$ rpki-client -vvf rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft File: VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft (raw, json) Hash identifier: +rKOs1whqAKwyNyfGJ5NH7uoxAm5IykvfQQgNSE5vQY= Subject key identifier: E7:49:B1:BE:7D:5E:FB:26:C0:6D:2B:F7:B1:2F:AE:68:FA:4C:C8:F4 Authority key identifier: 56:D5:24:19:D5:6A:AC:DF:7D:00:5B:A1:5D:9D:DB:8F:14:2E:3A:D0 Certificate issuer: /CN=A912F592/serialNumber=56D52419D56AACDF7D005BA15D9DDB8F142E3AD0 Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft Manifest number: 01E7 Signing time: Sat 17 May 2025 02:20:15 +0000 Manifest this update: Sat 17 May 2025 02:20:15 +0000 Manifest next update: Sat 24 May 2025 02:20:15 +0000 Files and hashes: 1: VtUkGdVqrN99AFuhXZ3bjxQuOtA.crl (hash: GpR7bRePBygYTnzTCqS7ptLLvYQBF8L2/C5bnT8rQXU=) 2: 20BFA0B64A4911EDACB7AB0CC4F9AE02.roa (hash: fM0f1U3uv8elOOSoakvi5zas2tW7Yg5J98LgfW+bqBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.crl rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 02:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F592, serialNumber=56D52419D56AACDF7D005BA15D9DDB8F142E3AD0 Validity Not Before: May 17 02:20:15 2025 GMT Not After : May 24 02:20:15 2025 GMT Subject: CN=6827f25f-e250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bd:85:84:46:a7:b9:08:fb:09:41:8d:a4:43: 79:97:de:f5:75:b8:33:d3:9a:f0:76:94:76:1d:79: 2c:33:3e:fb:3f:71:d5:e8:09:72:1d:9c:6c:a2:ee: ff:2f:55:cc:55:1a:f1:51:66:d2:a7:fa:2c:ca:0c: b0:c4:3d:87:ea:82:2c:0d:1a:1b:a9:a3:91:00:ca: 2d:79:88:8b:a9:ec:ea:bb:6b:ae:ab:6d:c5:78:18: 68:96:95:10:40:32:8b:46:eb:e3:db:de:1d:28:57: 88:7f:d6:66:3b:77:a0:40:47:43:72:b9:20:44:a7: f9:11:98:7e:fd:f7:b5:a4:e3:4f:3c:c2:fa:85:00: c9:ae:c8:86:de:d8:b9:f8:14:3e:2b:56:b6:38:88: 5b:9f:f7:68:b5:1d:0a:45:bd:35:90:82:f8:f3:e2: 73:1b:64:1f:7d:14:f6:03:6e:04:a3:d3:68:a7:4f: bd:ff:ec:3d:e0:06:7f:72:f1:7c:37:66:fb:2f:64: 41:86:d0:49:a1:84:5e:4f:46:a2:77:e7:f8:34:8a: b7:38:9f:03:64:cd:e3:0f:15:fa:9e:a0:96:4f:b0: 46:bb:ed:23:18:8f:ab:9e:ef:96:ec:10:0c:58:16: b6:af:57:99:cc:b2:ec:3b:1c:c1:6b:64:b4:8f:96: db:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:49:B1:BE:7D:5E:FB:26:C0:6D:2B:F7:B1:2F:AE:68:FA:4C:C8:F4 X509v3 Authority Key Identifier: keyid:56:D5:24:19:D5:6A:AC:DF:7D:00:5B:A1:5D:9D:DB:8F:14:2E:3A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtUkGdVqrN99AFuhXZ3bjxQuOtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F592/FA5912DE4A4511ED953B4186C4F9AE02/VtUkGdVqrN99AFuhXZ3bjxQuOtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:18:b0:dc:e4:3a:c7:f4:4a:e9:fd:0c:fe:31:bb:e7:a2:c8: