$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft File: vpuQTrdssFxgw-LDeeL6SJoOF3I.mft (raw, json) Hash identifier: AI5SQP8NF+NQxIoWj4Pox86oC16+zM6xwUcWpIoBhSc= Subject key identifier: 68:7D:F7:C9:F2:42:75:5F:69:49:CE:92:02:0D:03:41:85:0C:6B:3A Authority key identifier: BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72 Certificate issuer: /CN=A91E5832/serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft Manifest number: 3E Signing time: Fri 09 May 2025 06:31:03 +0000 Manifest this update: Fri 09 May 2025 06:31:03 +0000 Manifest next update: Fri 16 May 2025 06:31:03 +0000 Files and hashes: 1: vpuQTrdssFxgw-LDeeL6SJoOF3I.crl (hash: NeTxxzIk4HF1kyk1cKGi/o3ImIA+bVAzgCHAcnhOGuU=) 2: A9C0AECED0BA11EFB7A6B027C4F9AE02.roa (hash: vwuRFoQ8j2nxDneRxv7aNdc+Cd7umBY/3NvhL9KJqC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 06:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5832, serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772 Validity Not Before: May 9 06:31:03 2025 GMT Not After : May 16 06:31:03 2025 GMT Subject: CN=681da127-ea1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:24:5c:86:3b:ab:fb:46:e1:b5:dd:8b:37:1e: 5f:f4:80:a1:fe:3c:4e:88:e2:d1:0a:6e:ae:c6:3a: 22:73:1b:55:c7:5e:ce:93:ca:3c:d8:0c:73:16:7f: 5e:9b:e8:a2:85:57:f4:40:1b:13:8e:4e:fe:3a:d0: 57:a6:89:57:61:fb:fc:f1:1f:08:69:d6:63:e4:c2: fc:19:39:a5:0c:c7:92:9e:09:5a:3a:28:76:78:28: cb:50:6a:80:aa:eb:e3:08:1c:ce:ea:e6:b1:fd:ec: 38:11:31:b7:91:6d:84:aa:89:43:4f:1c:6d:74:5c: ef:d5:f2:65:41:0a:8b:dc:76:d2:17:b8:db:b9:32: 16:45:7f:fd:ba:0e:ce:f6:a1:0b:73:f8:08:19:39: c9:20:cf:00:46:70:28:71:c8:cc:1e:63:c5:99:8b: 3d:6a:8b:1c:f3:65:47:67:7f:07:3b:3d:7a:70:80: 0c:f7:fd:2e:a0:ae:00:72:cf:a1:3a:23:fe:fb:d8: c9:4c:62:4c:42:08:aa:61:e5:9a:75:af:40:61:d8: 97:0f:d7:90:e1:df:92:1b:be:68:9a:eb:53:34:93: 19:77:19:d3:e3:f9:9a:be:ab:4e:07:2c:cd:f0:a8: 3a:08:2b:4a:b4:02:b4:98:1e:44:8c:e9:e2:03:42: 7f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7D:F7:C9:F2:42:75:5F:69:49:CE:92:02:0D:03:41:85:0C:6B:3A X509v3 Authority Key Identifier: keyid:BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:81:7a:09:07:69:e6:a5:24:7a:65:6a:7f:e1:52:2f:78:be: ab:0a:e7:18:7e:7f:2b:04:44:aa:23:db:c0:90:4c:fb:ca:1c: f2:e9:bd:71:f9:17:b6:a0:28:e0:c4:c2:c1:a3:a7:28:93:9c: 98:c4:d0:0d:33:8d:a3:be:aa:d1:4e:15:d9:81:28:4d:3f:02: c6:1c:8e:a8:3e:7a:16:d0:24:13:21:2d:44:23:28:72:f5:c8: 46:f5:40:6d:bb:4e:fa:43:64:c5:76:b3:56:3e:d6:58:26:13: 13:9c:91:ef:26:b0:07:48:c6:7d:22:ad:75:0f:65:f4:05:d5: 1e:34:42:e0:30:d1:f4:a9:a6:4c:58:2f:23:b5:71:0a:f9:e5: 60:cf:bd:b6:37:2e:a7:a8:75:e8:20:9b:38:5b:09:32:d8:42: b9:58:32:3b:26:02:a3:6c:57:62:ed:5e:79:59:24:7b:b8:d7: fc:f6:c5:cc:a0:78:d5:ec:b4:f9:21:5d:ec:76:71:76:4b:f6: bd:4d:92:c8:ab:ab:42:fb:06:32:02:c2:84:fa:54:48:c8:18: 90:99:39:29:1e:ec:f1:c8:ab:52:50:f9:d3:fa:8e:19:59:d7: 94:c6:5f:d7:ad:bf:0f:33:c2:4d:cb:a4:8c:2f:0e:1a:76:76: b7:fd:a9:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTgzMjExMC8GA1UEBRMoQkU5QjkwNEVCNzZDQjA1QzYwQzNFMkMzNzlFMkZBNDg5 QTBFMTc3MjAeFw0yNTA1MDkwNjMxMDNaFw0yNTA1MTYwNjMxMDNaMBgxFjAUBgNV BAMTDTY4MWRhMTI3LWVhMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWJFyGO6v7RuG13Ys3Hl/0gKH+PE6I4tEKbq7GOiJzG1XHXs6TyjzYDHMWf16b 6KKFV/RAGxOOTv460FemiVdh+/zxHwhp1mPkwvwZOaUMx5KeCVo6KHZ4KMtQaoCq 6+MIHM7q5rH97DgRMbeRbYSqiUNPHG10XO/V8mVBCovcdtIXuNu5MhZFf/26Ds72 oQtz+AgZOckgzwBGcChxyMweY8WZiz1qixzzZUdnfwc7PXpwgAz3/S6grgByz6E6 I/772MlMYkxCCKph5Zp1r0Bh2JcP15Dh35Ibvmia61M0kxl3GdPj+Zq+q04HLM3w qDoIK0q0ArSYHkSM6eIDQn+fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaH33yfJC dV9pSc6SAg0DQYUMazowHwYDVR0jBBgwFoAUvpuQTrdssFxgw+LDeeL6SJoOF3Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1ODMyLzI2RTU4MjU0RDBC QTExRUY4OTZDRDAyNkM0RjlBRTAyL3ZwdVFUcmRzc0Z4Z3ctTERlZUw2U0pvT0Yz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdnB1UVRyZHNzRnhndy1MRGVlTDZTSm9PRjNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 ODMyLzI2RTU4MjU0RDBCQTExRUY4OTZDRDAyNkM0RjlBRTAyL3ZwdVFUcmRzc0Z4 Z3ctTERlZUw2U0pvT0YzSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHGBegkHaealJHplan/hUi94vqsK5xh+fysERKoj28CQTPvKHPLpvXH5 F7agKODEwsGjpyiTnJjE0A0zjaO+qtFOFdmBKE0/AsYcjqg+ehbQJBMhLUQjKHL1 yEb1QG27TvpDZMV2s1Y+1lgmExOcke8msAdIxn0irXUPZfQF1R40QuAw0fSppkxY LyO1cQr55WDPvbY3LqeodeggmzhbCTLYQrlYMjsmAqNsV2LtXnlZJHu41/z2xcyg eNXstPkhXex2cXZL9r1Nksirq0L7BjICwoT6VEjIGJCZOSke7PHIq1JQ+dP6jhlZ 15TGX9etvw8zwk3LpIwvDhp2drf9qQY= -----END CERTIFICATE-----Generated at Sat May 10 09:49:40 2025 by rpki-client