$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft File: vaPoqCMceH9rfxi8FGuV-1wDjtk.mft (raw, json) Hash identifier: vqNv5NiWQy+cY0ZuOM1KAPsD8ilze9PRQ4G5/v1l8mg= Subject key identifier: 46:E9:5B:C1:A5:EE:E3:FD:80:CC:54:EB:91:45:DF:2F:CD:98:B5:1E Authority key identifier: BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9 Certificate issuer: /CN=A91AE8D7/serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft Manifest number: 46 Signing time: Sat 19 Jul 2025 07:38:00 +0000 Manifest this update: Sat 19 Jul 2025 07:37:59 +0000 Manifest next update: Sat 26 Jul 2025 07:37:59 +0000 Files and hashes: 1: vaPoqCMceH9rfxi8FGuV-1wDjtk.crl (hash: B3JdMGmGxWCmdZ17uGW9tQD2VoRPodVi5G10LRxrrp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE8D7, serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9 Validity Not Before: Jul 19 07:37:59 2025 GMT Not After : Jul 26 07:37:59 2025 GMT Subject: CN=687b4b57-e5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ea:5e:f8:c2:a7:59:e5:32:ac:05:d8:29:c8: 12:bc:f9:6f:19:ac:46:42:fc:25:96:c1:c2:2d:c8: e2:0d:d0:b1:75:94:97:21:82:50:e6:94:bb:f4:a0: 4b:2b:df:b8:4b:e1:39:a7:32:2b:99:1d:55:83:fb: 7d:f4:b4:96:32:40:41:0c:16:35:c0:77:ff:63:8e: 76:4f:2e:95:d9:d0:64:bc:e2:41:0c:10:bb:2e:82: 65:cb:25:7e:51:70:f2:69:40:3c:4f:55:98:1f:77: f2:49:e6:45:ec:8c:f1:46:e4:7d:43:f7:65:53:f9: 01:0d:2a:1e:40:71:c4:ef:20:77:5c:b3:b1:55:94: 02:74:37:f3:b3:55:42:77:cf:82:0d:dd:81:3b:4b: 94:81:42:f8:07:b2:3e:b6:f8:ad:48:d1:0b:f6:a8: 4c:d0:0d:a6:66:0b:6d:99:a0:68:53:24:0e:f7:23: 82:f9:c7:88:9c:a4:db:5b:7a:c5:6d:30:ed:5d:bf: 58:42:c4:99:70:bb:ba:c5:8a:03:f7:8b:d3:dc:8a: 6e:43:16:e5:ff:b5:d4:41:03:61:d0:b1:b4:55:ec: 07:7f:ee:4d:8e:3f:5f:22:6a:df:23:7c:38:8e:cc: 50:b0:19:31:7c:f0:95:87:23:3b:37:f1:88:41:b0: 8e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E9:5B:C1:A5:EE:E3:FD:80:CC:54:EB:91:45:DF:2F:CD:98:B5:1E X509v3 Authority Key Identifier: keyid:BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:77:72:38:27:cc:a8:a6:31:72:4e:b7:27:9b:03:66:c5:0f: 05:8a:d3:a1:a1:3b:b2:d8:31:c2:bd:7f:31:b9:e6:2f:49:75: ed:67:54:9a:e7:36:23:09:8e:8c:3a:fc:78:8f:0f:ac:8a:f1: 98:03:07:19:73:93:ab:95:9d:cf:43:c4:6b:73:bb:e2:f9:3e: 5a:37:e5:4f:bd:aa:cd:ca:ad:05:2b:46:36:91:5c:3c:c5:2b: 5c:57:2c:c7:e2:60:37:9e:4b:83:fc:f6:e7:2a:b6:8e:1c:eb: 1d:9b:5b:2a:c6:29:dc:d4:13:07:5f:55:06:be:94:57:c0:50: f0:4d:47:e3:de:42:e3:b7:eb:b0:5a:e3:f6:90:c2:be:b7:36: 5a:68:7d:48:c7:28:a3:a5:95:d6:c5:e7:fe:27:aa:24:19:9c: 77:8b:c3:ff:21:0e:3e:74:8e:b7:83:f8:74:b4:2d:ec:99:c5: 3c:cd:72:a6:d8:cb:3a:81:ea:b1:71:1f:2a:01:6c:5f:69:80: 87:f9:c4:63:f3:cf:44:a7:51:f4:56:7a:e2:4a:a2:cf:e5:d9: c6:f8:c4:eb:c1:76:7a:ec:d5:eb:b2:15:a3:c7:3c:fe:1e:81: 07:7e:29:50:90:9e:c6:88:4d:e7:bd:a2:35:6e:f3:18:e1:f5: 67:0a:18:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RThENzExMC8GA1UEBRMoQkRBM0U4QTgyMzFDNzg3RjZCN0YxOEJDMTQ2Qjk1RkI1 QzAzOEVEOTAeFw0yNTA3MTkwNzM3NTlaFw0yNTA3MjYwNzM3NTlaMBgxFjAUBgNV BAMTDTY4N2I0YjU3LWU1ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr6l74wqdZ5TKsBdgpyBK8+W8ZrEZC/CWWwcItyOIN0LF1lJchglDmlLv0oEsr 37hL4TmnMiuZHVWD+330tJYyQEEMFjXAd/9jjnZPLpXZ0GS84kEMELsugmXLJX5R cPJpQDxPVZgfd/JJ5kXsjPFG5H1D92VT+QENKh5AccTvIHdcs7FVlAJ0N/OzVUJ3 z4IN3YE7S5SBQvgHsj62+K1I0Qv2qEzQDaZmC22ZoGhTJA73I4L5x4icpNtbesVt MO1dv1hCxJlwu7rFigP3i9Pcim5DFuX/tdRBA2HQsbRV7Ad/7k2OP18iat8jfDiO zFCwGTF88JWHIzs38YhBsI6zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURulbwaXu 4/2AzFTrkUXfL82YtR4wHwYDVR0jBBgwFoAUvaPoqCMceH9rfxi8FGuV+1wDjtkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFOEQ3LzRCMDFDNEE2Rjkz RjExRUZCN0VBQjQyNUM0RjlBRTAyL3ZhUG9xQ01jZUg5cmZ4aThGR3VWLTF3RGp0 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdmFQb3FDTWNlSDlyZnhpOEZHdVYtMXdEanRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF OEQ3LzRCMDFDNEE2RjkzRjExRUZCN0VBQjQyNUM0RjlBRTAyL3ZhUG9xQ01jZUg5 cmZ4aThGR3VWLTF3RGp0ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABR3cjgnzKimMXJOtyebA2bFDwWK06GhO7LYMcK9fzG55i9Jde1nVJrn NiMJjow6/HiPD6yK8ZgDBxlzk6uVnc9DxGtzu+L5Plo35U+9qs3KrQUrRjaRXDzF K1xXLMfiYDeeS4P89ucqto4c6x2bWyrGKdzUEwdfVQa+lFfAUPBNR+PeQuO367Ba 4/aQwr63NlpofUjHKKOlldbF5/4nqiQZnHeLw/8hDj50jreD+HS0LeyZxTzNcqbY yzqB6rFxHyoBbF9pgIf5xGPzz0SnUfRWeuJKos/l2cb4xOvBdnrs1euyFaPHPP4e gQd+KVCQnsaITee9ojVu8xjh9WcKGOs= -----END CERTIFICATE-----Generated at Mon Jul 21 02:12:11 2025 by rpki-client