$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.mft File: vi_5e5tTTVONpBoJtsCNAjMuhlU.mft (raw, json) Hash identifier: OFXkW7ppKqiN3zm0C+gRtNGo40WNMpikNkh7IOcZxfs= Subject key identifier: 30:3D:A8:82:B5:EE:19:B4:A2:AE:59:BC:B5:79:53:9B:C4:AF:17:C2 Authority key identifier: BE:2F:F9:7B:9B:53:4D:53:8D:A4:1A:09:B6:C0:8D:02:33:2E:86:55 Certificate issuer: /CN=A9173D07/serialNumber=BE2FF97B9B534D538DA41A09B6C08D02332E8655 Certificate serial: 0760 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vi_5e5tTTVONpBoJtsCNAjMuhlU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.mft Manifest number: 075A Signing time: Sat 10 May 2025 21:14:45 +0000 Manifest this update: Sat 10 May 2025 21:14:45 +0000 Manifest next update: Sat 17 May 2025 21:14:45 +0000 Files and hashes: 1: vi_5e5tTTVONpBoJtsCNAjMuhlU.crl (hash: EEeCrZm9X0daJbGBYzXiH8GN2LDacFMyB7EuIy6y2TI=) 2: AD2ACD6423F411EB8FBA6A83C4F9AE02.roa (hash: zDoEmMgh0Ofm4a5TBSo1aulp2cylUWbLMdlBm8sXwCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.crl rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vi_5e5tTTVONpBoJtsCNAjMuhlU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:14:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1888 (0x760) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D07, serialNumber=BE2FF97B9B534D538DA41A09B6C08D02332E8655 Validity Not Before: May 10 21:14:45 2025 GMT Not After : May 17 21:14:45 2025 GMT Subject: CN=681fc1c5-5c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:e4:ab:9a:8f:b6:32:0a:9c:99:8f:78:8a: 42:71:dd:ec:4c:f3:ee:96:57:ca:2b:86:40:a2:2b: 1e:46:64:d5:b0:82:79:c6:9c:62:90:05:9b:e5:09: 9a:df:69:13:18:70:39:4e:48:48:41:e5:e0:75:4e: 13:c2:10:6a:74:13:51:d5:de:f4:34:73:4b:32:b3: b5:c9:12:f7:e4:c3:c6:e0:81:16:6e:38:9f:2b:d4: 71:69:a2:af:f5:82:12:fd:37:40:b1:0c:1c:ed:59: 47:86:ba:26:68:2d:ce:87:9d:26:43:08:c1:a9:30: 19:d1:ee:dd:53:28:25:97:71:b4:3d:15:f7:ca:12: cd:74:74:83:44:76:a6:a0:e2:b8:74:ee:89:4c:25: d5:5e:03:ee:6c:dc:9b:2f:15:d2:b8:45:34:d7:6d: 2c:cf:58:f9:da:84:b2:f9:22:02:d6:3a:0e:cb:ce: fb:c3:ba:aa:c8:55:18:a9:9d:cb:9a:9a:32:c6:98: 57:a6:3a:db:f3:96:18:58:9c:c6:34:a1:54:7b:b5: 43:e4:cc:ca:7f:f3:82:4c:fb:f3:86:79:f2:f8:b0: c4:69:89:e2:a0:3c:b9:9b:13:af:82:7e:ff:1a:56: a3:dc:69:a5:07:53:e2:9f:e5:3a:95:f3:ae:98:f6: ae:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3D:A8:82:B5:EE:19:B4:A2:AE:59:BC:B5:79:53:9B:C4:AF:17:C2 X509v3 Authority Key Identifier: