$ rpki-client -vvf rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft File: VCRPZF3qDVCWaFgNE46CUnn7Vng.mft (raw, json) Hash identifier: PJ5Q1sUdA7WchuzD0/9JqjSqxLsxMcseaqaKF1KaLeU= Subject key identifier: 35:FE:E8:0B:0D:C9:BC:D9:51:F5:32:6B:44:8E:AA:24:F0:D6:DC:A9 Authority key identifier: 54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 Certificate issuer: /CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678 Certificate serial: 0CED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft Manifest number: 0CE4 Signing time: Fri 04 Apr 2025 18:14:00 +0000 Manifest this update: Fri 04 Apr 2025 18:13:59 +0000 Manifest next update: Fri 11 Apr 2025 18:13:59 +0000 Files and hashes: 1: VCRPZF3qDVCWaFgNE46CUnn7Vng.crl (hash: xbfSZqiC1Iy4IvcA8wZrYVSM5Fyvl5C35lTM8y/eBck=) 2: 690390E80FAA11EB8B893F1EC4F9AE02.roa (hash: 50X2YknGPNQ7f3oYcKge6hlv5pd3PV5tqtttq6Hz8zE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3309 (0xced) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B624E Validity Not Before: Apr 4 18:13:59 2025 GMT Not After : Apr 11 18:13:59 2025 GMT Subject: CN=67f02167-3c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8a:90:db:d4:42:de:83:25:56:f0:ff:37:92: cb:16:b4:44:fa:c2:80:0e:1c:f4:93:3c:fe:99:75: 3c:14:b1:74:70:27:85:00:1a:df:cf:32:83:32:9a: 7f:71:a3:ad:4e:97:b5:e8:8d:1b:ea:1a:9a:56:e9: 7d:a9:1f:0c:10:8c:74:90:02:cc:dc:4a:6c:46:a8: c8:0c:8e:c8:37:fa:91:23:74:e9:aa:18:ba:1f:5a: cc:9f:85:83:79:76:de:58:7e:a1:7c:82:3a:25:45: 79:da:50:fd:ec:7c:95:e9:c4:fc:a2:cd:1e:90:52: 54:cf:a4:56:7b:d3:cf:33:3c:0e:97:ec:00:38:08: ba:ea:4f:ff:cc:9e:76:f5:b7:8d:20:73:cf:2d:5e: e3:9c:4b:59:fa:7f:d8:86:1c:f9:e3:d8:a9:f7:b2: 36:ba:58:38:8b:db:a9:3d:f1:85:05:48:b2:4b:46: 99:fa:07:48:28:49:e1:72:1e:6b:7e:69:c1:9b:9f: 9e:b4:42:f4:44:ed:d7:35:ff:ff:f8:b9:73:1d:25: 80:12:65:5b:c2:a6:94:33:2d:2f:7b:9a:44:4e:01: 95:4e:95:ca:ac:90:1a:b4:6f:74:25:b4:48:5f:37: e2:46:5c:0e:b0:a1:b8:5d:59:92:d5:97:bf:e3:ee: a1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FE:E8:0B:0D:C9:BC:D9:51:F5:32:6B:44:8E:AA:24:F0:D6:DC:A9 X509v3 Authority Key Identifier: keyid:54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:42:b6:21:47:bc:f5:aa:57:9d:b4:96:47:37:10:1e:87:2b: f6:05:93:b3:d7:06:32:72:ca:bb:d5:fd:0e:e2:51:fe:ba:0b: 2d:93:03:f8:dc:06:d3:4c:b6:4e:83:61:23:9a:2a:d5:84:43: 1f:c7:25:7b:08:29:e2:42:df:4e:80:14:18:22:e1:3d:92:6f: af:ba:88:66:18:cf:3d:cf:19:da:c1:96:c4:3b:bb:25:89:ad: db:4a:3e:c0:29:17:4f:2f:b7:97:12:7f:af:ba:92:b7:5e:95: 9a:2c:9b:12:1e:d6:0a:4e:6c:2f:b3:ce:85:0f:68:45:27:76: 1d:6c:c9:96:1c:d4:c5:b4:76:27:3e:0a:9f:e0:22:f1:77:1c: ae:f5:bd:10:09:98:fa:e0:43:60:4e:66:39:74:cb:21:12:b5: 43:b5:e1:b0:34:94:ce:47:bc:29:ef:3f:56:3e:06:17:22:30: 6c:55:52:6c:57:93:a3:72:89:2a:98:7f:ff:d6:45:b9:15:c9: db:9f:04:20:7e:7d:86:68:ff:ee:4c:9b:36:ec:c8:01:c8:41: 6f:81:91:63:6c:8c:da:87:57:5d:62:9f:4d:36:d0:eb:07:9d: ba:77:1f:0b:80:73:32:57:80:6b:1b:d3:1a:8e:96:73:93:2c: cd:da:16:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNEUxMTAvBgNVBAUTKDU0MjQ0RjY0NURFQTBENTA5NjY4NTgwRDEzOEU4MjUy NzlGQjU2NzgwHhcNMjUwNDA0MTgxMzU5WhcNMjUwNDExMTgxMzU5WjAYMRYwFAYD VQQDEw02N2YwMjE2Ny0zYzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoqQ29RC3oMlVvD/N5LLFrRE+sKADhz0kzz+mXU8FLF0cCeFABrfzzKDMpp/ caOtTpe16I0b6hqaVul9qR8MEIx0kALM3EpsRqjIDI7IN/qRI3Tpqhi6H1rMn4WD eXbeWH6hfII6JUV52lD97HyV6cT8os0ekFJUz6RWe9PPMzwOl+wAOAi66k//zJ52 9beNIHPPLV7jnEtZ+n/Yhhz549ip97I2ulg4i9upPfGFBUiyS0aZ+gdIKEnhch5r fmnBm5+etEL0RO3XNf//+LlzHSWAEmVbwqaUMy0ve5pETgGVTpXKrJAatG90JbRI XzfiRlwOsKG4XVmS1Ze/4+6hMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDX+6AsN ybzZUfUya0SOqiTw1typMB8GA1UdIwQYMBaAFFQkT2Rd6g1QlmhYDROOglJ5+1Z4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI0RS9CRDk1QzM4RUUw M0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURWQ1dhRmdORTQ2Q1VubjdW bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDUlBaRjNxRFZDV2FGZ05FNDZDVW5uN1ZuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjI0RS9CRDk1QzM4RUUwM0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURW Q1dhRmdORTQ2Q1VubjdWbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSQrYhR7z1qledtJZHNxAehyv2BZOz1wYycsq71f0O4lH+ugstkwP4 3AbTTLZOg2EjmirVhEMfxyV7CCniQt9OgBQYIuE9km+vuohmGM89zxnawZbEO7sl ia3bSj7AKRdPL7eXEn+vupK3XpWaLJsSHtYKTmwvs86FD2hFJ3YdbMmWHNTFtHYn Pgqf4CLxdxyu9b0QCZj64ENgTmY5dMshErVDteGwNJTOR7wp7z9WPgYXIjBsVVJs V5OjcokqmH//1kW5FcnbnwQgfn2GaP/uTJs27MgByEFvgZFjbIzah1ddYp9NNtDr B526dx8LgHMyV4BrG9MajpZzkyzN2hb/ -----END CERTIFICATE-----Generated at Sat Apr 5 23:42:14 2025 by rpki-client