$ rpki-client -vvf rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft File: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft (raw, json) Hash identifier: 7X0FTonaJX7g6TfCH0zM6fw7OLJKiKgwvgRpcvEtNE8= Subject key identifier: F4:8B:3C:65:27:2E:AE:5C:D2:E0:68:12:52:0F:DB:5D:66:98:79:D2 Authority key identifier: D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 Certificate issuer: /CN=A91A20A3/serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Certificate serial: 34CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft Manifest number: 34BC Signing time: Sun 24 Aug 2025 15:00:45 +0000 Manifest this update: Sun 24 Aug 2025 15:00:44 +0000 Manifest next update: Sun 31 Aug 2025 15:00:44 +0000 Files and hashes: 1: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl (hash: tPH+SENs2n6Lb6G9BPhCeEZMm+ywR0HC6JYm2Bk3+9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13516 (0x34cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A20A3, serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Validity Not Before: Aug 24 15:00:44 2025 GMT Not After : Aug 31 15:00:44 2025 GMT Subject: CN=68ab291d-bccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:64:cf:24:0d:6a:5a:1a:a7:14:5b:5b:47:4f: 45:af:29:0e:59:6c:e0:9d:ed:ad:a5:4c:88:d6:e0: 54:12:43:0c:28:e5:d8:17:a9:09:87:58:7f:bd:aa: e7:92:28:da:41:5e:bc:ca:6a:1c:ec:db:6a:cc:61: 33:4a:5b:11:09:7e:eb:3f:f8:48:7b:5a:40:ff:8f: ac:a2:34:29:d2:4c:aa:8e:31:ab:66:a1:09:16:47: a8:cc:1a:2e:86:08:51:53:ae:0d:f4:88:f5:54:ac: 48:54:48:a4:5e:5a:44:02:d6:c0:e7:00:2a:c4:1a: d3:32:be:b8:88:04:c7:ee:16:9b:46:8f:65:2c:0a: e7:e9:2e:f6:02:36:84:fa:cc:62:6c:b6:49:ba:a6: 44:a5:ae:9c:21:ef:b5:2e:cf:1b:cd:12:89:5c:a6: ac:e7:3c:e5:bb:96:db:6c:86:7d:0e:66:33:b0:73: 81:53:af:7c:b1:1c:f1:a2:ec:43:89:e0:37:78:32: 90:40:6e:b7:ee:5c:e7:a3:68:d8:13:59:98:8e:70: b5:44:64:a3:5a:33:91:92:0a:8e:8e:a5:05:e9:5e: fc:e4:bf:00:4e:54:17:40:2b:cf:1c:e0:ad:32:70: c0:d1:17:f5:77:64:4f:48:b7:b1:cd:a1:ac:39:22: c1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8B:3C:65:27:2E:AE:5C:D2:E0:68:12:52:0F:DB:5D:66:98:79:D2 X509v3 Authority Key Identifier: keyid:D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:2d:f8:d8:43:3e:b8:46:c1:f1:64:20:7c:e1:0d:c1:d7:32: e7:3a:8f:e4:29:0d:40:9a:01:d9:c9:4e:63:fd:8d:ef:69:a1: a9:fd:d9:29:f0:d2:9d:50:87:b8:b0:f0:85:fe:5a:d0:70:42: 38:7a:00:11:51:5b:cf:79:59:28:5d:68:d1:a1:12:4d:2b:4b: 08:ad:73:9a:3e:e9:d5:34:42:dc:2a:4b:76:77:56:e2:be:9d: db:66:7d:6d:17:8c:b2:3a:40:5a:5b:3c:90:1b:8c:f2:46:cf: 75:54:be:90:98:21:f4:61:43:2f:32:76:6b:86:ba:1f:48:b2: b0:b6:fb:56:0b:69:e6:8b:47:89:f9:a2:12:c5:1a:04:fd:9b: 3d:19:68:66:f3:79:b1:c7:7e:25:94:61:49:df:28:d6:eb:c3: 9d:27:a6:cc:87:b9:c8:29:60:4d:3a:69:e6:af:47:df:26:4b: f2:16:79:5f:b1:ca:59:17:33:ab:26:18:80:b1:a8:99:01:55: ac:8e:c3:41:5b:be:74:9b:14:16:17:fa:e4:15:65:a0:9f:54: 6a:a6:ce:4b:9e:7b:52:55:92:73:e7:3f:d5:32:7b:22:29:aa: 3e:ea:25:7c:f3:ea:bf:13:c4:5a:85:d0:e4:b7:ff:f5:98:db: fd:d4:4c:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIwQTMxMTAvBgNVBAUTKEQxNUE1QUY5QUY4RDk5REZFNUU0NEQzNUVFNTUwMTA1 RkVEOTQ1MTEwHhcNMjUwODI0MTUwMDQ0WhcNMjUwODMxMTUwMDQ0WjAYMRYwFAYD VQQDEw02OGFiMjkxZC1iY2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWTPJA1qWhqnFFtbR09FrykOWWzgne2tpUyI1uBUEkMMKOXYF6kJh1h/varn kijaQV68ymoc7NtqzGEzSlsRCX7rP/hIe1pA/4+sojQp0kyqjjGrZqEJFkeozBou hghRU64N9Ij1VKxIVEikXlpEAtbA5wAqxBrTMr64iATH7habRo9lLArn6S72AjaE +sxibLZJuqZEpa6cIe+1Ls8bzRKJXKas5zzlu5bbbIZ9DmYzsHOBU698sRzxouxD ieA3eDKQQG637lzno2jYE1mYjnC1RGSjWjORkgqOjqUF6V785L8ATlQXQCvPHOCt MnDA0Rf1d2RPSLexzaGsOSLBHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSLPGUn Lq5c0uBoElIP211mmHnSMB8GA1UdIwQYMBaAFNFaWvmvjZnf5eRNNe5VAQX+2UUR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjBBMy9BRjRCOEE2MjFE OUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1kX2w1RTAxN2xVQkJmN1pS UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBWcGEtYS1ObWRfbDVFMDE3bFVCQmY3WlJSRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjBBMy9BRjRCOEE2MjFEOUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1k X2w1RTAxN2xVQkJmN1pSUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYLfjYQz64RsHxZCB84Q3B1zLnOo/kKQ1AmgHZyU5j/Y3vaaGp/dkp 8NKdUIe4sPCF/lrQcEI4egARUVvPeVkoXWjRoRJNK0sIrXOaPunVNELcKkt2d1bi vp3bZn1tF4yyOkBaWzyQG4zyRs91VL6QmCH0YUMvMnZrhrofSLKwtvtWC2nmi0eJ +aISxRoE/Zs9GWhm83mxx34llGFJ3yjW68OdJ6bMh7nIKWBNOmnmr0ffJkvyFnlf scpZFzOrJhiAsaiZAVWsjsNBW750mxQWF/rkFWWgn1Rqps5LnntSVZJz5z/VMnsi Kao+6iV88+q/E8RahdDkt//1mNv91Ext -----END CERTIFICATE-----Generated at Sun Aug 24 21:33:08 2025 by rpki-client