$ rpki-client -vvf rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft File: vhgzygFCXO9HWUXxmZieZUOzHmI.mft (raw, json) Hash identifier: PxQ7x/vzFLglGyawnfQNEsDl56oWZ5iroahIyTFExr0= Subject key identifier: EB:E8:08:7B:FF:E9:B5:66:82:D6:8C:CB:1E:91:E5:FD:00:22:02:AA Authority key identifier: BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62 Certificate issuer: /CN=A91382E4/serialNumber=BE1833CA01425CEF475945F199989E6543B31E62 Certificate serial: 030E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft Manifest number: 0308 Signing time: Mon 05 May 2025 00:50:22 +0000 Manifest this update: Mon 05 May 2025 00:50:22 +0000 Manifest next update: Mon 12 May 2025 00:50:22 +0000 Files and hashes: 1: vhgzygFCXO9HWUXxmZieZUOzHmI.crl (hash: oWZ/S9Gk+bCbtYeBu/K1abED5t6vQZTeREj83cAWtv4=) 2: A05195B4633011ED9122442CC4F9AE02.roa (hash: DzVCTjhUidYA2Rg2xDcdlUFOgDtQxj0BrAXsbysJQW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 00:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 782 (0x30e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91382E4, serialNumber=BE1833CA01425CEF475945F199989E6543B31E62 Validity Not Before: May 5 00:50:22 2025 GMT Not After : May 12 00:50:22 2025 GMT Subject: CN=68180b4e-5f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:40:cf:8d:55:e4:06:30:b4:35:ac:da:33:7a: 10:59:36:cb:a6:18:83:1e:64:a0:a1:04:fe:32:62: d9:d7:e8:7b:27:59:33:24:e4:6a:e2:11:c6:69:b2: 08:30:25:70:e9:8a:d7:7e:90:0f:a9:e1:04:1d:39: 96:a9:ff:41:33:c6:a2:06:57:6e:92:c5:f7:4f:ee: 1b:32:1f:7b:61:0b:a0:10:0f:28:75:c5:1b:27:1c: cd:b6:0b:0c:41:64:ab:68:d2:85:52:23:0b:77:5a: c3:0e:82:db:30:f2:66:0a:b5:60:38:db:30:a5:d6: 87:2c:c6:bd:b2:cf:35:59:45:c7:5c:cc:da:87:53: 74:ae:55:56:95:6b:f4:62:2e:ef:de:b7:45:df:de: 35:db:19:45:82:7e:b4:b4:f8:44:0d:16:f0:7e:e5: 87:0b:51:37:62:19:81:a6:2d:e6:21:e7:e5:0b:1a: 6a:5c:33:aa:25:9c:43:02:09:42:f4:fe:89:e9:d6: 8d:c1:cd:0c:dc:c4:9e:fb:43:9b:30:cf:34:4a:5a: 83:f6:ca:e2:15:66:c4:e5:9a:d9:ea:f1:0f:20:d0: 83:c2:1c:54:5e:3b:7d:16:b9:43:15:29:d6:a0:29: 13:b4:f9:8f:d8:7f:7e:58:7a:fd:c1:6b:5f:c1:a0: 36:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E8:08:7B:FF:E9:B5:66:82:D6:8C:CB:1E:91:E5:FD:00:22:02:AA X509v3 Authority Key Identifier: keyid:BE:18:33:CA:01:42:5C:EF:47:59:45:F1:99:98:9E:65:43:B3:1E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhgzygFCXO9HWUXxmZieZUOzHmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91382E4/236F4054D11911EC900A2F6FC4F9AE02/vhgzygFCXO9HWUXxmZieZUOzHmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:88:ee:b1:47:6c:13:96:0a:47:e3:35:47:91:1f:83:82:e5: 