$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft File: VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft (raw, json) Hash identifier: 35mWSoDSB+HFV+Svwk+SLWHuPUYD8lhQAPC8OQ5bRO8= Subject key identifier: DF:21:EB:3B:73:09:A5:78:83:5C:FD:C6:CA:13:13:06:02:5E:5A:A2 Authority key identifier: 56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94 Certificate issuer: /CN=A91AD9BD/serialNumber=56B76801D50A4E63C85E0645770654B7F936C994 Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft Manifest number: 01C1 Signing time: Sat 31 May 2025 02:48:15 +0000 Manifest this update: Sat 31 May 2025 02:48:15 +0000 Manifest next update: Sat 07 Jun 2025 02:48:15 +0000 Files and hashes: 1: VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl (hash: w/KU5Q4joLQe4er3xTUnJZw88gkXJbCVIcx/nmH6FxQ=) 2: B9E2643697CE11EDB7D5B312C4F9AE02.roa (hash: wecHmgc8mAml3STsCKA2AkYz2fTeY9/0oK/QY5GUmjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD9BD, serialNumber=56B76801D50A4E63C85E0645770654B7F936C994 Validity Not Before: May 31 02:48:15 2025 GMT Not After : Jun 7 02:48:15 2025 GMT Subject: CN=683a6def-0c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a8:a2:29:2d:df:c3:b4:45:f7:da:49:c9:05: ab:7c:f1:4b:14:85:6c:6e:67:44:f4:91:f8:65:de: f7:1b:e6:a9:4c:c1:c2:ca:3e:69:cd:d6:e2:bd:ff: 8c:22:f2:7d:1f:88:74:33:b2:ee:c8:77:89:a3:e2: f8:8c:b6:04:db:d7:b8:ae:84:86:ee:d6:81:03:a2: 51:67:93:ce:06:41:fb:5d:33:57:4f:17:62:9b:f9: c6:ba:ed:92:4d:1f:b5:26:47:ac:54:ef:a3:54:be: 1e:50:67:b3:51:96:b8:03:47:e8:f1:77:c1:71:54: d6:6b:52:58:e8:d2:4c:8c:3c:ae:68:43:5c:c6:87: 8a:90:c3:10:d7:30:2a:6c:32:ed:0c:16:5b:aa:4f: a8:c1:3f:86:74:12:48:04:9a:79:5d:78:f3:5a:68: fe:33:50:6f:ee:c5:ea:14:00:f4:c2:ce:45:6f:17: f8:8b:26:7b:65:d6:54:f7:c8:72:47:9f:fa:f1:b4: cd:28:c8:ea:31:66:9c:4f:bf:2c:1b:17:74:04:cb: 23:d2:1a:f2:ec:f1:fc:f5:89:e9:e2:84:b3:5b:92: ad:a0:16:d2:cc:6b:a2:7d:f6:e1:de:2a:88:b2:94: b4:4b:a6:8c:56:5b:81:db:75:30:1a:ea:63:7b:e9: f1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:21:EB:3B:73:09:A5:78:83:5C:FD:C6:CA:13:13:06:02:5E:5A:A2 X509v3 Authority Key Identifier: keyid:56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:71:53:a2:8c:75:58:76:3d:4a:b0:6f:f6:8e:fa:74:57:65: 4c:4e:72:a6:2f:1c:9e:0e:44:fe:ac:33:5b:3c:14:3d:13:b5: 00:bd:96:40:90:51:94:6c:3c:82:a0:f8:9a:db:9d:39:b3:b7: 9e:56:b0:69:f4:00:f6:4d:c5:5b:5c:bf:71:d4:92:89:a4:ae: c9:28:08:87:f7:a2:c2:07:0f:8e:07:fe:6d:f1:1b:4e:67:b7: 94:ea:04:38:1f:41:f9:90:72:f0:b8:c0:c9:5b:07:dd:15:82: a7:17:88:4f:77:fd:b5:bc:ca:7e:fb:7f:45:19:13:c2:73:9a: 6b:eb:42:48:f2:dd:06:1a:5a:d1:ee:a1:34:59:34:ff:9e:81: 9a:cd:c2:45:ee:63:63:8b:2e:7d:c3:4c:02:f8:67:5c:e2:b1: 27:0f:7f:56:13:95:f2:1e:2b:7d:7a:a4:07:2e:51:77:3d:9e: 93:24:8e:02:5f:af:c5:10:e5:f7:7f:9f:e9:31:a0:99:8c:1a: 3e:dd:b4:2f:fa:03:96:0f:fb:50:ae:55:d5:00:74:e7:40:6c: 45:f4:36:24:69:8c:5b:a5:84:fc:53:c1:2d:c8:6e:33:c8:84: a8:74:e2:8b:84:1f:ec:99:72:5a:45:1c:55:5b:3f:6f:32:b7: 0d:2b:22:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5QkQxMTAvBgNVBAUTKDU2Qjc2ODAxRDUwQTRFNjNDODVFMDY0NTc3MDY1NEI3 RjkzNkM5OTQwHhcNMjUwNTMxMDI0ODE1WhcNMjUwNjA3MDI0ODE1WjAYMRYwFAYD VQQDEw02ODNhNmRlZi0wYzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26iiKS3fw7RF99pJyQWrfPFLFIVsbmdE9JH4Zd73G+apTMHCyj5pzdbivf+M IvJ9H4h0M7LuyHeJo+L4jLYE29e4roSG7taBA6JRZ5POBkH7XTNXTxdim/nGuu2S TR+1JkesVO+jVL4eUGezUZa4A0fo8XfBcVTWa1JY6NJMjDyuaENcxoeKkMMQ1zAq bDLtDBZbqk+owT+GdBJIBJp5XXjzWmj+M1Bv7sXqFAD0ws5Fbxf4iyZ7ZdZU98hy R5/68bTNKMjqMWacT78sGxd0BMsj0hry7PH89Ynp4oSzW5KtoBbSzGuiffbh3iqI spS0S6aMVluB23UwGupje+nxTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8h6ztz CaV4g1z9xsoTEwYCXlqiMB8GA1UdIwQYMBaAFFa3aAHVCk5jyF4GRXcGVLf5NsmU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDlCRC8yN0QzRkNBQTk3 Q0MxMUVEQkRCQTEyMTJDNEY5QUUwMi9WcmRvQWRVS1RtUElYZ1pGZHdaVXRfazJ5 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZyZG9BZFVLVG1QSVhnWkZkd1pVdF9rMnlaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDlCRC8yN0QzRkNBQTk3Q0MxMUVEQkRCQTEyMTJDNEY5QUUwMi9WcmRvQWRVS1Rt UElYZ1pGZHdaVXRfazJ5WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4cVOijHVYdj1KsG/2jvp0V2VMTnKmLxyeDkT+rDNbPBQ9E7UAvZZA kFGUbDyCoPia2505s7eeVrBp9AD2TcVbXL9x1JKJpK7JKAiH96LCBw+OB/5t8RtO Z7eU6gQ4H0H5kHLwuMDJWwfdFYKnF4hPd/21vMp++39FGRPCc5pr60JI8t0GGlrR 7qE0WTT/noGazcJF7mNjiy59w0wC+Gdc4rEnD39WE5XyHit9eqQHLlF3PZ6TJI4C X6/FEOX3f5/pMaCZjBo+3bQv+gOWD/tQrlXVAHTnQGxF9DYkaYxbpYT8U8EtyG4z yISodOKLhB/smXJaRRxVWz9vMrcNKyIG -----END CERTIFICATE-----Generated at Sat May 31 17:04:50 2025 by rpki-client