$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft File: vphUuYSZNmQ-DUAVo7N7XkSErVo.mft (raw, json) Hash identifier: 8d3z4m5UNlKiezfgKpiDvA4ppEfXV+sDEoW7BBT5x5M= Subject key identifier: DD:33:24:F3:85:BE:91:97:15:89:67:29:A5:D1:61:B7:38:E0:D2:27 Authority key identifier: BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A Certificate issuer: /CN=A9123D19/serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A Certificate serial: 29B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft Manifest number: 29A5 Signing time: Mon 28 Apr 2025 15:42:26 +0000 Manifest this update: Mon 28 Apr 2025 15:42:25 +0000 Manifest next update: Mon 05 May 2025 15:42:25 +0000 Files and hashes: 1: vphUuYSZNmQ-DUAVo7N7XkSErVo.crl (hash: Vj7YGQgi7WtCV2jBtA0DA/8fFMgdUAjTC+ZSI7LNd/Y=) 2: 73E0191A967811EA92E45A27C4F9AE02.roa (hash: ShaJe6Lrds4HI5NQVrTj2+pnsM6ohcQYrpyOOxPkL24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10681 (0x29b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123D19, serialNumber=BE9854B9849936643E0D4015A3B37B5E4484AD5A Validity Not Before: Apr 28 15:42:25 2025 GMT Not After : May 5 15:42:25 2025 GMT Subject: CN=680fa1e1-b94a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:21:39:19:3b:cf:ef:e5:0a:e2:86:89:79: 7f:46:86:27:42:3b:7e:99:c1:b7:5a:02:54:bd:5b: db:83:f6:f7:8d:18:e0:a3:f9:69:17:ba:3e:df:be: e7:a1:95:90:eb:b9:08:9a:f2:88:18:49:e3:89:8d: e0:75:d8:85:cc:c7:29:8c:d4:8d:de:38:b4:b7:1e: 25:70:46:9b:65:e7:cb:d9:54:d9:59:9b:ba:fc:b3: ef:86:8c:d2:50:fb:1a:18:06:18:b8:a1:61:a8:ab: 2d:c2:8d:ae:0a:3d:66:da:15:72:f6:b3:f0:87:69: 8a:ab:3b:63:6f:58:52:23:b6:e2:9b:2d:c0:1e:61: e8:31:2b:0f:f7:03:f7:a1:31:bd:4c:9b:de:09:91: 1a:92:9d:d2:e1:b7:a4:8d:f9:88:29:51:6d:23:a9: 92:da:09:b3:fc:98:53:c0:6b:bf:90:ed:d9:2e:50: ec:ed:78:62:d8:20:f4:4c:d3:49:3e:ac:01:2a:d0: 49:56:e2:22:a9:6a:f2:16:1f:aa:98:ce:df:52:cc: bd:8e:d3:b5:65:75:da:d0:c7:90:91:cb:1b:01:c8: 23:ae:89:b6:1c:2b:de:e7:6d:81:a9:2e:a2:a7:46: c2:4a:68:6c:7a:15:28:4e:2e:41:1f:9e:0c:65:8f: 22:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:33:24:F3:85:BE:91:97:15:89:67:29:A5:D1:61:B7:38:E0:D2:27 X509v3 Authority Key Identifier: keyid:BE:98:54:B9:84:99:36:64:3E:0D:40:15:A3:B3:7B:5E:44:84:AD:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vphUuYSZNmQ-DUAVo7N7XkSErVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D19/40ED8020429F11E486B44D72C4F9AE02/vphUuYSZNmQ-DUAVo7N7XkSErVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:3c:d8:68:03:8f:f6:95:2d:2a:af:f2:51:d5:f4:2b:a2:c4: 