$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft File: vHDzdLcox7cRwkpoJ_dHekKyKk0.mft (raw, json) Hash identifier: +NRF0CECUhELhI6thRycdhMGrlC+rAD7rMVWU6q4hAg= Subject key identifier: 02:EA:53:88:AB:99:E3:D5:E6:3C:27:11:EC:79:35:16:F9:10:BE:4A Authority key identifier: BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D Certificate issuer: /CN=A9142A75/serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft Manifest number: 15 Signing time: Thu 03 Apr 2025 07:15:59 +0000 Manifest this update: Thu 03 Apr 2025 07:15:59 +0000 Manifest next update: Thu 10 Apr 2025 07:15:59 +0000 Files and hashes: 1: vHDzdLcox7cRwkpoJ_dHekKyKk0.crl (hash: aGAOvIEOjIv5NJf1/l2EWVuF+6tXimnRz4Q5QE/ntng=) 2: 3B69BCFAF53A11EF907A433EC4F9AE02.roa (hash: g53LMcn3iRdJAKtGtiImyfZixGirZg93i3IYIo94JAU=) 3: 6BD4BB16F83111EFBA64911FC4F9AE02.roa (hash: XvWuI1YoEga2y2ypcrjG1/r0tc+yszPXr1W996sUaXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A75 Validity Not Before: Apr 3 07:15:59 2025 GMT Not After : Apr 10 07:15:59 2025 GMT Subject: CN=67ee35af-e329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c5:7e:a8:14:47:ed:f2:b9:96:20:df:84:f1: 6f:a3:ac:f3:54:cc:52:9d:14:4d:93:8f:e0:58:54: 56:e1:2c:6f:28:2c:e8:77:d1:c1:6c:c9:5f:55:97: f6:9f:33:70:67:72:03:13:bf:47:40:d0:70:07:11: 75:db:34:4d:a7:3a:1d:6a:e8:38:b7:46:a1:40:3f: 10:7e:a1:09:0b:9f:3e:a2:b2:9b:df:04:25:1d:42: 60:a7:58:01:56:56:ef:86:67:ce:19:c9:0a:4b:41: b5:86:fe:84:99:8b:89:f6:ab:92:a0:74:58:1e:f4: 69:0b:14:62:43:fe:f3:13:31:2f:fb:dd:e3:81:9e: a8:ce:c5:93:8c:2b:a0:d8:4c:55:69:ee:5e:eb:5b: 65:2b:d4:12:19:56:48:ab:22:c5:6a:c2:1c:de:aa: 1e:bc:8b:f0:88:4b:56:35:73:18:c7:34:08:1f:bf: 11:9d:b4:ec:00:1e:29:54:96:81:61:d8:b8:d6:fd: 3c:82:36:09:de:c4:7a:e8:99:28:cd:3d:8f:1a:6b: 79:86:02:45:52:88:bd:16:14:f5:ce:c3:82:e5:1f: 56:a8:95:5f:b6:8c:93:0d:4a:b0:4a:2b:a2:db:f1: 42:08:c9:e3:bc:de:97:25:d8:c2:95:65:4f:bd:47: 49:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EA:53:88:AB:99:E3:D5:E6:3C:27:11:EC:79:35:16:F9:10:BE:4A X509v3 Authority Key Identifier: keyid:BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:9e:6e:f8:bd:38:36:b1:d9:47:64:1c:48:3d:03:2d:ba:e9: e8:7e:a1:eb:1e:c7:4f:04:29:f7:80:8c:a0:fb:ff:d3:ef:d0: 51:74:03:50:34:fd:87:0f:50:08:bb:f5:f6:89:df:2f:9b:cc: 