$ rpki-client -vvf rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft File: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft (raw, json) Hash identifier: VKw+fpwVGpfiMxfGP9G4KA+4prmi/X8atvy65csPrbU= Subject key identifier: E9:E9:B4:CB:31:17:94:CC:17:41:C4:F5:68:60:68:2B:91:5A:2E:ED Authority key identifier: D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 Certificate issuer: /CN=A91A20A3/serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Certificate serial: 34C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft Manifest number: 34B2 Signing time: Mon 04 Aug 2025 15:03:08 +0000 Manifest this update: Mon 04 Aug 2025 15:03:08 +0000 Manifest next update: Mon 11 Aug 2025 15:03:08 +0000 Files and hashes: 1: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl (hash: uGo0Q7wbxvxtIekDjxjJrVfYSChI+46ziTljHgAzBnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13506 (0x34c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A20A3, serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Validity Not Before: Aug 4 15:03:08 2025 GMT Not After : Aug 11 15:03:08 2025 GMT Subject: CN=6890cbac-2800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:52:30:26:a5:fd:43:70:b9:52:7c:3c:0d:fd: 9b:b1:08:9f:86:10:8e:b3:82:1c:0f:10:f6:8e:da: 0a:76:72:80:7a:b1:b8:af:c9:63:7b:c5:7d:2f:71: c2:68:02:db:8d:26:5b:e0:b7:a6:bd:be:7e:fc:06: 06:df:71:82:f3:f6:b4:4e:0c:ed:8f:43:bb:de:3f: 83:c7:10:3d:9d:0b:5e:56:20:99:de:fd:c3:29:79: 25:12:b4:a7:7d:98:06:23:81:81:d1:93:9c:aa:1d: 76:4b:e4:3b:18:21:51:6f:db:3c:cb:c4:31:cd:a2: 52:bd:46:d0:b1:d7:40:92:ed:7d:41:95:2c:58:39: 84:82:e9:e8:9a:01:f6:e1:ba:3e:5a:09:32:b2:cc: 42:4b:b1:4b:69:7d:cd:73:de:6b:cb:70:0d:cc:18: 78:3d:30:6a:94:b3:ee:b3:6c:c2:d2:df:b3:86:eb: d5:86:37:7b:0a:74:49:82:3f:f7:d9:76:8a:a4:7f: 5d:f7:29:6f:19:c6:24:66:34:01:b6:7e:88:52:84: 25:89:4b:d2:70:bf:3f:84:6b:a8:98:fb:18:bd:2b: 2b:60:b6:3c:4a:c2:a3:5a:41:55:9b:0b:96:a5:c7: 12:62:bb:c0:29:de:83:46:85:56:58:46:66:88:ac: 08:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E9:B4:CB:31:17:94:CC:17:41:C4:F5:68:60:68:2B:91:5A:2E:ED X509v3 Authority Key Identifier: keyid:D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:f8:83:21:9c:70:09:8c:ee:c1:da:3b:0b:fe:74:de:b9:63: 84:ac:32:ae:36:7f:7d:43:f5:35:6f:ed:ad:c3:03:ba:73:0b: 94:e8:35:d0:62:0e:6f:1f:c6:65:0d:49:73:e6:f7:cf:21:39: 32:12:00:3f:04:c7:b1:3f:3b:21:df:c2:ec:08:8f:61:5d:ab: 48:73:10:74:0f:da:e4:5e:e7:68:e2:f5:62:9f:64:51:47:e6: 8d:4f:45:aa:23:03:d3:06:a8:fc:fa:1e:6f:62:56:74:6b:68: 49:75:a8:59:75:14:d0:de:0b:95:32:37:e8:12:85:29:7e:39: 0c:aa:35:41:9a:e4:ba:76:3a:9d:de:e0:5a:a4:3b:a1:11:9b: cd:b1:5c:2a:3d:df:74:1e:f1:2b:d8:3f:ec:93:08:72:78:68: bb:b2:30:06:37:20:2c:79:e5:3f:a6:63:49:65:e6:d2:09:31: 0f:f7:22:fd:56:ab:4e:81:97:54:34:a7:9f:4c:5d:48:f2:53: 62:41:aa:b0:98:c0:42:19:1e:a7:f1:d8:92:54:1c:c3:81:0f: 76:58:97:c1:dc:71:fa:90:1a:2d:52:0f:60:0b:18:00:74:b2: 6c:50:cc:7b:3d:60:62:ef:90:e4:97:48:99:ac:aa:d5:9d:72: 2c:0c:3c:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIwQTMxMTAvBgNVBAUTKEQxNUE1QUY5QUY4RDk5REZFNUU0NEQzNUVFNTUwMTA1 RkVEOTQ1MTEwHhcNMjUwODA0MTUwMzA4WhcNMjUwODExMTUwMzA4WjAYMRYwFAYD VQQDEw02ODkwY2JhYy0yODAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lIwJqX9Q3C5Unw8Df2bsQifhhCOs4IcDxD2jtoKdnKAerG4r8lje8V9L3HC aALbjSZb4Lemvb5+/AYG33GC8/a0Tgztj0O73j+DxxA9nQteViCZ3v3DKXklErSn fZgGI4GB0ZOcqh12S+Q7GCFRb9s8y8QxzaJSvUbQsddAku19QZUsWDmEgunomgH2 4bo+WgkyssxCS7FLaX3Nc95ry3ANzBh4PTBqlLPus2zC0t+zhuvVhjd7CnRJgj/3 2XaKpH9d9ylvGcYkZjQBtn6IUoQliUvScL8/hGuomPsYvSsrYLY8SsKjWkFVmwuW pccSYrvAKd6DRoVWWEZmiKwIKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnptMsx F5TMF0HE9WhgaCuRWi7tMB8GA1UdIwQYMBaAFNFaWvmvjZnf5eRNNe5VAQX+2UUR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjBBMy9BRjRCOEE2MjFE OUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1kX2w1RTAxN2xVQkJmN1pS UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBWcGEtYS1ObWRfbDVFMDE3bFVCQmY3WlJSRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjBBMy9BRjRCOEE2MjFEOUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1k X2w1RTAxN2xVQkJmN1pSUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ+IMhnHAJjO7B2jsL/nTeuWOErDKuNn99Q/U1b+2twwO6cwuU6DXQ Yg5vH8ZlDUlz5vfPITkyEgA/BMexPzsh38LsCI9hXatIcxB0D9rkXudo4vVin2RR R+aNT0WqIwPTBqj8+h5vYlZ0a2hJdahZdRTQ3guVMjfoEoUpfjkMqjVBmuS6djqd 3uBapDuhEZvNsVwqPd90HvEr2D/skwhyeGi7sjAGNyAseeU/pmNJZebSCTEP9yL9 VqtOgZdUNKefTF1I8lNiQaqwmMBCGR6n8diSVBzDgQ92WJfB3HH6kBotUg9gCxgA dLJsUMx7PWBi75Dkl0iZrKrVnXIsDDya -----END CERTIFICATE-----Generated at Wed Aug 6 11:00:02 2025 by rpki-client