$ rpki-client -vvf rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft File: vwxRAalGDasWiyHwJOMMiVoCjEI.mft (raw, json) Hash identifier: 4pb4Q/Mr7PGA23oziAp3RiloEamUscNQ6Quewy6Ut3g= Subject key identifier: AC:E5:A5:CC:3E:23:49:F7:BD:92:DF:65:47:DC:FF:53:AB:1D:A1:1D Authority key identifier: BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42 Certificate issuer: /CN=A9180307/serialNumber=BF0C5101A9460DAB168B21F024E30C895A028C42 Certificate serial: 04FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft Manifest number: 04F7 Signing time: Mon 12 May 2025 23:29:26 +0000 Manifest this update: Mon 12 May 2025 23:29:25 +0000 Manifest next update: Mon 19 May 2025 23:29:25 +0000 Files and hashes: 1: vwxRAalGDasWiyHwJOMMiVoCjEI.crl (hash: OvzHWiQF9ysaMauN1xKia+mCuBHjG1UkWiBCnwyVutw=) 2: 1829AEE8146B11EC81328F59C4F9AE02.roa (hash: aIxAvyaJTpqygmqgpU8RPaqkDh+o4vZaFakEjzwWwkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.crl rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1277 (0x4fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180307, serialNumber=BF0C5101A9460DAB168B21F024E30C895A028C42 Validity Not Before: May 12 23:29:25 2025 GMT Not After : May 19 23:29:25 2025 GMT Subject: CN=68228456-5a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ff:c0:7d:b9:88:8f:47:da:70:75:73:d9:b7: cc:9a:1b:61:37:91:0a:a2:3f:97:1b:d5:2d:6c:f8: 76:44:93:18:cb:b0:1d:f0:b0:b8:fb:d2:65:1a:2e: b0:8e:54:dc:2b:a3:b1:8c:40:1e:7b:c4:b3:08:c7: 14:48:f5:cc:9c:4c:42:e8:86:83:b3:b3:ba:cb:40: f3:8a:79:86:bc:b9:6c:b8:b8:e6:d3:83:14:46:ea: 1b:7a:1f:55:d8:4c:68:1c:45:bd:2c:f3:7b:09:b7: 93:c5:a4:11:1b:6e:dd:8e:41:5f:db:1b:fd:57:3f: 7b:a2:5d:93:9b:26:0f:ce:45:6b:7d:ea:5c:a3:aa: 5f:41:a7:4e:a5:29:8d:98:96:e5:e2:9b:1f:63:e6: 25:fa:85:13:de:32:e6:75:a7:37:fd:ad:42:34:35: e1:10:97:ce:ae:44:30:c1:f7:1d:47:7b:93:28:85: e9:1a:22:fa:f3:e7:00:ed:7d:f9:fb:3f:be:30:5e: df:c6:4c:f1:f7:14:48:92:16:09:70:c4:d5:89:54: 74:07:9c:b7:93:e8:89:cf:81:3d:c4:97:b3:d8:72: bb:60:20:13:a8:5d:85:73:54:09:ce:7d:0f:00:19: 92:5c:99:87:61:24:2a:ba:ff:cb:20:74:30:e2:bb: c7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E5:A5:CC:3E:23:49:F7:BD:92:DF:65:47:DC:FF:53:AB:1D:A1:1D X509v3 Authority Key Identifier: keyid:BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:8e:7c:11:9c:81:71:0f:2b:59:51:8c:0f:19:dd:5a:a5:fe: 