$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft File: VJnONj3wXJSTIjSIKXmbEO_x05I.mft (raw, json) Hash identifier: VwToaseG7/7XGgZmfKPCQBhG3rN23IaInDhCoo+hLPc= Subject key identifier: 38:BE:7A:93:4A:FE:D2:16:26:C8:F4:E0:A3:0E:5B:48:C2:AF:A4:B7 Authority key identifier: 54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92 Certificate issuer: /CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392 Certificate serial: 02A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft Manifest number: 0297 Signing time: Sun 13 Apr 2025 01:11:41 +0000 Manifest this update: Sun 13 Apr 2025 01:11:41 +0000 Manifest next update: Sun 20 Apr 2025 01:11:41 +0000 Files and hashes: 1: VJnONj3wXJSTIjSIKXmbEO_x05I.crl (hash: uAqEOEZr4Fs2qI4syIbJlIQDUzRfF1Cav6VRBf2VSTc=) 2: 6FE49AFE8F6E11EF8CE37D0FC4F9AE02.roa (hash: cQYcptVUdqg4RQhUU70P0qYWcn62DA0vSq8TBncoINY=) 3: B4B5BF16907F11EF824E2340C4F9AE02.roa (hash: 3cjuGP2NkUpzwp+CuoNdIlymZnKHR1pKawYbEQT3I3U=) 4: B588D018907F11EF824E2340C4F9AE02.roa (hash: /kcY+NtEqZhcbJZ1YFUIs/mD1vWwcYLdov89hkEo5QI=) 5: 7142EF7E30F511ED91FE0B2CC4F9AE02.roa (hash: fh/nPQv/nYQcKywo8IbkfJ3ertJ4PhkZqi8lqFawXaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 01:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DB83, serialNumber=5499CE363DF05C949322348829799B10EFF1D392 Validity Not Before: Apr 13 01:11:41 2025 GMT Not After : Apr 20 01:11:41 2025 GMT Subject: CN=67fb0f4d-73a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1b:62:12:c4:72:39:7c:95:14:20:3c:b6:93: 94:c1:6b:0c:14:f3:22:73:da:6a:5e:59:ab:72:00: 03:f7:e6:34:2c:cf:09:4c:dc:31:38:bf:7d:2c:49: ec:ba:04:75:ef:aa:e8:df:55:54:ad:7d:5c:d1:95: fd:3d:df:a9:d6:cb:4e:b7:f8:e3:39:2e:28:fc:31: e6:ad:9a:80:9e:4e:d1:77:77:d7:47:b5:6d:3f:c8: a7:a3:f2:24:87:f5:95:76:5c:35:3b:42:ae:cc:8a: 8a:4d:3b:13:ac:89:a4:f5:d7:7a:96:72:9e:21:c5: 5d:cd:f1:63:48:0c:25:b3:cf:e7:16:03:47:1e:89: 4e:b0:2e:e5:7b:e3:3b:aa:99:21:9b:b3:cf:13:ca: 35:45:ca:4c:8b:d7:4c:1c:9f:18:85:66:89:f8:39: 54:30:77:8a:36:42:01:cd:58:63:18:b8:67:df:f8: 36:2f:67:e9:fb:b4:b0:dc:a0:63:54:6f:25:7a:02: 13:21:01:da:36:4b:ea:20:26:67:52:b7:aa:38:e2: 26:e2:0b:22:c5:ff:f5:94:96:7a:8e:b2:aa:cd:cf: 36:e5:0a:8b:c6:21:ab:3c:e8:4e:f3:63:96:9b:e2: 5d:6c:3a:02:51:4c:b0:a8:99:90:7e:be:a7:e6:64: 77:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BE:7A:93:4A:FE:D2:16:26:C8:F4:E0:A3:0E:5B:48:C2:AF:A4:B7 X509v3 Authority Key Identifier: keyid:54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:f6:72:8a:04:57:0e:87:f9:d3:b8:30:97:34:5d:8b:28:6d: 9b:5e:1c:0f:df:10:07:23:6d:e5:a9:38:3f:b5:89:70:e8:c4: 93:96:45:59:27:46:01:f6:d9:c6:76:52:3e:55:22:e2:d7:08: f6:37:e2:47:8e:00:24:36:26:17:a3:4f:b7:c3:2a:70:be:ef: bc:2b:c3:09:91:f8:34:a2:9d:4e:b8:e5:d7:cd:1b:ce:0e:f3: a2:7e:04:38:42:3b:d6:5e:4e:ae:55:a4:39:6d:1d:43:4b:47: b7:bb:f2:1c:fd:c9:cb:52:5c:43:3f:32:3f:84:92:33:f8:5b: 07:f3:7d:9c:da:b7:43:06:3c:4b:60:13:ee:6b:57:69:97:b3: 0e:19:f6:d5:61:b4:71:6b:b1:cf:67:bd:16:75:f1:28:4a:f0: aa:b6:8c:91:5f:48:a2:e8:d5:1a:07:ca:8c:12:d6:90:da:85: ac:e9:c3:e0:e9:8a:9f:cf:a8:5e:ac:25:3c:61:70:07:63:0c: 9c:e0:7c:e2:95:6f:f3:3f:56:d5:2b:fe:ba:45:e4:74:be:c1: 0b:7b:13:1d:4f:fa:b2:db:24:fa:47:65:7b:c9:db:53:e0:ef: eb:f4:4d:69:0a:38:35:bc:6c:b8:5f:b9:0e:9a:72:f1:69:bf: 70:11:a8:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRCODMxMTAvBgNVBAUTKDU0OTlDRTM2M0RGMDVDOTQ5MzIyMzQ4ODI5Nzk5QjEw RUZGMUQzOTIwHhcNMjUwNDEzMDExMTQxWhcNMjUwNDIwMDExMTQxWjAYMRYwFAYD VQQDEw02N2ZiMGY0ZC03M2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xtiEsRyOXyVFCA8tpOUwWsMFPMic9pqXlmrcgAD9+Y0LM8JTNwxOL99LEns ugR176ro31VUrX1c0ZX9Pd+p1stOt/jjOS4o/DHmrZqAnk7Rd3fXR7VtP8ino/Ik h/WVdlw1O0KuzIqKTTsTrImk9dd6lnKeIcVdzfFjSAwls8/nFgNHHolOsC7le+M7 qpkhm7PPE8o1RcpMi9dMHJ8YhWaJ+DlUMHeKNkIBzVhjGLhn3/g2L2fp+7Sw3KBj VG8legITIQHaNkvqICZnUreqOOIm4gsixf/1lJZ6jrKqzc825QqLxiGrPOhO82OW m+JdbDoCUUywqJmQfr6n5mR3owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDi+epNK /tIWJsj04KMOW0jCr6S3MB8GA1UdIwQYMBaAFFSZzjY98FyUkyI0iCl5mxDv8dOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI4My8xRUZFMjkyQ0ZC NUQxMUVDQkI2MTBDODVDNEY5QUUwMi9WSm5PTmozd1hKU1RJalNJS1htYkVPX3gw NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZKbk9OajN3WEpTVElqU0lLWG1iRU9feDA1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REI4My8xRUZFMjkyQ0ZCNUQxMUVDQkI2MTBDODVDNEY5QUUwMi9WSm5PTmozd1hK U1RJalNJS1htYkVPX3gwNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx9nKKBFcOh/nTuDCXNF2LKG2bXhwP3xAHI23lqTg/tYlw6MSTlkVZ J0YB9tnGdlI+VSLi1wj2N+JHjgAkNiYXo0+3wypwvu+8K8MJkfg0op1OuOXXzRvO DvOifgQ4QjvWXk6uVaQ5bR1DS0e3u/Ic/cnLUlxDPzI/hJIz+FsH832c2rdDBjxL YBPua1dpl7MOGfbVYbRxa7HPZ70WdfEoSvCqtoyRX0ii6NUaB8qMEtaQ2oWs6cPg 6Yqfz6herCU8YXAHYwyc4HzilW/zP1bVK/66ReR0vsELexMdT/qy2yT6R2V7ydtT 4O/r9E1pCjg1vGy4X7kOmnLxab9wEajX -----END CERTIFICATE-----Generated at Sun Apr 13 04:29:29 2025 by rpki-client