$ rpki-client -vvf rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft File: vmOANw9kBuY_dG-vUrxQHsTQvVI.mft (raw, json) Hash identifier: roxFxcoy6uhVB6qhqtgbtTZvAxPzU0YS3iZsGL4AZ5Q= Subject key identifier: C6:44:5C:7C:AC:1E:0F:47:8A:33:A7:E7:15:8F:23:B4:3E:5B:E1:01 Authority key identifier: BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52 Certificate issuer: /CN=A9171B8D/serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft Manifest number: 0B Signing time: Thu 03 Apr 2025 07:24:17 +0000 Manifest this update: Thu 03 Apr 2025 07:24:17 +0000 Manifest next update: Thu 10 Apr 2025 07:24:17 +0000 Files and hashes: 1: vmOANw9kBuY_dG-vUrxQHsTQvVI.crl (hash: j9frP/vVH9zb9+6e4IPcVlBjzRpH4uFuATzCaZ8jwAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171B8D Validity Not Before: Apr 3 07:24:17 2025 GMT Not After : Apr 10 07:24:17 2025 GMT Subject: CN=67ee37a1-ec04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4d:2a:4a:15:32:56:42:78:a9:e1:9c:cd:be: 72:5e:48:db:91:cf:b5:6f:0d:8d:8e:6d:08:70:cf: b4:f0:4d:0f:e8:7d:55:74:b3:7d:25:03:f6:fa:6b: 17:c3:00:67:90:3f:97:e8:83:92:92:f0:cf:85:6b: 57:74:22:e1:e2:11:77:d9:8a:29:84:82:16:03:e9: 51:db:eb:82:6b:30:13:4f:d9:6b:06:31:2a:a3:ea: dc:2e:37:ce:53:9e:00:28:4a:fd:ea:f4:dc:ca:a7: 46:a9:c1:2b:96:82:74:0f:39:d5:09:df:d5:ba:70: 7c:d9:98:11:5b:a0:03:76:a2:9d:9a:07:5f:a0:1f: 5b:2a:d4:7f:0a:ac:56:8c:d9:bd:16:66:13:b2:94: 51:f3:d3:f8:d3:bc:c3:44:97:9c:79:a5:33:04:26: dd:c2:74:8e:84:48:52:84:c1:40:d9:f7:66:8f:bd: 0d:18:4e:5f:64:7f:ae:18:69:1d:ba:b8:a1:15:8c: 1c:12:53:60:2a:3b:23:66:11:a0:a6:a6:6d:2a:71: b7:15:d9:05:0f:f1:3a:5b:85:6b:03:b1:e9:8a:02: 3e:bf:38:93:83:bf:75:86:f2:2d:d9:64:67:7c:69: 7b:d2:d7:5e:bf:a4:7b:0c:56:8e:95:9b:29:b8:6f: da:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:44:5C:7C:AC:1E:0F:47:8A:33:A7:E7:15:8F:23:B4:3E:5B:E1:01 X509v3 Authority Key Identifier: keyid:BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:86:51:7e:55:67:18:25:fc:06:df:80:6a:ab:54:4d:4a:4c: 6d:56:19:ee:5c:ee:b1:17:85:05:4e:a4:a0:22:d7:9d:6d:53: d0:70:2b:c7:2c:ad:f5:05:69:3d:d2:78:e6:7b:e2:86:13:7c: 51:3b:0f:e9:a5:6e:de:8a:35:53:87:9d:41:b5:91:02:ea:92: 91:91:6a:4f:6c:38:07:f1:1c:66:d2:85:3a:64:a0:ce:1a:59: 16:47:98:5d:80:60:fe:b7:8e:32:df:a2:9c:c8:ff:b5:ea:5a: 3d:fd:94:39:f0:33:b2:5d:2e:94:5c:e7:ce:42:ee:e1:c4:5f: 3f:1f:51:7c:00:ec:8a:67:f3:13:f9:81:b7:e2:24:82:1a:00: e3:c0:0e:3f:bc:95:4b:e8:25:6f:70:c4:72:59:ad:e0:b8:cc: 6e:bf:e1:8e:7c:50:33:e8:d5:ee:4d:9d:42:fc:6b:04:12:00: d1:df:a3:84:a4:f6:1a:b6:aa:af:cd:3a:7f:3f:e1:38:62:46: b6:44:e2:c9:54:6e:53:aa:27:73:41:87:b9:1d:ee:c9:97:93: 1a:f2:cb:78:28:6b:ff:f1:31:85:f7:6e:4e:b0:52:15:6b:81: e3:8c:2d:f8:46:5f:98:98:99:e0:79:4f:fe:80:1a:2b:9a:67: c8:12:ea:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MUI4RDExMC8GA1UEBRMoQkU2MzgwMzcwRjY0MDZFNjNGNzQ2RkFGNTJCQzUwMUVD NEQwQkQ1MjAeFw0yNTA0MDMwNzI0MTdaFw0yNTA0MTAwNzI0MTdaMBgxFjAUBgNV BAMTDTY3ZWUzN2ExLWVjMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqTSpKFTJWQnip4ZzNvnJeSNuRz7VvDY2ObQhwz7TwTQ/ofVV0s30lA/b6axfD AGeQP5fog5KS8M+Fa1d0IuHiEXfZiimEghYD6VHb64JrMBNP2WsGMSqj6twuN85T ngAoSv3q9NzKp0apwSuWgnQPOdUJ39W6cHzZmBFboAN2op2aB1+gH1sq1H8KrFaM 2b0WZhOylFHz0/jTvMNEl5x5pTMEJt3CdI6ESFKEwUDZ92aPvQ0YTl9kf64YaR26 uKEVjBwSU2AqOyNmEaCmpm0qcbcV2QUP8TpbhWsDsemKAj6/OJODv3WG8i3ZZGd8 aXvS116/pHsMVo6Vmym4b9rHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxkRcfKwe D0eKM6fnFY8jtD5b4QEwHwYDVR0jBBgwFoAUvmOANw9kBuY/dG+vUrxQHsTQvVIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxQjhELzFDRjlBODdBMDNE MTExRjBCMjM0QkMxNUM0RjlBRTAyL3ZtT0FOdzlrQnVZX2RHLXZVcnhRSHNUUXZW SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdm1PQU53OWtCdVlfZEctdlVyeFFIc1RRdlZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx QjhELzFDRjlBODdBMDNEMTExRjBCMjM0QkMxNUM0RjlBRTAyL3ZtT0FOdzlrQnVZ X2RHLXZVcnhRSHNUUXZWSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFWGUX5VZxgl/AbfgGqrVE1KTG1WGe5c7rEXhQVOpKAi151tU9BwK8cs rfUFaT3SeOZ74oYTfFE7D+mlbt6KNVOHnUG1kQLqkpGRak9sOAfxHGbShTpkoM4a WRZHmF2AYP63jjLfopzI/7XqWj39lDnwM7JdLpRc585C7uHEXz8fUXwA7Ipn8xP5 gbfiJIIaAOPADj+8lUvoJW9wxHJZreC4zG6/4Y58UDPo1e5NnUL8awQSANHfo4Sk 9hq2qq/NOn8/4ThiRrZE4slUblOqJ3NBh7kd7smXkxryy3goa//xMYX3bk6wUhVr geOMLfhGX5iYmeB5T/6AGiuaZ8gS6mU= -----END CERTIFICATE-----Generated at Fri Apr 4 22:19:59 2025 by rpki-client