47:5b:2b:75:b1:af:72:34:9e:4b:79:53:c4:02:03:e2:7a:db: d6:89:16:c2:95:b9:bd:7d:66:69:7c:b1:c1:21:76:2f:2b:df: a8:dc:9d:42:cc:e9:50:bb:5e:d6:3c:5d:f8:f7:69:33:2a:ad: d2:00:12:14:b7:54:61:49:07:47:3d:45:da:49:18:51:f7:37: 92:e4:13:ce:e9:3c:30:a6:63:41:3c:61:d6:51:4c:8d:ef:89: d0:0a:2f:e1:36:8c:aa:b7:bb:e0:72:bf:0e:eb:79:d9:76:85: 6a:f5:dd:d0:98:3d:02:bb:e5:f5:64:0c:02:86:9c:94:af:08: be:d9:08:02:27:fb:ff:95:f1:5a:05:37:6a:88:a2:8e:95:7a: 9b:37:53:9a:fd:20:fe:8e:25:08:0e:29:6f:12:7f:aa:e7:68: 7a:f6:7a:43:44:2b:f3:5c:e0:74:9c:9d:ae:de:4f:51:a2:d8: da:be:06:1a:07:75:ea:40:bf:61:d5:a1:9e:5a:a8:1c:a1:6e: e3:37:af:a5:09:23:34:bf:62:85:90:5f:86:ce:30:6c:34:9d: 5e:eb:83:ff:a3:8f:f2:43:b6:7e:4e:36:e0:80:0f:8f:2a:7b: 12:b6:58:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgyRTQxMTAvBgNVBAUTKEJFMTgzM0NBMDE0MjVDRUY0NzU5NDVGMTk5OTg5RTY1 NDNCMzFFNjIwHhcNMjUwNTA1MDA1MDIyWhcNMjUwNTEyMDA1MDIyWjAYMRYwFAYD VQQDEw02ODE4MGI0ZS01ZjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUDPjVXkBjC0NazaM3oQWTbLphiDHmSgoQT+MmLZ1+h7J1kzJORq4hHGabII MCVw6YrXfpAPqeEEHTmWqf9BM8aiBlduksX3T+4bMh97YQugEA8odcUbJxzNtgsM QWSraNKFUiMLd1rDDoLbMPJmCrVgONswpdaHLMa9ss81WUXHXMzah1N0rlVWlWv0 Yi7v3rdF39412xlFgn60tPhEDRbwfuWHC1E3YhmBpi3mIeflCxpqXDOqJZxDAglC 9P6J6daNwc0M3MSe+0ObMM80SlqD9sriFWbE5ZrZ6vEPINCDwhxUXjt9FrlDFSnW oCkTtPmP2H9+WHr9wWtfwaA2bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvoCHv/ 6bVmgtaMyx6R5f0AIgKqMB8GA1UdIwQYMBaAFL4YM8oBQlzvR1lF8ZmYnmVDsx5i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODJFNC8yMzZGNDA1NEQx MTkxMUVDOTAwQTJGNkZDNEY5QUUwMi92aGd6eWdGQ1hPOUhXVVh4bVppZVpVT3pI bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoZ3p5Z0ZDWE85SFdVWHhtWmllWlVPekhtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODJFNC8yMzZGNDA1NEQxMTkxMUVDOTAwQTJGNkZDNEY5QUUwMi92aGd6eWdGQ1hP OUhXVVh4bVppZVpVT3pIbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjiO6xR2wTlgpH4zVHkR+DguVHWyt1sa9yNJ5LeVPEAgPietvWiRbC lbm9fWZpfLHBIXYvK9+o3J1CzOlQu17WPF3492kzKq3SABIUt1RhSQdHPUXaSRhR 9zeS5BPO6TwwpmNBPGHWUUyN74nQCi/hNoyqt7vgcr8O63nZdoVq9d3QmD0Cu+X1 ZAwChpyUrwi+2QgCJ/v/lfFaBTdqiKKOlXqbN1Oa/SD+jiUIDilvEn+q52h69npD RCvzXOB0nJ2u3k9RotjavgYaB3XqQL9h1aGeWqgcoW7jN6+lCSM0v2KFkF+GzjBs NJ1e64P/o4/yQ7Z+TjbggA+PKnsStlg5 -----END CERTIFICATE-----Generated at Mon May 5 03:11:02 2025 by rpki-client