68:51:bc:49:70:df:ca:bd:14:aa:11:c9:ee:e2:6c:71:a5:c4: cb:79:cf:e7:7f:5c:7f:65:dd:94:a0:0d:1c:99:b4:aa:5b:90: 06:4a:30:bd:12:a9:74:d7:a9:b6:ce:3c:92:3d:22:fc:7a:d8: 25:88:e5:62:9b:b3:7f:da:b9:7b:33:4c:de:ef:63:16:c8:6f: 85:2a:c4:a6:d2:64:3f:37:c1:2c:0d:8e:24:7e:32:71:42:46: dd:4e:cf:17:46:e7:19:bc:59:5a:3a:d5:9b:f4:97:78:a0:71: 5e:99:65:4b:79:ac:a1:81:70:ce:1b:c5:7a:62:22:5a:95:2a: a6:72:6d:30:0e:e5:dd:e7:8c:ca:e2:f6:80:f2:3a:78:de:ab: 58:9e:92:6e:0f:2c:ad:70:1b:2f:3e:fc:7d:05:bb:45:07:3d: c3:0d:95:4f:ae:32:b7:13:10:ed:3c:b5:e9:56:39:f5:b6:3f: a4:e6:23:3a:79:bc:7b:19:ff:b6:16:6d:95:18:e6:38:28:12: f6:da:b9:b9:c1:c9:12:71:71:cb:de:e0:4e:34:b0:f1:c2:1a: 2f:17:89:b2:5b:10:1a:3e:2b:10:b7:15:f0:fc:f1:39:2c:b5: de:b2:64:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNEMTkxMTAvBgNVBAUTKEJFOTg1NEI5ODQ5OTM2NjQzRTBENDAxNUEzQjM3QjVF NDQ4NEFENUEwHhcNMjUwNDI4MTU0MjI1WhcNMjUwNTA1MTU0MjI1WjAYMRYwFAYD VQQDEw02ODBmYTFlMS1iOTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtYhORk7z+/lCuKGiXl/RoYnQjt+mcG3WgJUvVvbg/b3jRjgo/lpF7o+377n oZWQ67kImvKIGEnjiY3gddiFzMcpjNSN3ji0tx4lcEabZefL2VTZWZu6/LPvhozS UPsaGAYYuKFhqKstwo2uCj1m2hVy9rPwh2mKqztjb1hSI7bimy3AHmHoMSsP9wP3 oTG9TJveCZEakp3S4bekjfmIKVFtI6mS2gmz/JhTwGu/kO3ZLlDs7Xhi2CD0TNNJ PqwBKtBJVuIiqWryFh+qmM7fUsy9jtO1ZXXa0MeQkcsbAcgjrom2HCve522BqS6i p0bCSmhsehUoTi5BH54MZY8ihQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0zJPOF vpGXFYlnKaXRYbc44NInMB8GA1UdIwQYMBaAFL6YVLmEmTZkPg1AFaOze15EhK1a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0QxOS80MEVEODAyMDQy OUYxMUU0ODZCNDRENzJDNEY5QUUwMi92cGhVdVlTWk5tUS1EVUFWbzdON1hrU0Vy Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZwaFV1WVNaTm1RLURVQVZvN043WGtTRXJWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0QxOS80MEVEODAyMDQyOUYxMUU0ODZCNDRENzJDNEY5QUUwMi92cGhVdVlTWk5t US1EVUFWbzdON1hrU0VyVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACPNhoA4/2lS0qr/JR1fQrosRoUbxJcN/KvRSqEcnu4mxxpcTLec/n f1x/Zd2UoA0cmbSqW5AGSjC9Eql016m2zjySPSL8etgliOVim7N/2rl7M0ze72MW yG+FKsSm0mQ/N8EsDY4kfjJxQkbdTs8XRucZvFlaOtWb9Jd4oHFemWVLeayhgXDO G8V6YiJalSqmcm0wDuXd54zK4vaA8jp43qtYnpJuDyytcBsvPvx9BbtFBz3DDZVP rjK3ExDtPLXpVjn1tj+k5iM6ebx7Gf+2Fm2VGOY4KBL22rm5wckScXHL3uBONLDx whovF4myWxAaPisQtxXw/PE5LLXesmRL -----END CERTIFICATE-----Generated at Mon Apr 28 17:44:45 2025 by rpki-client on console.sobornost.net