$ rpki-client -vvf rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft File: VWyosJdH0HtvaiekBVKNOfpbgkw.mft (raw, json) Hash identifier: iN3q8L41Pn/WojrI1fTiPkM4I8Op1R5MFbp8xVE0CaQ= Subject key identifier: 22:D6:98:BD:1F:26:93:BC:74:83:21:A7:67:F0:79:0C:99:BC:23:DA Authority key identifier: 55:6C:A8:B0:97:47:D0:7B:6F:6A:27:A4:05:52:8D:39:FA:5B:82:4C Certificate issuer: /CN=A912A4D7/serialNumber=556CA8B09747D07B6F6A27A405528D39FA5B824C Certificate serial: 0879 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft Manifest number: 0872 Signing time: Sun 20 Apr 2025 20:22:52 +0000 Manifest this update: Sun 20 Apr 2025 20:22:51 +0000 Manifest next update: Sun 27 Apr 2025 20:22:51 +0000 Files and hashes: 1: VWyosJdH0HtvaiekBVKNOfpbgkw.crl (hash: PL3EZ0Sb+FEr+qZdQ4CTC5DHwDKH/1YcVJcAEDmAZe0=) 2: 3C24D492BF6911EAA877B317C4F9AE02.roa (hash: HZcGG22h/HtJGmyJDeOn4oUgEJpbcKg45t8DnTIstz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.crl rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2169 (0x879) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A4D7, serialNumber=556CA8B09747D07B6F6A27A405528D39FA5B824C Validity Not Before: Apr 20 20:22:51 2025 GMT Not After : Apr 27 20:22:51 2025 GMT Subject: CN=6805579b-7ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8a:cb:e7:10:6d:bb:6c:40:77:47:f6:9b:13: 6c:cd:07:af:e8:bd:53:10:6c:a1:d5:60:62:59:bb: bc:20:bd:27:70:29:fa:7b:61:a4:8d:ac:da:d5:af: f6:e0:1b:e7:c1:76:c9:c3:c1:83:58:79:e3:88:8f: aa:08:2e:57:f4:a9:7c:b9:a5:3a:1c:aa:52:56:75: e0:19:ae:9e:f3:88:2f:ac:17:0c:55:6f:77:74:fa: e9:fc:1c:96:30:e2:3e:28:4b:9c:08:0b:3a:62:c3: e9:e8:6f:85:34:78:2c:4e:33:b1:44:43:bd:dc:5f: 05:54:47:b6:05:8c:84:8a:7f:a7:5c:dc:69:cf:f0: 52:43:68:a3:a6:cc:41:1f:3e:eb:e4:2f:05:da:28: 45:6f:d2:96:d4:7c:be:f4:82:31:85:70:cc:fc:d1: 77:ad:07:b9:61:83:0d:4e:15:82:88:21:67:6a:68: d9:6b:5b:e1:e7:67:e6:df:b3:2e:03:b7:90:23:1a: 48:cf:79:f2:7e:86:e8:4c:be:bb:cd:d6:ac:57:3b: f6:2b:bf:46:c1:04:2b:b4:77:1f:cf:8a:07:46:d8: 7f:78:13:10:e3:7f:d4:e8:c7:62:00:dd:40:cd:e7: 84:7f:2a:79:e2:5f:c0:d0:ef:71:02:be:62:30:0c: 1f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D6:98:BD:1F:26:93:BC:74:83:21:A7:67:F0:79:0C:99:BC:23:DA X509v3 Authority Key Identifier: keyid:55:6C:A8:B0:97:47:D0:7B:6F:6A:27:A4:05:52:8D:39:FA:5B:82:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VWyosJdH0HtvaiekBVKNOfpbgkw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A4D7/BD0C03F2BF6711EAB3BB1815C4F9AE02/VWyosJdH0HtvaiekBVKNOfpbgkw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b3:28:82:d1:af:19:85:b0:ee:cc:f1:31:35:e2:3f:eb:c1: f4:6c:46:85:55:eb:9d:bf:0a:47:06:57:4f:0b:ea:20:b0:19: 20:49:86:4b:cd:e2:6a:4b:6e:8e:fb:15:75:c4:8d:97:5c:01: e4:d5:e5:f5:f7:5c:9b:8d:30:02:a9:b9:61:84:85:6a:c8:6d: 27:4a:da:58:28:92:c0:05:fa:83:7b:63:47:22:6c:75:43:2d: 2e:8a:51:51:45:bd:4b:0a:e2:3a:70:c1:21:af:e1:58:29:88: 35:7d:72:dc:9b:e1:f0:af:09:69:3f:fa:ca:6f:94:ed:47:ea: 35:11:a4:4f:ad:59:f0:81:a9:27:e1:3c:72:9d:70:04:c9:4f: 6b:1e:76:22:d9:19:04:82:3c:71:6c:49:0b:19:f9:49:0d:2b: 42:32:5d:55:ce:f5:59:d5:48:38:50:41:fd:e5:b9:33:96:f2: 40:ac:97:0e:c9:91:cd:6a:cd:39:f3:8d:19:81:a7:2f:91:2e: ea:60:3e:07:4f:a3:ea:7f:62:24:c5:78:d2:b8:c7:c1:4d:d3: f1:6b:26:14:14:ac:65:36:8e:4c:ef:4a:62:5f:1a:4f:29:af: 47:ea:04:d3:35:95:15:24:1b:60:25:9e:2a:a5:5e:a5:e5:cc: 56:35:48:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE0RDcxMTAvBgNVBAUTKDU1NkNBOEIwOTc0N0QwN0I2RjZBMjdBNDA1NTI4RDM5 RkE1QjgyNEMwHhcNMjUwNDIwMjAyMjUxWhcNMjUwNDI3MjAyMjUxWjAYMRYwFAYD VQQDEw02ODA1NTc5Yi03Y2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4rL5xBtu2xAd0f2mxNszQev6L1TEGyh1WBiWbu8IL0ncCn6e2Gkjaza1a/2 4BvnwXbJw8GDWHnjiI+qCC5X9Kl8uaU6HKpSVnXgGa6e84gvrBcMVW93dPrp/ByW MOI+KEucCAs6YsPp6G+FNHgsTjOxREO93F8FVEe2BYyEin+nXNxpz/BSQ2ijpsxB Hz7r5C8F2ihFb9KW1Hy+9IIxhXDM/NF3rQe5YYMNThWCiCFnamjZa1vh52fm37Mu A7eQIxpIz3nyfoboTL67zdasVzv2K79GwQQrtHcfz4oHRth/eBMQ43/U6MdiAN1A zeeEfyp54l/A0O9xAr5iMAwfswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLWmL0f JpO8dIMhp2fweQyZvCPaMB8GA1UdIwQYMBaAFFVsqLCXR9B7b2onpAVSjTn6W4JM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTRENy9CRDBDMDNGMkJG NjcxMUVBQjNCQjE4MTVDNEY5QUUwMi9WV3lvc0pkSDBIdHZhaWVrQlZLTk9mcGJn a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZXeW9zSmRIMEh0dmFpZWtCVktOT2ZwYmdrdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTRENy9CRDBDMDNGMkJGNjcxMUVBQjNCQjE4MTVDNEY5QUUwMi9WV3lvc0pkSDBI dHZhaWVrQlZLTk9mcGJna3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPsyiC0a8ZhbDuzPExNeI/68H0bEaFVeudvwpHBldPC+ogsBkgSYZL zeJqS26O+xV1xI2XXAHk1eX191ybjTACqblhhIVqyG0nStpYKJLABfqDe2NHImx1 Qy0uilFRRb1LCuI6cMEhr+FYKYg1fXLcm+HwrwlpP/rKb5TtR+o1EaRPrVnwgakn 4TxynXAEyU9rHnYi2RkEgjxxbEkLGflJDStCMl1VzvVZ1Ug4UEH95bkzlvJArJcO yZHNas05840ZgacvkS7qYD4HT6Pqf2IkxXjSuMfBTdPxayYUFKxlNo5M70piXxpP Ka9H6gTTNZUVJBtgJZ4qpV6l5cxWNUgx -----END CERTIFICATE-----Generated at Tue Apr 22 20:23:02 2025 by rpki-client