8b:c1:d8:95:d9:e8:28:56:0e:53:7d:b9:e4:cb:e1:d7:e5:80: d9:1b:fa:6e:5c:c4:df:b7:7a:02:aa:30:94:f9:1a:4c:23:3c: 0f:6d:b5:50:f8:4c:95:7f:69:77:3c:e5:89:ac:aa:38:6c:d5: 17:df:29:e1:29:c5:59:a4:fb:bf:cd:17:ed:c6:52:37:25:97: dc:53:5c:6a:17:5b:dd:a5:6e:ef:26:8b:2a:6c:e2:bc:d6:2f: 96:d1:d2:54:7a:9c:82:7e:b9:dd:5e:cd:0c:a7:50:86:af:76: 93:75:33:63:dc:b3:27:57:e9:08:87:88:23:e5:c5:fd:4c:57: de:0a:7f:dd:c1:fa:eb:b2:4b:84:82:68:33:67:5f:d8:eb:a8: 20:df:2b:40:38:96:63:0e:48:93:e0:ef:a1:d1:a8:67:8b:aa: 5e:b9:0b:17:b2:74:e4:11:82:d2:04:3b:8c:92:ce:5f:c5:02: 80:64:33:c0:0c:1e:63:02:16:e6:07:4a:c4:f5:0d:72:88:2c: 1e:70:04:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkE3NTExMC8GA1UEBRMoQkM3MEYzNzRCNzI4QzdCNzExQzI0QTY4MjdGNzQ3N0E0 MkIyMkE0RDAeFw0yNTA0MDMwNzE1NTlaFw0yNTA0MTAwNzE1NTlaMBgxFjAUBgNV BAMTDTY3ZWUzNWFmLWUzMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5xX6oFEft8rmWIN+E8W+jrPNUzFKdFE2Tj+BYVFbhLG8oLOh30cFsyV9Vl/af M3BncgMTv0dA0HAHEXXbNE2nOh1q6Di3RqFAPxB+oQkLnz6ispvfBCUdQmCnWAFW Vu+GZ84ZyQpLQbWG/oSZi4n2q5KgdFge9GkLFGJD/vMTMS/73eOBnqjOxZOMK6DY TFVp7l7rW2Ur1BIZVkirIsVqwhzeqh68i/CIS1Y1cxjHNAgfvxGdtOwAHilUloFh 2LjW/TyCNgnexHromSjNPY8aa3mGAkVSiL0WFPXOw4LlH1aolV+2jJMNSrBKK6Lb 8UIIyeO83pcl2MKVZU+9R0ntAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAupTiKuZ 49XmPCcR7Hk1FvkQvkowHwYDVR0jBBgwFoAUvHDzdLcox7cRwkpoJ/dHekKyKk0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyQTc1L0VGNUNENkRBRjUz OTExRUZCMDlGQzgzREM0RjlBRTAyL3ZIRHpkTGNveDdjUndrcG9KX2RIZWtLeUtr MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdkhEemRMY294N2NSd2twb0pfZEhla0t5S2swLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy QTc1L0VGNUNENkRBRjUzOTExRUZCMDlGQzgzREM0RjlBRTAyL3ZIRHpkTGNveDdj UndrcG9KX2RIZWtLeUtrMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALmebvi9ODax2UdkHEg9Ay266eh+oesex08EKfeAjKD7/9Pv0FF0A1A0 /YcPUAi79faJ3y+bzIvB2JXZ6ChWDlN9ueTL4dflgNkb+m5cxN+3egKqMJT5Gkwj PA9ttVD4TJV/aXc85Ymsqjhs1RffKeEpxVmk+7/NF+3GUjcll9xTXGoXW92lbu8m iyps4rzWL5bR0lR6nIJ+ud1ezQynUIavdpN1M2PcsydX6QiHiCPlxf1MV94Kf93B +uuyS4SCaDNnX9jrqCDfK0A4lmMOSJPg76HRqGeLql65CxeydOQRgtIEO4ySzl/F AoBkM8AMHmMCFuYHSsT1DXKILB5wBEw= -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:32 2025 by rpki-client