$ rpki-client -vvf rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft File: vmOANw9kBuY_dG-vUrxQHsTQvVI.mft (raw, json) Hash identifier: v7vtlqFvsgtdw6Miq4F8IDYnetN1Ru/b2VxmlCiHf9c= Subject key identifier: FA:E4:86:A9:15:9D:E1:5D:DB:BF:92:F6:9C:36:2C:E4:AB:43:3C:8D Authority key identifier: BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52 Certificate issuer: /CN=A9171B8D/serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft Manifest number: 27 Signing time: Sat 31 May 2025 07:21:34 +0000 Manifest this update: Sat 31 May 2025 07:21:33 +0000 Manifest next update: Sat 07 Jun 2025 07:21:33 +0000 Files and hashes: 1: vmOANw9kBuY_dG-vUrxQHsTQvVI.crl (hash: JeXnGB4nt0yawDL69Ej+yoOKcT9+kVdmv6vrkuHOjgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171B8D, serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52 Validity Not Before: May 31 07:21:33 2025 GMT Not After : Jun 7 07:21:33 2025 GMT Subject: CN=683aadfd-891f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b4:5f:bb:29:9c:6b:a3:ab:68:18:52:f7:a9: ad:f2:6d:0e:49:16:17:00:a3:a4:a3:a5:6d:67:da: b0:4b:b6:0c:e5:d2:39:b9:b9:cd:2d:51:44:7c:ec: d0:9e:39:3d:39:05:41:ee:e2:4f:d4:11:49:dd:62: 59:6f:84:31:39:c5:9f:49:55:c7:ec:ad:fd:5d:1e: 17:71:61:82:ba:25:c6:2f:7b:8d:5c:26:37:9b:96: 0b:0d:0f:88:91:d1:ce:e2:7d:94:ad:da:49:12:bc: c9:88:7b:cf:fa:3b:fb:f7:83:12:3c:db:59:a5:56: 55:d0:0b:a5:4b:b2:13:ba:6d:53:e5:b3:ba:36:0e: c6:37:8c:09:e4:b6:e9:ae:87:6a:83:88:2b:c2:0d: 6e:e7:d8:f2:4e:92:84:63:4c:6f:74:a0:5c:ae:c0: 67:a8:3d:8f:2a:98:e7:d3:f0:8d:26:38:54:dd:f3: b2:36:22:1c:7d:6e:e1:ec:3f:fd:44:d8:1b:ad:88: 03:22:a2:68:3a:df:d9:6d:fa:6a:9f:12:54:bf:b7: a0:35:bd:c2:5e:01:c2:ff:45:4d:0f:90:4a:e5:5e: 7e:36:4a:50:66:f4:e9:bc:21:ca:68:18:55:c7:8f: 9e:50:7c:ce:38:5d:00:b7:75:86:e3:cb:65:2a:49: a6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E4:86:A9:15:9D:E1:5D:DB:BF:92:F6:9C:36:2C:E4:AB:43:3C:8D X509v3 Authority Key Identifier: keyid:BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:5c:51:b3:e2:22:19:fb:50:e1:6c:ee:bc:fa:b8:58:9e:99: 3c:cb:00:2b:d6:ce:42:52:3b:56:b1:34:bd:35:d6:a8:d7:55: 12:ac:fe:e8:d0:ff:9c:54:cc:f1:45:26:41:37:b5:4c:fe:71: 12:35:97:7f:f2:e6:3d:1e:78:d3:39:31:bf:8a:e8:9c:9b:f0: 12:ce:30:04:0e:be:78:3d:ca:7a:91:01:6a:f2:f3:57:eb:56: 7f:c2:9e:51:f4:63:dd:d2:2d:65:36:d1:c1:ae:8f:d0:88:e2: 81:23:39:2d:d2:85:97:8a:97:8e:06:b1:79:c3:eb:cb:72:fc: 65:3b:78:21:f9:33:fd:69:9b:c4:68:c4:f0:94:42:df:33:68: 8c:b2:c3:9c:f6:29:55:a7:95:06:9a:a1:17:d8:01:7c:74:ee: 8a:3d:59:d4:e3:a0:9f:40:55:41:e8:94:9a:0a:27:73:18:20: 2f:8e:de:86:10:ec:9c:9d:ff:0d:b9:7d:05:a3:60:4c:f9:7a: 27:e2:0a:e1:ba:ae:65:c5:f1:9e:bf:b5:62:54:86:eb:60:df: 66:aa:6e:e4:23:33:d3:34:81:66:8a:b9:15:61:94:ff:d7:bc: 02:c4:bf:8c:51:c5:f4:35:c2:ad:fc:d5:e9:32:e6:2d:b1:0e: 95:fe:26:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MUI4RDExMC8GA1UEBRMoQkU2MzgwMzcwRjY0MDZFNjNGNzQ2RkFGNTJCQzUwMUVD NEQwQkQ1MjAeFw0yNTA1MzEwNzIxMzNaFw0yNTA2MDcwNzIxMzNaMBgxFjAUBgNV BAMTDTY4M2FhZGZkLTg5MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUtF+7KZxro6toGFL3qa3ybQ5JFhcAo6SjpW1n2rBLtgzl0jm5uc0tUUR87NCe OT05BUHu4k/UEUndYllvhDE5xZ9JVcfsrf1dHhdxYYK6JcYve41cJjeblgsND4iR 0c7ifZSt2kkSvMmIe8/6O/v3gxI821mlVlXQC6VLshO6bVPls7o2DsY3jAnktumu h2qDiCvCDW7n2PJOkoRjTG90oFyuwGeoPY8qmOfT8I0mOFTd87I2Ihx9buHsP/1E 2ButiAMiomg639lt+mqfElS/t6A1vcJeAcL/RU0PkErlXn42SlBm9Om8IcpoGFXH j55QfM44XQC3dYbjy2UqSaYBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+uSGqRWd 4V3bv5L2nDYs5KtDPI0wHwYDVR0jBBgwFoAUvmOANw9kBuY/dG+vUrxQHsTQvVIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxQjhELzFDRjlBODdBMDNE MTExRjBCMjM0QkMxNUM0RjlBRTAyL3ZtT0FOdzlrQnVZX2RHLXZVcnhRSHNUUXZW SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdm1PQU53OWtCdVlfZEctdlVyeFFIc1RRdlZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx QjhELzFDRjlBODdBMDNEMTExRjBCMjM0QkMxNUM0RjlBRTAyL3ZtT0FOdzlrQnVZ X2RHLXZVcnhRSHNUUXZWSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFJcUbPiIhn7UOFs7rz6uFiemTzLACvWzkJSO1axNL011qjXVRKs/ujQ /5xUzPFFJkE3tUz+cRI1l3/y5j0eeNM5Mb+K6Jyb8BLOMAQOvng9ynqRAWry81fr Vn/CnlH0Y93SLWU20cGuj9CI4oEjOS3ShZeKl44GsXnD68ty/GU7eCH5M/1pm8Ro xPCUQt8zaIyyw5z2KVWnlQaaoRfYAXx07oo9WdTjoJ9AVUHolJoKJ3MYIC+O3oYQ 7Jyd/w25fQWjYEz5eifiCuG6rmXF8Z6/tWJUhutg32aqbuQjM9M0gWaKuRVhlP/X vALEv4xRxfQ1wq381eky5i2xDpX+JlA= -----END CERTIFICATE-----Generated at Sat May 31 17:30:20 2025 by rpki-client