65:d1:e8:30:1f:aa:a8:33:37:a1:ea:dc:14:bb:52:89:c3:99: 73:b5:69:ad:67:88:c4:72:82:43:26:90:d4:90:5f:52:cd:10: 30:7a:aa:06:fc:74:c0:96:6b:2c:82:14:6f:e8:d4:b3:29:db: 67:fb:33:8b:d0:b4:94:39:bf:cc:17:a0:ce:42:81:46:ee:c8: 75:cd:34:82:0d:d3:ab:61:4a:d2:27:fe:0e:d9:93:a3:93:46: 2d:08:81:df:3d:1b:dc:cc:48:7e:8a:31:be:34:bc:9c:d1:d0: 55:40:00:6e:67:ca:1b:22:7b:34:53:2a:86:1b:3e:7b:1f:10: 69:6e:69:9c:13:a7:91:6f:99:85:26:f1:c8:75:81:31:cf:ff: f5:41:2a:25:5c:82:24:e1:f6:3f:ad:3e:cd:ca:49:ae:e5:9c: 01:9f:f9:e7:d5:e1:7a:96:b2:57:32:f7:65:8c:de:04:87:9b: 93:a2:01:2f:0b:a1:25:62:2e:d9:f2:82:87:bb:27:c0:ec:be: bb:c9:2e:5e:c0:b5:2a:92:b9:9e:1b:5c:78:e9:f7:e6:d8:e3: a8:35:76:b1:a2:44:a1:9c:ee:0d:ac:80:cd:76:2e:aa:64:cf: 39:46:73:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzMDcxMTAvBgNVBAUTKEJGMEM1MTAxQTk0NjBEQUIxNjhCMjFGMDI0RTMwQzg5 NUEwMjhDNDIwHhcNMjUwNTEyMjMyOTI1WhcNMjUwNTE5MjMyOTI1WjAYMRYwFAYD VQQDEw02ODIyODQ1Ni01YTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9//AfbmIj0facHVz2bfMmhthN5EKoj+XG9UtbPh2RJMYy7Ad8LC4+9JlGi6w jlTcK6OxjEAee8SzCMcUSPXMnExC6IaDs7O6y0DzinmGvLlsuLjm04MURuobeh9V 2ExoHEW9LPN7CbeTxaQRG27djkFf2xv9Vz97ol2TmyYPzkVrfepco6pfQadOpSmN mJbl4psfY+Yl+oUT3jLmdac3/a1CNDXhEJfOrkQwwfcdR3uTKIXpGiL68+cA7X35 +z++MF7fxkzx9xRIkhYJcMTViVR0B5y3k+iJz4E9xJez2HK7YCATqF2Fc1QJzn0P ABmSXJmHYSQquv/LIHQw4rvHyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzlpcw+ I0n3vZLfZUfc/1OrHaEdMB8GA1UdIwQYMBaAFL8MUQGpRg2rFosh8CTjDIlaAoxC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMwNy9BOUE4MTlGMjBF REMxMUVDOURDQ0MxNTVDNEY5QUUwMi92d3hSQWFsR0Rhc1dpeUh3Sk9NTWlWb0Nq RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z3eFJBYWxHRGFzV2l5SHdKT01NaVZvQ2pFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDMwNy9BOUE4MTlGMjBFREMxMUVDOURDQ0MxNTVDNEY5QUUwMi92d3hSQWFsR0Rh c1dpeUh3Sk9NTWlWb0NqRUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+jnwRnIFxDytZUYwPGd1apf5l0egwH6qoMzeh6twUu1KJw5lztWmt Z4jEcoJDJpDUkF9SzRAweqoG/HTAlmssghRv6NSzKdtn+zOL0LSUOb/MF6DOQoFG 7sh1zTSCDdOrYUrSJ/4O2ZOjk0YtCIHfPRvczEh+ijG+NLyc0dBVQABuZ8obIns0 UyqGGz57HxBpbmmcE6eRb5mFJvHIdYExz//1QSolXIIk4fY/rT7Nykmu5ZwBn/nn 1eF6lrJXMvdljN4Eh5uTogEvC6ElYi7Z8oKHuyfA7L67yS5ewLUqkrmeG1x46ffm 2OOoNXaxokShnO4NrIDNdi6qZM85RnMl -----END CERTIFICATE-----Generated at Wed May 14 04:29:08 2025 by rpki-client