$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft File: VA3axmjYtQyWYFcSGVqYihytnj8.mft (raw, json) Hash identifier: qnepm0SmI1Dxrw59UAaMdz6A4OXnfUFYvd382jKvGMI= Subject key identifier: 49:02:E5:6E:C6:C3:F0:E3:13:8B:AA:44:D0:3A:8D:D0:9F:99:D0:89 Authority key identifier: 54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F Certificate issuer: /CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Certificate serial: 0763 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft Manifest number: 0750 Signing time: Fri 30 May 2025 22:00:17 +0000 Manifest this update: Fri 30 May 2025 22:00:16 +0000 Manifest next update: Fri 06 Jun 2025 22:00:16 +0000 Files and hashes: 1: VA3axmjYtQyWYFcSGVqYihytnj8.crl (hash: 0bFOSLFrIaZ3dhh1e459QLXT9Ulrb0QQP5DttZENrfQ=) 2: 4CA8BBE232CF11EBADB5497FC4F9AE02.roa (hash: 9R9QsXFUMXvz//+w7pzMdn8juESdiZRyTDAnvcDwnQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1891 (0x763) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF74B, serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Validity Not Before: May 30 22:00:16 2025 GMT Not After : Jun 6 22:00:16 2025 GMT Subject: CN=683a2a71-77f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:df:c4:35:8e:ba:96:6d:1c:b7:ed:92:d9:55: 49:78:9a:cb:d1:48:3a:65:a3:9b:95:cc:23:8c:d5: 62:a7:cd:eb:64:b8:5a:95:09:a4:89:76:13:b7:66: c1:92:9f:cf:83:60:05:16:68:23:de:c9:9e:0c:90: 12:f1:64:5f:13:ba:03:26:5d:35:16:19:6b:22:7b: 82:ae:d0:5a:80:f4:1e:12:b1:01:44:55:13:17:2d: ba:c5:01:6a:d2:75:d1:01:cd:4e:0f:25:46:9d:3f: 73:2f:20:f5:af:7e:99:d2:2e:7c:1b:c9:d1:6c:2d: 73:42:b2:78:54:88:88:25:4c:ea:c8:a3:af:54:7c: 9a:8b:15:6b:4f:d6:a8:e6:3a:0d:1b:e0:67:7e:57: 5e:58:54:49:fd:2d:f0:31:02:ad:a7:cb:8b:4c:05: 35:b8:10:3a:c9:4a:fe:1d:e5:85:c9:d2:65:42:16: 79:01:4b:7c:22:1e:2d:63:e0:2a:a8:0e:2e:99:6a: 05:7e:05:4c:6c:7b:19:3e:89:b0:75:30:2c:49:88: fe:dc:11:39:ad:16:26:a2:cc:82:58:d4:13:98:86: cd:fb:f3:e4:0c:df:e4:86:bd:50:e7:41:f4:f9:1a: a1:3f:6b:3c:f5:64:b9:2f:85:f0:9c:c5:4d:18:78: 20:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:02:E5:6E:C6:C3:F0:E3:13:8B:AA:44:D0:3A:8D:D0:9F:99:D0:89 X509v3 Authority Key Identifier: keyid:54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:85:f1:c5:31:19:ca:a9:68:f7:0b:d4:8c:20:6e:63:aa:b0: 10:ef:3b:42:87:b2:5a:4a:28:72:02:ff:33:64:90:4b:d6:bc: f3:e9:a4:d6:13:3c:85:73:8b:bf:32:bb:fa:e8:67:6c:33:e5: ea:ee:ab:71:09:c9:c9:1f:e5:d7:ac:4b:ee:1e:e2:74:9d:5c: b6:ec:55:4b:0b:98:5b:e8:f0:71:82:88:2e:9b:57:a0:16:d0: d9:b1:0f:21:5e:aa:69:90:35:15:7c:e0:63:86:b6:ad:9a:19: ae:b2:57:50:80:1f:da:ca:7a:7f:52:ab:fb:78:69:02:29:72: 24:9a:13:d2:9c:9a:5e:bb:c8:18:18:31:77:a1:06:71:88:2a: b1:cf:7c:7b:76:b6:00:b0:58:6e:ae:37:95:38:df:7d:70:44: 27:3e:9c:e7:c7:0c:6e:32:35:43:4d:f3:8a:f2:bf:20:00:d3: 08:f8:8f:5f:c9:ec:39:0e:f1:cb:7d:8e:1c:c3:43:3c:36:ba: 74:64:65:f0:d4:a2:1f:29:6c:10:ee:5d:12:73:d4:35:46:f0: ac:c9:07:7d:6b:da:d6:fc:72:7b:86:0c:77:63:d9:ba:b7:95: 15:47:8f:d2:b2:fa:eb:cc:0c:b4:5b:f5:0f:b2:c8:7d:65:16: 99:7e:c2:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3NEIxMTAvBgNVBAUTKDU0MEREQUM2NjhEOEI1MEM5NjYwNTcxMjE5NUE5ODhB MUNBRDlFM0YwHhcNMjUwNTMwMjIwMDE2WhcNMjUwNjA2MjIwMDE2WjAYMRYwFAYD VQQDEw02ODNhMmE3MS03N2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApt/ENY66lm0ct+2S2VVJeJrL0Ug6ZaOblcwjjNVip83rZLhalQmkiXYTt2bB kp/Pg2AFFmgj3smeDJAS8WRfE7oDJl01FhlrInuCrtBagPQeErEBRFUTFy26xQFq 0nXRAc1ODyVGnT9zLyD1r36Z0i58G8nRbC1zQrJ4VIiIJUzqyKOvVHyaixVrT9ao 5joNG+BnfldeWFRJ/S3wMQKtp8uLTAU1uBA6yUr+HeWFydJlQhZ5AUt8Ih4tY+Aq qA4umWoFfgVMbHsZPomwdTAsSYj+3BE5rRYmosyCWNQTmIbN+/PkDN/khr1Q50H0 +RqhP2s89WS5L4XwnMVNGHgg3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkC5W7G w/DjE4uqRNA6jdCfmdCJMB8GA1UdIwQYMBaAFFQN2sZo2LUMlmBXEhlamIocrZ4/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjc0Qi8wOTQ0ODlGRTMy Q0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRReVdZRmNTR1ZxWWloeXRu ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZBM2F4bWpZdFF5V1lGY1NHVnFZaWh5dG5qOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjc0Qi8wOTQ0ODlGRTMyQ0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRR eVdZRmNTR1ZxWWloeXRuajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbhfHFMRnKqWj3C9SMIG5jqrAQ7ztCh7JaSihyAv8zZJBL1rzz6aTW EzyFc4u/Mrv66GdsM+Xq7qtxCcnJH+XXrEvuHuJ0nVy27FVLC5hb6PBxgogum1eg FtDZsQ8hXqppkDUVfOBjhratmhmusldQgB/aynp/Uqv7eGkCKXIkmhPSnJpeu8gY GDF3oQZxiCqxz3x7drYAsFhurjeVON99cEQnPpznxwxuMjVDTfOK8r8gANMI+I9f yew5DvHLfY4cw0M8Nrp0ZGXw1KIfKWwQ7l0Sc9Q1RvCsyQd9a9rW/HJ7hgx3Y9m6 t5UVR4/SsvrrzAy0W/UPssh9ZRaZfsK+ -----END CERTIFICATE-----Generated at Sat May 31 16:38:02 2025 by rpki-client