$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft File: vaPoqCMceH9rfxi8FGuV-1wDjtk.mft (raw, json) Hash identifier: uLyZTbQE349m3avcCMh5bnmxtbOMmYAfZGFPGOfLjSY= Subject key identifier: 0D:F3:11:E9:3A:6A:EB:6D:BF:FD:58:E2:98:24:07:A8:E6:A1:15:43 Authority key identifier: BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9 Certificate issuer: /CN=A91AE8D7/serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft Manifest number: 3E Signing time: Thu 03 Jul 2025 07:43:18 +0000 Manifest this update: Thu 03 Jul 2025 07:43:18 +0000 Manifest next update: Thu 10 Jul 2025 07:43:18 +0000 Files and hashes: 1: vaPoqCMceH9rfxi8FGuV-1wDjtk.crl (hash: CuCWsM+t9dlo29kqFy05g2Uzg0JTS4VpUyQf3eWxNDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE8D7, serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9 Validity Not Before: Jul 3 07:43:18 2025 GMT Not After : Jul 10 07:43:18 2025 GMT Subject: CN=68663496-86a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:aa:c2:bf:62:ac:6c:64:98:c8:e7:e6:9d:ff: 0e:ee:80:85:90:f0:19:a3:2e:7f:3a:ad:5c:5f:47: a4:60:82:11:53:2a:21:a3:ea:1b:a4:a0:da:79:08: 38:73:a0:9a:dd:c1:22:27:10:44:b5:51:17:09:62: f3:6a:16:62:d5:bf:9c:e2:05:d2:58:ee:99:d3:b9: 18:cf:dc:c2:90:a1:29:37:52:a3:15:ba:8e:ed:9d: 72:d3:ab:72:cd:38:f0:0b:8b:cc:aa:1b:db:a3:e4: 80:22:33:9b:ae:a0:01:e1:af:e6:db:56:17:01:76: d2:a1:26:65:41:37:a3:c2:03:5a:0f:16:b3:81:46: a8:a6:3e:df:73:45:51:3c:a5:46:77:5e:86:63:f1: 91:15:3a:ba:f4:5c:e1:b2:c9:32:4e:e0:78:89:a1: 58:67:a8:a5:75:a0:5a:94:21:fa:ad:45:71:fb:cd: fb:d3:cf:a6:7b:90:e8:fd:78:fd:85:e7:e0:f5:49: 83:f6:58:4b:aa:59:15:58:26:ff:f1:9d:40:f5:3f: af:4d:b6:97:bb:f7:ec:7f:8b:bf:19:8f:46:ac:c1: 13:d7:04:f4:4b:09:12:13:a0:c2:0e:50:da:03:a5: 10:c1:48:e3:44:91:1f:d8:e2:b9:76:fd:af:aa:00: db:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F3:11:E9:3A:6A:EB:6D:BF:FD:58:E2:98:24:07:A8:E6:A1:15:43 X509v3 Authority Key Identifier: keyid:BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8f:09:f8:57:5e:89:8d:75:4b:10:14:4d:41:ba:f8:d8:e8: a5:e6:29:1f:84:86:8b:9a:4e:86:46:2b:98:e4:40:e6:16:b1: ae:d9:e5:80:27:ba:36:c6:65:8c:1f:20:73:21:08:f6:c0:5d: 0c:dd:17:f0:3e:be:e5:df:e0:bc:ff:59:44:8c:98:0c:1c:32: 43:11:22:68:6d:06:72:0f:ad:af:89:e1:d6:e0:81:37:88:56: c7:5a:02:13:07:2a:9e:a7:2b:b7:c5:13:d3:aa:8f:3a:13:39: 96:6c:83:e0:d6:18:88:68:4d:54:4f:00:40:bc:12:c3:ca:03: 51:ca:a1:c7:86:98:18:19:6e:46:e3:15:50:56:0a:a4:69:ec: e2:8d:e6:de:42:66:31:70:d1:c6:ff:e4:4f:c8:bc:48:1f:6a: 4c:8c:38:07:af:4b:dd:6b:09:ad:ce:f1:30:6d:48:d0:c6:64: 34:db:1e:c1:5d:3f:8f:86:2a:09:c7:77:7b:97:1a:41:84:be: e5:af:93:8b:2f:f1:82:19:d2:3f:36:66:08:75:0f:81:0a:fa: d6:b0:02:f8:00:f5:30:32:54:46:10:c9:15:29:ea:a8:cf:76: 34:ba:bf:f9:2a:77:cb:1a:30:6a:94:63:a4:e3:db:f7:6b:37: c7:82:d3:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RThENzExMC8GA1UEBRMoQkRBM0U4QTgyMzFDNzg3RjZCN0YxOEJDMTQ2Qjk1RkI1 QzAzOEVEOTAeFw0yNTA3MDMwNzQzMThaFw0yNTA3MTAwNzQzMThaMBgxFjAUBgNV BAMTDTY4NjYzNDk2LTg2YTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUqsK/YqxsZJjI5+ad/w7ugIWQ8BmjLn86rVxfR6RgghFTKiGj6hukoNp5CDhz oJrdwSInEES1URcJYvNqFmLVv5ziBdJY7pnTuRjP3MKQoSk3UqMVuo7tnXLTq3LN OPALi8yqG9uj5IAiM5uuoAHhr+bbVhcBdtKhJmVBN6PCA1oPFrOBRqimPt9zRVE8 pUZ3XoZj8ZEVOrr0XOGyyTJO4HiJoVhnqKV1oFqUIfqtRXH7zfvTz6Z7kOj9eP2F 5+D1SYP2WEuqWRVYJv/xnUD1P69Ntpe79+x/i78Zj0aswRPXBPRLCRIToMIOUNoD pRDBSONEkR/Y4rl2/a+qANuZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDfMR6Tpq 622//VjimCQHqOahFUMwHwYDVR0jBBgwFoAUvaPoqCMceH9rfxi8FGuV+1wDjtkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFOEQ3LzRCMDFDNEE2Rjkz RjExRUZCN0VBQjQyNUM0RjlBRTAyL3ZhUG9xQ01jZUg5cmZ4aThGR3VWLTF3RGp0 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdmFQb3FDTWNlSDlyZnhpOEZHdVYtMXdEanRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF OEQ3LzRCMDFDNEE2RjkzRjExRUZCN0VBQjQyNUM0RjlBRTAyL3ZhUG9xQ01jZUg5 cmZ4aThGR3VWLTF3RGp0ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD+PCfhXXomNdUsQFE1BuvjY6KXmKR+EhouaToZGK5jkQOYWsa7Z5YAn ujbGZYwfIHMhCPbAXQzdF/A+vuXf4Lz/WUSMmAwcMkMRImhtBnIPra+J4dbggTeI VsdaAhMHKp6nK7fFE9OqjzoTOZZsg+DWGIhoTVRPAEC8EsPKA1HKoceGmBgZbkbj FVBWCqRp7OKN5t5CZjFw0cb/5E/IvEgfakyMOAevS91rCa3O8TBtSNDGZDTbHsFd P4+GKgnHd3uXGkGEvuWvk4sv8YIZ0j82Zgh1D4EK+tawAvgA9TAyVEYQyRUp6qjP djS6v/kqd8saMGqUY6Tj2/drN8eC004= -----END CERTIFICATE-----Generated at Fri Jul 4 06:12:09 2025 by rpki-client