$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft File: VA3axmjYtQyWYFcSGVqYihytnj8.mft (raw, json) Hash identifier: dVqJV4DZnQLRRszpWxJcWtiUwojrW1y3MVUkT6QVGoc= Subject key identifier: E8:4A:87:63:27:07:B1:F1:17:46:CB:AC:DC:C3:1E:C0:CB:88:67:BD Authority key identifier: 54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F Certificate issuer: /CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Certificate serial: 0757 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft Manifest number: 0745 Signing time: Sat 10 May 2025 21:27:26 +0000 Manifest this update: Sat 10 May 2025 21:27:26 +0000 Manifest next update: Sat 17 May 2025 21:27:26 +0000 Files and hashes: 1: VA3axmjYtQyWYFcSGVqYihytnj8.crl (hash: brdnBLeDjNUUwYP5z3pv7+mnDRkXO/d/5TH1Zk/Bi8s=) 2: 4CA8BBE232CF11EBADB5497FC4F9AE02.roa (hash: 2uqYafN88TfsD3Ygt/Nku6GJ6HpfQm/lbxRdxC+igQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1879 (0x757) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF74B, serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Validity Not Before: May 10 21:27:26 2025 GMT Not After : May 17 21:27:26 2025 GMT Subject: CN=681fc4be-83f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fc:cd:8d:64:16:43:1c:79:48:7b:cc:8f:6c: 63:0c:b3:84:ad:a5:71:18:d8:69:e5:cb:03:3e:2c: 56:83:1e:d4:c6:57:75:39:f7:44:18:51:b7:81:56: 43:7f:e4:1a:ab:c4:da:96:00:b9:59:49:43:34:88: f4:48:7b:93:dd:76:f6:85:4d:dd:ba:78:c4:2c:33: 49:2f:cc:26:8d:80:b0:8e:c5:7f:6f:b4:8c:69:7c: ea:0a:96:99:a6:90:f9:6f:86:9c:f2:65:fd:89:81: c5:51:3e:a1:0a:c7:2a:76:cd:5e:06:1f:47:7c:46: ab:94:ce:6c:1a:23:24:04:6f:5e:cb:95:94:fd:06: 3a:b3:6f:71:fe:dd:49:ea:6e:cc:e5:f1:fc:ca:3b: d1:4c:78:9a:a5:4c:e7:37:c0:ea:23:fb:e3:73:03: 1a:0d:94:cb:c7:dd:73:58:7c:2d:6b:02:4c:f1:78: b2:74:77:c3:75:de:62:a6:a4:c3:a1:09:7d:69:81: 2d:58:5a:6b:1f:3f:1c:33:81:54:28:65:6f:7d:f6: cb:4e:97:59:45:03:cf:73:a6:67:64:6d:75:85:c7: 2b:84:40:b7:d3:45:e6:67:50:dd:21:55:19:e0:81: e3:aa:79:0b:1d:7e:29:21:49:9a:75:43:a4:28:f3: c4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4A:87:63:27:07:B1:F1:17:46:CB:AC:DC:C3:1E:C0:CB:88:67:BD X509v3 Authority Key Identifier: keyid:54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:66:3c:a6:35:66:b9:01:28:10:93:1d:e2:b2:b9:9a:43:00: de:3d:8e:54:7c:db:ba:6e:e4:7a:58:de:ec:e9:69:98:25:db: ff:fc:1a:f8:01:e0:46:87:19:35:75:ad:66:67:2b:af:a1:a5: ca:8f:e6:c3:a9:20:18:e4:6f:8e:f7:ba:57:5c:b3:1c:b2:e5: 10:14:1a:b6:00:be:a7:31:5d:02:4f:c7:bd:bf:af:c0:53:ce: dd:ff:c6:37:f2:7a:11:43:03:f7:e7:c2:52:74:93:95:b9:38: b2:b3:ae:e8:b3:bb:35:3e:69:ff:2c:b6:2a:ae:06:de:37:10: af:07:6b:28:5f:74:74:75:93:bc:b9:de:cf:fc:c3:56:11:8b: a1:0d:27:09:ff:94:ad:c7:55:8d:e8:8f:a4:1f:f2:6a:16:95: 0a:d2:4d:e6:94:03:81:6a:dc:03:02:d0:b8:e3:a9:b6:f7:0f: cb:a0:19:c8:20:2e:7e:67:20:25:bc:8a:27:38:0d:f7:c0:82: ef:f4:bf:94:6b:06:28:dc:0f:d2:45:bf:86:47:7e:87:45:ca: a7:8d:90:23:a2:5a:cf:1d:ab:19:3b:84:63:2f:3f:d0:69:1a: 4a:26:29:9b:14:53:de:fe:ea:bc:fa:b0:3d:34:ab:0d:52:3c: d3:20:b6:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3NEIxMTAvBgNVBAUTKDU0MEREQUM2NjhEOEI1MEM5NjYwNTcxMjE5NUE5ODhB MUNBRDlFM0YwHhcNMjUwNTEwMjEyNzI2WhcNMjUwNTE3MjEyNzI2WjAYMRYwFAYD VQQDEw02ODFmYzRiZS04M2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/zNjWQWQxx5SHvMj2xjDLOEraVxGNhp5csDPixWgx7Uxld1OfdEGFG3gVZD f+Qaq8TalgC5WUlDNIj0SHuT3Xb2hU3dunjELDNJL8wmjYCwjsV/b7SMaXzqCpaZ ppD5b4ac8mX9iYHFUT6hCscqds1eBh9HfEarlM5sGiMkBG9ey5WU/QY6s29x/t1J 6m7M5fH8yjvRTHiapUznN8DqI/vjcwMaDZTLx91zWHwtawJM8XiydHfDdd5ipqTD oQl9aYEtWFprHz8cM4FUKGVvffbLTpdZRQPPc6ZnZG11hccrhEC300XmZ1DdIVUZ 4IHjqnkLHX4pIUmadUOkKPPEzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhKh2Mn B7HxF0bLrNzDHsDLiGe9MB8GA1UdIwQYMBaAFFQN2sZo2LUMlmBXEhlamIocrZ4/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjc0Qi8wOTQ0ODlGRTMy Q0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRReVdZRmNTR1ZxWWloeXRu ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZBM2F4bWpZdFF5V1lGY1NHVnFZaWh5dG5qOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjc0Qi8wOTQ0ODlGRTMyQ0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRR eVdZRmNTR1ZxWWloeXRuajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmZjymNWa5ASgQkx3isrmaQwDePY5UfNu6buR6WN7s6WmYJdv//Br4 AeBGhxk1da1mZyuvoaXKj+bDqSAY5G+O97pXXLMcsuUQFBq2AL6nMV0CT8e9v6/A U87d/8Y38noRQwP358JSdJOVuTiys67os7s1Pmn/LLYqrgbeNxCvB2soX3R0dZO8 ud7P/MNWEYuhDScJ/5Stx1WN6I+kH/JqFpUK0k3mlAOBatwDAtC446m29w/LoBnI IC5+ZyAlvIonOA33wILv9L+UawYo3A/SRb+GR36HRcqnjZAjolrPHasZO4RjLz/Q aRpKJimbFFPe/uq8+rA9NKsNUjzTILZ9 -----END CERTIFICATE-----Generated at Sun May 11 09:11:20 2025 by rpki-client