$ rpki-client -vvf rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft File: vpHyHHoLwGQ389tbIUIIyHdO680.mft (raw, json) Hash identifier: ZlmmuXEuj3mW2HrVg9yL0bj1qdUCQGSi5iqySOCybbY= Subject key identifier: BC:E0:6C:2B:0D:10:F1:98:08:C1:40:FA:3E:CA:9B:81:EB:D3:D9:05 Authority key identifier: BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD Certificate issuer: /CN=A912CEBD/serialNumber=BE91F21C7A0BC06437F3DB5B214208C8774EEBCD Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft Manifest number: F9 Signing time: Thu 03 Apr 2025 04:28:25 +0000 Manifest this update: Thu 03 Apr 2025 04:28:24 +0000 Manifest next update: Thu 10 Apr 2025 04:28:24 +0000 Files and hashes: 1: vpHyHHoLwGQ389tbIUIIyHdO680.crl (hash: 9vwA/JJ2L3/+7otYwxhYhkP/tvZHYDs4WctwJKpWfAM=) 2: F2AB0C4A68C011EFB9196160C4F9AE02.roa (hash: DaPiCEmlAJvbaPsIVw3SLkMWbmEd02jwt+sb94Y5y+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:28:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CEBD Validity Not Before: Apr 3 04:28:24 2025 GMT Not After : Apr 10 04:28:24 2025 GMT Subject: CN=67ee0e68-754b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2d:d5:75:b9:21:64:4c:3d:09:f1:94:46:06: 08:00:f2:1c:0a:7e:10:dd:5f:01:a9:9e:01:07:9f: 8a:5b:78:21:e3:46:ea:d7:d3:ba:36:6b:c6:41:d3: e5:18:23:13:ea:05:72:dc:fc:fa:05:25:13:c1:1b: 77:c8:df:85:40:8e:c5:1b:6c:42:da:41:fd:1f:6d: a1:3a:ca:89:4c:5e:9c:72:c6:38:ee:9c:b0:46:71: fc:8b:c2:e6:a9:a0:f5:77:91:21:2c:c4:53:e7:eb: 95:b2:8d:44:5c:d1:4f:5c:95:62:5f:63:d5:47:a9: ab:56:ff:9b:17:4b:02:6a:c9:dd:d4:21:9f:f6:a7: 41:4d:b5:eb:02:ee:69:27:d1:28:8e:48:c2:57:1f: 46:ac:d5:01:09:4e:c3:ae:46:db:49:7f:98:e1:45: 13:c8:eb:86:24:ed:e8:91:e8:12:29:62:dc:99:66: f2:a2:c9:e7:a7:1a:57:50:5c:24:d6:b6:52:6a:cc: 97:49:e2:cb:1f:6d:42:77:84:e6:64:88:f4:19:70: 44:a0:d2:89:a4:40:cb:40:5c:13:ef:9c:ff:ea:58: 2d:6c:b3:95:21:95:14:79:7c:9a:d1:e2:2c:8b:22: a5:fa:ed:cf:fa:f2:1d:92:4f:a2:6f:f7:cf:15:ef: 41:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E0:6C:2B:0D:10:F1:98:08:C1:40:FA:3E:CA:9B:81:EB:D3:D9:05 X509v3 Authority Key Identifier: keyid:BE:91:F2:1C:7A:0B:C0:64:37:F3:DB:5B:21:42:08:C8:77:4E:EB:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpHyHHoLwGQ389tbIUIIyHdO680.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CEBD/CCD8142899C111EE9A1FDE1FC4F9AE02/vpHyHHoLwGQ389tbIUIIyHdO680.