$ rpki-client -vvf rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft File: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft (raw, json) Hash identifier: NqA7Tv3fe136Rb7h/tYAkQfllAtOhFQ5FBr8mhtglqo= Subject key identifier: D0:07:B1:DA:41:D5:FE:4D:34:52:35:10:CA:45:F2:3D:44:B8:51:45 Authority key identifier: D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 Certificate issuer: /CN=A91A20A3/serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Certificate serial: 348D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft Manifest number: 347D Signing time: Thu 24 Apr 2025 15:01:37 +0000 Manifest this update: Thu 24 Apr 2025 15:01:36 +0000 Manifest next update: Thu 01 May 2025 15:01:36 +0000 Files and hashes: 1: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl (hash: JD9ayBLeSqdcRLgYN4nNYsk7MqsXJM3A43GvOcjBQSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13453 (0x348d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A20A3, serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511 Validity Not Before: Apr 24 15:01:36 2025 GMT Not After : May 1 15:01:36 2025 GMT Subject: CN=680a5250-d1d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0d:ea:d7:9b:a1:e1:d6:89:40:27:b3:30:db: 53:5a:c3:4c:5c:21:7e:c8:2c:e1:7b:89:dc:e3:3b: c3:8e:36:5c:66:09:fd:d9:8f:76:7f:39:bc:4d:7c: 37:af:68:a5:e9:9c:56:66:4c:fb:12:56:60:37:03: f3:ab:64:44:c7:0b:86:21:9a:5d:54:06:26:e6:be: 63:93:cb:3c:fc:7e:11:21:4c:45:0d:66:8c:ca:87: 4c:9c:be:66:ef:28:fd:15:7d:3a:7b:eb:c0:67:cc: 86:c5:81:70:01:32:64:66:de:69:2d:c4:f1:89:17: 03:0b:f5:01:85:5f:4c:b9:46:c2:5e:d7:02:c5:a9: 68:1f:c0:a6:57:7a:f2:d6:7c:8c:6b:18:ff:78:d0: 7e:29:72:d5:89:de:61:27:fc:3e:3f:7b:50:bf:f4: 00:77:3b:cd:65:ec:b6:67:85:b0:d1:e5:2f:8e:1f: 95:e2:bf:36:bb:8d:0a:e5:b0:73:1d:88:1b:b0:6f: 9b:5c:be:c5:91:93:e6:b2:21:4e:e2:55:64:3d:e3: c7:d6:23:bf:57:0c:19:60:af:b8:8d:b0:0b:99:6b: d6:95:9a:b2:d0:6f:2c:de:35:de:35:11:b9:44:fb: e3:3d:fa:9f:2e:02:2f:7f:fa:9f:c8:8f:05:7c:7a: 93:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:07:B1:DA:41:D5:FE:4D:34:52:35:10:CA:45:F2:3D:44:B8:51:45 X509v3 Authority Key Identifier: keyid:D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:16:a3:fe:19:f7:a4:40:73:7b:b3:ce:11:67:fa:e0:f9:81: 50:87:d2:cf:2f:b5:d2:9a:4b:67:0b:5f:6f:a5:78:57:de:dc: f7:b8:03:86:b3:c3:54:6a:55:e1:5d:5c:4c:54:de:be:95:4b: 65:6f:0f:e2:67:04:bf:3e:86:25:42:e1:a5:45:39:2f:3c:42: 1b:67:67:60:5b:83:4a:0e:37:c6:8e:bf:f0:e3:12:f7:8f:bd: 8b:cf:32:2c:01:df:eb:a3:61:33:94:63:8b:ed:7c:22:e5:1e: f6:07:60:11:71:18:7a:db:55:57:c8:23:c2:3c:7e:f0:6a:69: 23:26:91:d6:62:f3:fa:d7:2c:f2:d5:c7:66:53:3f:de:1d:fb: 69:bb:f4:05:46:7b:6f:a6:c1:a3:30:6f:e4:0c:03:00:39:a7: de:9a:8a:4a:46:42:d9:e9:9a:30:c3:d9:b2:26:e1:78:f1:75: 9e:84:a4:9c:6a:0a:ff:62:6c:73:1e:d8:a1:dd:3f:28:e3:bc: a9:09:de:17:ea:7b:70:7e:2d:33:82:31:fa:ff:ae:d4:92:7d: 79:50:9f:2d:ea:28:1f:ba:50:97:8f:ae:f7:23:56:b4:ae:6d: ac:8c:7a:ec:0a:6c:15:43:bb:02:85:89:47:7e:49:52:ff:c2: 3a:36:74:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIwQTMxMTAvBgNVBAUTKEQxNUE1QUY5QUY4RDk5REZFNUU0NEQzNUVFNTUwMTA1 RkVEOTQ1MTEwHhcNMjUwNDI0MTUwMTM2WhcNMjUwNTAxMTUwMTM2WjAYMRYwFAYD VQQDEw02ODBhNTI1MC1kMWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtw3q15uh4daJQCezMNtTWsNMXCF+yCzhe4nc4zvDjjZcZgn92Y92fzm8TXw3 r2il6ZxWZkz7ElZgNwPzq2RExwuGIZpdVAYm5r5jk8s8/H4RIUxFDWaMyodMnL5m 7yj9FX06e+vAZ8yGxYFwATJkZt5pLcTxiRcDC/UBhV9MuUbCXtcCxaloH8CmV3ry 1nyMaxj/eNB+KXLVid5hJ/w+P3tQv/QAdzvNZey2Z4Ww0eUvjh+V4r82u40K5bBz HYgbsG+bXL7FkZPmsiFO4lVkPePH1iO/VwwZYK+4jbALmWvWlZqy0G8s3jXeNRG5 RPvjPfqfLgIvf/qfyI8FfHqTMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAHsdpB 1f5NNFI1EMpF8j1EuFFFMB8GA1UdIwQYMBaAFNFaWvmvjZnf5eRNNe5VAQX+2UUR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjBBMy9BRjRCOEE2MjFE OUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1kX2w1RTAxN2xVQkJmN1pS UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBWcGEtYS1ObWRfbDVFMDE3bFVCQmY3WlJSRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjBBMy9BRjRCOEE2MjFEOUUxMUUyOEU1M0MwOEUwOEIwMkNEMi8wVnBhLWEtTm1k X2w1RTAxN2xVQkJmN1pSUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaFqP+GfekQHN7s84RZ/rg+YFQh9LPL7XSmktnC19vpXhX3tz3uAOG s8NUalXhXVxMVN6+lUtlbw/iZwS/PoYlQuGlRTkvPEIbZ2dgW4NKDjfGjr/w4xL3 j72LzzIsAd/ro2EzlGOL7Xwi5R72B2ARcRh621VXyCPCPH7wamkjJpHWYvP61yzy 1cdmUz/eHftpu/QFRntvpsGjMG/kDAMAOafemopKRkLZ6Zoww9myJuF48XWehKSc agr/YmxzHtih3T8o47ypCd4X6ntwfi0zgjH6/67Ukn15UJ8t6igfulCXj673I1a0 rm2sjHrsCmwVQ7sChYlHfklS/8I6NnRh -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:54 2025 by rpki-client