$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft File: VzWraqwyeVRCT5_oyoUzQpnde8I.mft (raw, json) Hash identifier: S/UTRbW8NrmxvT/nVvSU+SEnU6XOPmCwy24tIbSOJh8= Subject key identifier: A6:45:88:D5:8D:12:AC:30:E9:27:7C:B3:92:EA:CA:9C:E4:16:B1:5E Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 Certificate issuer: /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Certificate serial: 0F5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft Manifest number: 0F53 Signing time: Sun 08 Jun 2025 17:27:38 +0000 Manifest this update: Sun 08 Jun 2025 17:27:38 +0000 Manifest next update: Sun 15 Jun 2025 17:27:38 +0000 Files and hashes: 1: VzWraqwyeVRCT5_oyoUzQpnde8I.crl (hash: MtrTLJhzA/S+0OMjvGsnJlqhbKGpEpjHoITjpQZ6ziU=) 2: F27C04B8779E11E997C0204AC4F9AE02.roa (hash: DZGyjsonfYGjBw4hHPzT7rTakbn4N6VzJZPth34e8Gc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 17:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3934 (0xf5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE392, serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Validity Not Before: Jun 8 17:27:38 2025 GMT Not After : Jun 15 17:27:38 2025 GMT Subject: CN=6845c80a-3d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:68:f1:48:76:58:9e:33:c7:58:10:a5:f8:d2: a0:4f:bf:6d:67:00:9a:1d:8e:bd:73:ed:29:46:67: f1:bc:c5:27:0e:a3:f8:84:f6:fe:79:fa:02:bd:16: d5:74:de:04:37:7a:2a:1e:9f:1a:cb:02:07:f5:c1: a2:c8:dd:6a:61:59:9f:7e:39:4c:7b:40:0f:53:23: e5:73:22:73:40:36:8e:a7:28:9d:5a:b0:8c:8e:f8: ff:b2:4e:d3:00:70:ab:32:88:3f:2f:e6:59:c5:08: 54:8b:02:78:84:89:c6:c6:b2:94:45:0c:e0:5d:4e: 93:a1:7e:35:a6:3a:9e:5b:fd:65:3c:77:d6:66:fd: b7:68:23:a9:a3:5e:7f:36:3a:d5:42:c0:81:6b:14: 2b:3f:6b:6f:41:8f:9b:8a:c5:1f:d8:0e:16:80:9f: d7:b2:80:33:dd:fb:c2:3e:e0:63:ea:45:23:8e:2f: 05:e5:7f:30:e0:e0:3a:f7:4f:58:3d:a9:4e:c6:0d: 4b:32:4c:b0:26:be:11:43:7c:40:5a:e6:be:95:21: 1c:1c:93:33:3a:de:5a:87:3c:de:dd:c3:a2:03:2c: 6c:42:07:92:87:3d:37:95:4c:03:10:7e:7f:a1:07: 76:82:e2:ac:65:69:00:b9:41:ab:47:53:b8:d3:d4: 01:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:45:88:D5:8D:12:AC:30:E9:27:7C:B3:92:EA:CA:9C:E4:16:B1:5E X509v3 Authority Key Identifier: keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:11:f9:31:fc:c6:f6:97:b7:43:46:08:45:ba:dd:b3:e0:cc: 10:94:d3:37:f7:9c:ea:d5:60:1e:c2:76:e4:f5:62:35:9f:e0: b3:c6:c7:96:16:a5:fa:01:fe:c4:b7:f4:88:4b:b3:fd:58:8e: dd:5b:60:da:49:a5:72:d0:b6:10:b3:73:37:47:64:1d:b5:dd: de:79:6a:10:29:e7:09:c3:6d:dc:79:6d:fc:0c:e4:a7:d9:e8: ad:36:92:23:86:51:55:7f:8f:e9:91:e5:ce:3c:5b:b6:f2:e7: f1:0c:7e:69:a8:af:bc:03:32:d7:b3:9a:9b:32:fa:20:7c:94: 91:3f:31:73:6c:c4:12:2c:8e:71:2b:33:3b:2f:9a:0a:5a:dd: 05:cb:bc:0b:d6:53:71:e9:63:8a:4d:5e:8a:bb:23:58:13:9b: 1a:b0:37:02:8a:4d:94:41:14:6c:23:a0:96:e0:f3:c6:46:02: 4f:3c:ed:8c:09:10:ab:80:57:7b:c2:ee:f6:bb:5a:e9:17:d9: ce:17:9b:58:5f:1d:69:5b:c4:0c:42:c2:74:7a:7d:34:56:d8: 5e:0a:3e:44:e8:0e:c5:37:d0:f7:f6:09:cd:6f:e4:67:03:be: 9c:bb:b7:50:27:d8:50:84:7f:6c:97:46:c8:04:6d:aa:8a:f5: 40:ec:53:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOTIxMTAvBgNVBAUTKDU3MzVBQjZBQUMzMjc5NTQ0MjRGOUZFOENBODUzMzQy OTlERDdCQzIwHhcNMjUwNjA4MTcyNzM4WhcNMjUwNjE1MTcyNzM4WjAYMRYwFAYD VQQDEw02ODQ1YzgwYS0zZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/WjxSHZYnjPHWBCl+NKgT79tZwCaHY69c+0pRmfxvMUnDqP4hPb+efoCvRbV dN4EN3oqHp8aywIH9cGiyN1qYVmffjlMe0APUyPlcyJzQDaOpyidWrCMjvj/sk7T AHCrMog/L+ZZxQhUiwJ4hInGxrKURQzgXU6ToX41pjqeW/1lPHfWZv23aCOpo15/ NjrVQsCBaxQrP2tvQY+bisUf2A4WgJ/XsoAz3fvCPuBj6kUjji8F5X8w4OA6909Y PalOxg1LMkywJr4RQ3xAWua+lSEcHJMzOt5ahzze3cOiAyxsQgeShz03lUwDEH5/ oQd2guKsZWkAuUGrR1O409QBhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZFiNWN Eqww6Sd8s5LqypzkFrFeMB8GA1UdIwQYMBaAFFc1q2qsMnlUQk+f6MqFM0KZ3XvC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Mi82RDZBMkEyODZD RDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVWUkNUNV9veW9VelFwbmRl OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z6V3JhcXd5ZVZSQ1Q1X295b1V6UXBuZGU4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Mi82RDZBMkEyODZDRDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVW UkNUNV9veW9VelFwbmRlOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkEfkx/Mb2l7dDRghFut2z4MwQlNM395zq1WAewnbk9WI1n+CzxseW FqX6Af7Et/SIS7P9WI7dW2DaSaVy0LYQs3M3R2Qdtd3eeWoQKecJw23ceW38DOSn 2eitNpIjhlFVf4/pkeXOPFu28ufxDH5pqK+8AzLXs5qbMvogfJSRPzFzbMQSLI5x KzM7L5oKWt0Fy7wL1lNx6WOKTV6KuyNYE5sasDcCik2UQRRsI6CW4PPGRgJPPO2M CRCrgFd7wu72u1rpF9nOF5tYXx1pW8QMQsJ0en00VtheCj5E6A7FN9D39gnNb+Rn A76cu7dQJ9hQhH9sl0bIBG2qivVA7FPP -----END CERTIFICATE-----Generated at Sun Jun 8 21:07:53 2025 by rpki-client