$ rpki-client -vvf rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft File: VCRPZF3qDVCWaFgNE46CUnn7Vng.mft (raw, json) Hash identifier: I7Yw9TT3UsrCMyvNoue/JkxBN6Q4PCFVSjiINA+rcNM= Subject key identifier: 0A:E0:8D:AE:92:AF:16:D6:D3:8A:2D:65:6B:9D:7B:36:FF:AC:F1:88 Authority key identifier: 54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 Certificate issuer: /CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678 Certificate serial: 0D00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft Manifest number: 0CF7 Signing time: Mon 12 May 2025 17:58:16 +0000 Manifest this update: Mon 12 May 2025 17:58:15 +0000 Manifest next update: Mon 19 May 2025 17:58:15 +0000 Files and hashes: 1: VCRPZF3qDVCWaFgNE46CUnn7Vng.crl (hash: CXutKBobOSO6OM60C43K6g7TFxeQUrnnSvq7K7ZQ2WE=) 2: 690390E80FAA11EB8B893F1EC4F9AE02.roa (hash: 50X2YknGPNQ7f3oYcKge6hlv5pd3PV5tqtttq6Hz8zE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3328 (0xd00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B624E, serialNumber=54244F645DEA0D509668580D138E825279FB5678 Validity Not Before: May 12 17:58:15 2025 GMT Not After : May 19 17:58:15 2025 GMT Subject: CN=682236b7-6814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ab:5a:cc:c2:1d:82:7e:7f:1b:ad:51:c1:21: d0:7a:8f:47:69:6f:55:13:e9:a1:4a:36:99:e0:60: 14:f7:f0:24:8b:c3:2c:37:f9:e7:d9:bc:18:26:99: aa:28:44:26:75:b7:59:8b:73:e2:0f:48:41:d4:99: 71:31:a1:e6:85:da:1f:01:24:e6:d9:56:93:53:00: 70:2a:f5:58:53:4c:80:b8:25:aa:34:ca:03:8b:30: 5f:1f:3d:2e:ad:71:1c:be:8e:5c:28:74:02:82:d7: ef:b9:fe:e5:44:ab:db:83:cf:3d:e6:87:73:2c:2a: d3:ac:d9:78:60:95:91:f4:e5:15:d8:7b:6c:57:bf: 08:07:1f:b9:40:17:07:ad:55:61:48:13:3e:9e:ec: a7:e8:e8:47:d5:fa:ae:76:7a:0b:7c:83:56:e2:d1: dc:76:86:93:d7:9f:48:d3:bc:2d:f3:b1:9d:81:f1: 5f:4f:19:3d:52:00:68:3f:d1:9c:93:48:22:36:73: c2:78:0d:97:86:e2:1b:68:23:08:6e:35:a5:01:ff: 91:28:39:d4:80:a8:a3:e1:f3:0c:a4:1c:33:08:aa: 13:fe:df:f9:87:e0:a7:3f:50:ef:ac:d0:5d:25:dc: 32:24:13:00:bc:9a:1f:e9:e7:e3:88:ae:fa:bf:5a: bf:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E0:8D:AE:92:AF:16:D6:D3:8A:2D:65:6B:9D:7B:36:FF:AC:F1:88 X509v3 Authority Key Identifier: keyid:54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:2b:9a:7f:a7:8d:c3:01:b4:9a:bd:3a:a8:84:95:0b:6a:6c: a5:36:d4:32:22:6d:ef:c2:d1:b3:b0:6f:b0:cf:da:c7:f5:16: de:a8:f2:bd:7c:c7:f6:44:d2:09:8d:f8:e7:59:1b:71:ab:06: e5:7e:54:b6:2b:a6:6f:87:16:40:d6:7e:98:8b:f2:1e:6c:13: 7f:9f:53:d3:0a:5b:a7:a6:f2:f3:44:ba:21:9b:c2:af:7a:bb: 05:c4:58:9c:56:51:fb:06:58:ec:f6:a7:8a:10:bf:f7:8f:4f: ec:74:93:75:85:52:e3:91:12:1b:79:7f:59:45:a9:16:88:e7: 4e:b3:2b:a0:be:b2:ac:e9:89:b7:59:5a:bb:5c:2d:57:0e:e1: e9:bd:0a:15:d6:5b:cb:0d:52:95:59:d6:88:bb:77:ff:dc:7d: a8:f2:02:65:2b:aa:69:73:ac:ac:cc:37:db:2c:fb:c8:74:b2: e6:e1:79:f3:82:b3:9d:f9:ca:75:43:a3:77:3a:ce:ee:95:ea: 38:0c:8c:b2:92:ac:2f:43:e5:d7:27:80:b3:97:d2:0d:76:88: f5:ee:0b:12:f0:76:08:d3:31:fe:93:90:87:2b:f0:5a:4f:79: b4:28:0c:d9:ba:dc:b2:99:31:5a:ec:d2:e7:64:05:35:75:3a: a9:7b:4d:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNEUxMTAvBgNVBAUTKDU0MjQ0RjY0NURFQTBENTA5NjY4NTgwRDEzOEU4MjUy NzlGQjU2NzgwHhcNMjUwNTEyMTc1ODE1WhcNMjUwNTE5MTc1ODE1WjAYMRYwFAYD VQQDEw02ODIyMzZiNy02ODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6tazMIdgn5/G61RwSHQeo9HaW9VE+mhSjaZ4GAU9/Aki8MsN/nn2bwYJpmq KEQmdbdZi3PiD0hB1JlxMaHmhdofASTm2VaTUwBwKvVYU0yAuCWqNMoDizBfHz0u rXEcvo5cKHQCgtfvuf7lRKvbg8895odzLCrTrNl4YJWR9OUV2HtsV78IBx+5QBcH rVVhSBM+nuyn6OhH1fqudnoLfINW4tHcdoaT159I07wt87GdgfFfTxk9UgBoP9Gc k0giNnPCeA2XhuIbaCMIbjWlAf+RKDnUgKij4fMMpBwzCKoT/t/5h+CnP1DvrNBd JdwyJBMAvJof6efjiK76v1q/DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArgja6S rxbW04otZWudezb/rPGIMB8GA1UdIwQYMBaAFFQkT2Rd6g1QlmhYDROOglJ5+1Z4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI0RS9CRDk1QzM4RUUw M0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURWQ1dhRmdORTQ2Q1VubjdW bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDUlBaRjNxRFZDV2FGZ05FNDZDVW5uN1ZuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjI0RS9CRDk1QzM4RUUwM0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURW Q1dhRmdORTQ2Q1VubjdWbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiK5p/p43DAbSavTqohJULamylNtQyIm3vwtGzsG+wz9rH9RbeqPK9 fMf2RNIJjfjnWRtxqwblflS2K6ZvhxZA1n6Yi/IebBN/n1PTClunpvLzRLohm8Kv ersFxFicVlH7Bljs9qeKEL/3j0/sdJN1hVLjkRIbeX9ZRakWiOdOsyugvrKs6Ym3 WVq7XC1XDuHpvQoV1lvLDVKVWdaIu3f/3H2o8gJlK6ppc6yszDfbLPvIdLLm4Xnz grOd+cp1Q6N3Os7uleo4DIyykqwvQ+XXJ4Czl9INdoj17gsS8HYI0zH+k5CHK/Ba T3m0KAzZutyymTFa7NLnZAU1dTqpe02F -----END CERTIFICATE-----Generated at Tue May 13 00:59:05 2025 by rpki-client