keyid:BE:2F:F9:7B:9B:53:4D:53:8D:A4:1A:09:B6:C0:8D:02:33:2E:86:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vi_5e5tTTVONpBoJtsCNAjMuhlU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:a1:2d:fd:32:6d:9b:04:1f:8a:ab:1e:06:82:d9:c2:2b:29: 1c:fc:a5:1d:0f:3c:79:fd:d6:7e:29:9f:88:06:6f:2c:26:6c: 1a:99:51:67:26:dd:de:5e:01:48:9b:8b:87:70:43:2a:b0:16: cf:a7:4f:25:68:25:7a:f2:24:03:6d:44:4a:24:39:da:4c:0c: cf:d1:5e:2e:67:6a:df:64:d8:57:e8:ba:10:30:c7:1c:de:bb: aa:61:03:df:66:d3:83:b7:8d:06:d7:f4:9d:0d:c7:79:f9:bc: 84:c4:11:2b:94:4f:43:16:0f:65:82:0b:e1:83:dd:f4:68:e9: 7d:80:0a:d7:57:64:c5:b4:c2:79:d8:d1:4d:49:65:77:ff:25: 77:e1:73:1a:49:3c:6b:b3:ac:04:a3:4b:3e:d1:02:18:53:7f: 00:e5:83:1b:18:a7:4c:6e:1f:20:ac:35:0c:f5:d7:4f:1a:d0: 4f:66:ec:10:6e:b2:08:4d:ff:a0:c2:79:d8:4c:a7:55:5b:c6: 70:4e:9c:95:e0:45:34:9f:39:c5:fd:c0:1d:70:2b:27:c8:d8: a4:c2:90:2a:b5:f4:12:ac:e5:da:46:ba:b3:c6:e8:63:52:b2: f2:4c:a7:61:a8:7a:d8:d2:51:a1:e1:60:c1:5e:75:33:82:1b: 04:82:32:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNEMDcxMTAvBgNVBAUTKEJFMkZGOTdCOUI1MzRENTM4REE0MUEwOUI2QzA4RDAy MzMyRTg2NTUwHhcNMjUwNTEwMjExNDQ1WhcNMjUwNTE3MjExNDQ1WjAYMRYwFAYD VQQDEw02ODFmYzFjNS01YzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrDkq5qPtjIKnJmPeIpCcd3sTPPullfKK4ZAoiseRmTVsIJ5xpxikAWb5Qma 32kTGHA5TkhIQeXgdU4TwhBqdBNR1d70NHNLMrO1yRL35MPG4IEWbjifK9RxaaKv 9YIS/TdAsQwc7VlHhromaC3Oh50mQwjBqTAZ0e7dUygll3G0PRX3yhLNdHSDRHam oOK4dO6JTCXVXgPubNybLxXSuEU0120sz1j52oSy+SIC1joOy877w7qqyFUYqZ3L mpoyxphXpjrb85YYWJzGNKFUe7VD5MzKf/OCTPvzhnny+LDEaYnioDy5mxOvgn7/ Glaj3GmlB1Pin+U6lfOumPauDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDA9qIK1 7hm0oq5ZvLV5U5vErxfCMB8GA1UdIwQYMBaAFL4v+XubU01TjaQaCbbAjQIzLoZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0QwNy9CRjlBRkY0QzFD RDIxMUVCOTlENThCMkNDNEY5QUUwMi92aV81ZTV0VFRWT05wQm9KdHNDTkFqTXVo bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZpXzVlNXRUVFZPTnBCb0p0c0NOQWpNdWhsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0QwNy9CRjlBRkY0QzFDRDIxMUVCOTlENThCMkNDNEY5QUUwMi92aV81ZTV0VFRW T05wQm9KdHNDTkFqTXVobFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxoS39Mm2bBB+Kqx4GgtnCKykc/KUdDzx5/dZ+KZ+IBm8sJmwamVFn Jt3eXgFIm4uHcEMqsBbPp08laCV68iQDbURKJDnaTAzP0V4uZ2rfZNhX6LoQMMcc 3ruqYQPfZtODt40G1/SdDcd5+byExBErlE9DFg9lggvhg930aOl9gArXV2TFtMJ5 2NFNSWV3/yV34XMaSTxrs6wEo0s+0QIYU38A5YMbGKdMbh8grDUM9ddPGtBPZuwQ brIITf+gwnnYTKdVW8ZwTpyV4EU0nznF/cAdcCsnyNikwpAqtfQSrOXaRrqzxuhj UrLyTKdhqHrY0lGh4WDBXnUzghsEgjJ7 -----END CERTIFICATE-----Generated at Mon May 12 13:31:50 2025 by rpki-client