$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft File: vm13JvnXOebsmvk0fs7LQhevej8.mft (raw, json) Hash identifier: vydPrcB+utYkomsgDRdBcF/ZABjb/6SImJ35777J6FM= Subject key identifier: 1B:05:9B:22:E9:F5:FC:00:13:65:E2:A4:FE:90:86:35:C3:5C:74:FE Authority key identifier: BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F Certificate issuer: /CN=A91ED35E/serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft Manifest number: EC Signing time: Thu 03 Apr 2025 04:33:58 +0000 Manifest this update: Thu 03 Apr 2025 04:33:58 +0000 Manifest next update: Thu 10 Apr 2025 04:33:58 +0000 Files and hashes: 1: vm13JvnXOebsmvk0fs7LQhevej8.crl (hash: pW7lCS9GU0gOQQmbSsuluJYCf4on0xDTd62a477tnrw=) 2: 3AE10060B0F111EE9727201AC4F9AE02.roa (hash: KyJCsFenYj6fuJ23jzQVPwAa2Ss88E8BW4syF1uzypU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED35E Validity Not Before: Apr 3 04:33:58 2025 GMT Not After : Apr 10 04:33:58 2025 GMT Subject: CN=67ee0fb6-fd71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:52:84:87:46:e8:b9:d1:5d:1b:60:6f:1d:70: 5a:98:5b:3f:bb:da:51:80:4c:27:39:6b:7d:e3:9b: 5e:cd:af:88:ad:e7:fd:d8:08:f9:01:03:f3:24:cc: e1:e8:b5:31:30:17:bb:54:34:c0:72:05:d9:f1:df: 22:ea:af:3d:46:80:a8:2d:bf:96:a0:14:81:3c:1b: 9d:01:b8:1a:c1:6f:06:6a:8b:43:5a:82:03:cf:d0: 82:9d:cf:7d:dd:43:3a:b9:31:c8:c3:26:62:96:bd: 71:45:2f:99:78:1b:f3:47:76:29:a3:d7:38:8b:66: f9:b7:32:6a:53:8a:85:63:ad:0d:b4:2a:11:a0:6e: 56:55:09:dd:4d:02:d8:3b:5e:8d:f4:e0:59:37:b5: 04:db:6e:cb:1e:b5:01:04:f5:a6:57:cd:52:53:8d: a3:cf:95:ff:c5:68:37:18:02:ad:5e:8c:1d:10:c3: 38:80:d1:35:a8:34:66:23:58:12:b4:27:06:ff:cc: 06:7c:80:f6:73:3f:f4:26:7c:50:05:9a:cb:0c:23: ed:ae:37:59:f4:88:25:fe:31:e8:79:f6:08:51:ec: 4f:d5:aa:2a:ad:c2:4e:a0:6d:a0:3c:0b:5a:bd:94: 76:2a:cc:31:25:39:c6:81:74:c2:5c:14:37:d8:11: ee:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:05:9B:22:E9:F5:FC:00:13:65:E2:A4:FE:90:86:35:C3:5C:74:FE X509v3 Authority Key Identifier: keyid:BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:a7:32:15:97:77:b6:6c:16:e6:56:8a:ce:88:8b:21:e7:f4: c6:32:56:02:fa:76:8f:4b:d9:0c:72:99:1d:a4:39:4a:87:c1: 72:ca:c6:ce:b0:81:7c:38:a7:07:28:bf:5d:fe:ab:38:e2:f6: 4a:7f:17:ee:6f:21:7d:8a:f5:81:aa:87:b6:e4:b7:ab:32:4f: 97:af:ed:c2:c1:3c:8f:bb:ba:bd:da:0c:48:b1:4d:92:10:4c: 76:d3:3e:01:a2:30:6c:9c:cb:39:07:9d:f8:c9:a5:32:ea:57: f5:fc:46:c6:13:1b:a8:4a:0d:27:8a:ec:76:a6:61:1c:00:5e: ed:64:52:8b:b3:32:6d:bb:c3:99:ca:e6:76:92:fe:8b:ad:18: 0a:c7:16:e9:6a:5e:c3:7a:fa:a8:e4:28:d3:3b:45:fa:a8:dc: a6:b6:9f:73:d3:b0:15:a9:ee:27:6d:8d:1d:cc:21:72:8b:ab: c6:39:1f:48:b8:fa:b6:0d:13:47:dc:0a:3d:02:04:20:c1:05: be:5e:e0:66:d1:f8:8a:76:9f:7e:4b:23:05:95:fb:00:dd:6d: 4a:fa:c0:85:2c:15:8a:c4:01:12:b8:b2:cb:f0:c6:8d:c8:26: 7f:f2:5a:3b:33:25:68:57:05:e1:df:38:33:8c:47:fb:63:0e: e6:62:44:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQzNUUxMTAvBgNVBAUTKEJFNkQ3NzI2RjlENzM5RTZFQzlBRjkzNDdFQ0VDQjQy MTdBRjdBM0YwHhcNMjUwNDAzMDQzMzU4WhcNMjUwNDEwMDQzMzU4WjAYMRYwFAYD VQQDEw02N2VlMGZiNi1mZDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lKEh0boudFdG2BvHXBamFs/u9pRgEwnOWt945teza+Iref92Aj5AQPzJMzh 6LUxMBe7VDTAcgXZ8d8i6q89RoCoLb+WoBSBPBudAbgawW8GaotDWoIDz9CCnc99 3UM6uTHIwyZilr1xRS+ZeBvzR3Ypo9c4i2b5tzJqU4qFY60NtCoRoG5WVQndTQLY O16N9OBZN7UE227LHrUBBPWmV81SU42jz5X/xWg3GAKtXowdEMM4gNE1qDRmI1gS tCcG/8wGfID2cz/0JnxQBZrLDCPtrjdZ9Igl/jHoefYIUexP1aoqrcJOoG2gPAta vZR2KswxJTnGgXTCXBQ32BHuyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsFmyLp 9fwAE2XipP6QhjXDXHT+MB8GA1UdIwQYMBaAFL5tdyb51znm7Jr5NH7Oy0IXr3o/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDM1RS8yMDhERkMzNkFD NDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9lYnNtdmswZnM3TFFoZXZl ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtMTNKdm5YT2Vic212azBmczdMUWhldmVqOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDM1RS8yMDhERkMzNkFDNDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9l YnNtdmswZnM3TFFoZXZlajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWpzIVl3e2bBbmVorOiIsh5/TGMlYC+naPS9kMcpkdpDlKh8FyysbO sIF8OKcHKL9d/qs44vZKfxfubyF9ivWBqoe25LerMk+Xr+3CwTyPu7q92gxIsU2S EEx20z4BojBsnMs5B534yaUy6lf1/EbGExuoSg0niux2pmEcAF7tZFKLszJtu8OZ yuZ2kv6LrRgKxxbpal7Devqo5CjTO0X6qNymtp9z07AVqe4nbY0dzCFyi6vGOR9I uPq2DRNH3Ao9AgQgwQW+XuBm0fiKdp9+SyMFlfsA3W1K+sCFLBWKxAESuLLL8MaN yCZ/8lo7MyVoVwXh3zgzjEf7Yw7mYkTJ -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:33 2025 by rpki-client