$ rpki-client -vvf rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft File: VRTBgTfeq40U8RHJD39rfjDQH2Q.mft (raw, json) Hash identifier: XdnucOOkbGNSj2ssKUd2W+dtMI5bc9RAOf1QoREbNj4= Subject key identifier: CE:89:38:2D:FB:89:08:60:31:72:4B:E7:3D:89:1C:2F:02:EC:95:52 Authority key identifier: 55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64 Certificate issuer: /CN=A916D1DA/serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64 Certificate serial: 3485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft Manifest number: 3485 Signing time: Fri 30 May 2025 15:05:29 +0000 Manifest this update: Fri 30 May 2025 15:05:29 +0000 Manifest next update: Fri 06 Jun 2025 15:05:29 +0000 Files and hashes: 1: VRTBgTfeq40U8RHJD39rfjDQH2Q.crl (hash: nDx9MP5XIr+MpnyvO6ey86HmGml4zSHcyXhx/kTXgws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13445 (0x3485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D1DA, serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64 Validity Not Before: May 30 15:05:29 2025 GMT Not After : Jun 6 15:05:29 2025 GMT Subject: CN=6839c939-185d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:a9:6e:93:f1:2c:78:10:5f:23:9d:a5:7e:28: 98:00:33:c4:f3:72:38:e6:34:ac:d2:e0:6b:05:2a: 4f:8a:b0:39:39:c0:ea:52:2d:eb:7b:57:58:ea:65: d4:0d:fa:ba:8f:b3:86:fb:ad:e6:2f:bc:9c:f6:f2: b0:0e:0c:a3:67:fa:a3:41:11:a6:02:15:5f:c2:de: e2:00:23:b3:81:fc:d0:de:a7:4f:5b:28:f0:83:07: a6:b3:41:3c:03:4c:73:d2:c9:8e:0a:fc:7f:03:a1: 4a:a0:20:e8:07:b6:8c:76:91:ac:4b:db:61:04:80: 9f:0d:36:10:3e:ee:43:89:39:56:86:60:bd:aa:a6: f8:dc:e6:a8:cf:c3:e4:00:fa:33:47:3c:87:f6:98: 29:50:bd:46:8a:86:f1:b5:19:e6:82:69:4a:bd:c3: 73:90:20:50:8f:f5:a2:ae:8f:e8:89:4d:c1:d0:20: 06:c8:f1:09:33:d5:bc:4e:7c:e1:87:9d:ba:ec:86: 33:d0:ca:c7:9d:17:ca:e5:dc:27:fc:54:0f:d1:0a: 79:14:d0:b0:e6:6a:cb:60:2e:63:93:7a:64:dc:6d: 4f:8b:97:bb:e7:a1:d9:29:b7:b1:23:db:a9:66:cf: 93:49:16:1f:75:b5:28:ae:e6:ce:3f:84:1b:89:3c: 9b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:89:38:2D:FB:89:08:60:31:72:4B:E7:3D:89:1C:2F:02:EC:95:52 X509v3 Authority Key Identifier: keyid:55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:9c:9b:ed:27:09:12:77:f3:54:f3:28:cd:29:ab:36:3a:70: 7d:86:45:e8:29:81:23:5f:d0:0e:36:94:e0:df:ba:1f:9c:1b: 46:72:1d:77:8c:4c:25:c2:55:19:a8:dd:ab:ba:89:e8:3d:03: 28:83:e8:c4:f8:d9:e5:e4:1e:00:6b:f5:fa:f7:ec:76:50:a2: af:f3:75:c8:28:4d:0f:0b:54:1d:cf:09:53:fa:e3:b5:51:86: 9f:b6:23:30:da:75:50:9e:b3:3c:f7:15:3e:61:b5:56:4e:24: e2:95:58:df:24:d8:57:b0:e2:1a:ac:49:e2:1c:dd:17:a9:a6: be:1f:22:3b:a6:0a:8b:ff:6d:43:72:d0:f4:31:de:e2:6a:df: 3a:d1:c6:2f:17:17:4f:76:76:94:36:3e:14:28:c7:60:a5:92: 85:37:4e:6a:38:84:e6:33:6d:cd:39:ca:b3:5d:0b:b3:80:cf: 56:5e:e5:38:a2:d5:bf:8a:b1:58:43:ed:cc:10:47:3e:61:6d: 1f:0b:f6:03:2d:d3:88:ea:6e:dc:f3:a1:f6:4a:8d:46:c9:38: 9f:5f:16:58:39:17:d4:6c:18:3b:ae:6a:74:e8:9e:c0:e9:db: 4a:1f:c3:ac:82:3b:0f:fa:3e:4a:8d:b4:67:e2:1a:b1:fb:7f: 27:af:16:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxREExMTAvBgNVBAUTKDU1MTRDMTgxMzdERUFCOEQxNEYxMTFDOTBGN0Y2QjdF MzBEMDFGNjQwHhcNMjUwNTMwMTUwNTI5WhcNMjUwNjA2MTUwNTI5WjAYMRYwFAYD VQQDEw02ODM5YzkzOS0xODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+aluk/EseBBfI52lfiiYADPE83I45jSs0uBrBSpPirA5OcDqUi3re1dY6mXU Dfq6j7OG+63mL7yc9vKwDgyjZ/qjQRGmAhVfwt7iACOzgfzQ3qdPWyjwgwems0E8 A0xz0smOCvx/A6FKoCDoB7aMdpGsS9thBICfDTYQPu5DiTlWhmC9qqb43Oaoz8Pk APozRzyH9pgpUL1GiobxtRnmgmlKvcNzkCBQj/Wiro/oiU3B0CAGyPEJM9W8Tnzh h5267IYz0MrHnRfK5dwn/FQP0Qp5FNCw5mrLYC5jk3pk3G1Pi5e756HZKbexI9up Zs+TSRYfdbUorubOP4QbiTybWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6JOC37 iQhgMXJL5z2JHC8C7JVSMB8GA1UdIwQYMBaAFFUUwYE33quNFPERyQ9/a34w0B9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDFEQS8wMDhDRTUyQTFE OUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0MFU4UkhKRDM5cmZqRFFI MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSVEJnVGZlcTQwVThSSEpEMzlyZmpEUUgyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDFEQS8wMDhDRTUyQTFEOUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0 MFU4UkhKRDM5cmZqRFFIMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGnJvtJwkSd/NU8yjNKas2OnB9hkXoKYEjX9AONpTg37ofnBtGch13 jEwlwlUZqN2ruonoPQMog+jE+Nnl5B4Aa/X69+x2UKKv83XIKE0PC1QdzwlT+uO1 UYaftiMw2nVQnrM89xU+YbVWTiTilVjfJNhXsOIarEniHN0Xqaa+HyI7pgqL/21D ctD0Md7iat860cYvFxdPdnaUNj4UKMdgpZKFN05qOITmM23NOcqzXQuzgM9WXuU4 otW/irFYQ+3MEEc+YW0fC/YDLdOI6m7c86H2So1GyTifXxZYORfUbBg7rmp06J7A 6dtKH8OsgjsP+j5KjbRn4hqx+38nrxaV -----END CERTIFICATE-----Generated at Sat May 31 16:31:25 2025 by rpki-client