$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft File: vphUuYSZNmQ-DUAVo7N7XkSErVo.mft (raw, json) Hash identifier: zI4avpI3nhNj6FUfKdLT1b9grRBjfS3jWIlisTLzhP0= Subject key identifier: 2B:07:A6:98:8C:73:A6:3B:06:70:A2:56:AF:45:71:33:7A:85:20:53 Authority key identifier: BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A Certificate issuer: /CN=A9123D19/serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A Certificate serial: 29AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft Manifest number: 2999 Signing time: Fri 04 Apr 2025 15:39:28 +0000 Manifest this update: Fri 04 Apr 2025 15:39:27 +0000 Manifest next update: Fri 11 Apr 2025 15:39:27 +0000 Files and hashes: 1: vphUuYSZNmQ-DUAVo7N7XkSErVo.crl (hash: koy7nO6/HO9bpBWR+4F/yI3IGh90UmLGBxkeJ/mxzMQ=) 2: 73E0191A967811EA92E45A27C4F9AE02.roa (hash: ShaJe6Lrds4HI5NQVrTj2+pnsM6ohcQYrpyOOxPkL24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10669 (0x29ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123D19 Validity Not Before: Apr 4 15:39:27 2025 GMT Not After : Apr 11 15:39:27 2025 GMT Subject: CN=67effd30-2b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7c:b6:99:49:a9:33:a0:c4:1a:6b:3e:49:da: 1d:0f:53:27:d9:a7:ed:71:0a:7d:51:b4:eb:f2:7d: 63:37:70:79:b2:16:33:d8:17:bb:bf:3e:17:d9:9e: d3:c6:f1:3d:9a:bc:93:ce:84:06:6d:ee:79:3c:ad: ad:c7:00:94:8e:e8:75:e0:ce:01:43:84:63:40:26: 2a:f7:2d:4b:e3:cc:5a:e5:6f:9f:72:57:2e:ac:d8: cd:13:84:66:1a:16:27:58:92:1d:5b:21:57:24:bf: f5:20:82:63:a8:be:0c:e4:14:e6:27:f9:0c:0d:c2: 22:b3:93:0a:1f:3c:f4:c6:c1:a9:7d:66:20:ad:70: 51:41:b7:54:cd:c2:05:c4:15:47:de:cc:9d:50:67: 38:c0:10:fa:fc:7e:5e:a9:d4:58:4f:92:a3:15:a0: 39:01:13:1e:1c:fd:6f:51:08:ea:3f:b0:77:ab:4b: 62:27:01:da:f0:e7:68:f9:f4:35:cd:c7:16:26:63: 37:67:14:eb:52:39:79:13:4d:b6:42:63:d4:9a:54: 82:47:ec:fa:10:cd:b2:58:d2:12:29:5f:a9:05:74: bd:51:a2:03:bc:44:6b:d7:b2:ef:cc:d4:af:6a:32: 25:d4:fb:43:57:bd:80:17:15:3c:da:63:21:9d:9c: 5e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:07:A6:98:8C:73:A6:3B:06:70:A2:56:AF:45:71:33:7A:85:20:53 X509v3 Authority Key Identifier: keyid:BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:bc:1d:29:95:f3:a4:03:20:33:31:65:03:7a:00:68:e1:7a: 09:f4:9f:31:55:cf:a5:ad:1f:56:b1:32:d3:90:40:69:45:b0: e6:a9:f3:9e:2c:86:7f:25:56:88:de:86:14:03:2c:e2:8f:18: 0b:35:d5:5f:6d:c6:8e:67:12:bf:2a:3f:a9:38:4b:f8:fa:9a: e6:ea:6d:c0:01:03:55:6b:3f:26:84:63:cb:b2:6f:13:08:e1: b8:02:51:b0:d1:8a:44:33:04:d8:44:1d:69:b4:c2:d5:da:01: 4d:eb:96:a4:fc:6d:d4:19:34:a6:91:c3:ef:e5:99:e8:53:ff: 00:53:8e:46:f4:b0:78:e3:e0:7e:47:ee:de:51:70:b4:73:81: 21:55:15:74:c4:bd:6d:9d:7c:1c:84:1c:8c:f1:0b:e8:4d:e9: fb:95:01:2b:fe:4b:0a:76:4d:94:b4:c7:46:b5:c8:e0:d5:e3: 53:3a:d8:18:16:7b:b4:b0:40:61:1c:6d:66:37:1b:3e:10:d7: b6:94:d3:c4:7a:c7:10:e6:63:81:93:e6:d5:35:86:6b:3a:43: fb:40:f9:f5:f8:e5:1a:44:b1:f7:68:ab:48:9f:ad:b2:6f:ca: 88:41:9b:72:51:74:39:36:02:6d:68:41:40:cb:e0:4a:26:b9: 37:ec:78:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNEMTkxMTAvBgNVBAUTKEJFOTg1NEI5ODQ5OTM2NjQzRTBENDAxNUEzQjM3QjVF NDQ4NEFENUEwHhcNMjUwNDA0MTUzOTI3WhcNMjUwNDExMTUzOTI3WjAYMRYwFAYD VQQDEw02N2VmZmQzMC0yYjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHy2mUmpM6DEGms+SdodD1Mn2aftcQp9UbTr8n1jN3B5shYz2Be7vz4X2Z7T xvE9mryTzoQGbe55PK2txwCUjuh14M4BQ4RjQCYq9y1L48xa5W+fclcurNjNE4Rm GhYnWJIdWyFXJL/1IIJjqL4M5BTmJ/kMDcIis5MKHzz0xsGpfWYgrXBRQbdUzcIF xBVH3sydUGc4wBD6/H5eqdRYT5KjFaA5ARMeHP1vUQjqP7B3q0tiJwHa8Odo+fQ1 zccWJmM3ZxTrUjl5E022QmPUmlSCR+z6EM2yWNISKV+pBXS9UaIDvERr17LvzNSv ajIl1PtDV72AFxU82mMhnZxeNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsHppiM c6Y7BnCiVq9FcTN6hSBTMB8GA1UdIwQYMBaAFL6YVLmEmTZkPg1AFaOze15EhK1a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0QxOS80MEVEODAyMDQy OUYxMUU0ODZCNDRENzJDNEY5QUUwMi92cGhVdVlTWk5tUS1EVUFWbzdON1hrU0Vy Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZwaFV1WVNaTm1RLURVQVZvN043WGtTRXJWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0QxOS80MEVEODAyMDQyOUYxMUU0ODZCNDRENzJDNEY5QUUwMi92cGhVdVlTWk5t US1EVUFWbzdON1hrU0VyVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSvB0plfOkAyAzMWUDegBo4XoJ9J8xVc+lrR9WsTLTkEBpRbDmqfOe LIZ/JVaI3oYUAyzijxgLNdVfbcaOZxK/Kj+pOEv4+prm6m3AAQNVaz8mhGPLsm8T COG4AlGw0YpEMwTYRB1ptMLV2gFN65ak/G3UGTSmkcPv5ZnoU/8AU45G9LB44+B+ R+7eUXC0c4EhVRV0xL1tnXwchByM8QvoTen7lQEr/ksKdk2UtMdGtcjg1eNTOtgY Fnu0sEBhHG1mNxs+ENe2lNPEescQ5mOBk+bVNYZrOkP7QPn1+OUaRLH3aKtIn62y b8qIQZtyUXQ5NgJtaEFAy+BKJrk37Hir -----END CERTIFICATE-----Generated at Fri Apr 4 18:30:20 2025 by rpki-client