$ rpki-client -vvf rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft File: vQyzxI8wwfOrPzAa7N5qzAIutV8.mft (raw, json) Hash identifier: u8P2uSIfS/jou8Fixspwih1AbfOsveua8IUMAUeI0g0= Subject key identifier: 29:7A:C7:E6:D3:10:EB:E1:7F:11:B4:27:67:8B:39:67:3F:5A:26:B6 Authority key identifier: BD:0C:B3:C4:8F:30:C1:F3:AB:3F:30:1A:EC:DE:6A:CC:02:2E:B5:5F Certificate issuer: /CN=A9131940/serialNumber=BD0CB3C48F30C1F3AB3F301AECDE6ACC022EB55F Certificate serial: 0666 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft Manifest number: 0660 Signing time: Sun 20 Apr 2025 22:01:26 +0000 Manifest this update: Sun 20 Apr 2025 22:01:25 +0000 Manifest next update: Sun 27 Apr 2025 22:01:25 +0000 Files and hashes: 1: vQyzxI8wwfOrPzAa7N5qzAIutV8.crl (hash: h60i/mz+UDQ2LH1Bb/Y2i7ueVxSS9a0HpAg9C3BPbn8=) 2: B7E5ADEE7B2111EB89BB2347C4F9AE02.roa (hash: XhXh7/hc+7Rhp2pgMR497HY0tEko0qYz35OtmtH7m/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.crl rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 22:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1638 (0x666) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131940, serialNumber=BD0CB3C48F30C1F3AB3F301AECDE6ACC022EB55F Validity Not Before: Apr 20 22:01:25 2025 GMT Not After : Apr 27 22:01:25 2025 GMT Subject: CN=68056eb5-58bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7f:26:c4:ca:2c:d5:84:7c:28:13:75:5b:f7: 15:45:a4:4b:8c:5c:8d:be:e5:f9:cd:04:fb:ce:bf: 04:0f:93:fe:65:e0:06:26:37:1d:b8:e7:5b:ae:be: 67:1e:3c:55:15:a0:5f:24:4f:b6:f0:27:46:9d:3a: 9e:5f:b8:77:c3:a5:2e:46:91:35:2b:fa:6a:52:f7: 72:a1:53:4b:68:6f:d1:bb:a9:98:e2:a0:2c:f6:b3: 3c:9c:29:d0:3c:d2:d0:24:7d:f9:51:ea:40:c5:04: 4e:34:62:62:8c:46:eb:ec:75:ce:19:e1:65:a6:f8: 4f:94:7b:3e:2e:4e:f9:22:f7:d7:71:1d:cd:ba:a9: e6:46:06:51:a1:43:5a:17:f8:80:95:39:34:8a:04: 78:ec:1a:43:2a:a7:ee:fc:8c:7b:a7:14:d0:11:a5: 59:2e:55:83:d0:d4:e1:43:49:bc:dc:c4:db:8a:33: 55:12:84:83:d6:dd:27:fa:92:3f:7d:b5:1c:ba:e6: 75:16:30:0a:c1:e0:62:d4:cd:05:a1:f4:ab:f6:2e: e1:a9:52:9a:8d:a5:7d:0c:ed:ea:e7:41:07:a6:df: 54:b9:01:34:41:a8:a7:c1:22:d5:ab:bc:78:30:57: 68:db:45:c1:27:d4:ad:60:cb:50:3d:42:b4:45:7b: 83:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7A:C7:E6:D3:10:EB:E1:7F:11:B4:27:67:8B:39:67:3F:5A:26:B6 X509v3 Authority Key Identifier: keyid:BD:0C:B3:C4:8F:30:C1:F3:AB:3F:30:1A:EC:DE:6A:CC:02:2E:B5:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:9a:e6:0c:70:a2:e1:ad:1a:31:c5:0b:fe:60:f9:0f:82:40: 