$ rpki-client -vvf rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft File: vwxRAalGDasWiyHwJOMMiVoCjEI.mft (raw, json) Hash identifier: s/Q8LY359mij0Fljzm5b2LradIF8TYDT1uzxx5CGKi0= Subject key identifier: 0C:50:F7:9C:35:B0:99:05:2D:8A:84:1B:B7:C7:63:7A:23:4E:87:19 Authority key identifier: BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42 Certificate issuer: /CN=A9180307/serialNumber=BF0C5101A9460DAB168B21F024E30C895A028C42 Certificate serial: 0505 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft Manifest number: 04FF Signing time: Fri 30 May 2025 23:52:45 +0000 Manifest this update: Fri 30 May 2025 23:52:44 +0000 Manifest next update: Fri 06 Jun 2025 23:52:44 +0000 Files and hashes: 1: vwxRAalGDasWiyHwJOMMiVoCjEI.crl (hash: B1XKxFxAtyLMgezkBplY8gjIlKz/UoGwJPSqDzgC/xA=) 2: 1829AEE8146B11EC81328F59C4F9AE02.roa (hash: aIxAvyaJTpqygmqgpU8RPaqkDh+o4vZaFakEjzwWwkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.crl rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1285 (0x505) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180307, serialNumber=BF0C5101A9460DAB168B21F024E30C895A028C42 Validity Not Before: May 30 23:52:44 2025 GMT Not After : Jun 6 23:52:44 2025 GMT Subject: CN=683a44cd-6684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:20:75:5f:cc:2b:a4:31:18:19:c3:b8:50:aa: 63:4a:ae:bb:d0:1c:7e:64:c6:cb:70:a5:7d:a8:d4: 73:48:79:78:13:16:cb:0d:e0:c6:b1:00:f1:3d:40: 24:23:67:93:3e:bd:d1:d8:4b:84:03:10:98:79:d2: 06:1b:a5:bd:e2:3b:e8:15:06:8d:c3:c2:2c:1c:35: 21:05:7d:12:01:2a:c7:d5:70:dd:b1:94:53:20:d1: 92:d6:20:ed:90:ee:f2:f9:76:44:ec:86:81:60:fe: c5:26:4d:31:33:9d:ad:c4:43:d7:61:96:28:19:81: f0:03:27:91:4d:0c:b9:6f:e1:22:b0:b5:50:9f:8d: d8:76:f2:9b:31:e4:3c:90:68:17:fa:4c:f2:a8:ed: 6b:7e:04:37:65:12:bb:05:65:3f:15:89:15:db:3e: 82:fe:85:f2:39:5e:27:9e:50:ad:43:23:97:19:94: 66:75:7d:ad:b4:ee:9d:22:b4:05:aa:de:30:35:87: 6d:e5:2f:57:c4:7e:67:3a:57:63:0c:c0:85:a6:65: 9f:b4:08:a0:18:63:7f:b0:97:88:ae:fd:bd:09:d0: 6d:9e:4b:94:a5:06:e2:1a:30:cc:36:77:d6:bd:0b: 8e:c8:a3:e7:f4:0b:19:5a:b7:a9:1f:06:e4:49:34: 36:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:50:F7:9C:35:B0:99:05:2D:8A:84:1B:B7:C7:63:7A:23:4E:87:19 X509v3 Authority Key Identifier: keyid:BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:eb:cf:6e:6a:ff:76:dc:6a:09:7f:51:6d:a8:1c:6e:6c:b5: ba:b4:c0:e1:a4:45:7d:68:ce:62:48:ce:f5:d5:9d:2c:0f:bd: de:0e:e3:5c:f5:6c:eb:89:a0:d6:17:be:54:1d:c6:2f:3d:28: 4f:13:dd:9f:87:ca:97:f3:57:b6:ff:da:17:11:25:ce:36:12: a8:e0:98:b5:42:a6:45:08:17:4e:1c:eb:84:ee:ac:b3:58:3b: 22:40:e3:63:eb:b4:41:8c:9a:35:9c:1d:ba:de:8f:da:06:30: 74:dc:5c:f6:e8:14:86:a0:c3:2e:d8:1f:7c:ce:08:5c:9d:f6: d4:64:7b:a4:57:57:e6:12:68:85:03:00:2e:ce:01:d9:cf:30: 86:16:4f:99:fc:1e:e8:16:2f:8a:a1:96:da:24:a9:20:45:a4: e8:1c:2f:56:b9:ca:d4:38:04:f8:ed:b4:1e:2e:2e:de:55:5d: 8d:c1:30:88:50:fb:bf:e9:fa:8e:59:40:a8:af:b6:f6:0b:a3: fc:fc:c4:27:11:23:a8:f3:e7:1f:c2:c0:fe:b9:9e:cc:dd:1f: 7a:2c:12:46:c6:73:dd:03:a8:19:52:6f:76:3b:bb:aa:1c:ef: 94:80:92:48:a9:c6:54:85:a5:d9:fd:e9:75:78:d7:35:d1:aa: b1:cf:91:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzMDcxMTAvBgNVBAUTKEJGMEM1MTAxQTk0NjBEQUIxNjhCMjFGMDI0RTMwQzg5 NUEwMjhDNDIwHhcNMjUwNTMwMjM1MjQ0WhcNMjUwNjA2MjM1MjQ0WjAYMRYwFAYD VQQDEw02ODNhNDRjZC02Njg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCB1X8wrpDEYGcO4UKpjSq670Bx+ZMbLcKV9qNRzSHl4ExbLDeDGsQDxPUAk I2eTPr3R2EuEAxCYedIGG6W94jvoFQaNw8IsHDUhBX0SASrH1XDdsZRTINGS1iDt kO7y+XZE7IaBYP7FJk0xM52txEPXYZYoGYHwAyeRTQy5b+EisLVQn43YdvKbMeQ8 kGgX+kzyqO1rfgQ3ZRK7BWU/FYkV2z6C/oXyOV4nnlCtQyOXGZRmdX2ttO6dIrQF qt4wNYdt5S9XxH5nOldjDMCFpmWftAigGGN/sJeIrv29CdBtnkuUpQbiGjDMNnfW vQuOyKPn9AsZWrepHwbkSTQ2JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxQ95w1 sJkFLYqEG7fHY3ojTocZMB8GA1UdIwQYMBaAFL8MUQGpRg2rFosh8CTjDIlaAoxC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMwNy9BOUE4MTlGMjBF REMxMUVDOURDQ0MxNTVDNEY5QUUwMi92d3hSQWFsR0Rhc1dpeUh3Sk9NTWlWb0Nq RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z3eFJBYWxHRGFzV2l5SHdKT01NaVZvQ2pFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDMwNy9BOUE4MTlGMjBFREMxMUVDOURDQ0MxNTVDNEY5QUUwMi92d3hSQWFsR0Rh c1dpeUh3Sk9NTWlWb0NqRUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC689uav923GoJf1FtqBxubLW6tMDhpEV9aM5iSM711Z0sD73eDuNc 9WzriaDWF75UHcYvPShPE92fh8qX81e2/9oXESXONhKo4Ji1QqZFCBdOHOuE7qyz WDsiQONj67RBjJo1nB263o/aBjB03Fz26BSGoMMu2B98zghcnfbUZHukV1fmEmiF AwAuzgHZzzCGFk+Z/B7oFi+KoZbaJKkgRaToHC9WucrUOAT47bQeLi7eVV2NwTCI UPu/6fqOWUCor7b2C6P8/MQnESOo8+cfwsD+uZ7M3R96LBJGxnPdA6gZUm92O7uq HO+UgJJIqcZUhaXZ/el1eNc10aqxz5E3 -----END CERTIFICATE-----Generated at Sat May 31 17:18:46 2025 by rpki-client