$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft File: vxobyMAsIDYtD9n5K8AGoolejIA.mft (raw, json) Hash identifier: bOxLhGOmVGIdAhNISOo1lLgezngZedZrtNj6VfFKzOU= Subject key identifier: 61:CF:62:40:DB:43:82:AF:9A:7D:1E:44:69:91:44:2C:71:F5:A5:3E Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80 Certificate issuer: /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80 Certificate serial: 0794 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft Manifest number: 078F Signing time: Sat 10 May 2025 20:59:37 +0000 Manifest this update: Sat 10 May 2025 20:59:36 +0000 Manifest next update: Sat 17 May 2025 20:59:36 +0000 Files and hashes: 1: vxobyMAsIDYtD9n5K8AGoolejIA.crl (hash: ZwOTlOiu/SonMpuTHaaZw4hYiSTdgBuqMXGtM7imA9s=) 2: ABD5003E079C11EBA7C04832C4F9AE02.roa (hash: 1LIqaLcLd8sIbPgwe6w2+ZfDiBIad4OGJXBnSw3QIfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1940 (0x794) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A423B, serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80 Validity Not Before: May 10 20:59:36 2025 GMT Not After : May 17 20:59:36 2025 GMT Subject: CN=681fbe38-df0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3d:c9:31:30:ed:91:18:06:77:5f:8c:8e:33: 1b:e6:4f:4c:48:ea:bb:ed:a1:50:62:fb:3a:70:10: c7:55:40:71:67:d4:fb:e4:8c:4d:85:5a:a4:14:b1: 07:33:15:b2:8c:7f:c5:23:0b:f6:1b:c5:1a:0b:f7: 0b:af:3a:32:40:62:6e:48:62:64:af:ce:19:e5:f0: 1a:f1:f6:f1:11:fc:ab:29:f0:d9:29:62:82:f4:b4: 7d:44:1b:bb:63:b7:ee:96:97:ea:18:94:1d:d4:32: 3f:3c:4c:87:38:80:a0:5f:b7:e1:c2:59:31:22:3c: ed:4b:50:4b:f8:14:54:78:fd:66:fb:a5:55:49:46: 68:cd:4a:8b:14:ea:0f:58:09:97:aa:d2:97:29:15: e9:c3:0d:77:ba:60:e9:14:78:87:5e:6c:10:0c:d0: 93:3c:95:50:35:02:26:b2:5b:65:c4:bf:5b:7b:d0: 1f:c3:1e:02:0c:0d:1a:6c:b6:6d:43:a0:9e:9f:9b: 83:74:e8:e9:9a:e6:b7:b6:e0:ba:c8:af:89:c7:c4: 01:86:58:85:f9:32:e1:6b:0e:f8:11:d1:66:b7:fd: a6:5d:19:d1:16:32:b5:6a:80:a6:85:16:fe:89:b6: 40:12:db:d8:cb:8c:47:e4:cd:90:49:2a:02:1f:43: f2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CF:62:40:DB:43:82:AF:9A:7D:1E:44:69:91:44:2C:71:F5:A5:3E X509v3 Authority Key Identifier: keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:57:da:f0:d9:4e:7a:2a:c1:b9:54:33:d0:60:01:8e:f0:93: e2:73:f4:9a:f0:f4:b5:1c:40:0c:ea:1a:4c:66:74:d0:35:14: ac:14:af:4e:2e:c8:4c:c2:33:0c:a2:73:d3:8e:3e:1d:9e:85: 6c:3b:d7:b1:58:cc:26:f7:3f:ed:71:a1:d3:47:e7:98:c3:56: 2e:d5:6c:c1:4c:99:1c:ab:c0:b3:f2:e0:57:a0:5f:73:89:0b: 61:d0:7e:38:ec:af:a1:39:3b:f8:85:10:97:fc:18:1b:75:a3: e8:78:cf:bf:95:0e:7b:a7:f9:f8:6a:73:38:b4:42:43:c6:46: 4a:04:cf:9d:d8:57:b6:4c:34:45:ab:e4:24:fe:b7:61:f3:61: d4:41:7d:6f:8f:66:8d:5f:7c:9c:ff:81:68:df:8c:8e:23:99: 24:1f:e7:13:11:18:a8:2b:c0:80:76:f1:13:11:3c:eb:46:b4: f2:87:90:6b:4f:dc:52:fc:5b:f5:34:5f:02:1d:91:3e:f8:09: 0e:85:1a:04:da:84:38:c5:11:81:95:f1:ab:1d:eb:72:6e:d5: 45:e9:ed:1a:a8:e0:4a:d3:34:bd:20:8c:32:8c:38:ef:1b:d4: de:5c:13:52:b7:31:f6:e4:fa:ed:bd:e1:8b:f8:95:6b:36:e3: c7:77:f4:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyM0IxMTAvBgNVBAUTKEJGMUExQkM4QzAyQzIwMzYyRDBGRDlGOTJCQzAwNkEy ODk1RThDODAwHhcNMjUwNTEwMjA1OTM2WhcNMjUwNTE3MjA1OTM2WjAYMRYwFAYD VQQDEw02ODFmYmUzOC1kZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2T3JMTDtkRgGd1+MjjMb5k9MSOq77aFQYvs6cBDHVUBxZ9T75IxNhVqkFLEH MxWyjH/FIwv2G8UaC/cLrzoyQGJuSGJkr84Z5fAa8fbxEfyrKfDZKWKC9LR9RBu7 Y7fulpfqGJQd1DI/PEyHOICgX7fhwlkxIjztS1BL+BRUeP1m+6VVSUZozUqLFOoP WAmXqtKXKRXpww13umDpFHiHXmwQDNCTPJVQNQImsltlxL9be9Afwx4CDA0abLZt Q6Cen5uDdOjpmua3tuC6yK+Jx8QBhliF+TLhaw74EdFmt/2mXRnRFjK1aoCmhRb+ ibZAEtvYy4xH5M2QSSoCH0PyBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHPYkDb Q4Kvmn0eRGmRRCxx9aU+MB8GA1UdIwQYMBaAFL8aG8jALCA2LQ/Z+SvABqKJXoyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDIzQi9BRjc1NkI5NDA3 OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lEWXREOW41SzhBR29vbGVq SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z4b2J5TUFzSURZdEQ5bjVLOEFHb29sZWpJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDIzQi9BRjc1NkI5NDA3OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lE WXREOW41SzhBR29vbGVqSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfV9rw2U56KsG5VDPQYAGO8JPic/Sa8PS1HEAM6hpMZnTQNRSsFK9O LshMwjMMonPTjj4dnoVsO9exWMwm9z/tcaHTR+eYw1Yu1WzBTJkcq8Cz8uBXoF9z iQth0H447K+hOTv4hRCX/BgbdaPoeM+/lQ57p/n4anM4tEJDxkZKBM+d2Fe2TDRF q+Qk/rdh82HUQX1vj2aNX3yc/4Fo34yOI5kkH+cTERioK8CAdvETETzrRrTyh5Br T9xS/Fv1NF8CHZE++AkOhRoE2oQ4xRGBlfGrHetybtVF6e0aqOBK0zS9IIwyjDjv G9TeXBNStzH25PrtveGL+JVrNuPHd/TP -----END CERTIFICATE-----Generated at Sun May 11 22:35:27 2025 by rpki-client