$ rpki-client -vvf rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft File: VuOUrxtay4_0gsjGAmn-oOTEJ74.mft (raw, json) Hash identifier: Qzmv6xVHx2XbmYZk0taclQqwq8gtcNxuoP0SoBU/9+c= Subject key identifier: B9:50:48:95:92:7B:E3:00:A7:E5:F0:29:98:A2:F3:0A:44:6C:79:57 Authority key identifier: 56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE Certificate issuer: /CN=A91A995E/serialNumber=56E394AF1B5ACB8FF482C8C60269FEA0E4C427BE Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft Manifest number: 30 Signing time: Sun 01 Jun 2025 07:24:30 +0000 Manifest this update: Sun 01 Jun 2025 07:24:30 +0000 Manifest next update: Sun 08 Jun 2025 07:24:30 +0000 Files and hashes: 1: VuOUrxtay4_0gsjGAmn-oOTEJ74.crl (hash: VXYZ5qXe62i2VPlY0YWl47d6b3aPnaPPsiu8cFeUyQY=) 2: 3E41E766FA6411EFB8C12C50C4F9AE02.roa (hash: DEF0xkvw3q1tLXUQiXU0nzrLNhOtTutlaMvyugUJMpQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.crl rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A995E, serialNumber=56E394AF1B5ACB8FF482C8C60269FEA0E4C427BE Validity Not Before: Jun 1 07:24:30 2025 GMT Not After : Jun 8 07:24:30 2025 GMT Subject: CN=683c002e-41be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b5:d4:56:63:38:3f:1e:8f:67:e0:83:7d:a7: 58:eb:30:29:4b:61:55:2e:44:4f:9b:2f:27:58:3d: 64:f3:90:19:f7:44:34:c8:ea:98:2f:ce:ca:2d:18: b2:dd:0d:2d:dc:62:81:4a:49:a1:29:40:c2:a3:a2: 7a:4c:09:4b:7b:6f:e5:f8:7f:67:e4:86:36:83:70: e6:bc:22:1c:96:93:bb:88:13:b7:38:75:91:4f:0d: f0:17:6a:ce:6f:3f:21:f2:ed:cc:a6:1e:6d:3c:67: 54:6e:1a:a4:d3:7f:64:a6:9f:7d:2f:1e:93:1c:63: 8b:f0:8f:ca:03:92:2e:69:7b:19:ef:4f:d1:5b:e8: d1:83:2c:ce:c4:32:93:c1:17:0b:6e:aa:d0:47:b6: d3:87:f1:ac:9f:07:a8:74:9b:2f:64:0b:32:8b:fd: 14:8e:85:37:49:fc:6d:ec:32:d4:f9:b1:fa:1a:70: 6f:4d:e5:57:d1:c1:94:e0:ce:f8:8c:5c:db:05:7f: 48:b1:01:61:50:29:96:be:f5:b0:be:07:f5:e2:bf: db:32:5e:a3:b3:7b:f8:f5:be:5a:9b:91:22:38:0d: b7:be:bd:1b:d4:3e:24:0a:4b:f8:20:08:3e:21:61: fd:00:aa:6b:f5:63:73:45:f8:25:25:e4:6e:69:7e: fc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:50:48:95:92:7B:E3:00:A7:E5:F0:29:98:A2:F3:0A:44:6C:79:57 X509v3 Authority Key Identifier: keyid:56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:45:91:66:dc:cc:82:4f:1a:e0:12:4f:c0:ff:7e:b6:53:30: 99:80:33:bc:86:6c:cd:79:a8:13:9e:83:b4:b5:ad:d8:0c:48: 