$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft File: vaPoqCMceH9rfxi8FGuV-1wDjtk.mft (raw, json) Hash identifier: cipLfM3aRxBjAIeb6XZDgOp+1BGzXO6HtOYpVFoVycM= Subject key identifier: 0F:3C:8F:34:3D:F2:D0:58:F5:56:80:36:C1:04:CF:F5:9D:03:64:B1 Authority key identifier: BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9 Certificate issuer: /CN=A91AE8D7/serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft Manifest number: 2F Signing time: Tue 03 Jun 2025 07:32:19 +0000 Manifest this update: Tue 03 Jun 2025 07:32:19 +0000 Manifest next update: Tue 10 Jun 2025 07:32:19 +0000 Files and hashes: 1: vaPoqCMceH9rfxi8FGuV-1wDjtk.crl (hash: xEGJvUa1FNe2lP1N+c4g9w6gNr/G7LyLsDa0rctge8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE8D7, serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9 Validity Not Before: Jun 3 07:32:19 2025 GMT Not After : Jun 10 07:32:19 2025 GMT Subject: CN=683ea503-845c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ba:43:56:6f:79:6c:7f:7a:32:ab:e3:74:b9: f3:5f:76:f7:c5:a0:40:fe:99:e6:ab:7b:34:3a:6e: 13:7d:12:5a:fa:df:b8:8c:77:6d:f4:94:49:4f:a4: da:20:e7:df:9d:e9:c2:46:d0:38:b2:fb:17:d8:84: c8:7f:b4:d6:b3:0c:6b:d7:ad:b3:a1:59:8d:97:53: c4:42:9b:dc:fd:2f:f5:b6:81:0b:dc:0a:47:55:38: 12:81:0e:7a:75:61:a1:8a:0a:ec:af:c3:91:1d:09: 36:6b:35:ee:ef:fe:51:70:94:1e:1b:a9:a1:2a:dd: 0c:3a:15:61:f4:bb:cc:ea:c0:0b:de:f6:d2:6c:ec: a1:0f:c5:66:bb:db:3f:06:b8:45:49:76:af:9d:6d: 86:8b:37:41:7c:b3:7b:84:cc:01:ec:82:b0:78:2d: 60:9f:e9:0c:68:d9:ec:b2:5c:b1:6e:e5:b6:6b:01: e2:a0:1e:9c:ce:85:2a:30:3c:13:d5:ed:01:7a:1d: f5:a5:75:ba:89:8a:e7:70:f5:84:72:47:20:d4:98: 0c:77:a6:71:7f:30:7d:ef:73:a9:9b:d2:0b:3d:84: 55:d1:8c:75:54:33:b8:f7:54:5f:76:6c:99:17:41: 7d:8b:01:78:c7:a1:bf:e4:9c:5f:75:e7:44:5a:2c: 05:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3C:8F:34:3D:F2:D0:58:F5:56:80:36:C1:04:CF:F5:9D:03:64:B1 X509v3 Authority Key Identifier: keyid:BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:5e:3b:36:e8:f5:91:47:ae:78:b3:2d:4f:ec:05:77:81:22: b9:17:33:26:f1:d7:08:eb:bb:2b:b3:6a:9c:8f:62:95:ca:58: 71:b7:0c:fb:9c:31:1b:d5:a5:20:54:98:8c:76:59:42:79:eb: 23:89:5e:b3:e3:bf:51:29:7b:9e:ba:f5:d5:12:9d:6f:27:a7: c0:71:6a:94:26:56:18:74:c3:0e:f0:b1:7a:8d:8f:1a:76:ec: be:d1:17:b0:fb:9a:67:32:2f:1f:2e:11:85:3c:bb:4d:5c:4f: 0f:ef:37:69:27:cd:3d:90:f4:80:87:5d:b4:92:fe:96:e4:3b: 09:b2:bc:a9:67:83:e5:62:2c:0c:cd:06:6d:73:5a:76:3a:92: 90:50:f1:e4:40:1b:35:6c:32:8d:32:6c:bf:8c:a0:92:40:95: ab:a5:0e:b9:4f:f4:ff:9b:30:f2:cf:38:a0:00:43:6b:57:32: de:eb:0c:9d:c8:50:28:dd:e4:fd:ef:07:03:10:83:f0:1f:6f: 16:37:4e:f2:95:96:69:e3:82:59:34:11:bd:a0:3d:4b:e1:0f: eb:9e:b8:ec:9e:65:34:63:b4:b4:4b:ea:f5:34:a5:e1:e7:7e: 0e:57:ef:1e:30:a8:ab:af:a2:c6:37:5e:72:d0:0e:fe:12:ca: 6c:d1:42:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RThENzExMC8GA1UEBRMoQkRBM0U4QTgyMzFDNzg3RjZCN0YxOEJDMTQ2Qjk1RkI1 QzAzOEVEOTAeFw0yNTA2MDMwNzMyMTlaFw0yNTA2MTAwNzMyMTlaMBgxFjAUBgNV BAMTDTY4M2VhNTAzLTg0NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1ukNWb3lsf3oyq+N0ufNfdvfFoED+mearezQ6bhN9Elr637iMd230lElPpNog 59+d6cJG0Diy+xfYhMh/tNazDGvXrbOhWY2XU8RCm9z9L/W2gQvcCkdVOBKBDnp1 YaGKCuyvw5EdCTZrNe7v/lFwlB4bqaEq3Qw6FWH0u8zqwAve9tJs7KEPxWa72z8G uEVJdq+dbYaLN0F8s3uEzAHsgrB4LWCf6Qxo2eyyXLFu5bZrAeKgHpzOhSowPBPV 7QF6HfWldbqJiudw9YRyRyDUmAx3pnF/MH3vc6mb0gs9hFXRjHVUM7j3VF92bJkX QX2LAXjHob/knF9150RaLAWBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDzyPND3y 0Fj1VoA2wQTP9Z0DZLEwHwYDVR0jBBgwFoAUvaPoqCMceH9rfxi8FGuV+1wDjtkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFOEQ3LzRCMDFDNEE2Rjkz RjExRUZCN0VBQjQyNUM0RjlBRTAyL3ZhUG9xQ01jZUg5cmZ4aThGR3VWLTF3RGp0 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdmFQb3FDTWNlSDlyZnhpOEZHdVYtMXdEanRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF OEQ3LzRCMDFDNEE2RjkzRjExRUZCN0VBQjQyNUM0RjlBRTAyL3ZhUG9xQ01jZUg5 cmZ4aThGR3VWLTF3RGp0ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL1eOzbo9ZFHrnizLU/sBXeBIrkXMybx1wjruyuzapyPYpXKWHG3DPuc MRvVpSBUmIx2WUJ56yOJXrPjv1Epe5669dUSnW8np8BxapQmVhh0ww7wsXqNjxp2 7L7RF7D7mmcyLx8uEYU8u01cTw/vN2knzT2Q9ICHXbSS/pbkOwmyvKlng+ViLAzN Bm1zWnY6kpBQ8eRAGzVsMo0ybL+MoJJAlaulDrlP9P+bMPLPOKAAQ2tXMt7rDJ3I UCjd5P3vBwMQg/AfbxY3TvKVlmnjglk0Eb2gPUvhD+ueuOyeZTRjtLRL6vU0peHn fg5X7x4wqKuvosY3XnLQDv4SymzRQos= -----END CERTIFICATE-----Generated at Tue Jun 3 23:41:45 2025 by rpki-client