$ rpki-client -vvf rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft File: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft (raw, json) Hash identifier: +pmXxdDU+DiCs/7KsdgQPiWP0YJ9cq+ZW7Xrk7pGG5g= Subject key identifier: 90:84:02:15:97:27:B7:60:50:DD:6F:73:69:BA:85:0B:B5:B5:5D:12 Authority key identifier: D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 Certificate issuer: /CN=A91A20A3/serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Certificate serial: 34A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft Manifest number: 3493 Signing time: Wed 04 Jun 2025 15:02:30 +0000 Manifest this update: Wed 04 Jun 2025 15:02:29 +0000 Manifest next update: Wed 11 Jun 2025 15:02:29 +0000 Files and hashes: 1: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl (hash: 0P87rLY+SgePxJH85g165MVjP+PXWStK3MvvhIiwOYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 15:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13475 (0x34a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A20A3, serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Validity Not Before: Jun 4 15:02:29 2025 GMT Not After : Jun 11 15:02:29 2025 GMT Subject: CN=68406005-706f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d1:0e:42:5a:a8:a8:6c:14:6b:31:e1:4d:de: 0b:bb:86:b3:dd:50:a4:b2:dc:7a:25:20:52:22:22: c0:12:4e:40:d9:5b:aa:e8:e3:99:ea:0a:f6:c8:53: 05:ba:f2:8d:99:2d:65:16:98:cf:22:89:84:58:27: da:5c:21:a3:fb:1c:05:2a:3a:1c:4d:49:89:39:47: 86:f2:f2:5a:e8:00:13:9f:39:b1:87:ea:77:a5:f4: 1a:0f:98:7a:4b:5c:b5:8f:01:0e:30:90:89:d9:67: a1:fa:f3:c0:69:4f:1d:ba:52:bc:15:2e:11:1e:3e: 2a:33:0b:ca:59:31:65:11:ad:e2:12:24:a5:d1:cc: d7:49:34:20:16:0b:c7:26:64:97:c8:16:2d:14:98: 3f:e2:c3:a8:9b:6c:28:c5:37:47:4d:f9:0d:10:f8: 70:6d:7d:53:04:d8:b1:74:fc:23:2d:49:11:dc:dd: 51:8c:da:1a:35:0f:e4:8e:ee:7c:94:2b:ab:0c:53: 20:3f:bf:2c:1e:34:c6:9b:8f:62:ac:fe:41:f0:a4: 27:7d:3a:97:97:40:0a:19:6d:8f:d9:ca:88:88:b7: 97:74:5e:22:97:26:c2:50:c2:b0:9b:76:b0:bc:3d: 7f:7b:08:76:c4:64:fd:c8:88:b4:93:9c:31:12:dd: 1c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:84:02:15:97:27:B7:60:50:DD:6F:73:69:BA:85:0B:B5:B5:5D:12 X509v3 Authority Key Identifier: keyid:D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:9d:a1:27:73:72:00:f2:f1:29:9c:39:5b:57:02:38:2c:b5: 29:ce:f4:f3:9f:14:60:70:18:7e:b3:fe:0d:78:db:92:f2:99: c3:54:d4:6a:59:10:e9:a5:7d:e3:f9:b7:d9:3e:75:ec:73:5a: 84:f3:d2:fa:29:b4:2d:83:e2:0a:14:a1:76:58:01:54:f2:0f: ad:36:32:79:7e:12:a9:e0:8a:17:97:23:b9:e5:08:2b:6e:72: 7d:51:fe:5d:a1:11:26:fa:22:c9:88:3c:df:08:0a:b8:c5:5e: 86:19:4e:96:48:a3:fd:32:f9:8f:b3:31:ec:48:a8:32:ba:a4: 2a:df:44:e9:51:d9:da:a6:b1:d0:9a:cc:d8:46:09:e6:cd:7f: ec:65:d5:4f:69:eb:3b:da:ea:77:79:45:cb:0f:46:11:16:69: 40:e8:04:59:c1:82:df:20:ed:f2:c3:3b:8c:a8:37:c8:fe:52: 43:45:d4:d5:9b:a0:74:6f:62:eb:3d:52:4e:26:09:a8:47:03: ff:29:8f:30:f5:af:3c:2d:c5:2a:4c:b9:56:c2:d3:af:0d:1a: 5c:68:53:84:08:7c:7c:d0:69:15:75:6b:a5:11:24:3d:3d:7b: 66:1c:85:77:70:d2:f1:56:d0:cd:1e:11:46:37:14:8d:b4:eb: 6b:49:41:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIwQTMxMTAvBgNVBAUTKEQxNUE1QUY5QUY4RDk5REZFNUU0NEQzNUVFNTUwMTA1 RkVEOTQ1MTEwHhcNMjUwNjA0MTUwMjI5WhcNMjUwNjExMTUwMjI5WjAYMRYwFAYD VQQDEw02ODQwNjAwNS03MDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtEOQlqoqGwUazHhTd4Lu4az3VCkstx6JSBSIiLAEk5A2Vuq6OOZ6gr2yFMF uvKNmS1lFpjPIomEWCfaXCGj+xwFKjocTUmJOUeG8vJa6AATnzmxh+p3pfQaD5h6 S1y1jwEOMJCJ2Weh+vPAaU8dulK8FS4RHj4qMwvKWTFlEa3iEiSl0czXSTQgFgvH JmSXyBYtFJg/4sOom2woxTdHTfkNEPhwbX1TBNixdPwjLUkR3N1RjNoaNQ/kju58 lCurDFMgP78sHjTGm49irP5B8KQnfTqXl0AKGW2P2cqIiLeXdF4ilybCUMKwm3aw vD1/ewh2xGT9yIi0k5wxEt0cewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCEAhWX J7dgUN1vc2m6hQu1tV0SMB8GA1UdIwQYMBaAFNFaWvmvjZnf5eRNNe5VAQX+2UUR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjBBMy9BRjRCOEE2MjFE OUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1kX2w1RTAxN2xVQkJmN1pS UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBWcGEtYS1ObWRfbDVFMDE3bFVCQmY3WlJSRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjBBMy9BRjRCOEE2MjFEOUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1k X2w1RTAxN2xVQkJmN1pSUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhnaEnc3IA8vEpnDlbVwI4LLUpzvTznxRgcBh+s/4NeNuS8pnDVNRq WRDppX3j+bfZPnXsc1qE89L6KbQtg+IKFKF2WAFU8g+tNjJ5fhKp4IoXlyO55Qgr bnJ9Uf5doREm+iLJiDzfCAq4xV6GGU6WSKP9MvmPszHsSKgyuqQq30TpUdnaprHQ mszYRgnmzX/sZdVPaes72up3eUXLD0YRFmlA6ARZwYLfIO3ywzuMqDfI/lJDRdTV m6B0b2LrPVJOJgmoRwP/KY8w9a88LcUqTLlWwtOvDRpcaFOECHx80GkVdWulESQ9 PXtmHIV3cNLxVtDNHhFGNxSNtOtrSUGz -----END CERTIFICATE-----Generated at Fri Jun 6 16:51:22 2025 by rpki-client