$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft File: Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json) Hash identifier: E8g6g1ZXX5NqWpq+e8Sa9CcuICPtIXFNalq5E2fPuqM= Subject key identifier: 78:6B:D9:ED:73:4A:0C:0D:BD:61:D4:00:51:99:28:A4:04:47:69:5B Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Certificate serial: 1381 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft Manifest number: 1357 Signing time: Fri 04 Apr 2025 17:06:22 +0000 Manifest this update: Fri 04 Apr 2025 17:06:22 +0000 Manifest next update: Fri 11 Apr 2025 17:06:22 +0000 Files and hashes: 1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: or6QJPKN5DzDaxPQG8ZZOEAwMknatijnOJRhS8kpkbk=) 2: E56024B49A7D11EF99ECF636C4F9AE02.roa (hash: uEmwwGXbLGwcgl1RlF9qOwgmZadJbirI6oSO1IuzJso=) 3: E48C805A9A7D11EF99ECF636C4F9AE02.roa (hash: O/obPP4Yy8LvINF30ra1g4yXQa4L78ykRo9/qSPYtDU=) 4: C19EC984774811EFB2DF8983C4F9AE02.roa (hash: c/pAynOTfJnEgUvwSHA5IHqTz1bA0PIkbnuNkyI5d1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4993 (0x1381) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120F0D Validity Not Before: Apr 4 17:06:22 2025 GMT Not After : Apr 11 17:06:22 2025 GMT Subject: CN=67f0118e-b58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:71:f0:45:da:23:5b:07:03:e1:fb:95:94:85: f8:89:de:7a:87:f4:85:1d:f6:cd:12:3e:b8:09:25: 7c:e3:ae:8e:73:f5:81:9c:68:d2:0e:a6:7b:42:10: d5:8b:fa:e7:ff:66:74:5b:a8:14:9c:56:e7:5a:5b: cc:6d:ec:79:b5:7b:6a:fe:a1:94:ae:fd:31:f4:8a: f7:80:50:2f:3c:8f:1c:45:56:cf:79:00:94:b7:7e: c7:b2:7e:2a:9c:1b:ae:d4:61:68:77:86:c7:fb:9d: ed:49:1e:f1:41:f6:fa:2a:23:8d:23:04:ce:53:92: b7:59:3d:06:b8:2b:8a:11:b7:d4:4e:db:e7:1f:41: 74:bb:14:51:ce:c4:13:2b:b7:56:29:a9:7f:fc:da: 2e:aa:1c:6a:ee:67:b8:aa:cb:b4:be:b9:61:b5:38: d2:5e:68:95:0a:41:f2:64:99:3c:26:a2:34:43:49: 95:00:3b:60:0a:8a:dd:6a:8d:f0:1a:1f:34:81:a6: 1f:4a:f9:67:2e:95:aa:3c:e1:f0:d4:0b:e7:b7:15: 12:c1:ae:e6:3d:d1:c9:48:d9:bd:2e:ef:63:90:fa: 0d:a2:7d:b3:a7:fe:c5:11:79:4c:74:6b:f1:f4:68: e6:a6:66:1e:a2:19:ed:b5:7d:d9:0b:57:62:20:4e: 4c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6B:D9:ED:73:4A:0C:0D:BD:61:D4:00:51:99:28:A4:04:47:69:5B X509v3 Authority Key Identifier: keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:19:89:86:c2:08:8a:89:5d:8a:cc:d3:b9:b6:2b:2c:21:19: 24:63:7e:0f:6b:ab:a7:a6:36:85:61:eb:d6:21:20:4f:8e:f8: be:46:71:b4:a7:7b:72:f1:fd:5f:c2:53:ac:d3:cd:75:1f:5a: 0d:e9:b1:5c:36:f4:0c:76:c2:0b:b6:8a:87:d3:4c:fb:76:95: b7:c0:11:e6:d4:98:88:3b:de:7e:0e:5a:c3:40:eb:6a:95:d3: 5a:1f:5a:39:38:fb:02:31:f9:30:16:7c:6f:12:f1:3a:15:c6: e3:27:68:05:a1:4b:2e:0e:0f:6a:e6:b5:4c:a5:d3:5e:88:a1: 11:9f:86:e5:34:4a:59:3a:59:60:81:b0:d5:02:32:50:0b:29: 3d:86:3e:0b:99:1a:98:9b:79:4b:fe:86:ff:24:ff:2f:38:e8: 40:c1:1c:49:fa:9f:cf:3f:ea:45:12:c3:df:7d:9e:28:96:12: 99:9e:44:94:1e:5b:34:9b:32:87:8c:5e:72:63:44:b0:f4:43: 5d:c6:e5:75:9d:86:b6:6a:3f:ad:73:3c:22:72:da:24:04:36: b8:a9:9d:7f:af:1d:1a:99:41:bc:81:0c:99:3c:f4:f5:fd:0f: 9f:82:dd:28:ff:89:5c:49:01:d0:1f:dd:d2:83:c9:4b:d2:cd: 3e:90:3f:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC MzVFODU5RjkwHhcNMjUwNDA0MTcwNjIyWhcNMjUwNDExMTcwNjIyWjAYMRYwFAYD VQQDEw02N2YwMTE4ZS1iNThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3HwRdojWwcD4fuVlIX4id56h/SFHfbNEj64CSV8466Oc/WBnGjSDqZ7QhDV i/rn/2Z0W6gUnFbnWlvMbex5tXtq/qGUrv0x9Ir3gFAvPI8cRVbPeQCUt37Hsn4q nBuu1GFod4bH+53tSR7xQfb6KiONIwTOU5K3WT0GuCuKEbfUTtvnH0F0uxRRzsQT K7dWKal//Nouqhxq7me4qsu0vrlhtTjSXmiVCkHyZJk8JqI0Q0mVADtgCordao3w Gh80gaYfSvlnLpWqPOHw1AvntxUSwa7mPdHJSNm9Lu9jkPoNon2zp/7FEXlMdGvx 9GjmpmYeohnttX3ZC1diIE5MGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhr2e1z SgwNvWHUAFGZKKQER2lbMB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEYwRC8wOEVDMkIwQ0EzNkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5 OS1jSGJGeHhXeWl6WG9XZmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJGYmGwgiKiV2KzNO5tissIRkkY34Pa6unpjaFYevWISBPjvi+RnG0 p3ty8f1fwlOs0811H1oN6bFcNvQMdsILtoqH00z7dpW3wBHm1JiIO95+DlrDQOtq ldNaH1o5OPsCMfkwFnxvEvE6FcbjJ2gFoUsuDg9q5rVMpdNeiKERn4blNEpZOllg gbDVAjJQCyk9hj4LmRqYm3lL/ob/JP8vOOhAwRxJ+p/PP+pFEsPffZ4olhKZnkSU Hls0mzKHjF5yY0Sw9ENdxuV1nYa2aj+tczwictokBDa4qZ1/rx0amUG8gQyZPPT1 /Q+fgt0o/4lcSQHQH93Sg8lL0s0+kD9O -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:02 2025 by rpki-client