$ rpki-client -vvf rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft File: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft (raw, json) Hash identifier: MW2rE0ENlg7ShEJBXnoPitsGTDh5BhtSIJJX2/VJI2U= Subject key identifier: 88:E8:97:BC:9F:E9:66:79:BA:DF:F4:7F:06:78:E4:CE:23:BE:90:D3 Authority key identifier: D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 Certificate issuer: /CN=A91A20A3/serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Certificate serial: 34AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft Manifest number: 349F Signing time: Sat 28 Jun 2025 14:58:46 +0000 Manifest this update: Sat 28 Jun 2025 14:58:45 +0000 Manifest next update: Sat 05 Jul 2025 14:58:45 +0000 Files and hashes: 1: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl (hash: Wap6mZdwgsrB/EQYkVQLIC4Ns0zSmkDEmb/TEXTzZ3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 14:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13487 (0x34af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A20A3, serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Validity Not Before: Jun 28 14:58:45 2025 GMT Not After : Jul 5 14:58:45 2025 GMT Subject: CN=68600325-9782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:59:a3:2f:97:3e:20:c9:ce:de:4e:9c:1b:e5: ac:59:5b:74:4d:2f:6c:cf:ee:6a:d9:36:1c:bd:1f: 0e:02:64:5f:e5:f8:9f:10:a1:7c:ba:3a:19:ac:79: 43:12:24:cb:e4:96:6a:a8:9e:36:bd:20:ce:ce:40: 99:e8:fb:37:83:b4:73:8d:5a:87:eb:ec:0f:49:11: 46:0f:10:f7:21:33:d1:61:d6:53:57:cc:76:fc:c5: 78:9a:fc:c9:b8:87:c9:32:d3:41:3d:5c:30:e0:7f: f9:26:d5:c1:52:62:95:ab:7f:7e:ae:39:70:e7:c1: 86:c1:02:6a:1e:9e:bc:6c:8c:4c:36:4b:dd:4d:3a: 89:80:a1:93:6c:c7:aa:31:c3:eb:d7:1d:29:76:8f: 1b:2c:f6:df:93:04:45:04:7a:46:14:38:34:16:fe: de:e1:38:1e:a7:a3:1b:ea:ed:4e:5b:bd:ff:50:94: d7:97:d7:3c:3d:9c:0e:0c:00:ac:e5:90:fb:ba:37: 1e:fa:f5:72:ab:55:13:fd:c1:21:8d:69:c9:c8:c3: 8b:a8:e6:3d:93:a3:75:48:b7:ae:9c:20:62:46:be: 73:5d:b7:eb:69:7e:a6:a9:4c:aa:9e:16:22:81:d6: b2:41:38:5c:f1:51:74:8b:04:ad:b0:30:9e:9f:97: 1e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E8:97:BC:9F:E9:66:79:BA:DF:F4:7F:06:78:E4:CE:23:BE:90:D3 X509v3 Authority Key Identifier: keyid:D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:01:6c:54:a3:c7:74:5d:96:1e:a3:16:ac:d5:2f:39:e3:74: 73:49:d6:cb:e7:a1:54:08:8f:e8:10:dd:93:99:07:5b:42:5d: fb:99:70:88:90:86:5c:4b:97:fd:77:13:01:0d:67:51:fd:5e: 57:e9:0f:fa:65:41:5b:d8:5c:c1:9a:1a:e7:04:c3:15:bf:77: 42:6e:f6:11:0d:b2:6d:46:4d:68:96:d2:48:fa:0f:70:92:5e: 58:6b:5e:bd:00:28:45:23:f0:8f:d3:20:d2:b6:95:86:01:8f: fd:5b:68:b1:3a:a8:4c:98:86:64:17:51:b2:61:d9:e5:d8:b8: 30:c6:3d:65:f6:70:31:ea:1f:e3:a4:68:07:16:ad:45:e6:f7: 6e:07:75:ed:66:e2:51:49:24:83:5e:19:53:6b:16:99:56:14: 86:4f:0b:93:58:27:a2:b2:24:2d:32:bc:15:c7:58:d0:c8:06: 2f:02:7e:92:c0:1a:f5:b5:f6:3c:d8:36:9b:2d:08:0c:cd:c3: e8:0c:07:9e:57:5c:7e:60:7a:7a:36:b7:1a:20:69:e1:cb:00: a1:d3:c3:65:97:51:65:f3:35:3d:59:4b:26:c9:b7:44:79:03: 52:55:57:a2:56:84:59:e7:ff:0a:21:ba:aa:1b:f3:49:81:88: e3:9d:ab:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIwQTMxMTAvBgNVBAUTKEQxNUE1QUY5QUY4RDk5REZFNUU0NEQzNUVFNTUwMTA1 RkVEOTQ1MTEwHhcNMjUwNjI4MTQ1ODQ1WhcNMjUwNzA1MTQ1ODQ1WjAYMRYwFAYD VQQDEw02ODYwMDMyNS05NzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFmjL5c+IMnO3k6cG+WsWVt0TS9sz+5q2TYcvR8OAmRf5fifEKF8ujoZrHlD EiTL5JZqqJ42vSDOzkCZ6Ps3g7RzjVqH6+wPSRFGDxD3ITPRYdZTV8x2/MV4mvzJ uIfJMtNBPVww4H/5JtXBUmKVq39+rjlw58GGwQJqHp68bIxMNkvdTTqJgKGTbMeq McPr1x0pdo8bLPbfkwRFBHpGFDg0Fv7e4Tgep6Mb6u1OW73/UJTXl9c8PZwODACs 5ZD7ujce+vVyq1UT/cEhjWnJyMOLqOY9k6N1SLeunCBiRr5zXbfraX6mqUyqnhYi gdayQThc8VF0iwStsDCen5ce3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjol7yf 6WZ5ut/0fwZ45M4jvpDTMB8GA1UdIwQYMBaAFNFaWvmvjZnf5eRNNe5VAQX+2UUR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjBBMy9BRjRCOEE2MjFE OUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1kX2w1RTAxN2xVQkJmN1pS UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBWcGEtYS1ObWRfbDVFMDE3bFVCQmY3WlJSRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjBBMy9BRjRCOEE2MjFEOUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1k X2w1RTAxN2xVQkJmN1pSUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdAWxUo8d0XZYeoxas1S8543RzSdbL56FUCI/oEN2TmQdbQl37mXCI kIZcS5f9dxMBDWdR/V5X6Q/6ZUFb2FzBmhrnBMMVv3dCbvYRDbJtRk1oltJI+g9w kl5Ya169AChFI/CP0yDStpWGAY/9W2ixOqhMmIZkF1GyYdnl2Lgwxj1l9nAx6h/j pGgHFq1F5vduB3XtZuJRSSSDXhlTaxaZVhSGTwuTWCeisiQtMrwVx1jQyAYvAn6S wBr1tfY82DabLQgMzcPoDAeeV1x+YHp6NrcaIGnhywCh08Nll1Fl8zU9WUsmybdE eQNSVVeiVoRZ5/8KIbqqG/NJgYjjnauY -----END CERTIFICATE-----Generated at Mon Jun 30 15:49:38 2025 by rpki-client