$ rpki-client -vvf rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft File: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft (raw, json) Hash identifier: lxPWMrQmOC8P3X1jidoPLOBC5gyKc9hrvp2P43c/+oU= Subject key identifier: 0B:88:7E:EA:61:78:B9:75:89:67:A1:22:71:D0:FD:C8:D1:12:BF:E5 Authority key identifier: D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 Certificate issuer: /CN=A91A20A3/serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Certificate serial: 34CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft Manifest number: 34BB Signing time: Fri 22 Aug 2025 15:03:15 +0000 Manifest this update: Fri 22 Aug 2025 15:03:15 +0000 Manifest next update: Fri 29 Aug 2025 15:03:15 +0000 Files and hashes: 1: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl (hash: 9Kl/WX2sz+uEH3coRJAAmPYyJN1OEZ2CZq8k1H58Cv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13515 (0x34cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A20A3, serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Validity Not Before: Aug 22 15:03:15 2025 GMT Not After : Aug 29 15:03:15 2025 GMT Subject: CN=68a886b3-ed51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7b:d0:9d:fb:b9:16:1f:ee:86:30:88:38:df: 20:ed:5a:82:4c:f1:ce:6d:be:6d:ed:d9:37:67:5d: 0e:11:7c:14:29:60:52:4e:8b:fd:69:ac:4c:98:b2: 6a:72:5f:2f:c5:43:48:80:72:82:8d:05:f5:56:bc: 68:c9:74:4a:2e:e3:7f:95:46:ea:64:77:12:c2:ba: 3a:e1:23:46:82:6c:22:9f:95:6a:54:d1:4d:9f:cd: 17:7b:95:d9:55:56:5c:51:2b:e4:e8:fd:25:c9:dd: 16:03:87:c6:5a:25:48:bc:73:23:cc:da:71:db:88: 14:27:78:1b:cd:4b:75:64:9d:07:ff:78:48:e9:f8: 37:d1:15:1d:83:6c:ac:4c:df:28:d4:ab:61:37:ff: 0e:ae:04:76:6a:1f:c7:e7:63:dc:69:47:50:12:db: ce:a1:bc:cc:98:24:0c:dd:45:16:25:b5:7c:8a:42: 49:8e:a2:60:1d:6a:1e:67:6f:ce:90:ae:02:d4:fe: 8a:87:54:df:f7:4e:1a:72:8d:9b:8e:5b:f9:75:90: ad:16:2f:6d:4e:01:bd:b5:d7:8e:63:24:33:05:f4: 61:54:60:cc:0a:42:4d:96:e0:58:6f:25:79:d1:56: 13:aa:11:f7:20:51:c2:16:95:e0:4b:73:53:74:e5: ea:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:88:7E:EA:61:78:B9:75:89:67:A1:22:71:D0:FD:C8:D1:12:BF:E5 X509v3 Authority Key Identifier: keyid:D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:4e:58:86:18:10:ff:21:e5:d8:39:e1:7e:0a:e4:01:50:b1: 65:4b:36:eb:ec:4a:09:d7:cc:31:b2:e8:7f:cc:d8:02:e9:d6: 56:c4:a7:e2:c3:e4:a6:1e:2b:22:d9:34:b5:b3:4f:dc:73:a4: 72:7e:08:a5:dd:f2:03:96:26:2a:4c:3e:e7:a6:e9:08:76:68: eb:b7:af:b7:bf:b5:97:68:e1:35:03:1e:9b:e8:f0:e7:18:33: 50:cc:a0:cd:61:45:53:31:6d:bc:78:aa:68:d9:6d:05:c9:2d: 0f:d8:c7:e2:a7:94:07:cc:c3:29:cd:03:67:2c:13:3a:39:65: 16:cb:66:2b:4f:8f:53:aa:11:6d:66:0e:cc:76:b9:b1:7c:a5: 41:36:c6:7d:f1:01:69:d9:50:5a:f5:b0:ac:f3:cc:2c:a2:e2: a3:74:b4:2b:70:8d:da:69:e3:ef:26:df:24:cc:73:57:57:f8: 86:d2:b0:dc:b6:24:07:1e:e7:be:0c:c1:14:63:f8:4d:b7:98: 69:9c:20:e1:f3:e1:4f:7b:c1:5a:11:af:74:2e:1d:68:e1:1d: 8d:97:e0:67:b3:45:83:3c:b9:72:bd:83:95:1a:95:3d:6d:4e: 4d:44:f0:3c:00:ce:75:97:54:b0:fd:87:6f:5b:dd:f4:ef:2e: d2:b7:31:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIwQTMxMTAvBgNVBAUTKEQxNUE1QUY5QUY4RDk5REZFNUU0NEQzNUVFNTUwMTA1 RkVEOTQ1MTEwHhcNMjUwODIyMTUwMzE1WhcNMjUwODI5MTUwMzE1WjAYMRYwFAYD VQQDEw02OGE4ODZiMy1lZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3vQnfu5Fh/uhjCION8g7VqCTPHObb5t7dk3Z10OEXwUKWBSTov9aaxMmLJq cl8vxUNIgHKCjQX1VrxoyXRKLuN/lUbqZHcSwro64SNGgmwin5VqVNFNn80Xe5XZ VVZcUSvk6P0lyd0WA4fGWiVIvHMjzNpx24gUJ3gbzUt1ZJ0H/3hI6fg30RUdg2ys TN8o1KthN/8OrgR2ah/H52PcaUdQEtvOobzMmCQM3UUWJbV8ikJJjqJgHWoeZ2/O kK4C1P6Kh1Tf904aco2bjlv5dZCtFi9tTgG9tdeOYyQzBfRhVGDMCkJNluBYbyV5 0VYTqhH3IFHCFpXgS3NTdOXqMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuIfuph eLl1iWehInHQ/cjREr/lMB8GA1UdIwQYMBaAFNFaWvmvjZnf5eRNNe5VAQX+2UUR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjBBMy9BRjRCOEE2MjFE OUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1kX2w1RTAxN2xVQkJmN1pS UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBWcGEtYS1ObWRfbDVFMDE3bFVCQmY3WlJSRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjBBMy9BRjRCOEE2MjFEOUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1k X2w1RTAxN2xVQkJmN1pSUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5TliGGBD/IeXYOeF+CuQBULFlSzbr7EoJ18wxsuh/zNgC6dZWxKfi w+SmHisi2TS1s0/cc6Ryfgil3fIDliYqTD7npukIdmjrt6+3v7WXaOE1Ax6b6PDn GDNQzKDNYUVTMW28eKpo2W0FyS0P2Mfip5QHzMMpzQNnLBM6OWUWy2YrT49TqhFt Zg7MdrmxfKVBNsZ98QFp2VBa9bCs88wsouKjdLQrcI3aaePvJt8kzHNXV/iG0rDc tiQHHue+DMEUY/hNt5hpnCDh8+FPe8FaEa90Lh1o4R2Nl+Bns0WDPLlyvYOVGpU9 bU5NRPA8AM51l1Sw/YdvW9307y7StzE7 -----END CERTIFICATE-----Generated at Sat Aug 23 16:01:50 2025 by rpki-client