$ rpki-client -vvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft File: vadiHhrG4FsLoMLvFUF0yL5cE7k.mft (raw, json) Hash identifier: TNlN3H2xyuel2C0PLoKHNSfQ5mNfJuJn7TNvHE6vTWA= Subject key identifier: 70:22:59:40:6F:78:1B:DA:15:54:14:F9:37:84:48:24:EC:E2:FB:59 Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 Certificate issuer: /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft Manifest number: 01CF Signing time: Fri 09 May 2025 02:05:41 +0000 Manifest this update: Fri 09 May 2025 02:05:41 +0000 Manifest next update: Fri 16 May 2025 02:05:41 +0000 Files and hashes: 1: vadiHhrG4FsLoMLvFUF0yL5cE7k.crl (hash: fSowcsBI0X6vIIwTTmmtvuUSsK1Vdc45TnJVHfmiv5g=) 2: 673F4DC6894911EEB032426EC4F9AE02.roa (hash: A4cWT1FQnbB1RV9fDjJNCe1bIriG2tb4PlUO0o2Lg90=) 3: A8A932CC894911EE8CA8D26EC4F9AE02.roa (hash: eI5qe3WuZ3ca7j939pJeQIuLSMWClo4MltkC7KKSMl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 02:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912885B, serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9 Validity Not Before: May 9 02:05:41 2025 GMT Not After : May 16 02:05:41 2025 GMT Subject: CN=681d62f5-c30d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7f:7d:aa:dd:24:ce:7e:0f:bf:03:03:f9:d1: 2d:14:b6:84:18:fc:97:21:06:5f:6c:a6:bd:97:8d: b0:86:d6:57:89:63:82:27:3b:48:f0:53:25:ac:a6: 29:d3:a5:47:f4:a0:20:fb:5e:3a:c5:4c:88:15:88: 43:29:70:bb:5a:06:ca:40:44:85:be:95:f3:57:7e: ad:cc:46:78:ea:7d:f6:56:ad:9c:41:89:66:ee:44: e4:77:9a:eb:c7:9c:bf:8a:fc:ff:78:5e:b4:98:e1: 56:7d:81:89:2c:99:57:9d:f3:a5:20:05:41:58:f8: 9f:aa:2c:be:e9:56:ee:43:a0:3a:2d:be:c9:68:f8: 74:25:b3:f3:ef:13:ec:3c:0a:09:e8:47:1e:3e:fb: e3:51:83:b3:b8:eb:c2:36:01:a9:4e:b0:d7:62:a9: d8:df:2b:5b:e2:84:98:af:65:f3:5b:3f:d7:bb:85: 0a:97:f9:f5:36:1b:9c:38:d1:d4:47:73:69:23:91: 88:2f:91:c0:d0:d4:27:17:78:fe:08:a0:2f:01:33: 89:6f:8b:13:85:44:94:79:e0:73:40:0c:5e:9b:ec: ce:89:c9:9c:8d:69:e8:1f:b1:8b:42:8f:e1:c0:57: 88:99:3e:1a:8c:7a:d4:13:d0:0f:5d:01:c1:c5:ed: 63:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:22:59:40:6F:78:1B:DA:15:54:14:F9:37:84:48:24:EC:E2:FB:59 X509v3 Authority Key Identifier: keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:11:23:76:44:2a:44:12:f3:ec:cd:90:19:64:c5:52:82:32: c6:4d:94:e9:c2:63:6b:ba:95:04:d7:c4:7f:16:45:a0:a8:70: 32:61:18:c6:d5:bf:86:14:1d:fd:49:06:5b:69:de:0a:35:16: e0:4d:03:bb:0d:74:61:1f:81:4e:28:8d:34:72:aa:e4:68:49: fc:86:b7:99:03:1b:64:ab:c2:fa:9b:67:c0:db:e4:55:08:57: e4:bc:c7:6c:e6:d7:0b:55:da:9d:71:52:42:c0:3b:46:d5:61: fb:5b:df:54:ea:9d:1d:f0:b3:d0:cb:3b:99:00:3c:57:c9:3a: 49:50:4e:22:72:83:cc:ad:80:11:a5:66:dc:8f:39:52:e2:c9: 7e:f6:1c:3d:e2:b8:e6:d1:b6:e3:89:ec:47:74:b9:01:61:2b: bc:ec:d9:19:8c:44:6a:cf:68:ab:85:06:27:53:ec:fd:56:89: 1d:3a:6b:8b:3b:98:e4:6a:e5:00:3e:57:49:f1:d1:7e:d7:d2: 36:30:26:12:2b:2f:22:d8:a2:c1:6c:70:91:9b:7e:79:d1:a4: 49:63:8f:45:b9:4c:51:e4:13:a1:d9:99:4d:56:ca:d5:a0:80: a0:23:f9:00:84:89:3f:f5:cf:3f:37:94:9e:26:58:1e:1b:0b: ba:f9:c3:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4NUIxMTAvBgNVBAUTKEJEQTc2MjFFMUFDNkUwNUIwQkEwQzJFRjE1NDE3NEM4 QkU1QzEzQjkwHhcNMjUwNTA5MDIwNTQxWhcNMjUwNTE2MDIwNTQxWjAYMRYwFAYD VQQDEw02ODFkNjJmNS1jMzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuH99qt0kzn4PvwMD+dEtFLaEGPyXIQZfbKa9l42whtZXiWOCJztI8FMlrKYp 06VH9KAg+146xUyIFYhDKXC7WgbKQESFvpXzV36tzEZ46n32Vq2cQYlm7kTkd5rr x5y/ivz/eF60mOFWfYGJLJlXnfOlIAVBWPifqiy+6VbuQ6A6Lb7JaPh0JbPz7xPs PAoJ6EcePvvjUYOzuOvCNgGpTrDXYqnY3ytb4oSYr2XzWz/Xu4UKl/n1NhucONHU R3NpI5GIL5HA0NQnF3j+CKAvATOJb4sThUSUeeBzQAxem+zOicmcjWnoH7GLQo/h wFeImT4ajHrUE9APXQHBxe1jdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAiWUBv eBvaFVQU+TeESCTs4vtZMB8GA1UdIwQYMBaAFL2nYh4axuBbC6DC7xVBdMi+XBO5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODg1Qi9BOTlDMTg5MDZD NzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRGc0xvTUx2RlVGMHlMNWNF N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZhZGlIaHJHNEZzTG9NTHZGVUYweUw1Y0U3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODg1Qi9BOTlDMTg5MDZDNzkxMUVEOENCNkJDNkJDNEY5QUUwMi92YWRpSGhyRzRG c0xvTUx2RlVGMHlMNWNFN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoESN2RCpEEvPszZAZZMVSgjLGTZTpwmNrupUE18R/FkWgqHAyYRjG 1b+GFB39SQZbad4KNRbgTQO7DXRhH4FOKI00cqrkaEn8hreZAxtkq8L6m2fA2+RV CFfkvMds5tcLVdqdcVJCwDtG1WH7W99U6p0d8LPQyzuZADxXyTpJUE4icoPMrYAR pWbcjzlS4sl+9hw94rjm0bbjiexHdLkBYSu87NkZjERqz2irhQYnU+z9VokdOmuL O5jkauUAPldJ8dF+19I2MCYSKy8i2KLBbHCRm3550aRJY49FuUxR5BOh2ZlNVsrV oICgI/kAhIk/9c8/N5SeJlgeGwu6+cNe -----END CERTIFICATE-----Generated at Sat May 10 10:38:42 2025 by rpki-client