$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft File: VzWraqwyeVRCT5_oyoUzQpnde8I.mft (raw, json) Hash identifier: RceTE+cZvhPZdCcc7YWRlvlqx5E20Sc7+P0QOZ26vHA= Subject key identifier: 9A:95:DC:16:CA:34:08:1D:9E:64:72:21:80:B5:C2:6C:F9:F5:50:BD Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 Certificate issuer: /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Certificate serial: 0F4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft Manifest number: 0F42 Signing time: Sun 04 May 2025 17:31:24 +0000 Manifest this update: Sun 04 May 2025 17:31:24 +0000 Manifest next update: Sun 11 May 2025 17:31:24 +0000 Files and hashes: 1: VzWraqwyeVRCT5_oyoUzQpnde8I.crl (hash: rsBmHoFkl0DkOQ97WYV8hufYIgE1p1zgiqo/vD/MxA4=) 2: F27C04B8779E11E997C0204AC4F9AE02.roa (hash: DZGyjsonfYGjBw4hHPzT7rTakbn4N6VzJZPth34e8Gc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 17:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3917 (0xf4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE392, serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2 Validity Not Before: May 4 17:31:24 2025 GMT Not After : May 11 17:31:24 2025 GMT Subject: CN=6817a46c-5093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7c:e5:79:cf:1c:ec:9d:e1:4e:a3:ad:7a:a5: c5:be:1a:c2:80:dc:10:9b:9c:6c:b4:10:62:2b:c3: ee:d3:0b:0e:8b:a0:d8:a7:3b:f8:65:c4:36:d8:33: ca:6a:eb:cd:fc:12:b5:14:2a:47:12:84:ea:d7:33: 0c:71:8d:ce:ba:81:16:e5:2e:c7:2f:9d:5d:f8:07: 28:9d:d7:2f:dd:7d:0e:e8:1e:ef:8e:5c:fb:1e:92: da:4b:29:de:9e:1d:2f:e3:3c:17:f8:1c:fe:8b:30: fd:fc:5d:2a:67:08:fc:51:71:e7:35:f8:4c:77:33: 77:6a:a7:d0:67:a6:27:c8:49:d0:8e:9d:73:aa:e0: 9c:11:de:1b:8f:e6:37:ef:3e:0d:13:6a:b3:5a:37: 9c:25:44:0a:5e:f3:44:9e:70:b0:93:b3:d5:ed:49: 2d:e2:1e:bc:a1:78:67:d2:1d:c3:e2:8c:58:4d:a4: 06:c0:fb:13:7b:72:f6:b7:10:50:36:fb:d2:da:a3: c6:48:02:bb:af:d1:71:35:46:a8:34:9e:03:54:25: 4b:a4:a2:16:7e:af:c4:e7:2f:91:ec:a2:db:b3:72: 51:5e:ea:cb:3f:ac:df:86:c5:35:01:a8:6e:19:85: 0b:d9:93:3a:8a:bc:9d:33:47:64:8e:e3:bd:0e:2f: c6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:95:DC:16:CA:34:08:1D:9E:64:72:21:80:B5:C2:6C:F9:F5:50:BD X509v3 Authority Key Identifier: keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:ae:82:cf:f6:a5:32:e2:39:7d:61:85:47:b3:18:67:d4:7e: b4:e3:20:51:3b:ad:bc:ad:58:c6:a4:b4:7c:2f:8b:0e:37:8c: 92:60:ca:0e:a2:e2:a7:0c:eb:3c:46:97:5e:3e:e6:96:37:5a: 58:c1:c3:44:8e:75:80:29:24:49:be:c1:f6:7e:75:a6:44:ff: 21:95:8b:b3:65:ce:44:08:c1:19:0c:6f:c0:99:03:22:bd:44: 15:f3:f4:ac:6d:af:6c:93:90:5e:6a:0b:c7:5c:1a:e7:eb:a5: 9c:2d:02:c6:5f:64:13:b6:7c:71:69:74:66:22:71:cc:6b:84: 32:26:70:b9:ff:43:62:d4:b9:fc:a3:92:ee:a7:8b:49:b1:db: 18:6b:66:75:7d:1c:8b:07:69:5c:86:97:a8:e2:ef:08:a7:ba: da:df:bd:c8:ec:c5:b0:7f:41:b6:1c:de:34:e9:ba:f6:86:65: 50:0f:02:a8:31:47:b4:16:7a:04:56:b4:cf:af:70:e0:bc:26: fd:b5:11:ec:40:50:c8:53:84:ba:ef:25:f1:ff:c5:77:13:c6: 3c:cd:1c:15:18:f3:59:0e:c6:83:75:0a:93:0e:49:49:b9:15: f6:b9:a6:84:db:82:1e:61:05:bf:0d:c4:a0:9d:63:46:be:70: d7:ae:b9:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOTIxMTAvBgNVBAUTKDU3MzVBQjZBQUMzMjc5NTQ0MjRGOUZFOENBODUzMzQy OTlERDdCQzIwHhcNMjUwNTA0MTczMTI0WhcNMjUwNTExMTczMTI0WjAYMRYwFAYD VQQDEw02ODE3YTQ2Yy01MDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3zlec8c7J3hTqOteqXFvhrCgNwQm5xstBBiK8Pu0wsOi6DYpzv4ZcQ22DPK auvN/BK1FCpHEoTq1zMMcY3OuoEW5S7HL51d+Acondcv3X0O6B7vjlz7HpLaSyne nh0v4zwX+Bz+izD9/F0qZwj8UXHnNfhMdzN3aqfQZ6YnyEnQjp1zquCcEd4bj+Y3 7z4NE2qzWjecJUQKXvNEnnCwk7PV7Ukt4h68oXhn0h3D4oxYTaQGwPsTe3L2txBQ NvvS2qPGSAK7r9FxNUaoNJ4DVCVLpKIWfq/E5y+R7KLbs3JRXurLP6zfhsU1Aahu GYUL2ZM6irydM0dkjuO9Di/G8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqV3BbK NAgdnmRyIYC1wmz59VC9MB8GA1UdIwQYMBaAFFc1q2qsMnlUQk+f6MqFM0KZ3XvC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Mi82RDZBMkEyODZD RDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVWUkNUNV9veW9VelFwbmRl OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z6V3JhcXd5ZVZSQ1Q1X295b1V6UXBuZGU4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Mi82RDZBMkEyODZDRDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVW UkNUNV9veW9VelFwbmRlOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAproLP9qUy4jl9YYVHsxhn1H604yBRO628rVjGpLR8L4sON4ySYMoO ouKnDOs8RpdePuaWN1pYwcNEjnWAKSRJvsH2fnWmRP8hlYuzZc5ECMEZDG/AmQMi vUQV8/Ssba9sk5BeagvHXBrn66WcLQLGX2QTtnxxaXRmInHMa4QyJnC5/0Ni1Ln8 o5Lup4tJsdsYa2Z1fRyLB2lchpeo4u8Ip7ra373I7MWwf0G2HN406br2hmVQDwKo MUe0FnoEVrTPr3DgvCb9tRHsQFDIU4S67yXx/8V3E8Y8zRwVGPNZDsaDdQqTDklJ uRX2uaaE24IeYQW/DcSgnWNGvnDXrrmZ -----END CERTIFICATE-----Generated at Mon May 5 03:18:37 2025 by rpki-client