$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft File: Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft (raw, json) Hash identifier: /O9/SzSfxRS4E3Kx0D4dyKt4SY5N/IHCrZwymc94d4w= Subject key identifier: 7C:30:67:91:EA:23:22:69:47:4A:4F:4D:E1:46:36:F7:1C:EC:B8:99 Authority key identifier: 55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6 Certificate issuer: /CN=A91127C1/serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft Manifest number: 01DC Signing time: Mon 02 Jun 2025 20:09:46 +0000 Manifest this update: Mon 02 Jun 2025 20:09:46 +0000 Manifest next update: Mon 09 Jun 2025 20:09:46 +0000 Files and hashes: 1: Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl (hash: tgD0uveSHawOLCvfU2QchWhwRlm16M8zhVueZIS8j8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127C1, serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6 Validity Not Before: Jun 2 20:09:46 2025 GMT Not After : Jun 9 20:09:46 2025 GMT Subject: CN=683e050a-2f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:0d:a9:e0:0d:6b:28:fe:fd:aa:13:91:86:90: d3:0c:95:3c:6d:fd:8b:60:ff:ca:54:75:74:94:8c: a0:f2:c6:94:97:fe:a0:a2:62:57:f8:bd:8d:56:a5: cd:b0:39:08:ce:7f:b8:b5:2b:ed:97:75:32:60:7c: 94:90:45:5b:2a:02:2f:1b:30:3c:af:84:0e:68:11: 71:7b:f9:52:fd:e9:6c:89:0d:c7:43:d7:14:30:46: e8:07:09:e1:6e:f5:16:6b:0d:2e:9d:ab:e7:99:a3: d9:8b:d1:f0:bb:e3:40:10:d4:f3:cb:f0:87:42:f3: 1e:47:77:49:c0:72:8c:02:5f:9b:79:47:f3:dd:49: ca:47:e7:3b:1d:9e:dd:f1:2b:be:b1:4a:bb:fa:ba: 22:ef:fe:53:4e:ba:bc:dc:53:a0:62:3c:d4:08:41: a8:df:30:65:d9:98:74:9f:a8:8a:17:23:fa:e0:08: 68:71:39:dd:50:bf:11:53:0b:49:96:e7:84:1e:27: 03:75:96:f3:c9:80:6c:43:81:b4:18:39:cf:63:2b: b4:5e:24:3f:07:37:3d:02:ba:4c:8c:81:f0:3c:a0: 02:c8:c9:96:ed:3b:67:34:b0:d8:e5:e0:af:70:db: 29:e1:17:3c:d6:b4:fd:73:eb:68:4c:3f:8b:39:38: 13:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:30:67:91:EA:23:22:69:47:4A:4F:4D:E1:46:36:F7:1C:EC:B8:99 X509v3 Authority Key Identifier: keyid:55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:c4:74:c5:ef:95:54:e5:da:48:84:12:41:17:ce:75:29:c5: 99:4d:2a:d5:59:be:90:af:97:4c:e1:27:6a:e5:96:16:2d:ea: a3:59:51:31:b3:b9:f1:11:24:03:b8:13:71:25:ec:0e:7c:0c: 0a:a2:d5:f1:29:0d:e3:54:69:87:5c:59:e4:f5:18:8d:49:6f: ba:34:43:ab:9a:cc:36:0a:da:e8:00:7d:f8:e6:0a:a3:09:10: 9f:1c:af:00:e0:cf:20:67:4b:b1:75:17:78:3c:83:b8:3c:b8: 0f:49:57:48:f1:29:5f:9f:76:f1:f9:d1:e4:22:60:0d:cf:55: 40:13:76:e9:8a:83:d2:e7:ad:7e:46:39:ac:bb:cd:aa:76:ed: 13:f7:92:01:ad:b6:12:94:fb:62:01:da:3b:1b:6b:fc:05:35: 3d:66:e3:fa:63:eb:1a:dc:12:d5:92:63:12:52:a3:fc:26:58: f5:02:78:22:f9:6a:f4:c1:f0:7f:35:80:d4:06:4d:5c:a0:7d: 85:38:00:95:e0:1a:e4:02:53:62:21:ea:04:96:6b:72:b0:59: e7:83:a2:3b:ff:47:82:f1:0a:7f:00:5e:7d:8c:88:52:13:46: 9b:02:fe:c2:33:77:ab:c9:5b:bf:da:60:47:4e:86:2a:dc:a7: 12:f4:47:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QzExMTAvBgNVBAUTKDU1RkI3QkNDQTc0MDI4NUZDODFBQTM2MEYwMkNFMzJG OTU4MTZEQjYwHhcNMjUwNjAyMjAwOTQ2WhcNMjUwNjA5MjAwOTQ2WjAYMRYwFAYD VQQDEw02ODNlMDUwYS0yZjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Q2p4A1rKP79qhORhpDTDJU8bf2LYP/KVHV0lIyg8saUl/6gomJX+L2NVqXN sDkIzn+4tSvtl3UyYHyUkEVbKgIvGzA8r4QOaBFxe/lS/elsiQ3HQ9cUMEboBwnh bvUWaw0unavnmaPZi9Hwu+NAENTzy/CHQvMeR3dJwHKMAl+beUfz3UnKR+c7HZ7d 8Su+sUq7+roi7/5TTrq83FOgYjzUCEGo3zBl2Zh0n6iKFyP64AhocTndUL8RUwtJ lueEHicDdZbzyYBsQ4G0GDnPYyu0XiQ/Bzc9ArpMjIHwPKACyMmW7TtnNLDY5eCv cNsp4Rc81rT9c+toTD+LOTgTPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwwZ5Hq IyJpR0pPTeFGNvcc7LiZMB8GA1UdIwQYMBaAFFX7e8ynQChfyBqjYPAs4y+VgW22 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdDMS9EQ0Y5OEExNjc3 ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtGX0lHcU5nOEN6akw1V0Ji YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZmdDd6S2RBS0ZfSUdxTmc4Q3pqTDVXQmJiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdDMS9EQ0Y5OEExNjc3ODExMUVEOTZCMzY0NjRDNEY5QUUwMi9WZnQ3ektkQUtG X0lHcU5nOEN6akw1V0JiYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2xHTF75VU5dpIhBJBF851KcWZTSrVWb6Qr5dM4Sdq5ZYWLeqjWVEx s7nxESQDuBNxJewOfAwKotXxKQ3jVGmHXFnk9RiNSW+6NEOrmsw2CtroAH345gqj CRCfHK8A4M8gZ0uxdRd4PIO4PLgPSVdI8Slfn3bx+dHkImANz1VAE3bpioPS561+ Rjmsu82qdu0T95IBrbYSlPtiAdo7G2v8BTU9ZuP6Y+sa3BLVkmMSUqP8Jlj1Angi +Wr0wfB/NYDUBk1coH2FOACV4BrkAlNiIeoElmtysFnng6I7/0eC8Qp/AF59jIhS E0abAv7CM3eryVu/2mBHToYq3KcS9Ec8 -----END CERTIFICATE-----Generated at Tue Jun 3 23:46:56 2025 by rpki-client