$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft File: vZ1mh32GbnyQQVa-CMtDcargAb0.mft (raw, json) Hash identifier: DzwxoTBDK83kRSMGe6ggqcsiB/JfZ5clqhzPXYlyMls= Subject key identifier: 46:11:54:17:A1:79:BC:82:5B:8D:88:8E:36:01:60:BD:52:3A:8E:7C Authority key identifier: BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD Certificate issuer: /CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft Manifest number: 0138 Signing time: Thu 03 Apr 2025 03:57:43 +0000 Manifest this update: Thu 03 Apr 2025 03:57:43 +0000 Manifest next update: Thu 10 Apr 2025 03:57:43 +0000 Files and hashes: 1: vZ1mh32GbnyQQVa-CMtDcargAb0.crl (hash: DNNk/w6oCDwUu6H7DchKxfhAfBy07POc9mUUIXqXOvY=) 2: AC9A49A6B79811EF9C8DF330C4F9AE02.roa (hash: x42cPOY42/ihAcwEOhbusv08pDLFkf2E5Qjxerl5aIk=) 3: 975A513293B011EF9203EA6BC4F9AE02.roa (hash: LAC2JzlZ9Cqk3BSRvYxm4bLahu0/0Fv8k3EO+q7V5PY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5E8B Validity Not Before: Apr 3 03:57:43 2025 GMT Not After : Apr 10 03:57:43 2025 GMT Subject: CN=67ee0737-7a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ac:ed:a3:d8:68:92:76:44:4d:e8:2d:8a:4a: fb:a7:69:fb:43:4a:81:30:7f:8a:87:0e:92:20:f1: 6d:53:73:f0:4d:b3:82:7e:5d:83:28:79:39:b0:ef: e2:43:39:d4:ff:e4:20:ce:b9:05:30:f4:d1:a1:2b: 27:8f:a2:05:ba:43:bf:30:81:77:6f:94:79:60:84: 27:ab:73:ce:a7:e0:4e:8c:e1:e7:d0:f2:44:6a:82: be:e5:71:69:2d:2d:54:0e:62:e6:1e:7f:c8:9c:4d: a4:d3:8e:72:d9:6b:45:01:ce:55:6b:23:24:4c:91: dc:ab:7b:7c:99:3a:83:41:09:2f:6d:97:4b:09:a0: 0a:cd:eb:82:16:81:e2:6e:8a:8c:84:9f:3b:eb:14: d0:e0:43:42:38:4c:06:7f:a0:6e:e6:76:7a:b2:3e: 99:f2:e7:d5:86:1d:d7:bc:66:5b:37:92:24:38:10: 40:63:7b:0a:b0:48:2e:53:ac:20:fc:b7:7d:8a:68: f6:2a:5a:60:e0:01:f1:52:9a:bf:70:61:71:53:e1: 09:48:de:ff:70:b0:04:37:b8:71:b8:f4:66:ed:7e: a2:1e:90:7a:ae:68:d7:ad:73:48:54:e9:b9:d8:7d: c1:eb:ce:25:88:9e:f0:c9:8b:7d:95:34:7d:bd:9f: e9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:11:54:17:A1:79:BC:82:5B:8D:88:8E:36:01:60:BD:52:3A:8E:7C X509v3 Authority Key Identifier: keyid:BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ae:14:b2:8e:e2:f8:c1:bb:47:05:69:23:85:ad:51:fe:ca: bf:2c:d7:88:1b:83:ce:17:18:d2:c1:75:75:4f:bb:bf:95:23: 08:d3:16:aa:90:d8:2b:2a:63:72:44:cc:32:45:dc:5d:26:3c: 82:16:6a:30:0e:96:02:78:d6:25:bc:24:57:e8:50:f7:89:d8: 93:20:d8:76:dc:22:0f:5c:6c:a9:c1:94:65:29:dc:72:7e:81: 2b:a7:58:81:e6:9d:7a:96:89:39:96:f3:ac:41:0a:67:1b:80: 05:a8:5d:45:d3:de:e0:72:5f:b7:43:f7:44:4e:ef:5c:79:42: fa:9e:f6:4f:60:44:73:06:a0:db:09:84:c9:7f:9f:ad:8a:ff: 38:d6:22:1f:ae:5e:c8:d3:a3:38:61:a7:d1:cc:8c:a9:97:48: 2a:05:f2:6b:32:af:79:82:ae:4e:32:af:8f:82:7d:00:ef:5f: 4a:c5:a1:49:cc:3a:77:1b:5d:ae:af:7b:46:b1:fe:c7:bd:ea: 27:d6:36:72:49:0e:f3:1a:16:eb:8d:d5:0c:0f:fc:62:55:f9: 05:eb:13:39:46:99:4b:f3:60:12:81:99:c5:3b:bd:bf:07:82: d6:ba:11:bf:ff:49:95:74:aa:ae:11:53:c0:e0:96:81:cd:b4: 14:d7:85:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVFOEIxMTAvBgNVBAUTKEJEOUQ2Njg3N0Q4NjZFN0M5MDQxNTZCRTA4Q0I0Mzcx QUFFMDAxQkQwHhcNMjUwNDAzMDM1NzQzWhcNMjUwNDEwMDM1NzQzWjAYMRYwFAYD VQQDEw02N2VlMDczNy03YTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuazto9hoknZETegtikr7p2n7Q0qBMH+Khw6SIPFtU3PwTbOCfl2DKHk5sO/i QznU/+QgzrkFMPTRoSsnj6IFukO/MIF3b5R5YIQnq3POp+BOjOHn0PJEaoK+5XFp LS1UDmLmHn/InE2k045y2WtFAc5VayMkTJHcq3t8mTqDQQkvbZdLCaAKzeuCFoHi boqMhJ876xTQ4ENCOEwGf6Bu5nZ6sj6Z8ufVhh3XvGZbN5IkOBBAY3sKsEguU6wg /Ld9imj2Klpg4AHxUpq/cGFxU+EJSN7/cLAEN7hxuPRm7X6iHpB6rmjXrXNIVOm5 2H3B684liJ7wyYt9lTR9vZ/pwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYRVBeh ebyCW42IjjYBYL1SOo58MB8GA1UdIwQYMBaAFL2dZod9hm58kEFWvgjLQ3Gq4AG9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUU4Qi9ERUMzQkQ3QzVB RDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2JueVFRVmEtQ010RGNhcmdB YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZaMW1oMzJHYm55UVFWYS1DTXREY2FyZ0FiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUU4Qi9ERUMzQkQ3QzVBRDMxMUVFQTkyRjkzMjBDNEY5QUUwMi92WjFtaDMyR2Ju eVFRVmEtQ010RGNhcmdBYjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7rhSyjuL4wbtHBWkjha1R/sq/LNeIG4POFxjSwXV1T7u/lSMI0xaq kNgrKmNyRMwyRdxdJjyCFmowDpYCeNYlvCRX6FD3idiTINh23CIPXGypwZRlKdxy foErp1iB5p16lok5lvOsQQpnG4AFqF1F097gcl+3Q/dETu9ceUL6nvZPYERzBqDb CYTJf5+tiv841iIfrl7I06M4YafRzIypl0gqBfJrMq95gq5OMq+Pgn0A719KxaFJ zDp3G12ur3tGsf7Hveon1jZySQ7zGhbrjdUMD/xiVfkF6xM5RplL82ASgZnFO72/ B4LWuhG//0mVdKquEVPA4JaBzbQU14Vo -----END CERTIFICATE-----Generated at Fri Apr 4 21:55:46 2025 by rpki-client