$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft File: vpHAXiGMfmbqb5T50kV3cEGRveI.mft (raw, json) Hash identifier: sc4FcEN1r10JgwFXN9smMC8G+PfO9iky2X9HM7JkEeg= Subject key identifier: FE:63:FF:AF:CD:A5:E2:59:EA:DE:9A:56:2A:6C:C1:0E:08:CE:B9:02 Authority key identifier: BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2 Certificate issuer: /CN=A912FCBB/serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft Manifest number: 8B Signing time: Sun 27 Apr 2025 05:19:21 +0000 Manifest this update: Sun 27 Apr 2025 05:19:21 +0000 Manifest next update: Sun 04 May 2025 05:19:21 +0000 Files and hashes: 1: vpHAXiGMfmbqb5T50kV3cEGRveI.crl (hash: lzBPiTEdToEhEUcHokGKH/odhMBEBgmm+y37/2Fs1W0=) 2: 8F80C48E531211EFAB0B8726C4F9AE02.roa (hash: kqqxAXnrRR7qW3plZHXyG8tkzcmd2G3d0enNBzRXcMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB, serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2 Validity Not Before: Apr 27 05:19:21 2025 GMT Not After : May 4 05:19:21 2025 GMT Subject: CN=680dbe59-7c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ca:3e:13:0b:fa:98:10:0a:93:c8:0e:a8:3a: ec:a8:c6:d1:4f:25:35:a7:07:eb:75:60:20:25:77: 12:98:2c:6b:ab:f4:f6:ef:18:2e:81:5d:f7:0a:c5: ff:bd:e3:8d:dc:6b:94:4c:54:52:f5:3f:a0:ce:48: 9e:49:16:81:77:2c:7f:cd:93:05:8e:6f:46:6c:3f: da:40:5c:d2:ec:5b:b2:39:d5:d2:8d:8a:0b:c7:99: a6:87:a4:5b:47:7f:25:1f:3e:e5:62:f3:1d:e7:81: 28:6a:ac:ce:7f:34:87:2b:17:89:b9:ac:e1:d5:b6: 63:28:d8:89:ad:24:77:31:ea:1a:bb:a6:1b:7e:25: f9:6e:54:10:43:1d:c8:57:7d:e6:86:7b:66:51:d1: af:b6:83:fa:05:38:01:ea:b3:84:ad:9a:59:2c:16: ec:97:7e:e5:a9:b9:d3:53:02:f3:cb:e4:6c:59:f2: 3c:0d:9d:6a:62:99:22:bf:66:ac:e2:f6:ad:e7:9e: 32:96:20:5e:b9:0e:93:e3:62:3c:24:f1:79:66:34: cd:ba:db:65:dc:8d:86:cb:3f:60:e8:9f:e9:bd:9f: 7d:11:f4:7f:cb:2e:ff:21:a8:0b:27:ac:e9:9d:f1: dd:1f:99:3f:93:45:47:f2:0c:66:1b:16:86:31:1e: da:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:63:FF:AF:CD:A5:E2:59:EA:DE:9A:56:2A:6C:C1:0E:08:CE:B9:02 X509v3 Authority Key Identifier: keyid:BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:0e:65:66:9a:d1:20:bd:33:e9:c1:3b:3b:68:58:5c:3b:5d: ff:f3:d2:3d:72:e3:ea:e7:f7:8a:33:d8:7b:f7:5d:f0:05:73: 6f:2f:e8:ea:e8:64:e4:1f:0b:4b:81:6b:df:3f:d5:52:b5:20: be:17:fa:9d:5f:f6:60:20:f6:60:7c:03:bb:fb:c3:dc:e6:d0: 4f:1a:ae:70:cc:97:7e:35:75:90:31:2d:f8:b2:78:53:53:29: 1e:11:e8:87:c0:ab:60:73:b6:bf:9e:a6:97:08:25:c5:b7:9d: 83:95:df:e2:cf:34:47:75:18:af:0a:93:9b:21:79:8c:1b:15: 44:89:35:2a:c2:db:73:e7:0d:b6:08:e4:fe:d8:82:55:ff:c8: ad:6b:38:15:19:46:01:eb:1a:36:93:e7:1f:c5:3d:16:7d:f6: 36:b8:a9:4b:5c:32:ed:16:87:8b:df:48:45:ad:76:11:bc:44: 5d:d4:d6:e8:1c:04:29:64:50:b5:f0:67:31:74:c8:08:a8:33: 62:f2:4a:93:37:5f:fc:62:ac:0a:11:21:cc:e2:6b:35:62:23: f2:d8:af:df:d7:d8:b7:f3:24:b1:38:62:e3:63:76:67:9f:b1: 90:6b:bb:db:35:d2:94:b0:58:bd:ec:82:e4:7f:07:ab:3f:51: ca:87:3d:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDQkIxMTAvBgNVBAUTKEJFOTFDMDVFMjE4QzdFNjZFQTZGOTRGOUQyNDU3Nzcw NDE5MUJERTIwHhcNMjUwNDI3MDUxOTIxWhcNMjUwNTA0MDUxOTIxWjAYMRYwFAYD VQQDEw02ODBkYmU1OS03YzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Mo+Ewv6mBAKk8gOqDrsqMbRTyU1pwfrdWAgJXcSmCxrq/T27xgugV33CsX/ veON3GuUTFRS9T+gzkieSRaBdyx/zZMFjm9GbD/aQFzS7FuyOdXSjYoLx5mmh6Rb R38lHz7lYvMd54EoaqzOfzSHKxeJuazh1bZjKNiJrSR3Meoau6YbfiX5blQQQx3I V33mhntmUdGvtoP6BTgB6rOErZpZLBbsl37lqbnTUwLzy+RsWfI8DZ1qYpkiv2as 4vat554yliBeuQ6T42I8JPF5ZjTNuttl3I2Gyz9g6J/pvZ99EfR/yy7/IagLJ6zp nfHdH5k/k0VH8gxmGxaGMR7aLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5j/6/N peJZ6t6aVipswQ4IzrkCMB8GA1UdIwQYMBaAFL6RwF4hjH5m6m+U+dJFd3BBkb3i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81NEQyM0Y0NjUz MEYxMUVGOTlDODhEMEZDNEY5QUUwMi92cEhBWGlHTWZtYnFiNVQ1MGtWM2NFR1J2 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZwSEFYaUdNZm1icWI1VDUwa1YzY0VHUnZlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNCQi81NEQyM0Y0NjUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi92cEhBWGlHTWZt YnFiNVQ1MGtWM2NFR1J2ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7DmVmmtEgvTPpwTs7aFhcO13/89I9cuPq5/eKM9h7913wBXNvL+jq 6GTkHwtLgWvfP9VStSC+F/qdX/ZgIPZgfAO7+8Pc5tBPGq5wzJd+NXWQMS34snhT UykeEeiHwKtgc7a/nqaXCCXFt52Dld/izzRHdRivCpObIXmMGxVEiTUqwttz5w22 COT+2IJV/8itazgVGUYB6xo2k+cfxT0WffY2uKlLXDLtFoeL30hFrXYRvERd1Nbo HAQpZFC18GcxdMgIqDNi8kqTN1/8YqwKESHM4ms1YiPy2K/f19i38ySxOGLjY3Zn n7GQa7vbNdKUsFi97ILkfwerP1HKhz2R -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:42 2025 by rpki-client on console.sobornost.net