:da:40:c2:a1:38:62: e3:7d:3f:2a:7b:24:23:8d:a1:e2:e2:75:e3:2f:1a: 39:5b:bd:18:58:0c:82:3a:ab:e6:21:86:1d:ac:84: 3b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:45:74:D2:CB:74:99:1A:DD:11:B7:E0:CB:79:8A:10:9A:E8:39:41 X509v3 Authority Key Identifier: keyid:BE:AF:C7:BA:BC:B7:D7:8D:9E:19:08:20:F6:EB:2C:7F:28:BB:5D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vq_Hury3142eGQgg9ussfyi7XYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3A26/561D9224929C11EB957A5D5DC4F9AE02/vq_Hury3142eGQgg9ussfyi7XYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:df:05:50:72:fd:a1:1a:96:ae:28:e5:90:2b:b1:0e:b7:fa: 26:99:e5:49:bf:af:de:34:b3:4a:07:4b:6c:90:fb:0a:a0:99: 8c:76:39:e3:ab:8a:dd:20:6d:fa:c4:e9:c9:78:ce:74:50:72: d6:48:20:18:32:0c:1c:8f:5f:c6:bb:ca:b1:38:d7:f2:97:d7: 80:5d:31:67:d1:33:17:ec:b3:a9:c4:f3:1a:71:97:3d:87:6f: c4:be:c6:c5:2d:1a:42:18:30:82:79:fa:6c:be:2a:7e:42:5a: cb:87:80:02:9d:9f:06:c7:bb:1a:4e:5f:a0:41:d0:43:9e:ab: da:4d:3b:43:60:fb:2e:a1:38:32:63:94:e4:b9:7f:6d:bd:06: 06:17:4e:90:ed:dd:1e:37:fa:15:91:f3:c9:5c:95:a3:2f:a6: db:0c:27:ef:99:36:85:c2:d1:17:55:ab:0d:99:ea:92:9e:aa: e8:2c:ac:6f:e6:aa:86:cf:be:01:cf:4c:6f:21:37:1f:72:5a: 31:22:72:dd:64:7a:52:fb:f8:cd:ab:f8:ea:05:bf:89:7a:d3: a0:5a:2f:88:58:55:b0:ca:e1:b6:a5:c4:24:3f:61:61:f4:fa: 35:d3:3d:63:20:6f:be:c4:a8:7b:54:43:bf:f1:3f:e2:0d:01: e9:4d:08:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNBMjYxMTAvBgNVBAUTKEJFQUZDN0JBQkNCN0Q3OEQ5RTE5MDgyMEY2RUIyQzdG MjhCQjVEODgwHhcNMjUwNDI0MjIzMTE4WhcNMjUwNTAxMjIzMTE4WjAYMRYwFAYD VQQDEw02ODBhYmJiNy0xZDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jUnPPePj5iJ034cs4hhFJX7ugC1cMiPR9/05AZKCnAea/n115bQycnOfh2X cccGksP4M1jPPtcKbwwdr+2uLXf4+dEXlParxVwN7TsXKwJ+IZJdmb/xLxMNOzvb kmVnuqvDlPnlP2xJrg0KDHlclg3vcWDc6ab6N1tBl9LYy2RVXuO4aloxdmPevzr1 f1zoGknkp32dl11TvVD0MtqRRMQ0kkhCxXSXhcKwPPIXdKc9bDmaOn6sjE37EWp4 HyYDiPbiv02Zni3wkPc/fzqxMfkjA7eNUSJ/ppHaQMKhOGLjfT8qeyQjjaHi4nXj Lxo5W70YWAyCOqvmIYYdrIQ7CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdFdNLL dJka3RG34Mt5ihCa6DlBMB8GA1UdIwQYMBaAFL6vx7q8t9eNnhkIIPbrLH8ou12I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0EyNi81NjFEOTIyNDky OUMxMUVCOTU3QTVENURDNEY5QUUwMi92cV9IdXJ5MzE0MmVHUWdnOXVzc2Z5aTdY WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZxX0h1cnkzMTQyZUdRZ2c5dXNzZnlpN1hZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0EyNi81NjFEOTIyNDkyOUMxMUVCOTU3QTVENURDNEY5QUUwMi92cV9IdXJ5MzE0 MmVHUWdnOXVzc2Z5aTdYWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG3wVQcv2hGpauKOWQK7EOt/ommeVJv6/eNLNKB0tskPsKoJmMdjnj q4rdIG36xOnJeM50UHLWSCAYMgwcj1/Gu8qxONfyl9eAXTFn0TMX7LOpxPMacZc9 h2/EvsbFLRpCGDCCefpsvip+QlrLh4ACnZ8Gx7saTl+gQdBDnqvaTTtDYPsuoTgy Y5TkuX9tvQYGF06Q7d0eN/oVkfPJXJWjL6bbDCfvmTaFwtEXVasNmeqSnqroLKxv 5qqGz74Bz0xvITcfcloxInLdZHpS+/jNq/jqBb+JetOgWi+IWFWwyuG2pcQkP2Fh 9Po10z1jIG++xKh7VEO/8T/iDQHpTQgB -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:49 2025 by rpki-client