$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft File: vpuQTrdssFxgw-LDeeL6SJoOF3I.mft (raw, json) Hash identifier: FJeG6JsCGowMtF5tRHsaifXBRXg66YaTruhostU0ACA= Subject key identifier: 39:7B:D3:C8:98:F7:AE:9C:27:51:FE:FC:1C:C7:E6:0E:6E:D1:65:38 Authority key identifier: BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72 Certificate issuer: /CN=A91E5832/serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft Manifest number: 48 Signing time: Sat 31 May 2025 06:56:18 +0000 Manifest this update: Sat 31 May 2025 06:56:17 +0000 Manifest next update: Sat 07 Jun 2025 06:56:17 +0000 Files and hashes: 1: vpuQTrdssFxgw-LDeeL6SJoOF3I.crl (hash: u1RTWJdPkWBackndRvWZpdpoK6MSH4wWJxVgyDPzV/A=) 2: A9C0AECED0BA11EFB7A6B027C4F9AE02.roa (hash: vwuRFoQ8j2nxDneRxv7aNdc+Cd7umBY/3NvhL9KJqC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5832, serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772 Validity Not Before: May 31 06:56:17 2025 GMT Not After : Jun 7 06:56:17 2025 GMT Subject: CN=683aa812-1731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e2:4f:ef:36:fd:4b:e8:f4:71:52:9d:4a:c3: 6c:0f:a8:af:b7:6f:97:c9:46:e1:0e:52:89:78:ef: 66:55:19:b1:f1:68:55:d5:d6:34:52:62:1b:ab:97: 90:87:f1:6b:3c:2b:24:43:9c:d4:0a:35:1f:8a:21: 16:bb:35:c5:ad:c4:6f:90:2e:1b:fe:d9:2e:7d:3e: 2a:72:7f:e0:3a:8c:b1:d3:67:84:e3:95:d6:fb:28: d0:ea:f2:cd:ba:30:20:f2:b4:65:4a:dd:c5:71:7b: 86:2c:b6:b2:7f:75:1d:4e:f4:e6:38:c1:fc:e2:06: cc:43:b6:5d:dd:8a:32:db:12:76:5f:34:a6:ff:bb: c3:bb:6c:5e:bf:9c:6c:0a:84:be:06:6f:84:a6:64: 3b:b5:29:2f:50:31:05:cc:26:8e:b2:e2:31:9c:f4: 98:c1:0c:27:44:33:3b:fe:b8:63:24:6f:10:48:4f: 48:10:a1:63:37:b2:a3:77:d1:0c:0d:2d:97:e1:d8: 39:3f:62:37:85:01:6b:02:30:61:dc:ff:69:c2:f9: 63:8d:9f:d4:70:75:ed:81:1d:2e:b5:d7:3b:cf:be: cc:fc:92:d5:ae:b9:13:17:76:7f:b0:c1:da:73:1b: ff:00:86:33:2f:84:87:38:47:01:9d:b1:6f:24:5b: 40:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7B:D3:C8:98:F7:AE:9C:27:51:FE:FC:1C:C7:E6:0E:6E:D1:65:38 X509v3 Authority Key Identifier: keyid:BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:04:db:2e:59:e1:d8:4f:ef:79:25:ca:4f:92:fd:40:21:a2: d9:b3:0a:2b:ef:6c:fb:be:46:c6:d9:74:27:73:f7:a0:9d:59: 0a:18:89:e4:a2:a1:d5:fc:e4:d5:d7:9e:b8:08:c3:aa:5e:73: a2:bf:62:d4:00:ea:81:63:dd:89:6f:bb:34:30:1e:4d:00:a7: 38:ab:c1:e8:eb:0f:2f:76:e1:10:41:21:9d:1e:5a:7d:22:58: c4:9e:95:7d:99:ae:e3:8f:20:40:cc:3c:ed:de:7f:44:d0:61: 73:69:72:8f:07:87:e2:94:f7:27:53:c8:b7:40:2c:02:7a:f3: f2:92:7c:0c:c8:76:90:70:49:5b:33:eb:69:61:c3:20:43:2c: 52:9b:68:29:dc:ee:d0:62:12:98:0e:9a:e6:aa:27:be:31:48: 7f:82:cf:01:fb:fe:fc:13:12:89:a9:3c:70:2f:63:7d:a5:ea: cb:b5:5a:15:f1:60:35:27:80:63:9c:65:d2:a0:a3:2b:3f:ea: 4d:61:0a:c3:73:03:9c:be:ad:4f:a7:90:cf:41:18:fb:ec:6e: 5c:dc:b4:1c:3f:ab:41:5c:85:ba:c6:1a:5f:71:d9:8e:b3:4c: 05:1b:67:e4:ef:9f:74:e6:b0:42:c6:64:af:42:68:67:8e:ea: 67:c7:24:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTgzMjExMC8GA1UEBRMoQkU5QjkwNEVCNzZDQjA1QzYwQzNFMkMzNzlFMkZBNDg5 QTBFMTc3MjAeFw0yNTA1MzEwNjU2MTdaFw0yNTA2MDcwNjU2MTdaMBgxFjAUBgNV BAMTDTY4M2FhODEyLTE3MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE4k/vNv1L6PRxUp1Kw2wPqK+3b5fJRuEOUol472ZVGbHxaFXV1jRSYhurl5CH 8Ws8KyRDnNQKNR+KIRa7NcWtxG+QLhv+2S59Pipyf+A6jLHTZ4Tjldb7KNDq8s26 MCDytGVK3cVxe4YstrJ/dR1O9OY4wfziBsxDtl3dijLbEnZfNKb/u8O7bF6/nGwK hL4Gb4SmZDu1KS9QMQXMJo6y4jGc9JjBDCdEMzv+uGMkbxBIT0gQoWM3sqN30QwN LZfh2Dk/YjeFAWsCMGHc/2nC+WONn9Rwde2BHS611zvPvsz8ktWuuRMXdn+wwdpz G/8AhjMvhIc4RwGdsW8kW0DtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOXvTyJj3 rpwnUf78HMfmDm7RZTgwHwYDVR0jBBgwFoAUvpuQTrdssFxgw+LDeeL6SJoOF3Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1ODMyLzI2RTU4MjU0RDBC QTExRUY4OTZDRDAyNkM0RjlBRTAyL3ZwdVFUcmRzc0Z4Z3ctTERlZUw2U0pvT0Yz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdnB1UVRyZHNzRnhndy1MRGVlTDZTSm9PRjNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 ODMyLzI2RTU4MjU0RDBCQTExRUY4OTZDRDAyNkM0RjlBRTAyL3ZwdVFUcmRzc0Z4 Z3ctTERlZUw2U0pvT0YzSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABQE2y5Z4dhP73klyk+S/UAhotmzCivvbPu+RsbZdCdz96CdWQoYieSi odX85NXXnrgIw6pec6K/YtQA6oFj3YlvuzQwHk0ApzirwejrDy924RBBIZ0eWn0i WMSelX2ZruOPIEDMPO3ef0TQYXNpco8Hh+KU9ydTyLdALAJ68/KSfAzIdpBwSVsz 62lhwyBDLFKbaCnc7tBiEpgOmuaqJ74xSH+CzwH7/vwTEompPHAvY32l6su1WhXx YDUngGOcZdKgoys/6k1hCsNzA5y+rU+nkM9BGPvsblzctBw/q0FchbrGGl9x2Y6z TAUbZ+Tvn3TmsELGZK9CaGeO6mfHJKM= -----END CERTIFICATE-----Generated at Sat May 31 16:33:12 2025 by rpki-client