$ rpki-client -vvf rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft File: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft (raw, json) Hash identifier: RSOS4xwkVUvEavTgpfNQCPWjmLFO3fd+LYK9X5t3WS8= Subject key identifier: 07:AD:B2:53:10:F5:F2:F1:21:38:3C:54:47:DF:17:FD:0D:40:DF:CE Authority key identifier: BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2 Certificate issuer: /CN=A917B503/serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft Manifest number: 99 Signing time: Sun 27 Apr 2025 05:13:11 +0000 Manifest this update: Sun 27 Apr 2025 05:13:10 +0000 Manifest next update: Sun 04 May 2025 05:13:10 +0000 Files and hashes: 1: vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl (hash: Stk5lznrzOVxSg6tKZIPmu9u9zFqIQMIHN3jYswYiAQ=) 2: FF7048A08BB111EF8981B871C4F9AE02.roa (hash: 9uEwzB8ckH0lupP2vcJh2pZkJ61ZIv0842o4n0sbwyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B503, serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2 Validity Not Before: Apr 27 05:13:10 2025 GMT Not After : May 4 05:13:10 2025 GMT Subject: CN=680dbce7-e403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:14:83:16:6f:88:a4:89:6b:1a:9d:41:4c:f9: ad:38:7f:07:c6:56:a6:2e:25:d0:50:5f:35:9d:82: 04:a9:88:c8:d6:70:d3:42:27:8a:22:45:5a:76:d1: b8:a6:b5:dc:e5:e7:e9:27:a0:11:5c:d3:38:96:36: e4:2c:ca:8b:81:7d:97:0d:21:6d:9c:ca:83:19:81: e6:f8:04:70:8f:df:ba:a3:2b:36:2a:17:e1:da:f9: db:82:6e:98:43:af:d8:79:dd:4b:89:f3:cb:a2:45: 89:90:a5:5e:a8:dc:24:6b:f6:7c:05:c4:3f:cb:31: 3e:2d:a1:25:66:c7:84:5a:6e:0d:be:64:dd:9d:1a: 41:06:e1:9b:44:49:97:6b:95:22:fa:09:ab:ad:04: 36:38:76:5c:b6:c8:91:3f:87:f0:6a:51:d6:d4:c3: b6:19:cb:75:d1:75:7e:dc:da:44:33:c7:58:37:e7: d2:5a:23:d7:be:0d:5a:d4:05:17:96:7e:02:b7:32: 35:3a:01:53:ec:1f:a5:a5:e5:f7:f0:61:24:b4:06: ab:a2:cb:7c:3f:43:5b:e5:50:ce:ba:22:6a:33:96: 7a:3a:96:5c:77:6d:f3:b4:86:b0:6f:84:c0:cb:3c: 47:6c:14:e3:74:97:0e:5f:a8:f1:bc:d9:78:f9:fc: 20:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AD:B2:53:10:F5:F2:F1:21:38:3C:54:47:DF:17:FD:0D:40:DF:CE X509v3 Authority Key Identifier: keyid:BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:92:e8:ae:f1:5a:a8:e7:7d:ed:d0:d6:35:e0:83:4b:83:95: c5:2e:db:e5:d2:6b:fb:4f:71:5e:1c:89:03:49:a0:81:4c:a5: ef:0b:49:18:43:e6:48:bf:68:d4:7d:48:97:33:4c:12:7b:be: d4:42:48:10:fe:a5:23:06:b5:a7:9f:f0:cf:02:a4:28:1d:15: a2:11:0b:16:a2:23:35:51:26:c8:42:88:9d:24:29:a0:ef:c9: 57:c6:54:46:b4:69:de:8b:c5:1d:d5:a1:ba:5a:8e:5d:6f:e7: ef:90:ae:25:dc:21:97:05:3b:ce:cc:ab:9a:57:fc:6e:84:f4: 3d:e7:ae:52:5d:b2:d6:9f:42:67:40:6b:9c:a9:ad:93:32:41: ed:f9:6d:9c:48:a5:86:8c:a4:4b:ac:a1:51:9a:65:94:01:cd: 58:a4:6a:45:5a:ea:6d:46:49:ff:c4:f0:fe:1e:e7:bf:c8:aa: fc:ae:4b:c9:b2:44:58:0e:b2:d3:88:93:b5:b6:00:da:18:21: 27:9f:96:ec:25:eb:03:99:b2:67:87:cc:c7:ac:4e:90:17:36: 2e:23:65:f4:55:06:57:25:fa:07:54:33:48:f0:2d:b0:4c:93: d2:e0:3c:bb:57:cd:4f:63:73:fb:77:a2:1d:15:b1:a1:b9:17: 56:3b:f5:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MDMxMTAvBgNVBAUTKEJENjNFMEREQ0I1Q0Q0MUIzNDUwMURGMkU4MUEyQTcy Q0VFMzZFRjIwHhcNMjUwNDI3MDUxMzEwWhcNMjUwNTA0MDUxMzEwWjAYMRYwFAYD VQQDEw02ODBkYmNlNy1lNDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhSDFm+IpIlrGp1BTPmtOH8HxlamLiXQUF81nYIEqYjI1nDTQieKIkVadtG4 prXc5efpJ6ARXNM4ljbkLMqLgX2XDSFtnMqDGYHm+ARwj9+6oys2Khfh2vnbgm6Y Q6/Yed1LifPLokWJkKVeqNwka/Z8BcQ/yzE+LaElZseEWm4NvmTdnRpBBuGbREmX a5Ui+gmrrQQ2OHZctsiRP4fwalHW1MO2Gct10XV+3NpEM8dYN+fSWiPXvg1a1AUX ln4CtzI1OgFT7B+lpeX38GEktAarost8P0Nb5VDOuiJqM5Z6OpZcd23ztIawb4TA yzxHbBTjdJcOX6jxvNl4+fwg0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAetslMQ 9fLxITg8VEffF/0NQN/OMB8GA1UdIwQYMBaAFL1j4N3LXNQbNFAd8ugaKnLO427y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUwMy83Qjg4NUZFNDQz MTAxMUVGODk0OEEzODFDNEY5QUUwMi92V1BnM2N0YzFCczBVQjN5NkJvcWNzN2pi dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZXUGczY3RjMUJzMFVCM3k2Qm9xY3M3amJ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUwMy83Qjg4NUZFNDQzMTAxMUVGODk0OEEzODFDNEY5QUUwMi92V1BnM2N0YzFC czBVQjN5NkJvcWNzN2pidkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1kuiu8Vqo533t0NY14INLg5XFLtvl0mv7T3FeHIkDSaCBTKXvC0kY Q+ZIv2jUfUiXM0wSe77UQkgQ/qUjBrWnn/DPAqQoHRWiEQsWoiM1USbIQoidJCmg 78lXxlRGtGnei8Ud1aG6Wo5db+fvkK4l3CGXBTvOzKuaV/xuhPQ9565SXbLWn0Jn QGucqa2TMkHt+W2cSKWGjKRLrKFRmmWUAc1YpGpFWuptRkn/xPD+Hue/yKr8rkvJ skRYDrLTiJO1tgDaGCEnn5bsJesDmbJnh8zHrE6QFzYuI2X0VQZXJfoHVDNI8C2w TJPS4Dy7V81PY3P7d6IdFbGhuRdWO/XN -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:50 2025 by rpki-client on console.sobornost.net