$ rpki-client -vvf rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft File: Vg3ED_OlCfnv21Jg7huzhi222N8.mft (raw, json) Hash identifier: NBZooFufXRu0rV2pfZXcPhGOGXKutobK6yRdC/u5qEA= Subject key identifier: C1:6E:79:14:7A:DA:58:8A:5B:41:9C:71:83:25:F2:86:FF:74:F8:01 Authority key identifier: 56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF Certificate issuer: /CN=A912E926/serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft Manifest number: 0174 Signing time: Sat 17 May 2025 03:25:16 +0000 Manifest this update: Sat 17 May 2025 03:25:15 +0000 Manifest next update: Sat 24 May 2025 03:25:15 +0000 Files and hashes: 1: Vg3ED_OlCfnv21Jg7huzhi222N8.crl (hash: S0k5iDdgMWWFA4k/YimAvtcflXJmPiqN7WJ3GwVCmOk=) 2: 46BF7E7CFA0611ED802A1C29C4F9AE02.roa (hash: jnuMHWmzh0Mkxo/UqfQiHQK9zwVM6oBly72+HKRXMlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 03:25:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E926, serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF Validity Not Before: May 17 03:25:15 2025 GMT Not After : May 24 03:25:15 2025 GMT Subject: CN=6828019c-8036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:12:81:c3:32:da:0a:b3:87:4e:b3:47:30:6d: d8:9d:18:6f:07:ba:99:58:63:02:52:2f:33:95:96: 38:13:8b:cd:52:50:91:cb:e9:d4:82:0a:60:78:f2: 47:49:5b:76:82:4f:f5:77:d0:91:97:5b:0c:5c:65: a8:68:b3:95:1e:3e:f6:af:4f:f8:ff:35:3a:bb:fa: 54:db:50:1e:fd:88:17:60:a2:4d:ad:cf:a0:b8:25: a9:59:56:60:36:7e:be:38:6f:88:4d:d9:55:ff:9a: cc:45:c7:bc:72:91:46:7a:d8:c2:1a:e9:e3:2f:48: 20:7c:97:7f:90:95:80:59:44:ed:90:63:98:06:1d: c9:6a:a5:e9:62:a9:28:b0:28:ae:a7:72:5d:5e:c6: 88:bf:e6:6e:ed:0c:83:39:e5:66:a2:ba:44:4d:3b: ab:e1:4c:fe:54:d2:19:6a:ca:7b:96:9b:27:a6:45: 05:2d:29:a5:e5:94:f6:b5:92:16:bf:3d:e3:65:20: e3:49:d0:c0:57:a1:49:1f:f1:66:9a:da:7c:ee:49: 7d:af:27:a7:f9:e8:35:34:b8:a9:48:46:07:a4:c5: da:a5:b3:fc:b0:52:bc:63:66:f8:4a:f1:12:99:30: d9:81:03:ed:cc:98:22:63:f9:1c:f2:7a:00:d9:b8: 22:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6E:79:14:7A:DA:58:8A:5B:41:9C:71:83:25:F2:86:FF:74:F8:01 X509v3 Authority Key Identifier: keyid:56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:d1:3b:83:46:f2:d1:14:85:90:24:a9:f4:b3:73:48:54:a5: 55:df:88:8a:af:9d:9b:80:50:38:cb:74:6a:f2:77:41:3c:76: 2c:d7:93:8e:6f:69:39:23:b4:3c:de:ce:43:c5:37:7e:12:dd: 41:00:0d:a8:53:1f:be:56:d4:4c:18:78:cf:80:62:66:32:37: 26:7c:29:2e:92:46:00:0f:a7:b3:30:bb:77:80:1f:de:f3:87: 9e:25:e2:61:7d:00:40:aa:bc:9b:21:8a:a2:fe:cb:57:1d:16: 00:ef:66:c1:9e:2c:f4:68:9f:a0:5d:6e:e7:8f:81:9c:f8:b9: 31:b4:4d:82:c8:89:a4:4d:4d:42:40:df:c6:86:b3:86:26:03: a7:2e:ff:53:cb:6c:30:bc:66:85:7b:25:71:45:0a:68:ed:9c: 5d:f1:2c:02:9c:78:40:ec:3f:0e:d2:3d:24:f9:4f:fc:a9:8a: ec:93:cb:45:73:bc:97:ca:25:eb:51:d3:2e:63:9d:4c:06:5e: 1d:f3:80:30:a7:52:bf:22:da:5b:3f:a2:35:e3:bd:ed:90:97: 28:28:ef:ce:33:86:88:74:de:eb:c7:ad:df:1a:fd:34:52:52: f4:2f:1d:4c:a0:7f:a6:1f:69:46:80:16:43:5a:24:fe:14:cd: 1b:b0:ca:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MjYxMTAvBgNVBAUTKDU2MERDNDBGRjNBNTA5RjlFRkRCNTI2MEVFMUJCMzg2 MkRCNkQ4REYwHhcNMjUwNTE3MDMyNTE1WhcNMjUwNTI0MDMyNTE1WjAYMRYwFAYD VQQDEw02ODI4MDE5Yy04MDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthKBwzLaCrOHTrNHMG3YnRhvB7qZWGMCUi8zlZY4E4vNUlCRy+nUggpgePJH SVt2gk/1d9CRl1sMXGWoaLOVHj72r0/4/zU6u/pU21Ae/YgXYKJNrc+guCWpWVZg Nn6+OG+ITdlV/5rMRce8cpFGetjCGunjL0ggfJd/kJWAWUTtkGOYBh3JaqXpYqko sCiup3JdXsaIv+Zu7QyDOeVmorpETTur4Uz+VNIZasp7lpsnpkUFLSml5ZT2tZIW vz3jZSDjSdDAV6FJH/Fmmtp87kl9ryen+eg1NLipSEYHpMXapbP8sFK8Y2b4SvES mTDZgQPtzJgiY/kc8noA2bgicwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFueRR6 2liKW0GccYMl8ob/dPgBMB8GA1UdIwQYMBaAFFYNxA/zpQn579tSYO4bs4Ytttjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyNi84NjY3NkRBMEZB MDExMUVEQkFENzVEMjhDNEY5QUUwMi9WZzNFRF9PbENmbnYyMUpnN2h1emhpMjIy TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZnM0VEX09sQ2ZudjIxSmc3aHV6aGkyMjJOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyNi84NjY3NkRBMEZBMDExMUVEQkFENzVEMjhDNEY5QUUwMi9WZzNFRF9PbENm bnYyMUpnN2h1emhpMjIyTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB10TuDRvLRFIWQJKn0s3NIVKVV34iKr52bgFA4y3Rq8ndBPHYs15OO b2k5I7Q83s5DxTd+Et1BAA2oUx++VtRMGHjPgGJmMjcmfCkukkYAD6ezMLt3gB/e 84eeJeJhfQBAqrybIYqi/stXHRYA72bBniz0aJ+gXW7nj4Gc+LkxtE2CyImkTU1C QN/GhrOGJgOnLv9Ty2wwvGaFeyVxRQpo7Zxd8SwCnHhA7D8O0j0k+U/8qYrsk8tF c7yXyiXrUdMuY51MBl4d84Awp1K/ItpbP6I1473tkJcoKO/OM4aIdN7rx63fGv00 UlL0Lx1MoH+mH2lGgBZDWiT+FM0bsMqB -----END CERTIFICATE-----Generated at Sat May 17 10:37:46 2025 by rpki-client