0a:bb:31:42:d9:dd:ef:85:1f:f5:48:fc:bf:be:4a:eb:1c:5c: a5:69:8d:57:1c:2d:1b:ef:b1:d4:cb:d5:c0:53:b3:96:3b:33: 9d:e4:d3:79:4a:24:41:a3:7d:e0:e5:50:e0:4d:80:ec:c4:16: 00:18:cc:cb:7a:2d:d7:e1:87:c6:01:23:16:30:86:f9:97:de: e2:8e:01:ef:ee:2a:07:5c:3c:8b:ea:0d:a5:8c:65:e4:3e:27: c3:35:b2:49:2b:1b:1e:de:db:85:0e:80:02:43:9a:82:81:64: 3a:ed:59:89:6f:64:09:48:aa:b7:44:f6:4c:ac:5a:d7:5c:1f: fb:dc:9b:77:be:4c:1c:8a:a4:2c:56:f2:ad:a8:86:e9:64:ad: d0:a1:a9:18:9d:88:33:41:7c:25:8a:d2:2e:c9:77:23:2e:a8: 14:9c:85:4c:2c:60:a0:a1:92:82:b9:f4:5e:a0:ea:70:1f:6e: 54:38:92:55:3b:e6:75:c0:15:83:7a:f1:28:1c:fc:5c:bb:c0: 67:ca:38:bc:4f:96:69:d9:58:f9:4a:35:a2:5c:ab:84:30:8f: 51:73:3a:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTk1RTExMC8GA1UEBRMoNTZFMzk0QUYxQjVBQ0I4RkY0ODJDOEM2MDI2OUZFQTBF NEM0MjdCRTAeFw0yNTA2MDEwNzI0MzBaFw0yNTA2MDgwNzI0MzBaMBgxFjAUBgNV BAMTDTY4M2MwMDJlLTQxYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDtdRWYzg/Ho9n4IN9p1jrMClLYVUuRE+bLydYPWTzkBn3RDTI6pgvzsotGLLd DS3cYoFKSaEpQMKjonpMCUt7b+X4f2fkhjaDcOa8IhyWk7uIE7c4dZFPDfAXas5v PyHy7cymHm08Z1RuGqTTf2Smn30vHpMcY4vwj8oDki5pexnvT9Fb6NGDLM7EMpPB FwtuqtBHttOH8ayfB6h0my9kCzKL/RSOhTdJ/G3sMtT5sfoacG9N5VfRwZTgzviM XNsFf0ixAWFQKZa+9bC+B/Xiv9syXqOze/j1vlqbkSI4Dbe+vRvUPiQKS/ggCD4h Yf0Aqmv1Y3NF+CUl5G5pfvwjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuVBIlZJ7 4wCn5fApmKLzCkRseVcwHwYDVR0jBBgwFoAUVuOUrxtay4/0gsjGAmn+oOTEJ74w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5OTVFLzJFN0FGMjk4RkE2 MjExRUY5NTU1NUMwRUM0RjlBRTAyL1Z1T1VyeHRheTRfMGdzakdBbW4tb09URUo3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVnVPVXJ4dGF5NF8wZ3NqR0Ftbi1vT1RFSjc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 OTVFLzJFN0FGMjk4RkE2MjExRUY5NTU1NUMwRUM0RjlBRTAyL1Z1T1VyeHRheTRf MGdzakdBbW4tb09URUo3NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFlFkWbczIJPGuAST8D/frZTMJmAM7yGbM15qBOeg7S1rdgMSAq7MULZ 3e+FH/VI/L++SuscXKVpjVccLRvvsdTL1cBTs5Y7M53k03lKJEGjfeDlUOBNgOzE FgAYzMt6Ldfhh8YBIxYwhvmX3uKOAe/uKgdcPIvqDaWMZeQ+J8M1skkrGx7e24UO gAJDmoKBZDrtWYlvZAlIqrdE9kysWtdcH/vcm3e+TByKpCxW8q2ohulkrdChqRid iDNBfCWK0i7JdyMuqBSchUwsYKChkoK59F6g6nAfblQ4klU75nXAFYN68Sgc/Fy7 wGfKOLxPlmnZWPlKNaJcq4Qwj1FzOjo= -----END CERTIFICATE-----Generated at Mon Jun 2 19:52:33 2025 by rpki-client