b4:68:0c:72:11:de:c8:7a:f4:55:8d:c0:71:16:dc:f7:64:3b: 9d:ec:6b:64:51:a9:ac:7c:04:7b:39:c5:d9:b1:8a:e3:78:6d: eb:d7:6e:c1:2d:44:3b:64:ea:00:51:d8:1a:f8:cf:94:35:ba: 6a:e7:1c:db:3d:32:65:a5:96:1d:d7:2c:7d:9a:aa:f5:49:10: ac:fa:69:36:5f:cf:99:c7:ee:ff:d1:46:72:d8:26:c6:e9:a2: 40:80:de:08:37:2c:ab:6c:4e:d7:d6:0d:ed:3e:fa:e9:3d:2f: d9:a8:b5:10:9e:9c:4c:64:ff:bf:a2:fa:93:79:b8:76:49:cf: 80:34:e6:7d:36:2a:d5:3d:44:d0:27:89:e6:34:cf:67:21:3f: 90:29:3d:3f:26:75:1b:b9:48:ff:12:2d:42:b2:98:c1:35:cc: bd:c0:79:fd:1b:6a:48:c1:91:e8:90:ff:5d:01:78:dc:85:9f: 4b:a9:2a:01:ca:0e:4b:47:48:3b:a3:94:7f:91:11:f1:f0:f9: 67:c5:7e:ff:df:0a:fa:68:33:ee:ba:b0:a3:cf:7f:00:58:76: 14:9a:96:96:36:3b:5e:a9:ad:af:dc:64:a4:c5:3f:96:69:80: bb:88:4c:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1OTIxMTAvBgNVBAUTKDU2RDUyNDE5RDU2QUFDREY3RDAwNUJBMTVEOUREQjhG MTQyRTNBRDAwHhcNMjUwNTE3MDIyMDE1WhcNMjUwNTI0MDIyMDE1WjAYMRYwFAYD VQQDEw02ODI3ZjI1Zi1lMjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwL2FhEanuQj7CUGNpEN5l971dbgz05rwdpR2HXksMz77P3HV6AlyHZxsou7/ L1XMVRrxUWbSp/osygywxD2H6oIsDRobqaORAMoteYiLqezqu2uuq23FeBholpUQ QDKLRuvj294dKFeIf9ZmO3egQEdDcrkgRKf5EZh+/fe1pONPPML6hQDJrsiG3ti5 +BQ+K1a2OIhbn/dotR0KRb01kIL48+JzG2QffRT2A24Eo9Nop0+9/+w94AZ/cvF8 N2b7L2RBhtBJoYReT0aid+f4NIq3OJ8DZM3jDxX6nqCWT7BGu+0jGI+rnu+W7BAM WBa2r1eZzLLsOxzBa2S0j5bbMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdJsb59 XvsmwG0r97Evrmj6TMj0MB8GA1UdIwQYMBaAFFbVJBnVaqzffQBboV2d248ULjrQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjU5Mi9GQTU5MTJERTRB NDUxMUVEOTUzQjQxODZDNEY5QUUwMi9WdFVrR2RWcXJOOTlBRnVoWFozYmp4UXVP dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z0VWtHZFZxck45OUFGdWhYWjNianhRdU90QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjU5Mi9GQTU5MTJERTRBNDUxMUVEOTUzQjQxODZDNEY5QUUwMi9WdFVrR2RWcXJO OTlBRnVoWFozYmp4UXVPdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcGLDc5DrH9Erp/Qz+Mbvnosi0aAxyEd7IevRVjcBxFtz3ZDud7Gtk UamsfAR7OcXZsYrjeG3r127BLUQ7ZOoAUdga+M+UNbpq5xzbPTJlpZYd1yx9mqr1 SRCs+mk2X8+Zx+7/0UZy2CbG6aJAgN4INyyrbE7X1g3tPvrpPS/ZqLUQnpxMZP+/ ovqTebh2Sc+ANOZ9NirVPUTQJ4nmNM9nIT+QKT0/JnUbuUj/Ei1CspjBNcy9wHn9 G2pIwZHokP9dAXjchZ9LqSoByg5LR0g7o5R/kRHx8PlnxX7/3wr6aDPuurCjz38A WHYUmpaWNjteqa2v3GSkxT+WaYC7iEw8 -----END CERTIFICATE-----Generated at Sat May 17 07:25:51 2025 by rpki-client