$ rpki-client -vvf rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft File: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft (raw, json) Hash identifier: N9JkAM2C5hLQZUryt2IzCTRt0EFPyAdxK+E15/Kah5E= Subject key identifier: DA:1B:B9:19:FD:75:BF:18:9A:C2:0F:1D:DA:B2:02:EB:73:93:89:BF Authority key identifier: 55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 Certificate issuer: /CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft Manifest number: F6 Signing time: Thu 15 May 2025 04:37:37 +0000 Manifest this update: Thu 15 May 2025 04:37:37 +0000 Manifest next update: Thu 22 May 2025 04:37:37 +0000 Files and hashes: 1: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl (hash: BXlYZEuIXY+a/oIkz8bKyAubEljqJrfmkiOWCWfZ51g=) 2: FF1C0B44C0D411EEB8303680C4F9AE02.roa (hash: UVR5eOC5r72TP3k3BVK80L1LVMa+jcaIoA99zt0isl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912404E, serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0 Validity Not Before: May 15 04:37:37 2025 GMT Not After : May 22 04:37:37 2025 GMT Subject: CN=68256f91-f852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:20:ec:9e:2f:10:39:e8:1d:21:db:b0:16:6c: 03:ed:d2:46:5e:8e:b3:86:8c:94:85:61:cf:51:91: ee:32:7b:78:28:43:e9:0d:d3:ad:4e:aa:44:ef:f8: b9:65:a9:ba:fb:da:f0:5d:1d:2b:ac:bb:2e:9d:32: 37:e9:88:21:c6:9a:ef:a7:d1:69:9e:02:bd:1e:f1: b4:5d:6f:ef:6e:b9:fa:c7:10:da:99:59:23:c8:e0: 8b:05:4f:52:43:22:18:f8:70:9b:2b:82:d5:16:50: fe:ce:c9:b8:1f:54:a1:14:a4:9e:57:d5:cc:9f:a8: 96:4f:e8:2f:ae:02:b6:e4:fd:d2:31:35:65:a1:a8: 4c:d4:b3:a8:5a:bd:40:d4:24:82:e9:47:8c:30:19: c5:83:b7:ff:a6:94:5c:ec:02:38:36:e4:26:3f:bd: d9:58:03:1e:18:c8:4f:1a:74:7a:98:19:67:8f:9e: 14:fd:8a:02:21:50:eb:97:79:ce:1f:2f:01:9a:e9: 8e:25:c5:a9:e6:5d:fd:2a:24:26:5d:30:e5:28:50: 88:61:6b:35:d1:f8:58:a5:7b:e6:30:2c:1f:9e:d0: 7e:6f:f0:b7:92:3c:2c:ac:b9:60:f1:c5:8d:d3:20: 08:10:a5:cd:04:8f:2c:8f:bc:ae:78:32:fb:75:2d: ca:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:1B:B9:19:FD:75:BF:18:9A:C2:0F:1D:DA:B2:02:EB:73:93:89:BF X509v3 Authority Key Identifier: keyid:55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:c7:ef:cb:66:b8:bd:a3:59:b7:da:28:73:a9:14:de:24:fe: 46:f8:4e:bc:7d:d8:27:bf:c1:5a:73:67:4c:7f:51:d2:8b:9c: d7:aa:3b:1f:30:22:d1:06:7a:e8:d5:97:e1:8d:e8:4d:3f:87: f9:03:5e:d0:70:9f:db:b2:86:bc:45:ca:93:8c:88:5b:63:3e: 8a:23:f4:18:08:28:60:0d:8a:54:a6:2b:1b:a1:57:82:22:58: 52:df:3b:ba:e5:19:79:1f:3d:9b:11:ec:d8:41:d2:d0:33:10: 96:f0:c5:96:32:e9:27:1d:cb:5c:39:3f:08:a6:a5:9c:ca:01: fb:9d:38:f5:9c:83:46:91:23:c9:35:b7:05:60:89:31:89:45: c5:31:93:f2:b5:26:6f:73:21:24:3d:af:d3:2c:3b:f4:e7:5f: 21:b4:42:37:24:19:17:67:4b:c1:30:eb:fe:31:c8:20:bd:36: 77:be:9e:2c:f6:04:22:46:d8:f3:e8:d3:35:6f:37:0a:be:ee: ff:d1:13:6d:4e:24:21:41:c6:7b:33:e9:34:4a:a3:69:88:58: 70:a7:11:0f:2a:49:d9:a1:98:26:a7:fe:d0:15:ee:9a:6f:d6: 87:ff:20:64:60:53:47:ae:1c:3f:43:ba:4b:66:04:6c:5f:86: 39:71:e2:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQwNEUxMTAvBgNVBAUTKDU1MzkwRjNGNkIzQjMwRUQ0QTlDNkZCOUFEODI5N0I4 RUY5OTA2RTAwHhcNMjUwNTE1MDQzNzM3WhcNMjUwNTIyMDQzNzM3WjAYMRYwFAYD VQQDEw02ODI1NmY5MS1mODUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1iDsni8QOegdIduwFmwD7dJGXo6zhoyUhWHPUZHuMnt4KEPpDdOtTqpE7/i5 Zam6+9rwXR0rrLsunTI36Yghxprvp9FpngK9HvG0XW/vbrn6xxDamVkjyOCLBU9S QyIY+HCbK4LVFlD+zsm4H1ShFKSeV9XMn6iWT+gvrgK25P3SMTVloahM1LOoWr1A 1CSC6UeMMBnFg7f/ppRc7AI4NuQmP73ZWAMeGMhPGnR6mBlnj54U/YoCIVDrl3nO Hy8BmumOJcWp5l39KiQmXTDlKFCIYWs10fhYpXvmMCwfntB+b/C3kjwsrLlg8cWN 0yAIEKXNBI8sj7yueDL7dS3K0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNobuRn9 db8YmsIPHdqyAutzk4m/MB8GA1UdIwQYMBaAFFU5Dz9rOzDtSpxvua2Cl7jvmQbg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDA0RS80OURGNjUzRUJG NDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01PMUtuRy01cllLWHVPLVpC dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUa1BQMnM3TU8xS25HLTVyWUtYdU8tWkJ1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDA0RS80OURGNjUzRUJGNDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01P MUtuRy01cllLWHVPLVpCdUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJx+/LZri9o1m32ihzqRTeJP5G+E68fdgnv8Fac2dMf1HSi5zXqjsf MCLRBnro1ZfhjehNP4f5A17QcJ/bsoa8RcqTjIhbYz6KI/QYCChgDYpUpisboVeC IlhS3zu65Rl5Hz2bEezYQdLQMxCW8MWWMuknHctcOT8IpqWcygH7nTj1nINGkSPJ NbcFYIkxiUXFMZPytSZvcyEkPa/TLDv0518htEI3JBkXZ0vBMOv+McggvTZ3vp4s 9gQiRtjz6NM1bzcKvu7/0RNtTiQhQcZ7M+k0SqNpiFhwpxEPKknZoZgmp/7QFe6a b9aH/yBkYFNHrhw/Q7pLZgRsX4Y5ceIC -----END CERTIFICATE-----Generated at Thu May 15 16:36:34 2025 by rpki-client