65:0e:d5:97:b1:54:c1:23:15:53:71:41:55:b2:df:97:76:f7: a6:cb:82:40:c7:62:0a:2c:96:b8:0a:46:0e:92:0f:90:c0:0a: 92:da:af:63:38:dd:6d:1b:89:97:02:17:88:c0:88:8f:db:7f: 50:bd:02:de:8d:13:54:1e:72:c3:c2:be:8e:5f:c1:32:be:ea: 25:31:25:87:a0:69:9d:63:06:5a:3b:0e:ec:bf:a8:6e:77:3d: 96:12:81:56:cd:5b:fe:a4:0c:af:9c:ef:2a:92:3b:c8:5b:f1: 02:78:e5:8d:f8:55:b9:9c:21:5f:8c:b8:c6:8d:97:f6:f0:4c: f6:e6:da:2e:43:25:c7:b5:b2:27:47:cd:7d:3e:c4:91:f4:9a: 1b:ba:1a:9f:26:47:a4:e8:a9:66:af:fb:34:fe:e6:5e:4b:d6: 22:2d:08:e3:4f:3b:82:53:bb:8b:80:68:d7:6f:1e:a4:7f:18: 19:96:f4:f3:75:cb:b1:f0:5b:23:ce:8a:62:d7:0c:55:e1:cd: fc:22:23:fb:c1:30:3e:de:0f:d8:3b:45:56:ee:c4:d3:66:e4: 82:b3:61:64:8e:3e:08:bf:69:62:1c:27:90:22:84:f3:3b:13: 0a:6e:8e:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE5NDAxMTAvBgNVBAUTKEJEMENCM0M0OEYzMEMxRjNBQjNGMzAxQUVDREU2QUND MDIyRUI1NUYwHhcNMjUwNDIwMjIwMTI1WhcNMjUwNDI3MjIwMTI1WjAYMRYwFAYD VQQDEw02ODA1NmViNS01OGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtH8mxMos1YR8KBN1W/cVRaRLjFyNvuX5zQT7zr8ED5P+ZeAGJjcduOdbrr5n HjxVFaBfJE+28CdGnTqeX7h3w6UuRpE1K/pqUvdyoVNLaG/Ru6mY4qAs9rM8nCnQ PNLQJH35UepAxQRONGJijEbr7HXOGeFlpvhPlHs+Lk75IvfXcR3NuqnmRgZRoUNa F/iAlTk0igR47BpDKqfu/Ix7pxTQEaVZLlWD0NThQ0m83MTbijNVEoSD1t0n+pI/ fbUcuuZ1FjAKweBi1M0FofSr9i7hqVKajaV9DO3q50EHpt9UuQE0QainwSLVq7x4 MFdo20XBJ9StYMtQPUK0RXuDcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCl6x+bT EOvhfxG0J2eLOWc/Wia2MB8GA1UdIwQYMBaAFL0Ms8SPMMHzqz8wGuzeaswCLrVf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTk0MC85Q0Y2MEJCMDdC MjAxMUVCQjBDOERDNDZDNEY5QUUwMi92UXl6eEk4d3dmT3JQekFhN041cXpBSXV0 VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZReXp4STh3d2ZPclB6QWE3TjVxekFJdXRWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTk0MC85Q0Y2MEJCMDdCMjAxMUVCQjBDOERDNDZDNEY5QUUwMi92UXl6eEk4d3dm T3JQekFhN041cXpBSXV0VjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAymuYMcKLhrRoxxQv+YPkPgkBlDtWXsVTBIxVTcUFVst+Xdvemy4JA x2IKLJa4CkYOkg+QwAqS2q9jON1tG4mXAheIwIiP239QvQLejRNUHnLDwr6OX8Ey vuolMSWHoGmdYwZaOw7sv6hudz2WEoFWzVv+pAyvnO8qkjvIW/ECeOWN+FW5nCFf jLjGjZf28Ez25touQyXHtbInR819PsSR9JobuhqfJkek6Klmr/s0/uZeS9YiLQjj TzuCU7uLgGjXbx6kfxgZlvTzdcux8Fsjzopi1wxV4c38IiP7wTA+3g/YO0VW7sTT ZuSCs2Fkjj4Iv2liHCeQIoTzOxMKbo4J -----END CERTIFICATE-----Generated at Tue Apr 22 23:09:50 2025 by rpki-client