$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft File: vrUOQRzD4sQGA7FqkWCepNQGZJU.mft (raw, json) Hash identifier: FVi23nHSVJUPY9otouj4dqGSNVRuv0vDcgQju3sx9g0= Subject key identifier: B7:48:5F:04:B2:EF:C5:46:EA:4D:50:E2:13:57:22:0D:BB:03:78:3D Authority key identifier: BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 Certificate issuer: /CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Certificate serial: 0DCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft Manifest number: 0DC5 Signing time: Fri 30 May 2025 18:04:58 +0000 Manifest this update: Fri 30 May 2025 18:04:57 +0000 Manifest next update: Fri 06 Jun 2025 18:04:57 +0000 Files and hashes: 1: vrUOQRzD4sQGA7FqkWCepNQGZJU.crl (hash: G11W5ZlFGjg/iJz5L9sl8Py6QesGj2nXSqojvdHgQFQ=) 2: 4BECBAFCB99811E98000600AC4F9AE02.roa (hash: rqASzwwK7FbCaVAYTK88nCqRcfP1vi7cp+uLy8ucquU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3533 (0xdcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B2F8, serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495 Validity Not Before: May 30 18:04:57 2025 GMT Not After : Jun 6 18:04:57 2025 GMT Subject: CN=6839f349-589b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:43:bd:c5:c5:9f:54:56:bd:fd:95:a4:ed:50: da:e1:1f:ed:e3:cc:48:6f:df:67:fa:67:f4:55:3a: 19:f3:e7:1b:62:8d:e5:cb:64:98:4e:50:e6:6d:b4: eb:ad:2e:54:56:2b:2f:66:85:de:d5:78:f9:a7:a9: d9:1e:4e:99:54:1c:7d:3b:5b:ef:45:04:d5:1a:b3: 68:17:b0:69:28:02:b3:85:29:18:06:1d:c3:99:2a: 72:d8:26:25:8f:83:85:32:2b:18:aa:ba:a0:d4:2b: 7e:bb:29:4b:7c:77:49:62:1a:bf:28:14:ca:df:9f: 67:de:3c:57:ab:84:02:ab:49:55:fd:b8:aa:78:2e: dc:20:a6:5e:56:52:36:6d:2c:45:fd:9a:43:c3:a8: e0:9c:f9:5e:b7:76:10:4d:ec:9c:12:43:b6:e6:d9: 50:34:f0:d0:88:e7:d1:1d:10:19:e9:3b:5d:e4:cf: 29:dd:92:c5:f9:28:09:a7:89:92:a1:10:76:ab:89: 5b:93:10:2e:76:ee:04:ab:2f:f2:36:2e:ed:30:8a: 04:12:96:9c:08:44:7d:db:31:52:ab:e8:b9:1b:ad: 8b:03:c2:aa:25:3b:00:c8:72:35:33:2f:2f:1e:1f: c8:34:7f:e1:d4:8b:70:49:6b:98:2c:7a:0c:b9:78: ce:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:48:5F:04:B2:EF:C5:46:EA:4D:50:E2:13:57:22:0D:BB:03:78:3D X509v3 Authority Key Identifier: keyid:BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b0:88:50:d5:80:24:db:b0:e6:90:9a:41:01:58:1c:87:f9: 7d:3f:5f:1e:d3:e4:d3:0c:eb:ec:23:f0:4d:98:66:33:95:eb: 85:23:3f:f7:f2:e1:92:93:67:0f:e7:92:a9:6b:6d:9e:67:04: ca:47:b9:87:1a:43:29:45:7c:3a:ba:d0:97:36:24:6d:83:be: 6c:ec:05:fd:33:4d:1c:85:46:e4:02:9f:97:be:fc:a1:af:0c: 32:77:e9:6f:3a:83:91:e4:ad:7c:19:fa:b8:dd:1b:bc:ca:e2: 7e:d9:b7:65:3a:13:e5:7d:df:8d:14:e3:68:ff:60:18:4f:cc: 89:7e:47:a9:14:40:9e:24:ce:ca:71:e3:f2:fa:2b:7e:c7:31: 14:e4:9e:b7:b1:fe:5d:e0:4f:2f:b7:d5:0f:a2:67:04:cd:2f: b9:8c:bc:f8:f7:a2:b8:9e:e0:03:65:b4:ca:70:ff:37:0b:65: 47:cc:cf:bd:1e:c8:23:e5:58:dc:6a:f4:d4:e0:fa:de:98:e3: 38:93:ce:2b:93:0e:df:eb:84:df:d8:7b:86:f3:a0:8a:dd:90: 16:08:e5:0f:0c:3f:ad:c7:43:ab:b0:de:cb:1d:3e:fa:05:d6: fa:c9:1d:7c:e9:d2:6d:82:60:d6:a3:72:e2:13:3b:3e:fd:12: c8:8a:b7:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyRjgxMTAvBgNVBAUTKEJFQjUwRTQxMUNDM0UyQzQwNjAzQjE2QTkxNjA5RUE0 RDQwNjY0OTUwHhcNMjUwNTMwMTgwNDU3WhcNMjUwNjA2MTgwNDU3WjAYMRYwFAYD VQQDEw02ODM5ZjM0OS01ODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEO9xcWfVFa9/ZWk7VDa4R/t48xIb99n+mf0VToZ8+cbYo3ly2SYTlDmbbTr rS5UVisvZoXe1Xj5p6nZHk6ZVBx9O1vvRQTVGrNoF7BpKAKzhSkYBh3DmSpy2CYl j4OFMisYqrqg1Ct+uylLfHdJYhq/KBTK359n3jxXq4QCq0lV/biqeC7cIKZeVlI2 bSxF/ZpDw6jgnPlet3YQTeycEkO25tlQNPDQiOfRHRAZ6Ttd5M8p3ZLF+SgJp4mS oRB2q4lbkxAudu4Eqy/yNi7tMIoEEpacCER92zFSq+i5G62LA8KqJTsAyHI1My8v Hh/INH/h1ItwSWuYLHoMuXjOUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdIXwSy 78VG6k1Q4hNXIg27A3g9MB8GA1UdIwQYMBaAFL61DkEcw+LEBgOxapFgnqTUBmSV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjJGOC9ERkVFNjFERUI5 OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRzUUdBN0Zxa1dDZXBOUUda SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyVU9RUnpENHNRR0E3RnFrV0NlcE5RR1pKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjJGOC9ERkVFNjFERUI5OTcxMUU5QjA5OTBFMEFDNEY5QUUwMi92clVPUVJ6RDRz UUdBN0Zxa1dDZXBOUUdaSlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfsIhQ1YAk27DmkJpBAVgch/l9P18e0+TTDOvsI/BNmGYzleuFIz/3 8uGSk2cP55Kpa22eZwTKR7mHGkMpRXw6utCXNiRtg75s7AX9M00chUbkAp+Xvvyh rwwyd+lvOoOR5K18Gfq43Ru8yuJ+2bdlOhPlfd+NFONo/2AYT8yJfkepFECeJM7K cePy+it+xzEU5J63sf5d4E8vt9UPomcEzS+5jLz496K4nuADZbTKcP83C2VHzM+9 Hsgj5VjcavTU4PremOM4k84rkw7f64Tf2HuG86CK3ZAWCOUPDD+tx0OrsN7LHT76 Bdb6yR186dJtgmDWo3LiEzs+/RLIirf0 -----END CERTIFICATE-----Generated at Sat May 31 17:11:25 2025 by rpki-client