$ rpki-client -vvf rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft File: VFiH13GXSLRp0FP_MWpqV6uZYjM.mft (raw, json) Hash identifier: zoY1CjZreZzHm4SiELHWN+UqTW90AQUz9Gr0dD1dCcs= Subject key identifier: 94:F5:C0:23:A0:22:D9:DD:95:2A:DE:B6:7C:79:D6:95:B8:3D:F1:A8 Authority key identifier: 54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 Certificate issuer: /CN=A91173B6/serialNumber=545887D7719748B469D053FF316A6A57AB996233 Certificate serial: 0808 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft Manifest number: 07FD Signing time: Sat 10 May 2025 20:37:17 +0000 Manifest this update: Sat 10 May 2025 20:37:16 +0000 Manifest next update: Sat 17 May 2025 20:37:16 +0000 Files and hashes: 1: VFiH13GXSLRp0FP_MWpqV6uZYjM.crl (hash: oxaZz7IPJ1QjxOEJPSuiBKPfslaAeH7ZcJCjJZaUvp0=) 2: CA290E34341311EFA3C99F09C4F9AE02.roa (hash: i/g/3tYg+cOFFmeFmf1wzVIm1860HHoYX7kFrZIFYhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:37:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2056 (0x808) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91173B6, serialNumber=545887D7719748B469D053FF316A6A57AB996233 Validity Not Before: May 10 20:37:16 2025 GMT Not After : May 17 20:37:16 2025 GMT Subject: CN=681fb8fc-d1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:90:d2:e9:47:51:34:ec:4e:fa:7e:e6:f9:59: dd:66:f7:9c:cf:9f:d6:97:bb:b6:d6:88:52:1a:b5: 62:75:5c:3d:2e:d5:e5:7c:c9:23:ab:1a:e7:f0:f8: 9c:44:b4:48:7a:ed:a9:66:78:48:76:d6:c5:d6:be: b9:ca:46:8c:ab:79:c5:78:2a:62:6e:1a:75:bd:9b: 8c:a1:4d:1a:b6:55:b0:35:b3:1b:16:51:38:a5:75: 2b:98:6d:15:5e:22:a7:54:fe:f2:d7:81:40:84:47: a0:db:cc:8b:02:73:fe:54:5a:ff:d1:26:ee:ee:1f: ad:22:de:8a:bd:90:6a:ba:55:a4:eb:14:de:57:31: e3:dc:bc:b7:2a:e1:dc:b1:4a:92:d6:0c:4c:7c:25: 66:3e:b7:63:8c:40:94:07:d6:5f:1c:92:fe:44:8e: e3:1e:07:a5:09:0a:83:e3:a5:e6:1b:d5:5c:be:0e: 61:60:ae:81:2c:d0:85:7a:eb:e7:eb:c2:17:41:d9: 43:22:c5:76:61:4e:8c:01:88:f9:50:c5:09:38:f8: 27:ff:36:9e:e2:87:5a:f3:2d:fa:e0:c6:09:82:43: d3:72:e3:85:a8:b6:67:f2:49:19:7f:29:01:bc:3f: 62:78:d1:d7:83:08:64:56:1c:95:bc:9d:53:10:ea: 91:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F5:C0:23:A0:22:D9:DD:95:2A:DE:B6:7C:79:D6:95:B8:3D:F1:A8 X509v3 Authority Key Identifier: keyid:54:58:87:D7:71:97:48:B4:69:D0:53:FF:31:6A:6A:57:AB:99:62:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFiH13GXSLRp0FP_MWpqV6uZYjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91173B6/10F48486E19F11EABD4A2313C4F9AE02/VFiH13GXSLRp0FP_MWpqV6uZYjM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c2:0f:cc:db:e0:ae:ec:f0:8f:00:96:37:ae:2b:6d:08:6f: cd:ac:fd:4a:c0:79:94:23:cb:9e:44:a9:ad:32:ee:0c:40:b0: 40:56:07:3e:d7:7d:4f:ea:e9:5f:c1:8c:a6:2f:3d:91:88:50: 24:1f:26:18:4a:02:6f:51:88:53:07:37:07:f6:8f:b7:f3:79: 06:f1:0a:6b:7b:53:ec:2f:e8:5b:de:0e:34:e2:f0:c8:0b:c9: 0d:38:1f:8c:b6:d0:d0:d2:f4:16:da:40:6f:3f:7f:06:83:c9: 30:79:d4:3b:88:a2:da:cf:e0:8b:8d:82:78:84:33:e1:90:3f: 94:33:64:54:aa:c3:b2:cc:47:f6:f7:50:fc:6e:aa:ba:05:1c: 24:1c:96:24:38:17:56:3c:4e:5d:a4:cd:38:e4:3d:57:6c:b6: fa:80:45:d1:bf:3a:d3:34:e4:2d:5c:9b:61:70:a5:2c:50:e0: 65:13:5e:45:38:4e:4c:5c:5f:71:a0:56:84:6d:97:0b:b1:52: 4a:c8:42:48:62:49:c1:c5:9f:fc:64:5f:42:0e:d5:bd:05:72: 32:dd:25:1c:ce:ad:ef:cb:47:79:da:af:8a:b2:da:72:e3:20: 3e:57:f7:27:18:ae:2d:b7:a3:ce:5b:9c:cd:d0:01:cc:8e:6e: 4e:24:9c:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTczQjYxMTAvBgNVBAUTKDU0NTg4N0Q3NzE5NzQ4QjQ2OUQwNTNGRjMxNkE2QTU3 QUI5OTYyMzMwHhcNMjUwNTEwMjAzNzE2WhcNMjUwNTE3MjAzNzE2WjAYMRYwFAYD VQQDEw02ODFmYjhmYy1kMWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypDS6UdRNOxO+n7m+VndZvecz5/Wl7u21ohSGrVidVw9LtXlfMkjqxrn8Pic RLRIeu2pZnhIdtbF1r65ykaMq3nFeCpibhp1vZuMoU0atlWwNbMbFlE4pXUrmG0V XiKnVP7y14FAhEeg28yLAnP+VFr/0Sbu7h+tIt6KvZBqulWk6xTeVzHj3Ly3KuHc sUqS1gxMfCVmPrdjjECUB9ZfHJL+RI7jHgelCQqD46XmG9Vcvg5hYK6BLNCFeuvn 68IXQdlDIsV2YU6MAYj5UMUJOPgn/zae4oda8y364MYJgkPTcuOFqLZn8kkZfykB vD9ieNHXgwhkVhyVvJ1TEOqR0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJT1wCOg ItndlSretnx51pW4PfGoMB8GA1UdIwQYMBaAFFRYh9dxl0i0adBT/zFqalermWIz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzNCNi8xMEY0ODQ4NkUx OUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNMUnAwRlBfTVdwcVY2dVpZ ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGaUgxM0dYU0xScDBGUF9NV3BxVjZ1WllqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzNCNi8xMEY0ODQ4NkUxOUYxMUVBQkQ0QTIzMTNDNEY5QUUwMi9WRmlIMTNHWFNM UnAwRlBfTVdwcVY2dVpZak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOwg/M2+Cu7PCPAJY3rittCG/NrP1KwHmUI8ueRKmtMu4MQLBAVgc+ 131P6ulfwYymLz2RiFAkHyYYSgJvUYhTBzcH9o+383kG8Qpre1PsL+hb3g404vDI C8kNOB+MttDQ0vQW2kBvP38Gg8kwedQ7iKLaz+CLjYJ4hDPhkD+UM2RUqsOyzEf2 91D8bqq6BRwkHJYkOBdWPE5dpM045D1XbLb6gEXRvzrTNOQtXJthcKUsUOBlE15F OE5MXF9xoFaEbZcLsVJKyEJIYknBxZ/8ZF9CDtW9BXIy3SUczq3vy0d52q+Kstpy 4yA+V/cnGK4tt6POW5zN0AHMjm5OJJwp -----END CERTIFICATE-----Generated at Sun May 11 12:24:55 2025 by rpki-client