$ rpki-client -vvf rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft File: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft (raw, json) Hash identifier: UdqikqtLE533YLxQeqJA3tX2Mzp0PAzTZYgG3HrLpAo= Subject key identifier: 84:66:6F:28:6C:DA:43:96:94:22:7F:E2:83:84:C8:39:20:AC:E8:F8 Authority key identifier: D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 Certificate issuer: /CN=A91A20A3/serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Certificate serial: 3494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft Manifest number: 3484 Signing time: Thu 08 May 2025 15:02:08 +0000 Manifest this update: Thu 08 May 2025 15:02:07 +0000 Manifest next update: Thu 15 May 2025 15:02:07 +0000 Files and hashes: 1: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl (hash: sm+XRWrbR8EBhDFf+uXjzjs/fcDvhLCsYy8xEGDIv7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 15:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13460 (0x3494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A20A3, serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Validity Not Before: May 8 15:02:07 2025 GMT Not After : May 15 15:02:07 2025 GMT Subject: CN=681cc76f-b554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c0:50:b9:4e:d3:eb:ee:d0:2c:8b:6f:fd:47: c9:99:c1:f8:1d:97:a6:97:11:19:be:0d:08:ad:74: fb:e2:8a:b7:d3:82:43:c0:dc:2a:1b:11:5e:2e:18: a7:a0:52:74:1c:1e:41:5d:41:dc:fa:d7:5f:e9:03: bb:75:e3:d0:13:a2:29:0b:bd:00:cc:c9:ad:6f:b0: 96:40:96:ff:2e:ce:2c:55:85:f6:2d:91:31:84:af: 6d:80:4f:fe:77:36:54:ff:82:9d:fb:2c:f6:11:3d: cc:97:53:2f:ed:d8:35:53:cf:24:bf:5f:5b:33:d2: 63:d5:7d:da:d0:d7:fd:58:a7:3f:e3:38:ee:53:bb: 7b:ae:32:bd:76:0e:c2:a2:5b:23:b7:b4:a5:69:52: de:ef:d4:37:cb:a7:61:70:25:ee:de:00:dd:32:fa: c2:40:dd:a3:a1:7d:8c:52:24:30:b5:e5:23:50:7f: e6:0a:7a:02:db:bd:6e:5a:e9:48:da:03:e5:92:f0: 95:b9:df:1b:d5:1f:ec:7b:fd:3c:24:43:5d:a6:52: e0:6c:6e:e6:88:5a:f7:7a:47:da:53:c3:61:66:dd: 49:63:ec:ea:25:2d:6c:ef:67:91:3a:52:65:14:64: 70:8d:94:b1:db:ef:9a:c1:6b:da:96:3c:7a:60:a4: ff:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:66:6F:28:6C:DA:43:96:94:22:7F:E2:83:84:C8:39:20:AC:E8:F8 X509v3 Authority Key Identifier: keyid:D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f3:5e:29:10:80:43:e9:7f:5a:4f:74:fc:61:a9:03:00:74: 60:ab:e4:1b:07:4a:00:a4:0f:c3:1b:ba:d2:82:87:5a:1d:fc: 7f:57:79:47:44:0b:e9:c5:96:e6:d2:3b:75:02:6c:89:e0:cc: 44:b1:82:be:20:67:78:02:31:6c:8e:60:77:2e:6c:52:cd:64: e0:93:75:45:62:3d:51:a6:bd:98:31:b6:f5:14:32:7d:62:20: bf:16:53:be:c7:c2:22:23:3f:ad:18:c5:90:8a:42:d5:70:74: 61:b9:0e:ea:4e:28:c0:d6:6f:8c:f1:88:ae:bb:92:1d:b7:b7: dc:be:a7:29:18:f3:04:8d:76:d8:1a:23:80:bc:a3:99:cf:a7: b0:2b:5b:bf:1e:c2:7c:12:7f:71:a7:40:69:76:2c:1d:41:30: d0:23:d5:40:3b:1e:fe:e6:18:97:53:b9:84:fc:15:f0:b5:d2: 0b:bd:1e:fd:96:7c:f3:f0:c2:ff:03:f0:b4:bb:18:e6:3a:66: fc:06:de:f4:02:0c:fe:0c:9a:b0:94:63:eb:e4:55:17:fb:77: cf:c6:55:84:95:97:db:55:42:92:15:8d:d9:e3:54:53:49:b2: 09:21:75:7c:d3:80:2c:58:ca:d0:e8:f4:37:0b:ee:37:72:f2: 4e:66:92:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIwQTMxMTAvBgNVBAUTKEQxNUE1QUY5QUY4RDk5REZFNUU0NEQzNUVFNTUwMTA1 RkVEOTQ1MTEwHhcNMjUwNTA4MTUwMjA3WhcNMjUwNTE1MTUwMjA3WjAYMRYwFAYD VQQDEw02ODFjYzc2Zi1iNTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsBQuU7T6+7QLItv/UfJmcH4HZemlxEZvg0IrXT74oq304JDwNwqGxFeLhin oFJ0HB5BXUHc+tdf6QO7dePQE6IpC70AzMmtb7CWQJb/Ls4sVYX2LZExhK9tgE/+ dzZU/4Kd+yz2ET3Ml1Mv7dg1U88kv19bM9Jj1X3a0Nf9WKc/4zjuU7t7rjK9dg7C olsjt7SlaVLe79Q3y6dhcCXu3gDdMvrCQN2joX2MUiQwteUjUH/mCnoC271uWulI 2gPlkvCVud8b1R/se/08JENdplLgbG7miFr3ekfaU8NhZt1JY+zqJS1s72eROlJl FGRwjZSx2++awWvaljx6YKT/4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRmbyhs 2kOWlCJ/4oOEyDkgrOj4MB8GA1UdIwQYMBaAFNFaWvmvjZnf5eRNNe5VAQX+2UUR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjBBMy9BRjRCOEE2MjFE OUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1kX2w1RTAxN2xVQkJmN1pS UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBWcGEtYS1ObWRfbDVFMDE3bFVCQmY3WlJSRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjBBMy9BRjRCOEE2MjFEOUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1k X2w1RTAxN2xVQkJmN1pSUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK814pEIBD6X9aT3T8YakDAHRgq+QbB0oApA/DG7rSgodaHfx/V3lH RAvpxZbm0jt1AmyJ4MxEsYK+IGd4AjFsjmB3LmxSzWTgk3VFYj1Rpr2YMbb1FDJ9 YiC/FlO+x8IiIz+tGMWQikLVcHRhuQ7qTijA1m+M8Yiuu5Idt7fcvqcpGPMEjXbY GiOAvKOZz6ewK1u/HsJ8En9xp0BpdiwdQTDQI9VAOx7+5hiXU7mE/BXwtdILvR79 lnzz8ML/A/C0uxjmOmb8Bt70Agz+DJqwlGPr5FUX+3fPxlWElZfbVUKSFY3Z41RT SbIJIXV804AsWMrQ6PQ3C+43cvJOZpKJ -----END CERTIFICATE-----Generated at Sat May 10 10:41:25 2025 by rpki-client