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:81:c9:3a:d6:12:68:ab:15:1e:ca:7a:15:13:d1:6e:aa:bf: d7:5a:00:05:de:c9:28:ba:c6:9d:af:14:99:e9:70:86:10:68: ba:86:26:87:38:e0:55:86:94:90:c2:c9:21:cf:52:3a:1a:42: 7f:c5:40:d0:a0:5b:4d:06:bb:c7:0a:17:52:e6:83:56:e9:88: c7:ed:bf:f0:c7:1b:ac:6e:47:d5:04:5f:35:1b:16:79:f7:c4: 7f:5c:38:29:9c:d6:36:8d:bf:e9:42:cc:7a:c2:96:13:da:94: 87:23:7b:94:4a:a0:bd:96:8b:be:7b:cf:7b:bc:dc:21:ce:16: 10:d8:99:34:ef:ae:db:05:87:9e:ef:2e:a9:ff:5b:5b:32:78: 89:7b:e6:89:72:c4:b2:53:5b:22:14:5c:f3:cc:22:c9:3e:d5: 77:a7:fc:9a:90:75:69:d5:b8:9b:12:69:97:96:15:e4:0f:f2: f7:be:32:f7:86:aa:ef:2b:8d:64:bc:75:17:06:4a:46:67:5b: fd:2c:02:9f:1b:07:37:94:2c:71:7b:5f:82:9e:a7:db:84:6f: 24:34:c4:cf:1d:11:62:7b:29:db:87:16:8e:e3:06:64:28:ea: 46:af:5a:09:ee:db:b3:3b:64:61:60:d3:99:e7:d0:b3:13:a5: ba:3a:33:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFQkQxMTAvBgNVBAUTKEJFOTFGMjFDN0EwQkMwNjQzN0YzREI1QjIxNDIwOEM4 Nzc0RUVCQ0QwHhcNMjUwNDAzMDQyODI0WhcNMjUwNDEwMDQyODI0WjAYMRYwFAYD VQQDEw02N2VlMGU2OC03NTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqy3VdbkhZEw9CfGURgYIAPIcCn4Q3V8BqZ4BB5+KW3gh40bq19O6NmvGQdPl GCMT6gVy3Pz6BSUTwRt3yN+FQI7FG2xC2kH9H22hOsqJTF6ccsY47pywRnH8i8Lm qaD1d5EhLMRT5+uVso1EXNFPXJViX2PVR6mrVv+bF0sCasnd1CGf9qdBTbXrAu5p J9EojkjCVx9GrNUBCU7DrkbbSX+Y4UUTyOuGJO3okegSKWLcmWbyosnnpxpXUFwk 1rZSasyXSeLLH21Cd4TmZIj0GXBEoNKJpEDLQFwT75z/6lgtbLOVIZUUeXya0eIs iyKl+u3P+vIdkk+ib/fPFe9BnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzgbCsN EPGYCMFA+j7Km4Hr09kFMB8GA1UdIwQYMBaAFL6R8hx6C8BkN/PbWyFCCMh3TuvN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0VCRC9DQ0Q4MTQyODk5 QzExMUVFOUExRkRFMUZDNEY5QUUwMi92cEh5SEhvTHdHUTM4OXRiSVVJSXlIZE82 ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZwSHlISG9Md0dRMzg5dGJJVUlJeUhkTzY4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0VCRC9DQ0Q4MTQyODk5QzExMUVFOUExRkRFMUZDNEY5QUUwMi92cEh5SEhvTHdH UTM4OXRiSVVJSXlIZE82ODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAigck61hJoqxUeynoVE9Fuqr/XWgAF3skousadrxSZ6XCGEGi6hiaH OOBVhpSQwskhz1I6GkJ/xUDQoFtNBrvHChdS5oNW6YjH7b/wxxusbkfVBF81GxZ5 98R/XDgpnNY2jb/pQsx6wpYT2pSHI3uUSqC9lou+e897vNwhzhYQ2Jk0767bBYee 7y6p/1tbMniJe+aJcsSyU1siFFzzzCLJPtV3p/yakHVp1bibEmmXlhXkD/L3vjL3 hqrvK41kvHUXBkpGZ1v9LAKfGwc3lCxxe1+CnqfbhG8kNMTPHRFieynbhxaO4wZk KOpGr1oJ7tuzO2RhYNOZ59CzE6W6OjMi -----END CERTIFICATE-----Generated at Fri Apr 4 22:04:12 2025 by rpki-client